Registered users    
MembershipMembership:
Latest New UserLatest:Chris Naylor
New TodayNew Today:10
New YesterdayNew Yesterday:11
User CountOverall:23325
Private messaging    
You must be logged in to use this module.
Top 10 posters    
NamePosts
Mariette Knap12894
Marina Roos12507
Eriq Neale2114
Stan Guinn1913
Michael Patrick1912
Robert Pearman1771
Nick Pieters1425
Stewart Brown616
william warren601
Kevin D.579
Welcome unauthorized visitor    
If you want to join us in the discussions on this forum you need to register first. Registration is free! If you are already a registered user please login to join the forum.
Small Business Server Support Forum    
Forums > Microsoft Small Business Server 2003 & 2000 > ISA Server 2004
Subject: ISA blocking ConnectComputer?
Prev Next
You are not authorized to post a reply.

Page 1 of 41234 > >>
Author Messages
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 06:03 PM  
Hello, have an interesting problem. I cannot set up one of the bosses new laptops. I created a new computer account via the Server Management Console as usual but when I try to connect to \\SERVERNAME\ConnectComputer I just get a "Page cannot be displayed" screen. Started checking out the server and I see many entrys in the Event Log that say that a spoof attack has been detected. I checked the new laptop and sure enough, same IP address as the "spoof attack". Any ideas?

Also, I had the laptop at home last night to set up an out of office profile and could not connect to the server via his Outlook. I followed the instructions that are on the main page of the company website but kept getting a Username and Password prompt. An employee at a remote office tried to set up his Outlook to connect over the internet and is having the same problems.

I noticed a couple of weeks ago that salespersons laptop could not connect to the internet from inside our network. Check the server to see what was happening and noticed that server thought that it was a spoof attack. Trying to figure out what I have kludged up here. The only changes I have made in the last few months to the server has been applying the MS updates. Thank
you in advance for your time.

Aaron
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 06:52 PM  
Judging upon the information you have already given I think there is some issue with the IP addresses you are using and/or a setting in ISA that is not correct. But before we can continue I need more information about your server and client setup.
Please, post an ipconfig /all from the server and a workstation. Open a command prompt by opening Start -> Run from the Start Menu and type cmd. From the command prompt type ipconfig /all >ip.txt. Attach this file to your answer.
 
In addition to the above can you tell me what laptop that is and how many network adapters it has. I would also like to know what third party software is installed on the server and the client.
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 07:40 PM  
The server has SBS Premium 2003 running ISA, SQL, and Exchange in a 2 NIC config.
 
Third party software on server is: 
EBM (bidding software)
EPIC (Pricing DB for EBM)
Maxwell (Accounting program)
AVG
 
Laptop is a brand new, right out of the box HP nx6110 Running WinXP Pro and Office SBE
 
NICs are: 
Broadcom 440x 10/100 Ethernet
Intel PRO/Wireless 2915ABG (Disabled)
 
Third Party Software on laptop: 
Netswitcher
AVG
Adobe
 
Server IPConfig
Windows IP Configuration
   Host Name . . . . . . . . . . . . : newserver
   Primary Dns Suffix  . . . . . . . : Reddy.local
   Node Type . . . . . . . . . . . . : Unknown
   IP Routing Enabled. . . . . . . . : Yes
   WINS Proxy Enabled. . . . . . . . : Yes
   DNS Suffix Search List. . . . . . : Reddy.local
 
Ethernet adapter Server Local Area Connection:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : HP NC7760 Gigabit Server Adapter
   Physical Address. . . . . . . . . : 00-08-02-A3-8E-98
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.16.2
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . :
   DNS Servers . . . . . . . . . . . : 192.168.16.2
   Primary WINS Server . . . . . . . : 192.168.16.2
 
Ethernet adapter Network Connection:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : Realtek RTL8139/810x Family Fast Ethernet NIC
   Physical Address. . . . . . . . . : 00-50-FC-87-1A-A6
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 10.7.7.252
   Subnet Mask . . . . . . . . . . . : 255.255.255.0
   Default Gateway . . . . . . . . . : 10.7.7.253
   DNS Servers . . . . . . . . . . . : 192.168.16.2
   NetBIOS over Tcpip. . . . . . . . : Disabled
 
