[isalist] Re: An installed layered service provider LSP is outdated?

  • From: "Spencer Read" <spencer.read@xxxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 25 Jan 2008 15:38:09 -0000

http://www.ISAserver.org
-------------------------------------------------------

I thought that might have been the issue but checked - Home router is on
192.168.1.x and I'm on 192.168.0.x
Plans to change it are ongoing - maybe in a couple of weeks......

...Spence




-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: 25 January 2008 15:33
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------
  
Anything to a broadcast address can be ignored for these purposes.
Did I hear you right that you also share a common network ID
(192.168.0/24)?


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Spencer Read
Sent: Friday, January 25, 2008 7:19 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------

I don't see any TCP 445 of CIFS connection attempts but I do see lots of
netbios datagram and netbios name server all trying to get to ip address
255.255.255.255 on either UDP:137 or UDP:138 ?

As you mention office this is 2007 Pro without sp1 - would that make a
difference?
I've just updated the laptop that is here today up to the latest drivers
for both wired and wireless to try over the weekend.

...Spence

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: 25 January 2008 14:12
To: ISA Mailing List
Subject: [isalist] Re: An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------

We could also try reading the logs, yasilly.
"Microsoft-WebDAV-MiniRedir/6.0.6000" indicates that Office is
translating a UNC path to an HTTP path.
Most often, this happens when the UNC path was unavailable for some
reason.

Spencer; do you also see failed or denied SMB (TCP:445 or CIFS)
connection attempts from the same client in the Firewall logs?

Jim

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Steve Moffat
Sent: Friday, January 25, 2008 4:57 AM
To: ISA Mailing List
Subject: [isalist] Re: An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------

You could try disabling the nic that's not in use at any particular time
as well.

It's the way 3rd party lsp's hook into the nic...Jim Harrison explains
it far better than me...:)

S

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Spencer Read
Sent: Friday, January 25, 2008 8:53 AM
To: ISA Mailing List
Subject: [isalist] Re: An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------

They are original HP images with Just office and NOD32 added so yes, the
HP crap is there!
I've got one in the office at the moment so I'll remove the drivers,
remove the nic and NOD32 and try again

Just out of interest they use the wireless connection at home and wired
in the office
I've got the advent externally trying a wired connection to his router
now to see if works differently

So do you think we are looking at driver versions shipped with vista
being crap?
I haven't updated one yet but I will now!

...Spence


-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Steve Moffat
Sent: 25 January 2008 12:41
To: ISA Mailing List
Subject: [isalist] Re: An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------

When I've seen this, a rollback to the previous network driver has
sometimes fixed it. In extreme circumstance you may need to remove nod32
and the nic from device manager and re-install. Is the HP crap still
installed??

It's not ISA, it's a well known Vista happening.

S

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Spencer Read
Sent: Friday, January 25, 2008 8:34 AM
To: ISA Mailing List
Subject: [isalist] Re: An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------

Definitely not the Advent - The HP's I'm 99% sure they didn't
There was no activation or update popping up as usual when the other
stuff was installed

...Spence



-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Steve Moffat
Sent: 25 January 2008 12:25
To: ISA Mailing List
Subject: [isalist] Re: An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------

Was McAfee or Norton on these machines originally?

S

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Spencer Read
Sent: Friday, January 25, 2008 7:49 AM
To: ISA Mailing List
Subject: [isalist] An installed layered service provider LSP is
outdated?

http://www.ISAserver.org
-------------------------------------------------------

Hi there,

I'm going to throw this into the group as Google couldn't really help
and after further testing I'm leaning towards ISA being badly configured
by me!

Domain is Windows 2003 R2
ISA Server 2006 fully patched as of 2 days ago with 2 nics, one
connected to internal and one connected to a Cisco router which provides
a proper external address.
Client is one of 3 Vista Business laptops.  2 of them are HP's and one
is an Advent.
The HP's arrived with Vista business, I loaded Office 2007, NOD32,
configured a PTPP connection and shipped them to the user
The Advent was formatted and vista business, Office etc. installed then
shipped.
No ISA Firewall Client has been loaded on any machines.

Now for the fun!

Outlook works find, web browsing works fine, ping the internal ip
address of the server works fine but if I try and access a shared folder
I get 'An installed layered service provider is outdated' - This is by
ip or computer name!
I have tried using a preconfigured shortcut which works internally and
also using the equivalent of the run prompt to try \\192.168.0.7 and
\\192.168.0.7\company$

If I do the same on my Vista Home Premium machine(Non domain member) or
any XP pro machine(domain or non domain member) it works fine!

So far I have check windows firewall settings on the client, Netbios
settings, Home Ip address range conflicts (I use 192.168.0.x here!) and
changed to local admin from normal user and back with no changes

It looks to me as if the client is trying to reach
http://192.168.0.7/company$ (which doesn't exist) instead of
\\192.168.0.7\company$
What have I configured incorrectly?

