Solved

Event ID 14120 - The ISA server Services Cannot create a packet filter 195.92.255.206

Posted on 2007-03-29
5
342 Views
Last Modified: 2010-05-18
We are using a single windows 2000SBS and exchange for the past couple of years. Everything has been working fine until this morning. I have looked in the Event Application Log and notice that we are getting hundreds of the same error listing every couple of seconds. The error reads :-

Event ID 14120
The ISA Server Services cannot create a packet filter 195.92.255.200....................

The issue which drew my attention to this was that we could not send out any e-mail. E-mail was being received OK. I have resolved this issue, by re setting the SMTP mail server location within the SMTP connector, but the error messages described above continue to register.

I have seen a few postings here which talk of 2 network cards etc, but this is a problem which has just occured having been working fine for months. Everything seems to be working OK, but I don't like all of these messages springing up from nowhere!

Does anone have any ideas where to start?
0
Comment
Question by:nigelbeatson
  • 3
  • 2
5 Comments
 
LVL 51

Accepted Solution

by:
Keith Alabaster earned 500 total points
ID: 18819604
What version f ISA are you running? If you are on sbs and have had the same setup for years I assume it is isa2000?

The error is telling you that the 'link' / binding to the external nic has become corrupted. You are correct regarding the two cards/one card issue generating the message but it does not just mean that it will occur if you have one card installed. If the second card is not visible/accessible to ISA then the symptoms are the same. ie ISA server installed in integrated mode but with only one network card being seen.

Have you 'played with' or amended with the ISA configuration?
If you have added the IP addresses that are on the external nic & subnet to the internal Local address table (LAT) then ISA will also see this as a single network card installation. For example, i have seen people try to bridge their internal lan by either having the same IP address on both the internal and external isa nics oe by 192.168.1.3 on the internal and 192.168.1.4 on the external. Laughable but they do try it. These situations could also cause that error message.

Have you changed the config of your network at all? Remember the internal local address table can have ONLY the ip addresses that are contactable through the internal nic. Anything on or addressable through the external nic must NOT be listed.
Do a route print on the SBS server. Does it correspond to your LAT entries?

Should do for starters.

0
 

Author Comment

by:nigelbeatson
ID: 18822172
I would like to check the ISA config, but cannot see any utilities to enable me to do so. I suppose what I am saying is - how do we look at / change the ISA config?

This is only a single NIC configuration, and no one has made any changes to the network recently (as far as we can know).

How can we check the LAT, to ensure no other external listings are registered?

I think the theory that something has become corrupt would be the best guess here, as the customer knows less than I do, and he would not attempt to make this kind of change. Can the ISA and LAT be verified in any way?

I am not on site, as I write, but will check the route print info when there.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 18832558
In the start - program files you should see the entry for ISA server.
0
 

Author Comment

by:nigelbeatson
ID: 18957255
Sorry for the delay, been on holiday.

Strangely upon my return, the problem had cleared, thanks for your help, the points are yours anyway!

Regards, Nigel.
0
 
LVL 51

Expert Comment

by:Keith Alabaster
ID: 18957280
lol - it happens - thanks Nigel
0

Featured Post

How does your email signature look on mobiles?

Do your employees use mobile devices to reply to emails? With mobile becoming increasingly important to the business world, it is in your best interest to make sure that your email signature looks great across all types of devices.

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now