PPP adapter RAS Server (Dial In) Interface:
   Connection-specific DNS Suffix  . :
   Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
   Physical Address. . . . . . . . . : 00-53-45-00-00-00
   DHCP Enabled. . . . . . . . . . . : No
   IP Address. . . . . . . . . . . . : 192.168.16.12
   Subnet Mask . . . . . . . . . . . : 255.255.255.255
   Default Gateway . . . . . . . . . :
   NetBIOS over Tcpip. . . . . . . . : Disabled
_____________________________________________________________________________________
Windows IP Configuration
        Host Name . . . . . . . . . . . . : your-a9279112e3
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Broadcast
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
 
Ethernet adapter Local Area Connection:
        Connection-specific DNS Suffix  . :
        Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
        Physical Address. . . . . . . . . : 00-15-60-B6-46-95
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        Autoconfiguration IP Address. . . : 169.254.163.205
        Subnet Mask . . . . . . . . . . . : 255.255.0.0
        Default Gateway . . . . . . . . . :
_________________________________________________________________
My Workstation IPConfig

Windows IP Configuration 
        Host Name . . . . . . . . . . . . : Admin01
        Primary Dns Suffix  . . . . . . . : Reddy.local
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : Reddy.local
                                            Reddy.local
 
Ethernet adapter Local Area Connection: 
        Connection-specific DNS Suffix  . : Reddy.local
        Description . . . . . . . . . . . : Intel(R) PRO/100 VE Network Connection
        Physical Address. . . . . . . . . : 00-10-DC-86-C6-BE
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.16.25
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.16.2
        DHCP Server . . . . . . . . . . . : 192.168.16.2
        DNS Servers . . . . . . . . . . . : 192.168.16.2
        Primary WINS Server . . . . . . . : 192.168.16.2
        Lease Obtained. . . . . . . . . . : Friday, April 28, 2006 10:15:29 AM
        Lease Expires . . . . . . . . . . : Saturday, May 06, 2006 10:15:29 AM
Thank you very much
 
Aaron
Marina Roos User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12507
5/01/2006 08:07 PM  
Hi Aaron,
 
Server's ipconfig is good, and the client with Admin01 is good too. The other machine simply doesn't seem to get through to the DHCP server. Can you check the cable and port where it is connected to? It hasn't been joined to the domain either yet, right?
Marina Roos Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 08:10 PM  
I assume the your-a9279112e3 is the new laptop? Did you notice it does not get an IP address from the server? I would disable netswitcher if you are joining the workstation because that could well be the cause of the problems. Does the AVG antivirus on the laptop also has some Firewall build in? Many do. If so, disable that.
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 08:19 PM  
I checked the port and replaced the cable JIC and had the same problem. Yep, that is the computer name that HP assigned it. I just uninstalled Netswitcher and rebooted. Tried to do ConnectComputer and got "The page cannot be displayed". There is no firewall in AVG. I tried to "repair" the connection for the Ethernet card and it just sites on Renewing your IP address.
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 08:22 PM  
Hmmm, that sounds like a hardware problem to me. Can you try to connect the laptop to the some other router you have that does DHCP? If the laptop gets an IP address then we have to further investigate where the problem comes from. If you renew the IP address on another workstation does that work?
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 08:24 PM  
Do you have ISA 2004 installed and was that an upgrade from ISA 2000?
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 08:41 PM  
I do not have any routers. I just have two 24 port switches and two 24 port patchpanels leading to them. I renewed the IP address on my workstation just fine. I unplugged my workstation from the switch and plugged the cable from the laptop into it. I tried 2 different network cables (one brand new) and could not renew the IP address on the laptop.
 
I checked the event log and am still seeing many warnings. They are all:
 
Warning
Catagory: Packet Filter
Event ID: 15108
Description: ISA Server detected a spoof attack from Internet Protocol (IP) address 192.168.16.13. A spoof attack occurs when an IP address that is not reachable via the interface on which the packet was received. If logging for dropped packets is set, you can view details in the packet filter log.
 
This appears everey 2 - 6 seconds when the laptop is plugged in. That is the IP address of the laptop.
 
Thanks.
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 08:49 PM  
I just noticed that the IP Config is now different on the laptop. Here is the new one.
 
