Re: Networking Issues

If it was me I would go crazy and buy an Intel nic. Heck even a Pro100
would be safer than some generic nic you are using. That said I have
used plenty of nics that did not say Intel or 3Com with good success.
This assumes that the external nic is the generic nic. Changing the
internal nic sometimes introduces drama.

Some folks offer monitoring service where they do something like ping
every x minutes to see if your server answers.

If you see nothing that says your nic reconnected you might assume
that the nic is staying connected to the router. But you have no idea
if the router is staying connected to the isp.

You could try pinging from your desk to the real world to see if you
notice any drops. ping -t realworldmachine. Kind of annoying though so
just do it for a little bit. Any huge skips or stutters might give you
a clue.

On Tue, 18 Aug 2009 06:55:03 -0700 (PDT), chrisbeedie
<chris.beedie@xxxxxxxxx> wrote:

Ok, I have made some progress, but I am still facing internet drop
outs. I have no idea how frequent, or for how long these are occuring.

I noticed in Routing and Remote Access that there was an entry under
"IP Routing" > "NAT/Basic Firewall" from a dial-up modem we used (in
desperation) after an outage with our ISP. I deleted this and ran
CEICW again and it succeeded, but some emails are still going to our
POP accounts.

What can I do to help me pin point the source of the problem? Is there
any logging I could do both on the server and another machine (win xp)
connected directly to the router to determine if the problem is after
the router (i.e. caused by the router, the modem or our ISP?)

Would it be easiest to just buy a new NIC and hope for the best?


Thanks,

Chris

On 13 Aug, 11:07, chrisbeedie <chris.bee...@xxxxxxxxx> wrote:
Larry,

Thank you for your response.

I ran a scan with NOD32, which came up clean (other than bits of spam
that had already been quarantined). Malware Bytes found two,
serauth1.dll and serauth2.dll. No one seems to be very sure about
these files, many stating that they are false positives. For the time
being I left them.

The PCASp50.sys problem seems to be related to the fact i am no longer
using the Linksys NIC. Given that the driver itself is missing am I
best to get a copy of the driver and put it in the folder it is
expecting it, or delete the entry that is trying to start it from the
registry?

I have had a look at the link you sent through for the MSDTC error,
but will have to wait until the weekend before I can try any of them.
Is it likely that this is even related?

What is the best way for me to track down why our internet connection
keeps dropping? At the moment I am still unclear which link in the
chain is causing it (ISP, modem, router,networkcard, software).

As the ICWLog states the problem to be with "clearing static routes"
could the connection be dropping any time the server tries routing
something down an old static route that no longer exists? Is there a
way to manuallly clear static routes?

Thanks again,

Chris

On 8 Aug, 17:13, "Larry Struckmeyer [SBS-MVP]" <lstruckme...@mis-

wizards.com> wrote:
Hi Chris:

The PCASp50 NDIS Protocol Driver service failed to start due to the
following error:
The system cannot find the file specified.

That one appears to be a piece of malware.  Do a through scan with your
existing AV along with Malware Bytes and see if you turn up anything.

For this one:

Event Type: Warning
Event Source: MSDTC
Event Category: SVC
Event ID: 53258

look at the link below and see if it helps.

http://www.eventid.net/display.asp?eventid=53258&eventno=4493&source=...

After you did the fixes you did are you still failing the CEICW?

Any other events or messages that look "not normal"

--
Larry
Please post the resolution to your
issue so that others may benefit.

Get a Health Check for SBS at:www.sbsbpa.com

"chrisbeedie" <chris.bee...@xxxxxxxxx> wrote in message

news:a6ab7a7e-62b5-4487-b37f-899b569e9557@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I was wondering if anyone could please help with some networking
troubles on SBS 2003 R2.

The server (Dell Poweredge 1800) has been running fine for 2 years,
but after installing some updates (including WSUS 3) and rebooting,
the server got confused about one of thenetworkcards installed and
was reporting limited or no connectivity. It showed in device manager
that the internet facing card (we have two NICs, one for LAN and one
for Internet) was an "ADM" branded card, when infact it was (and had
previously been recognised as) a Linksys.

I tried to run CEICW, but it failed at thenetworkstage. I needed to
get this fixed quickly, so I salvaged a Netgear NIC from another
machine and replaced the Linksys card with it.

I tried to run CEICW again, but it errored at the same part.
Thankfully i managed to set everything up manually and it appeared to
be working OK. Looking at the ICWlog it appears to fail at this stage:

Error 0x80070389 returned from call to Clearing all static routes().
Error 0x80070389 returned from call to CNetCommit::Common().
Error 0x80070389 returned from call to CNetCommit::Commit().

Following another post, I have deleted the ghost entries for the
Linksys, and the ADM card from device manager,disabled routing and
remote access, and tried CEICW again, but still no joy.

Further to this, a couple of days ago I noticed that several emails
were being routed to our backup mail server (just some POP3 accounts
with our ISP). It appears as if we are losing connection
intermittently. I'm not sure if this is related to the problems above,
a faultynetworkcard, orissueswith our ISP. How is best to go about
diagnosing this?

I can see in event viewer this entry:

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7000
Date: 08/08/2009
Time: 14:00:21
User: N/A
Computer: ITSERVER
Description:
The PCASp50 NDIS Protocol Driver service failed to start due to the
following error:
The system cannot find the file specified.

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.

And this one (not sure if it is related, but confused as to why it it
thinks it needs to do a promo/demo):

Event Type: Warning
Event Source: MSDTC
Event Category: SVC
Event ID: 53258
Date: 08/08/2009
Time: 13:59:43
User: N/A
Computer: ITSERVER
Description:
MS DTC could not correctly process a DC Promotion/Demotion event. MS
DTC will continue to function and will use the existing security
settings. Error Specifics: d:\nt\com\complus\dtc\dtc\adme\uiname.cpp:
9351, Pid: 1324
No Callstack,
 CmdLine: C:\WINDOWS\system32\msdtc.exe

For more information, see Help and Support Center athttp://go.microsoft.com/fwlink/events.asp.
Data:
0000: 05 00 07 80               ...?

Any help would be greatly appreciated.

Thanks,

Chris
See what SBS support is working on
http://blogs.technet.com/sbs/default.aspx
Check your SBS with the SBS Best Practices Analyzer
http://blogs.technet.com/sbs/archive/tags/BPA/default.aspx
.

Relevant Pages

  • Re: No DNS
    ... I did not have the router connected that way. ... No, I did not have both nics on the same connection, talk about a rookie ... I enabled dhcp and dns on the server and insured my scope was ... All of the stuff i did the first time I did through the connection wizard. ...
    (microsoft.public.windows.server.sbs)
  • Re: Loss of connection
    ... You want both SBS nics to have static IPs. ... You stated that your router has ... connection on XP clients) to pull a new IP address. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN IPSEC issue, can you please help?
    ... I have a SBS2003 server with 2 nics. ... and I do have a Linksys router set up with a static IP to the ISP. ... that without unravelling a server configuration that is working otherwise. ...
    (microsoft.public.windows.server.sbs)
  • Re: 45 days STUCK LIKE CHUCK. DNS / Mx record cant recieve emails
    ... Yes router is connected directly into the internet nic / other nic of course ... You can test the connection from within the LAN, but if you have two NICs, ...
    (microsoft.public.windows.server.sbs)
  • Re: Server cant ping gateway router IP
    ... the default for SBS. ... external nic is connected to the router. ... Ethernet adapter Local Area Connection: ... NICs for security. ...
    (microsoft.public.windows.server.sbs)
Loading