Windows 2003 problem and spam filter - mike's web log/comments

New comments for this entry are disabled.

July 24, 2005 | Windows 2003 problem and spam filter | 2115 hit(s)

In response to my whinging about the problems some people were having seeing my Windows 2003 server (which I ascribed to the SP1 update), Todd noted[1] that the Windows 2003 page suggests a couple of KnowledgeBase articles that describe similar-sounding problems:

Some firewalls may reject network traffic that originates from Windows Server 2003 Service Pack 1-based computers (899148)
Installing security update MS05-019 or Windows Server 2003 Service Pack 1 may cause network connectivity between clients and servers to fail (898060)

I had a look, and the overall problems sure sounded familiar, but the details were perhaps not quite there. For example, 899148 deals specifically with RPC calls involving VPN and/or ISA. This text gave me pause: "Only apply it[2] to systems that are experiencing this specific problem. This hotfix may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next Windows Server 2003 that contains this hotfix." Hmm. Can't say I'm severely affected, I don't think.

Anyway, I did apply the hotfix suggested in the second KB article.

Did it work? Who knows. Two people who previously were unable to see the website now can. At least one person still cannot. As I said before, it's damn hard to debug a problem you can't reproduce yourself. So I might try the instructions in the first KB, but ... maybe I'll wait.

The good news, though, is that the spam filter I installed recently (Outlook Spam Filter 3.0) is still batting 1000. Die, spam, die!

[1] Resisting nobly, I thought, the opportunity to say "RTFReadme!"

[2] By which they mean "Apply it only," as explained here. :-)

Todd Derscheid 25 Jul 05 - 3:52 PM

Mike,

Great, it worked! For at least SOME of your affected audience, anyway. This bug sounds like a real head-scratcher, so don't beat yourself up too much.

Presuming competence, I figured you had checked the SP1 page before the fixes were listed. :)

I could never say RTFAnything since:
1. you had taken reasonable steps to correct the problem.
2. it wasn't clear that the documentation really applied (I was too lazy, for instance, to read the Dell-only section on the SP1 page, and was afraid you were going to post that you HAD a Dell as your server, and that by omitting that section, I had steered you poorly).
3. I enjoy your blog too much!

The intermittent outages while you were in Japan hurt, because I also use your "Blogs I Read" as a secondary list of favorites when I am away from my home computers. You update fairly frequently, have a wide range of topics, and you link to interesting items, with reasoned commentary. Plus, you linked to the Baby Name Voyager, which my wife and I both loved. Yay, Mike!

Thanks for the update, and the props!