...Spence


This is an snip from the isa console output

Original Client IP      Client Agent    Authenticated Client    Service
Server Name     Referring Server        Destination Host Name
Transport       MIME Type       Object Source   Source Proxy
Destination Proxy       Bidirectional   Client Host Name        Filter
Information     Network Interface       Raw IP Header   Raw Payload
GMT Log Time    Source Port     Processing Time Bytes Sent      Bytes
Received        Result Code     HTTP Status Code        Cache
Information     Error Information       Log Record Type Authentication
Server  Log Time        Destination IP  Destination Port        Protocol
Action  Rule    Client IP       Client Username Source Network
Destination Network     HTTP Method     URL
0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000     Yes     Proxy
STARCASE-ISA            192.168.0.7     TCP             Internet
-       -               -       Req ID: 08da381f; Compression:
client=No, server=No, compress rate=0% decompress rate=0%       -
-       -       25/01/2008 10:58:56     0       1       277     147
200 OK. 0x40000000      0x500   Web Proxy Filter
25/01/2008 10:58:56     192.168.0.7     80      http    Allowed
Connection      VPN Internal Access     192.168.0.43    SCUK\username
VPN Clients     Internal        OPTIONS http://192.168.0.7/
0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000     Yes     Proxy
STARCASE-ISA            192.168.0.7     TCP             Internet
-       -               -       Req ID: 08da3820; Compression:
client=No, server=No, compress rate=0% decompress rate=0%       -
-       -       25/01/2008 10:58:56     0       1       215     166
501 Not Implemented     0x40000000      0x580   Web Proxy Filter
25/01/2008 10:58:56     192.168.0.7     80      http    Allowed
Connection      VPN Internal Access     192.168.0.43    SCUK\username
VPN Clients     Internal        PROPFIND
http://192.168.0.7/company$
0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000     Yes     Proxy
STARCASE-ISA            192.168.0.7     TCP             Internet
-       -               -       Req ID: 08da3821; Compression:
client=No, server=No, compress rate=0% decompress rate=0%       -
-       -       25/01/2008 10:58:57     0       1       215     166
501 Not Implemented     0x40000000      0x580   Web Proxy Filter
25/01/2008 10:58:57     192.168.0.7     80      http    Allowed
Connection      VPN Internal Access     192.168.0.43    SCUK\username
VPN Clients     Internal        PROPFIND
http://192.168.0.7/company$
0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000     Yes     Proxy
STARCASE-ISA            192.168.0.7     TCP             Internet
-       -               -       Req ID: 08da3822; Compression:
client=No, server=No, compress rate=0% decompress rate=0%       -
-       -       25/01/2008 10:58:57     0       1       215     166
501 Not Implemented     0x40000000      0x580   Web Proxy Filter
25/01/2008 10:58:57     192.168.0.7     80      http    Allowed
Connection      VPN Internal Access     192.168.0.43    SCUK\username
VPN Clients     Internal        PROPFIND
http://192.168.0.7/company$
0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000     Yes     Proxy
STARCASE-ISA            192.168.0.7     TCP             Internet
-       -               -       Req ID: 08da3823; Compression:
client=No, server=No, compress rate=0% decompress rate=0%       -
-       -       25/01/2008 10:58:57     0       1       215     166
501 Not Implemented     0x40000000      0x580   Web Proxy Filter
25/01/2008 10:58:57     192.168.0.7     80      http    Allowed
Connection      VPN Internal Access     192.168.0.43    SCUK\username
VPN Clients     Internal        PROPFIND
http://192.168.0.7/company$
0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000     Yes     Proxy
STARCASE-ISA            192.168.0.7     TCP             Internet
-       -               -       Req ID: 08da3824; Compression:
client=No, server=No, compress rate=0% decompress rate=0%       -
-       -       25/01/2008 10:58:57     0       1       215     166
501 Not Implemented     0x40000000      0x580   Web Proxy Filter
25/01/2008 10:58:57     192.168.0.7     80      http    Allowed
Connection      VPN Internal Access     192.168.0.43    SCUK\username
VPN Clients     Internal        PROPFIND
http://192.168.0.7/company$
0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000     Yes     Proxy
STARCASE-ISA            192.168.0.7     TCP             Internet
-       -               -       Req ID: 08da3825; Compression:
client=No, server=No, compress rate=0% decompress rate=0%       -
-       -       25/01/2008 10:58:57     0       15      215     166
501 Not Implemented     0x40000000      0x580   Web Proxy Filter
25/01/2008 10:58:57     192.168.0.7     80      http    Allowed
Connection      VPN Internal Access     192.168.0.43    SCUK\username
VPN Clients     Internal        PROPFIND
http://192.168.0.7/company$
0.0.0.0 Microsoft-WebDAV-MiniRedir/6.0.6000     Yes     Proxy
STARCASE-ISA            192.168.0.7     TCP             Internet
-       -               -       Req ID: 08da3826; Compression:
client=No, server=No, compress rate=0% decompress rate=0%       -
-       -       25/01/2008 10:58:57     0       1       215     166
501 Not Implemented     0x40000000      0x580   Web Proxy Filter
25/01/2008 10:58:57     192.168.0.7     80      http    Allowed
Connection      VPN Internal Access     192.168.0.43    SCUK\username
VPN Clients     Internal        PROPFIND
http://192.168.0.7/company$

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email
______________________________________________________________________
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/  
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp 
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/ 
ISA Server Blogs: http://blogs.isaserver.org/ 
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com 
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp 
Report abuse to listadmin@xxxxxxxxxxxxx 


______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________


--------------------------------------------------------------------
This is a confidential email.  StarCase may monitor and record all emails.  The 
views expressed in this email are those of the sender and not StarCase.

StarCase (UK) Ltd
Trading Address:  Berkeley Business Park, Wainwright Road, Worcester WR4 9FA 
Email:  enquiries@xxxxxxxxxxxxxx
Company Number:  2075324
Registered in England
Registered Office:  Sterling House, Fulbourne Road, London E17 4EE
VAT Registration Number: GB 455 2071 64 

______________________________________________________________________
This email has been scanned by the MessageLabs Email Security System.
For more information please visit http://www.messagelabs.com/email 
______________________________________________________________________
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: