Re: ISA Server SMTP Issue

  • From: "Kingery, Mark" <Mark.Kingery@xxxxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 28 May 2003 16:03:41 -0500

Also this is my windows update install history, my guess is one of these fixes 
have broken it.

Successful Thursday, April 17, 2003 811493: Security Update (Windows 2000) Web 
site 
Successful Thursday, April 17, 2003 331953: Security Update (Windows 2000) Web 
site 
Successful Thursday, April 17, 2003 816093: Security Update Microsoft Virtual 
Machine (Microsoft VM) Web site 
Successful Wednesday, March 19, 2003 811630: Critical Update (Windows 2000) Web 
site 
Successful Wednesday, March 19, 2003 Q320920: Security Update (Windows Media 
Player 6.4)
Successful Wednesday, March 19, 2003 Q323255: Security Update (Windows 2000)
Successful Wednesday, March 19, 2003 Q324380: Security Update (Windows 2000)
Successful Wednesday, March 19, 2003 Q326886: Security Update
Successful Wednesday, March 19, 2003 Q326830: Security Update (Windows 2000)
Successful Wednesday, March 19, 2003 Q323172: Security Update
Successful Wednesday, March 19, 2003 Q324096: Security Update (Windows 2000)
Successful Wednesday, March 19, 2003 Q329834: Security Update (Windows 2000)
Successful Wednesday, March 19, 2003 Q329414: Security Update (MDAC 2.5)
Successful Wednesday, March 19, 2003 814078: Security Update (Microsoft Jscript 
version 5.1, Windows 2000) Web site 
Successful Wednesday, March 19, 2003 810833: Security Update (Windows 2000) Web 
site 
Successful Wednesday, March 19, 2003 Q328310: Security Update (Windows 2000) 
Web site 
Successful Wednesday, March 19, 2003 810649: Critical Update Web site 
Successful Wednesday, March 19, 2003 329170: Security Update (Windows 2000) Web 
site 
Successful Wednesday, March 19, 2003 810030: Microsoft VM Security Update 
(Windows 2000) Web site 
Successful Wednesday, March 19, 2003 Q329115: Security Update (Windows 2000)
Successful Wednesday, March 19, 2003 814033: Critical Update Web site 
Successful Wednesday, March 19, 2003 Q815021: Security Update Web site 
Successful Thursday, June 20, 2002 Security Update, February 12, 2002
Successful Thursday, June 20, 2002 Security Update, February 22, 2002
Successful Thursday, June 20, 2002 Security Update, March 4, 2002
Successful Thursday, June 20, 2002 Security Update, March 7, 2002
Successful Thursday, June 20, 2002 Security Update, November 20, 2001
Successful Thursday, June 20, 2002 Q311967: Security Update
Successful Thursday, June 20, 2002 Q320206: Security Update
Successful Saturday, March 31, 2001 Security Update, January 30, 2001 Web site 
Successful Saturday, March 31, 2001 Security Update, October 10, 2000 (Internet 
Explorer 5.01 Service Pack 1) Web site 
Successful Saturday, March 31, 2001 Security Update, November 22, 2000 
(Internet Explorer 5.01 Service Pack 1) Web site 
Successful Saturday, March 31, 2001 Security Update, December 20, 2000 Web site 
Successful Saturday, March 31, 2001 High Encryption Pack for Windows 2000 Web 
site 
Successful Saturday, September 01, 2001 Security Update, May 16, 2001 (Internet 
Explorer 5.01 Service Pack 2) Web site 
Successful Saturday, September 01, 2001 Security Update, August 3, 2001 Web 
site 
Successful Saturday, September 01, 2001 Security Update, May 30, 2001 Web site 


-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Wednesday, May 28, 2003 3:42 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi Mark,

Do you have the SMTP filter enabled? Is it completely updated? Try
disabling the filter and see if that stop the problem. I have sites that
get GBs of email/day through ISA Server firewalls and I don't see
problems with inbound SMTP messages getting through.

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Kingery, Mark [mailto:Mark.Kingery@xxxxxxxxxxxxxx] 
Sent: Wednesday, May 28, 2003 1:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Its hard to believe that this issue has been out here this long as in
the link I posted, but Microsoft does not have any KB articles that I
can find.

http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&oe=UTF-8&threadm=uWj7
PMiCBHA.1000%40tkmsftngp02&rnum=1&prev=/groups%3Fq%3DISA%2BServer%2BSMTP
%2Binbound%2Bstops%2Bworking%26hl%3Den%26lr%3D%26ie%3DUTF-8%26oe%3DUTF-8
%26selm%3DuWj7PMiCBHA.1000%2540tkmsftngp02%26rnum%3D1

If this keeps up the way it is going, my company is going to make me
scrap ISA and find another solution.

