RE: Error Connection refused(10061)

Hi:
Thank you for posting here.

>From the description, I understand that your internal clients cannot access
the payment page of the E-bay site. They received an error 502 Proxy Error
indicating that the connection was refused. They can access other internet
website without difficulty. If I have misunderstood your concern, please do
let me know.

First can I assume that you are using the ISA Server 2004? Before we go any
further, I would like to suggest you re-run the CEICW Wizard. The wizard
will help us automatically configure the internet settings and create the
ISA rules. You can follow this step-by-step article to complete the wizard:

825763 How to configure Internet access in Windows Small Business Server
2003
http://support.microsoft.com/?id=825763

Based on my research, I would like to provide you the following suggestions:

Suggestion 1: Increase the value of Connection limit time

Open the ISA Server management console, navigate to Configuration->
General-> Define Connection Limits-> Connection Limit-> Limit the number of
connection-> Connection limit per client (TCP and non-TCP).

The default value is 40, 160 is recommended.

You may need to restart the ISA firewall service after you modify the value
of the connection limit time.

Suggestion 2: Clear the ISA Cache

In addition, I would like to suggest you clear the ISA Cache, you can
perform the following steps:

1. On the ISA Server computer, stop the Microsoft Firewall service. To do
so:
1). Click Start, click Run, type services.msc in the Open box, and then
click OK.
2). Right-click Microsoft Firewall, and then click Stop.

2. Start Windows Explorer.

3. Locate the Urlcache folder.

4. In the Urlcache folder, locate the file that has the .cdat file name
extension.

5. Right-click the .cdat file, and then click Delete.

6. When you are prompted to confirm the removal of the .cdat file, click
Yes.
If you are prompted to delete the .cdat file because it is too big for the
recycle bin, click Yes.

7. Restart the Microsoft Firewall service.

More information:
How to delete the Web cache in Internet Security and Acceleration Server
2004
http://support.microsoft.com/default.aspx?scid=kb;en-us;838248

Then try to access the payment page of the E-bay site again, will you be
able to access this page?

If the problem persists, can you tell me if you have configured the
internal client as both the web proxy client and firewall client?

To be a Web Proxy client, we need to configure the ISA as the proxy server
in Web browser setting.
To be a Firewall client, the workstation needs to have the ISA Firewall
Client software installed.

Suggestion 3: Enable the anonymous authentication:
1. Open the ISA Server management console, navigate to "Firewall Policy".
On the right pane, double click the "SBS Internet Access Rule". Go to the
Users tab, you will find that the default setting is applied to "SBS
Internet Users", please change it to "All Users" and then click "Apply" to
save the settings.

2. Open ISA2004 Management Console, in the left panel, expand to
Configuration->Networks. Under "Networks panel", double click "Internal".
Switch to "Web Proxy" panel, click "Authentication?". Uncheck the "Require
all users to authenticate" option, and then click "Apply" to save the
settings.

Suggestion 4: Configure the problematic banking site for Direct Access

Please try the following steps to configure the eBay web site for direct
access.

a. Open ISA management console, expand the server name. Expand the
Configuration node and click the Networks node.

b. In the details pane, click the Networks tab and then double click the
Internal Network.

c. In the Internal Properties dialog box, click the Web Browser tab. On the
Web Browser tab, click the Add button.

d. In the Add Server dialog box, select the Domain or computer option and
enter the name of the site that you want Direct Access to be used. Enter
*.ebay.com in the text box, click OK. Click Apply to save the changes and
then update the firewall policy.

e. Double click on the Firewall client icon in the system tray Click the
Test Server button. This forces the Firewall client to pull the new
configuration information from the ISA firewall. Click Close in the Testing
ISA Server dialog box when the test completes, then click the Apply button
in the Microsoft Firewall Client for ISA Server 2004 dialog box.

Click the Web Browser tab. Confirm that there is a checkmark in the Enable
Web browser automatic configuration checkbox and click Configure Now, and
then click OK in the Web Browser Settings Update dialog box.
Then click Apply and then click OK in the Microsoft Firewall Client for ISA
Server 2004 dialog box.

More information:

Configuring Sites for Direct Access
http://www.isaserver.org/articles/2004directaccessp1.html

Moreover, please also double check the Event Viewer to see if there is any
related event log in it. If any, please post the event log to me for
further analysis.

Hope the above information helps.
Thank you for your time and cooperation. Please feel free to let me know if
you have any questions or concerns.

Have a nice day! :)

Best Regards
Edward Tian(MSFT)
Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Error Connection refused(10061)
| thread-index: AcXj6kOfHBBY9ryhTLiW7TmzpDbjhw==
| X-WBNR-Posting-Host: 69.88.120.138
| From: =?Utf-8?B?Qml0Ym9i?= <Bitbob@xxxxxxxxxxxxxxxxxxxxxxxxx>
| Subject: Error Connection refused(10061)
| Date: Mon, 7 Nov 2005 14:26:14 -0800
| Lines: 4
| Message-ID: <B4A012CB-3C86-467B-AD38-4122AC019A57@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.sbs
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:168412
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| The SBS Proxy server is returning an error code 10061 connection refused
when
| a client tries to pay for an E-bay auction item! His web brousing works
fine
| until that point. The exact code is [502 Proxy Error. Conection
| refused(10061)]. Any ideas where to stat on this one?
|

.