Si_Pe

Forum Replies Created

Viewing 30 posts - 1 through 30 (of 228 total)
  • Author
    Posts
  • Avatar
    Si_Pe
    Member
    in reply to: No Internet Access ASA #278286

    All up and working. The changes I made were below.

    object network obj_any
    nat (inside,outside) dynamic interface

    icmp unreachable rate-limit 1 burst-size 1
    icmp permit any inside
    icmp permit any outside

    Many thanks for the help!

    Avatar
    Si_Pe
    Member
    in reply to: No Internet Access ASA #278285

    Thanks for the replies.

    I will have a look later on this weekend.

    Thanks!

    Avatar
    Si_Pe
    Member
    in reply to: KB2884256 messed up software #278284

    Re: KB2884256 messed up software

    Ser Olmy;282063 wrote:
    According to the MS knowledgebase article, the only file affected by KB2884256 is “usbser.sys”. It should be possible to replace it with an earlier version by booting from a rescue/live CD or the Windows installation DVD.

    It does seem strange that a USB driver file should affect an application accessing an SQL database. Are you absolutely certain this exact update is the one causing the problem?

    Hi,

    I am 99% sure it’s that update, The software is currently running on another server which has the same updates apart from this one and it’s fine.

    There have been no other changes to the server apart from this update so it has to be?

    I will try copying over an older file version.

    Thanks!

    Avatar
    Si_Pe
    Member
    in reply to: KB2884256 messed up software #278283

    Re: KB2884256 messed up software

    wullieb1;281999 wrote:
    The OP telnetted to the server and advised it was fine.

    OP,

    Does the application have any logging capabilities?

    Not really no!

    Thanks!

    Avatar
    Si_Pe
    Member
    in reply to: KB2884256 messed up software #278282

    Re: KB2884256 messed up software

    Ossian;281983 wrote:
    Moved…

    Silly question, but have you confirmed port `1433 is open on the SQL box?
    Also which system (client or SQL server) is the patch on?

    Thanks!

    Yes it is open and connected fine.

    Avatar
    Si_Pe
    Member
    in reply to: KB2884256 messed up software #278281

    Re: KB2884256 messed up software

    Bertmax;281970 wrote:
    I’m afraid SQL is a bit outside my area of expertise. I’d pose the question in the SQL forum and see what the experts can tell you.

    Thanks!

    Mods could you move this thread to SQL?

    Thanks!

    Avatar
    Si_Pe
    Member
    in reply to: KB2884256 messed up software #278280

    Re: KB2884256 messed up software

    Thanks for your reply!

    I have since read that it’s a bit of a difficult one.

    My problem is we have a bit of software that tries to write to a table in SQL on another server and it was 100% fine until this patch.

    I can telnet the server it’s trying to write to using the SQL 1433 port and its fine but the software just fails.

    I have moved the software to another 2008 server without the patch installed and it’s working fine.

    I can ping the server I can connect to all shares and other servers can write to it but since this patch the server in question can’t.

    Cheers,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: KB2884256 messed up software #278279

    Re: KB2884256 messed up software

    Bertmax;281954 wrote:
    Just to be clear, when you go to Control Panel > Programs and Features > “View installed updates”, nothing is there? I only ask because my 2008 R2 server has that specific update listed there.

    Hi,

    Sorry no the update is listed but there is no remove option.

    Regards,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: Exchange Issues – DNS #278278

    Re: Exchange Issues – DNS

    Hello,

    You were correct, it seems there is an issue with the .5 server as I have pointed the exchange server to the .6 and all appears well. I am going to continue looking at the logs on the dc’s and dns boxes.

    Many thanks for your help!

    Avatar
    Si_Pe
    Member
    in reply to: Exchange Issues – DNS #278277

    Re: Exchange Issues – DNS

    Thanks again!

    I am getting the below error in the logs

    The DNS server encountered error 32 attempting to load zone . from Active Directory. The DNS server will attempt to load this zone again on the next timeout cycle. This can be caused by high Active Directory load and may be a transient condition.

    And below is the next event in the log.

    The DNS server received indication that zone cad was deleted from the Active Directory. Since this zone was an Active Directory integrated zone, it has been deleted from the DNS server.

    I haven’t looked at it yet but guessing it can’t be good!

