Re: ISA Server cannot access www.microsoft.com

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: TonyK (nothanks_at_iinet.net.au)
Date: 05/16/04 

Date: Sun, 16 May 2004 14:58:57 +1000

Hi Marina
Well, possibly.
The MS sites were all accessible post build in our office.
The system was at that point using our office internet gateway.

The only thing that changed once the server was taken onsite was running the
internet wizard to point it toward the new cisco adsl/router/firewall..
I'm intending to discuss it all with our router guys.
I'll report back on this afterwards.

Kind regards,
Tony

"Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in message
news:O9ASBkuOEHA.2524@TK2MSFTNGP11.phx.gbl...
> Hi Tony,
>
> Great. Thanks for reporting back. It won't be needed on all systems
though.
> I haven't had to do it myself (yet). But are you saying that in your case
it
> might have something to do with a Cisco router?
>
> --
> Regards,
>
> Marina
> Microsoft SBS-MVP
>
> "TonyK" <nothanks@iinet.net.au> schreef in bericht
> news:40a6c888$0$9409$5a62ac22@freenews.iinet.net.au...
> > Thankyou Marina
> >
> > That did it for me too.
> > microsoft.com is now accessible
> >
> > Just for interests sake, this server worked fine in our office through
our
> > internal gateway but exhibited this issue after being put into
production
> on
> > a customers ste. The internet connection was through a new cisco 327
adsl
> > router. Based on the articles you have shown there may be a cisco
> workaround
> > , perhaps within the router's IOS , might have a look into this at some
> > stage, perhaps, but for the moment all is well.
> > Thanks again, one for the note book !
> >
> > Regards,
> > Tony (from Aus.)
> >
> >
> >
> > "Marina Roos [SBS-MVP]" <marina@roos.nodontwantspam.nl.com> wrote in
> message
> > news:%23WDp33sOEHA.3312@tk2msftngp13.phx.gbl...
> > > Hi Grant,
> > >
> > > Try this:
> > >
> > > If the error exists on all computers, it could be this:
> > >
> > > Disable EDNS on the SBS 2003 server since it is a known cause of
similar
> > > behavior.
> > >
> > > From a command prompt, run the following:
> > >
> > > dnscmd /Config /EnableEDnsProbes 0
> > >
> > > For more information:
> > >
> > > 832223 Some DNS Name Queries Are Unsuccessful After You Upgrade Your
DNS
> > > Server
> > > http://support.microsoft.com/?id=832223
> > >
> > > 828263 DNS query responses do not travel through a firewall in Windows
> > > Server
> > > http://support.microsoft.com/?id=828263
> > >
> > > 828731 An External DNS Query May Cause an Error Message in Windows
> Server
> > > 2003
> > > http://support.microsoft.com/?id=828731
> > >
> > > --
> > > Regards,
> > >
> > > Marina
> > > Microsoft SBS-MVP
> > >
> > > "Grant Morgan" <grant@storeline.com.au> schreef in bericht
> > > news:%23bZT$BIOEHA.3492@TK2MSFTNGP10.phx.gbl...
> > > > I am a long time user of SBS2000, and recently upgraded to SBS2003
> > Premium
> > > >
> > > > SERVER: Dell Poweredge Xeon 2400 1024Mb Ram, 3 x mirrored 18gb SCSI
(6
> > > > drives total), Intel Gigabit NIC (running at 100Mb/s), Netcomm ADSL
> > router
> > > > with UPNP
> > > >
> > > > SOFTWARE: SBS 2003 premium using ISA2000 as firewall - ICW Run
> > > Successfully.
> > > > Using POP3 connector (ie. we don't host our own domain)
> > > >
> > > > CLIENTS: Win XP Pro SP1 running MS Firewall Client + IE 6 SP2
> > > >
> > > > Since the upgrade, no machine on the network can access
> > www.microsoft.com
> > > or
> > > > www.symantec.com. Can access windowsupdate, msdn, technet, support
> site,
> > > but
> > > > nothing starting with www.microsoft.com (or go.microsoft.com) or
> > > > www.symantec.com.
> > > >
> > > > If I disconnect the server and plug a laptop straight into the
router,
> > > there
> > > > is no problem in accessing these sites.
> > > >
> > > > There is a INET 11004 error recorded in the Web Proxy log.
> > > >
> > > > Dumps from log and NSLookup appear below...
> > > >
> > > > HELP!
> > > >
> > > > Thanks
> > > >
> > > >
> > > > Line from Web Proxy Log:
> > > > ========================
> > > > 192.168.16.58, STORELINE\MyUserName, Mozilla/4.0 (compatible; MSIE
> 6.0;
> > > > Windows NT 5.1; .NET CLR 1.1.4322), Y, 5/13/2004, 9:20:19, w3proxy,
> > > > SERVER, -, www.microsoft.com, -, 80, 23203, 484, 0, http, TCP, GET,
> > > > http://www.microsoft.com/, -, Inet, 11004, 0x0, Small Business
> Internet
> > > > Access Protocol Rule, Allow rule
> > > >
> > > >
> > > > NSLookup with debug option:
> > > > ===========================
> > > > Default Server: server.MyCompanyName.local
> > > > Address: 192.168.16.2
> > > >
> > > > > set debug
> > > > > microsoft.com
> > > > Server: server.MyCompanyName.local
> > > > Address: 192.168.16.2
> > > >
> > > > ------------
> > > > Got answer:
> > > > HEADER:
> > > > opcode = QUERY, id = 2, rcode = NXDOMAIN
> > > > header flags: response, auth. answer, want recursion,
> recursion
> > > > avail
> > > > questions = 1, answers = 0, authority records = 1,
> additional
> > =
> > > 0
> > > >
> > > > QUESTIONS:
> > > > microsoft.com.MyCompanyName.local, type = A, class = IN
> > > > AUTHORITY RECORDS:
> > > > -> MyCompanyName.local
> > > > ttl = 3600 (1 hour)
> > > > primary name server = server.MyCompanyName.local
> > > > responsible mail addr = hostmaster
> > > > serial = 235
> > > > refresh = 900 (15 mins)
> > > > retry = 600 (10 mins)
> > > > expire = 86400 (1 day)
> > > > default TTL = 3600 (1 hour)
> > > >
> > > > ------------
> > > > ------------
> > > > Got answer:
> > > > HEADER:
> > > > opcode = QUERY, id = 3, rcode = NOERROR
> > > > header flags: response, want recursion, recursion avail.
> > > > questions = 1, answers = 2, authority records = 0,
> additional
> > =
> > > 0
> > > >
> > > > QUESTIONS:
> > > > microsoft.com, type = A, class = IN
> > > > ANSWERS:
> > > > -> microsoft.com
> > > > internet address = 207.46.245.214
> > > > ttl = 1503 (25 mins 3 secs)
> > > > -> microsoft.com
> > > > internet address = 207.46.245.222
> > > > ttl = 1503 (25 mins 3 secs)
> > > >
> > > > ------------
> > > > Non-authoritative answer:
> > > > Name: microsoft.com
> > > > Addresses: 207.46.245.214, 207.46.245.222
> > > >
> > > >
> > >
> > >
> >
> >
>
>

