Want to win a PS4? Go Premium and enter to win our High-Tech Treats giveaway. Enter to Win


Event ID 14120 - The ISA server Services Cannot create a packet filter

Posted on 2007-03-29
Medium Priority
Last Modified: 2010-05-18
We are using a single windows 2000SBS and exchange for the past couple of years. Everything has been working fine until this morning. I have looked in the Event Application Log and notice that we are getting hundreds of the same error listing every couple of seconds. The error reads :-

Event ID 14120
The ISA Server Services cannot create a packet filter

The issue which drew my attention to this was that we could not send out any e-mail. E-mail was being received OK. I have resolved this issue, by re setting the SMTP mail server location within the SMTP connector, but the error messages described above continue to register.

I have seen a few postings here which talk of 2 network cards etc, but this is a problem which has just occured having been working fine for months. Everything seems to be working OK, but I don't like all of these messages springing up from nowhere!

Does anone have any ideas where to start?
Question by:nigelbeatson
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 51

Accepted Solution

Keith Alabaster earned 2000 total points
ID: 18819604
What version f ISA are you running? If you are on sbs and have had the same setup for years I assume it is isa2000?

The error is telling you that the 'link' / binding to the external nic has become corrupted. You are correct regarding the two cards/one card issue generating the message but it does not just mean that it will occur if you have one card installed. If the second card is not visible/accessible to ISA then the symptoms are the same. ie ISA server installed in integrated mode but with only one network card being seen.

Have you 'played with' or amended with the ISA configuration?
If you have added the IP addresses that are on the external nic & subnet to the internal Local address table (LAT) then ISA will also see this as a single network card installation. For example, i have seen people try to bridge their internal lan by either having the same IP address on both the internal and external isa nics oe by on the internal and on the external. Laughable but they do try it. These situations could also cause that error message.

Have you changed the config of your network at all? Remember the internal local address table can have ONLY the ip addresses that are contactable through the internal nic. Anything on or addressable through the external nic must NOT be listed.
Do a route print on the SBS server. Does it correspond to your LAT entries?

Should do for starters.


Author Comment

ID: 18822172
I would like to check the ISA config, but cannot see any utilities to enable me to do so. I suppose what I am saying is - how do we look at / change the ISA config?

This is only a single NIC configuration, and no one has made any changes to the network recently (as far as we can know).

How can we check the LAT, to ensure no other external listings are registered?

I think the theory that something has become corrupt would be the best guess here, as the customer knows less than I do, and he would not attempt to make this kind of change. Can the ISA and LAT be verified in any way?

I am not on site, as I write, but will check the route print info when there.
LVL 51

Expert Comment

by:Keith Alabaster
ID: 18832558
In the start - program files you should see the entry for ISA server.

Author Comment

ID: 18957255
Sorry for the delay, been on holiday.

Strangely upon my return, the problem had cleared, thanks for your help, the points are yours anyway!

Regards, Nigel.
LVL 51

Expert Comment

by:Keith Alabaster
ID: 18957280
lol - it happens - thanks Nigel

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
Want to know how to use Exchange Server Eseutil command? Go through this article as it gives you the know-how.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
This video discusses moving either the default database or any database to a new volume.
Suggested Courses

636 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question