Windows IP Configuration
        Host Name . . . . . . . . . . . . : your-a9279112e3
        Primary Dns Suffix  . . . . . . . :
        Node Type . . . . . . . . . . . . : Hybrid
        IP Routing Enabled. . . . . . . . : No
        WINS Proxy Enabled. . . . . . . . : No
        DNS Suffix Search List. . . . . . : Reddy.local
 
Ethernet adapter Local Area Connection:
        Connection-specific DNS Suffix  . : Reddy.local
        Description . . . . . . . . . . . : Broadcom 440x 10/100 Integrated Controller
        Physical Address. . . . . . . . . : 00-15-60-B6-46-95
        Dhcp Enabled. . . . . . . . . . . : Yes
        Autoconfiguration Enabled . . . . : Yes
        IP Address. . . . . . . . . . . . : 192.168.16.13
        Subnet Mask . . . . . . . . . . . : 255.255.255.0
        Default Gateway . . . . . . . . . : 192.168.16.2
        DHCP Server . . . . . . . . . . . : 192.168.16.2
        DNS Servers . . . . . . . . . . . : 192.168.16.2
        Primary WINS Server . . . . . . . : 192.168.16.2
        Lease Obtained. . . . . . . . . . : Monday, May 01, 2006 2:33:52 PM
        Lease Expires . . . . . . . . . . : Tuesday, May 09, 2006 2:33:52 PM
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 08:53 PM  
Can you ping the server by name? What happens if you run connectcomputer?
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 08:58 PM  
Can you answer this question please: Do you have ISA 2004 installed and was that an upgrade from ISA 2000?
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 08:59 PM  
Still getting Page cannot be displayed when trying to COnnectComputer and PING could not find host when I try that.
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 09:01 PM  
I have ISA Server 2004, version: 4.0.2163.213
 
I believe that this is an upgrade from 2000. I know that that we upgraded from SBS2000 premium to SBS2003 Premium.
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 09:06 PM  
OK. Open ISA 2004 Manager and browse to networks. In the right pane double click the Internal Network Object and choose the tab Adresses. It should show you the same as in the picture. If it does not remove the range, then choose Add Adapter and choose to add the Server Local Area Adapter.
 
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 09:19 PM  
I did that and it showed two ranges.
192.168.16.0 - 192.168.16.12
192.168.16.14 - 192.168.16.255
 
I removed both ranges and then added Server Local Area Adaptor and I now have three ranges.
192.168.16.0 - 192.168.16.7
192.168.16.9 - 192.168.16.11
192.168.16.13 - 192.168.16.255
 
What would cause his? Static IPs?
 
Thank you.
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 09:23 PM  
Aron,
 
This is strange. Can you check the DHCP server and see what scopes it has and also check the Server Local Area connector and check what IP addresses are listed there?
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 09:27 PM  
The only scope it whows is 192.168.16.1 - 192.168.16.254.
Server Local Area Connection shows IP Address: 192.168.16.2 with submask of 255.255.255.0
Mariette Knap User is Offline
The Netherlands
Member since
3/24/2005

Forum Admins
Posts: 12894
5/01/2006 09:29 PM  
OK, strange. Instead of setting the adapter in ISA 2004 I suggest you set a range like 192.168.16.0 - 192.168.16.255 manually.
Mariëtte Knap Smallbizserver.Net AdministratorMission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local  network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain'
Aaron Fadeley User is Offline
Ohio, USA
Member since
4/6/2006

Registered Users
Posts: 60
5/01/2006 09:43 PM  
OK. Did that through ISA. Still cannot renew IP address. Rebooted.
Still cannot do ConnectComputer.
Just looked in DHCP and it shows 192.168.16.13 is leased to your-a9279112e3. Lease expires 5/9/2006 2:33:49 PM
Changed the laptops ComputerName to HPVP just in case the long, weird name caused some kind of problem, rebooted.
DHCP shows the name change with same IP address.
Still cannot rewen IP address.
You are not authorized to post a reply.
Page 1 of 41234 > >>
Forums > Microsoft Small Business Server 2003 & 2000 > ISA Server 2004 > ISA blocking ConnectComputer?


ActiveForums 3.7
Forum policy    
These Discussion Forums are dedicated to the discussion of the Small Business Server and related server and client software. For the benefit of the community please observe the following posting guidelines:
  1. No Advertising. This includes promotion of commercial products and non-commercial products which are not directly related to Small Business Server and related server and client software.
  2. No Flaming or Trolling.
  3. No Profanity, Racism, or Prejudice.
  4. Site Moderators have the final word on approving/removing a thread or post or comment.
Copyright 2002-2008 Concentrix b.v.    :   Page generated in 0.4531279 seconds.   :   Terms Of Use   :   Privacy Statement