    Thanks!

    Avatar
    Si_Pe
    Member
    in reply to: Exchange Issues – DNS #278276

    Re: Exchange Issues – DNS

    Hello,

    Yes everything works when it’s pointing to itself. Should I setup the exchange server as a DNS server?

    What checks do you suggest I do on .5?

    .5 is a DC and it’s integrated.

    Many thanks for your help!

    Avatar
    Si_Pe
    Member
    in reply to: Exchange Issues – DNS #278275

    Re: Exchange Issues – DNS

    Hello,

    Thanks for replying!

    The zone that was deleted was the “.” zone which according to Microsoft stops the editing of the forwarders as its grayed out. Support link which I think was followed.

    We have two DNS servers, the exchange server is using both of them for DNS.

    The exchange server isn’t a DC and it hasn’t got any DNS services running apart from the client one.

    Here are the IPCONFIG from all.

    DNS 1

    Email Server

    DNS Server 1 Ipconfig

    DNS Server 2

    Both the DNS servers are running windows 2008

    Many thanks,

    Avatar
    Si_Pe
    Member
    in reply to: FTP Bind Error #278274

    Re: FTP Bind Error

    Dumber;271794 wrote:
    First of all, move away from ISA 2000.
    It’s a horrible products and besides that it’s end of everything already.

    About your issue,
    Have you tried issuing the pasv command?
    Have you tried using the Firewall Client?

    Hi.

    Thanks for your reply. I knew it would be said to get rid which is in the planning just not ready as yet.

    I have tried the client and it doesn’t seem to make any difference. I haven’t tried the pasv command though.

    Will give it a shot.

    Thanks!

    Avatar
    Si_Pe
    Member
    in reply to: TLS Help #278273

    Re: TLS Help

    Lior_S;270862 wrote:
    Is your filter outbound or inbound.
    I suspect its inbound, in that case that is where your MX is pointing to for inbound filtering. All the logs will then show the TLS configuration of the filter service and none of your server.

    Hi,

    Thanks for your reply!

    It is inbound yes as you thought. So will it matter?

    Thanks!!

    Avatar
    Si_Pe
    Member
    in reply to: TLS Help #278272

    Re: TLS Help

    Hello,

    Another question if I may?

    We send our email through a St Bernards Filter and after some tests using http://www.checktls.com I have noticed the filter name is in the log. Would the filter affect TLS?

    Thanks,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: TLS Help #278271

    Re: TLS Help

    Lior_S;270798 wrote:
    Correct its one cert per server. Pretty sure you will need to reissue it when you move it from one server to the other.

    If your cert name matches your FQDN then your TLS “score” is improved. However technically its not required for TLS.

    I like http://www.checktls.com/ to make sure all my ducks are quacking OK.

    Fantastic!

    Great help!

    Many thanks,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: TLS Help #278270

    Re: TLS Help

    Lior_S;270775 wrote:
    The domain name would be the external FQDN of the email server.

    If you have Iphones, etc.. already attached, does that mean you have an SSL cert now?

    Hi,

    Thanks for the reply.

    We have two exchange servers and one has a cert for the iphones but one doesn’t. The server that has the cert on at the moment is going to be removed soon so I will be moving the cert to the other server.

    So once the second server has a cert I wont need to get another? Is that what you are saying?

    Thanks!

    Avatar
    Si_Pe
    Member
    in reply to: Global Address List is empty – Not always #278269

    Re: Global Address List is empty – Not always

    wullieb1;263426 wrote:
    Is replication between your DC’s working ok??

    Does your exchange box get the correct DC’s?? Check your directory lookup.

    Check your GAL settings in the ESM console.

    Sorry not connected to a system at the moment so can’t actually check lol.

    Hi,

    Thanks for reply!

    As far as I can see the DC’s replication is fine. No errors in eventlog to suggest otherwise.

    I will have a look at the ESM console to double check things.

    Cheers,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: Global Address List is empty – Not always #278268

    Re: Global Address List is empty – Not always

    AndyJG247;263370 wrote:
    Cached mode or not (or both I guess!).
    Anything in the Exchange logs?
    The GAL is pretty much an LDAP lookup so maybe you’ve got some dodgy DCs?

    I would start with running the ExBPA.