-----Original Message-----
From: Kingery, Mark 
Sent: Wednesday, May 28, 2003 7:02 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


My Isa box has a connection to a dedicated T1.  There is no DSL or Cable
Modem.  I use External DNS servers provided by my ISP.  

DNS resolution is not a problem, when this issue happens my users are
still able to hit the internet.  It is just ISA not allowing SMTP
inbound to happen.  

Like Kevin said, there is no pattern to it, and there is nothing to show
in the Event Logs that this has happened.  We have to just monitor email
here to make sure it is flowing inbound.

I do receive a lot of inbound email, my guess is that we are just
overloading ISA, or we are being attacked on that port.  



-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx]
Sent: Wednesday, May 28, 2003 12:28 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi, Tom.

Thanks, that is what I am doing right now, but running it once a day at
1 am, other than that I depend on the lack of SPAM to alert me that the
server needs a manual restart. 

I never thought that I would actually have a use for SPAM. :)

Kevin

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 11:25 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi Kevin,

Several ways to do it.

How about a batch file with the following:

net stop ipnat /y
net start "microsoft firewall"

And then schedule it to run every few hours. There may be more elegant
ways, but it works :-)

HTH,
Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx] 
Sent: Wednesday, May 28, 2003 12:22 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi, Tom,

It is a 7 MB DSL connection, although there is a modem in the box, it is
not configured as an interface in ISA.

This one truly has me stumped as well. I thought it was only us, but
when Mark's post came up today it got me digging again.

Any suggestions as to the best method to schedule a restart of the ISA
services on a regular basis?

Kevin

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 11:10 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi Kevin,

Darn. My only other guess is that maybe you're using a dial up
connection.

Tom

Thomas W Shinder
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp

 


-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx] 
Sent: Wednesday, May 28, 2003 12:08 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi, Tom.

Our public DNS is hosted offsite. We have a split DNS implementation.

Kevin

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 7:15 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi Kevin,

Are you publishing your public DNS servers?

Thanks!
Tom

Thomas W Shinder 
www.isaserver.org/shinder 
ISA Server and Beyond: http://tinyurl.com/1jq1 
Configuring ISA Server: http://tinyurl.com/1llp 



-----Original Message-----
From: Kevin S. Malinowski [mailto:Kevin@xxxxxxxxxx] 
Sent: Tuesday, May 27, 2003 11:58 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


Hi, Mark and Jim.

I have an ISA server that the same situation occurs on. Currently the
box is Windows 2000 Adv Server SP3, ISA SP1 with the NAT hotfix applied.

There are 3 separate internal SMTP servers published on three separate
external IP's. (none of the external IP's are in the LAT)

The same situation occurs, where no external SMTP traffic is received by
any of the internal SMTP servers until the ISA services are restarted.
Their appears to be no recoginizable pattern as to when this will occur.
It may happen twice this week, then not again for two weeks. Nothing is
in the event logs and nothing seems to be noticable in perfmon.

The internal SMTP servers are 2 GroupWise (GWIA) and 1 Exchange 2000.

Kevin

-----Original Message-----
From: Kingery, Mark [mailto:Mark.Kingery@xxxxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 7:30 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


There is nothing in the Event logs,

My ISA sever is SP1 and FP1.

This does not affect any other services, all users are able to access
the internet through the ISA server.  It just seems to be the SMTP
inbound.  

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Tuesday, May 27, 2003 8:16 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Re: ISA Server SMTP Issue


http://www.ISAserver.org


What do you find in the event logs?
What is your ISA fix level?

  Jim Harrison
  MCP(NT4, W2K), A+, Network+, PCG
  http://isaserver.org/Jim_Harrison/
  http://isatools.org
  Read the help / books / articles!



http://www.ISAserver.org


I have configured on my ISA server a Server publishing rule for SMTP on
port 25, this has been working without any issues for 18 months, until
recently about the last 4 weeks, the ISA server will stop accepting SMTP
mail.  The only way for me to fix this is to stop and start all ISA
services. 

Nothing has changed on the ISA server.

Anyone have any ideas for my issue?
Thanks Mark

My server is 

Windows 2000 SP3
ISA Server FP1

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mark.kingery@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Exchange Server Resource Site: http://www.msexchange.org/
Windows Security Resource Site: http://www.windowsecurity.com/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kevin@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kevin@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kevin@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
kevin@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mark.kingery@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
mark.kingery@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as: 
mark.kingery@xxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: