
Signature
Ward Flowers (MSFT)
Microsoft Exchange Support Engineer
This posting is provided "AS IS" with no warranties, and confers no rights.
I appreciate your quick response. We will attempt to do some netmon
traces tomorrow to more accurately detect the problem. Some other
little tidbits that were found today:
-Telnetting to Port 80 does indeed work from these client machines to
Exchange.
-Conencting to the server through the web (http://<server_name>/) does
NOT (though it does on PC's on our regular network, just not at this
sattelite site that again are VPN'd through SoHo Firewalls).
Are there other specific ports that would definitely be open on the
Exchange server that we can test with?
Also, I might not have made this clear in my initial post, but this
setup has been working for years now. I just got a call on Monday
stating that users had stopped receiving email the previous Friday,
which we've had a problem with our external mailserver kernel panicking
in the past. This just was not the case this time.
Thanks again.
-Curtis Brunet
> If outlook is having a problem connecting if could be any piece of the RPC
> connectivity to Exchange. The connection to the GC for Directory access,
[quoted text clipped - 59 lines]
> > Firewall on our end (a little harder to do) is scheduled to go down
> > tonight momentarily to see if that is it.
Ward Flowers (MSFT) - 12 Jul 2006 23:49 GMT
Hmm, Telnet is working to port 80 but OWA or even basic IIS access is not..
Weird. The fact that other clients on other networks work go back to the
firewall as suspect as you suggested before. I wonder about maybe the
maximum MTU size or something to that nature, maybe large packets are not
getting broken down properly. Netmon should show that though with
retransmits of failed packets etc.
You might check this
159211 Diagnoses and treatment of black hole routers
http://support.microsoft.com/default.aspx?scid=kb;EN-US;159211

Signature
Ward Flowers (MSFT)
Microsoft Exchange Support Engineer
This posting is provided "AS IS" with no warranties, and confers no rights.
>I appreciate your quick response. We will attempt to do some netmon
> traces tomorrow to more accurately detect the problem. Some other
[quoted text clipped - 88 lines]
>> > Firewall on our end (a little harder to do) is scheduled to go down
>> > tonight momentarily to see if that is it.
cbrunet - 13 Jul 2006 14:32 GMT
So we rebooted our main firewall last night to no avail. Another
sidenote, that these systems can indeed SEND email. Really, they can.
This is certainly a head scratcher to me. I don't understand how it
could comminute with Exchange slightly but not all the way. There are
no specific rules in the FireWall concerning this, and other users that
travel through the same firewall have no problem, just this one
network.
So they can:
-Ping Exchange Server
-Do a "Check Name"
-Send Email
-telnet <exchange> 80
They Cannot:
-RDP to Exchange Server
-Receive Email
-Connect through the Web at http://<server_name>/
I'll be checking into the network problems all day, just wanted to
update these things. Thanks again for all your help.
> Hmm, Telnet is working to port 80 but OWA or even basic IIS access is not..
> Weird. The fact that other clients on other networks work go back to the
[quoted text clipped - 105 lines]
> >> > Firewall on our end (a little harder to do) is scheduled to go down
> >> > tonight momentarily to see if that is it.
cbrunet - 13 Jul 2006 14:57 GMT
Reading up on the MTU suggestions, I don't believe that is the problem.
ICMP is indeed returning the ping request, so I can't see it being a
black hole router problem. I can also hit other servers on the same
network as the Exchange server. They are right beside Exchange, both
physically and in a network sense, and I can conenct to them no
problem.
There has got to be something in the firewall, but I've checked all
rules that could possibly have anything to do with it to no avail. I'm
certainly at a loss.
Ward Flowers (MSFT) - 12 Jul 2006 23:50 GMT
Another link
314825 How to Troubleshoot Black Hole Router Issues
http://support.microsoft.com/default.aspx?scid=kb;EN-US;314825

Signature
Ward Flowers (MSFT)
Microsoft Exchange Support Engineer
This posting is provided "AS IS" with no warranties, and confers no rights.
>I appreciate your quick response. We will attempt to do some netmon
> traces tomorrow to more accurately detect the problem. Some other
[quoted text clipped - 88 lines]
>> > Firewall on our end (a little harder to do) is scheduled to go down
>> > tonight momentarily to see if that is it.