RE: Time Sync Problem
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 29 Sep 2004 11:22:12 -0500
Hi Amy,
How about creating a packet filter on the ISA firewall for NTP and
configure it as the time server?
http://support.microsoft.com/default.aspx?scid=kb;en-us;323621
HTH,
Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: Amy Babinchak [mailto:amy@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Wednesday, September 29, 2004 10:52 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] Time Sync Problem
http://www.ISAserver.org
The situation is that the client has purchase time keeping software and
it will use the domain time to track when an employee punches in and
out. All client computers are sync'd with the server; that part is
working fine. The server is not able to sync with an external time
source.
On the server, I get event 38
"The time provider NtpClient cannot reach or is currently receiving
invalid time data from harbor.ecn.purdue.edu
(ntp.m|0x1|192.168.1.100:123->128.46.154.76:123)."
ISA log shows
192.168.1.100 128.46.154.76 Udp 123 123 - BLOCKED
192.168.1.100
192.168.1.100 is the external IP address of the SBS2003 server. A DSL
router does the NAT from our static IP.
The time service is supposed to be allowed in the default SBS setup. ISA
has a packet filter for TCP 123, receive only on all local ports, remote
port is fixed 123 on the external IP address. Shouldn't this be UDP?
There is a Protocol Definition for 123 UDP Send/Receive.
I've been hunting everywhere except in ISA for the problem, so I've
already tried various time providers, FQDN and IP, modified registry
entries and applied a hot fix.
Amy
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
