[isalist] Re: ISA server problem - connection refused.
- From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Wed, 19 Apr 2006 10:10:37 -0700
http://www.ISAserver.org
-------------------------------------------------------
If you do see RSTs that coincide with the log entries, you'll want to examine
the packet that was rejected to see if there's anything odd about how it was
built.
If you can't determine this, then the problem is likely out of your hands.
-------------------------------------------------------
Jim Harrison
MCP(NT4, W2K), A+, Network+, PCG
http://isaserver.org/Jim_Harrison/
http://isatools.org
Read the help / books / articles!
-------------------------------------------------------
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Stuart Tonge
Sent: Wednesday, April 19, 2006 08:07
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA server problem - connection refused.
Yeah I found a reference to Winsock earlier, there's not that much info on this
one though on the ms site.
I will sniff the traffic. If I do see RST's - then where do I go from there?
________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On
Behalf Of Jim Harrison
Sent: 19 April 2006 16:02
To: isalist@xxxxxxxxxxxxx; isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: ISA server problem - connection refused.
10061 is a Winsock error tht ISA has no control of whatsoever.
It's generated by Winsock (not ISA) when the upstream host actively refuses the
connection (sends a RST).
The only way to show that this is actually happening is to gather a packat
capture while you try to repro the behavior.
________________________________
From: isalist-bounce@xxxxxxxxxxxxx on behalf of Stuart Tonge
Sent: Wed 4/19/2006 4:24 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] ISA server problem - connection refused.
Hi all.
I have an ISA server 2004 box deployed as a web proxy.
I have set an allow any-any rule to stop the firewall interfering.
I have my users proxying through this box to the web.
It works 95% of the time. The rest of the time, i get a 10061 connection
refused error.
If i refresh the page, it generally refreshes the first time.
This happens on many sites & has been seen nmultiple times on microsoft.com,
bbc.co.uk, isaserver.org.
Sometimes images do not load on a page, but this is fairly rare, and some of
the images may load.
Some will load, some will not.
I have tried to isolate 'problem sites' but this has not worked - the error
seems totally random.
The only common occurance I have noted is that after one error, some clients -
not all - seem to have trouble
connecting to any site for the next 30-60 seconds, instead receiving the error
over and over.
I have only seen this on 2 of 40 clients.
I have tried disabling all web filter add-ins, caching, ip routing, ip
filtering, etc.
Basically i've tried every button i can find in ISA 2004! nothing makes the
problem better.
It's also hard to test since it's intermittent.
The ISA server is directly connected to a firewall which filters traffic, but
this device works fine 100% of the time when
web traffic passed via it instead of ISA.
ISA is reporting no errors in the console. There are no errors in the syslogs.
Does anyone have any ideas short of uninstalling ISA & getting a refund?
Thanks,
Stuart Tonge
Pink Fish I.T. LTD
Network Architect
stuart.tonge@xxxxxxxxxxxx
http://www.pink-fish.tv
01302 365408
All mail to and from this domain is GFI-scanned.
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