    I’m sure you don’t need me to say that win2000 shouldn’t be used anymore either!

    Thanks Andy!

    We don’t used cached mode but I have turned it on and it happens on both. Nothing too worry about in the logs either that I can see. I thought it would be down to the dc’s and maybe DNS but everything seems happy enough.

    I will have a look at ExBPA and see where that takes me!

    I didn’t no but we are slowly upgrading to 2008 servers but just not ready for this one at the moment.

    Cheers,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: Global Address Book – Doing Strange Things #278267

    Re: Global Address Book – Doing Strange Things

    I am still getting this issue, it’s very strange. Has anyone else come across it before?

    Thanks,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: Global Address Book – Doing Strange Things #278266

    Re: Global Address Book – Doing Strange Things

    tehcamel;258970 wrote:
    if i recall correctly, autodiscover isn’t relevant for Exchange 2003..
    is there anything in the event logs on the exchange server?

    Hi,

    Thanks for your reply!

    No there isn’t anything useful or any errors in the log, it’s sometimes shows it and sometimes it doesn’t.

    Thanks,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: Exchange 2003 Swing #278265

    Re: Exchange 2003 Swing

    Hi Both,

    Sorry for appearing dumb!

    I have setup the new server and ran some tests and mail is flowing ok between the two servers with the smart host removed.

    Thanks for your help!

    Avatar
    Si_Pe
    Member
    in reply to: Exchange 2003 Swing #278264

    Re: Exchange 2003 Swing

    Sembee;256247 wrote:
    Yes, you have. I am not referring to virtual server in the context of VMWARE, HyperV etc, I am referring to the SMTP Virtual Server inside Exchange ESM.

    Simon.

    Sorry.

    So I will need to remove the “main SMTP connector” in ESM before I setup the new exchange server for mail to flow between the two servers?

    Where do I then setup the “email filter” as before? Under the new email server?

    Thanks,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: Exchange 2003 Swing #278263

    Re: Exchange 2003 Swing

    Thanks very much Simon!

    Your info has been very helpful and your help is appreciated!

    We haven’t got a virtual server setup so we should be all good!

    Cheers,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: Help with SSL’s #278262

    Re: Help with SSL’s

    Just a quick post to say thanks!

    All working a treat!

    Many thanks,
    Simon

    Avatar
    Si_Pe
    Member
    in reply to: Help with SSL’s #278261

    Re: Help with SSL’s

    Hello,

    I have now got a new a record created for our mail but I am being refused a certificate because of the following.

    We have failed to automatically retrieve an email address for the domain name Registrant nor Administrative Contact. It appears your whois record does not present valid or public email address contacts or has private registration in place.

    Sorry but can you help?

    Avatar
    Si_Pe
    Member
    in reply to: Help with SSL’s #278260

    Re: Help with SSL’s

    JeremyW;253728 wrote:
    Correct. :)

    Got there in the end!

    Thanks very much for your help!

    Avatar
    Si_Pe
    Member
    in reply to: Help with SSL’s #278259

    Re: Help with SSL’s

    Ah okay,

    A company hosts our email so I need to speak to them regarding the host record for our ip address.

    Thanks!

    Avatar
    Si_Pe
    Member
    in reply to: Help with SSL’s #278258

    Re: Help with SSL’s

    JeremyW;253721 wrote:
    Is mail sent directly to your Exchange server or are you using the POP3 connector? Do you have a static IP address?

    If you have a static IP address then you need to add a host record in your public DNS for that IP. Usually something like mail.domain.com (but you can make it whatever you like). If it’s dynamic then you need to use a DDNS service or get a static IP and then setup the host record in your public DNS.

    Once that is done you then get a certificate for your public DNS host record.

    Hi Jeremy,

    Thanks for helping!

    Our mail is sent to a static ip yes. How do I add a entry into the public dns for our static ip?

    I am feeling seriously dumb today!

    Cheers!

    Avatar
    Si_Pe
    Member
    in reply to: Help with SSL’s #278257

    Re: Help with SSL’s

    Sorry again but….

    Webmail works internally fine via the ip address of the exchange server /exchange.

    So to make this available for public use I set-up a port forward to 443 on our router and access it via the external ip /exchange?

    Thanks

Viewing 30 posts - 1 through 30 (of 228 total)