Relevant Pages

  • Re: Internet Gateway - where did it come from?
    ... i have cable modem, and an linksys router, so no need for any ics; ... used that for about 4 or 5 years, and NEVER of these computers. ... the internet gateway is new, and i have no clue what changed. ... and ics is not turned on; ...
    (microsoft.public.windowsxp.general)
  • Re: HOW TO: Disable Internet Connection Sharing?
    ... >or router as an internet gateway, ... >uncheck "Internet Gateway Device and Discovery Control ... >no more ICS popping up. ... Steve Winograd, MS-MVP (Windows Networking) ...
    (microsoft.public.windowsxp.network_web)
  • Re: My computer doesnt find the Internet connection
    ... on and a D-Link router 100 Mbps with wireless access. ... The Internet Gateway is your router. ... The Internet Gateway connection is normal. ...
    (microsoft.public.windowsxp.network_web)
  • Re: UPnP routers and the icon Internet-Gateway
    ... >(There has also been msg traffic lately about this 'Internet Gateway' ... >Is this Internet Gateway icon something new in SP2 or does it pre-date ... >Is there a cause-effect relationship between the concept of 'UPnP router' ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: My computer doesnt find the Internet connection
    ... Newly got a problem with my broadband connection. ... It installs a new network of type Internet Gateway and then the ... on and a D-Link router 100 Mbps with wireless access. ... The Internet Gateway is your router. ...
    (microsoft.public.windowsxp.network_web)