No Internet Access on Server or Client Computers this morning

[sac9829]

Hi

This morning when the cleint computers where turned on I have noticed that they can not connect to the internet and also the server can't contect.

No settings have changed but I recevie the following errors in the Server Report:

dsrestor 1005 7/10/2008 2:07 PM 3 *
The DSRestore Filter failed to connect to local SAM server. Error returned is <id:997>.


Windows SharePoint Services 2.0 1000 7/10/2008 1:26 PM 2 *
#50070: Unable to connect to the database STS_AJSSRV01_1 on AJSSRV01\SharePoint. Check the database connection information and make sure that the database server is running.


DNS 6702 7/10/2008 10:54 AM 1
DNS server has updated its own host (A) records. In order to ensure that its DS-integrated peer DNS servers are able to replicate with this server, an attempt was made to update them with the new records through dynamic update. An error was encountered during this update, the record data is the error code. If this DNS server does not have any DS-integrated peers, then this error should be ignored. If this DNS server's Active Directory replication partners do not have the correct IP address(es) for this server, they will be unable to replicate with it. To ensure proper replication: 1) Find this server's Active Directory replication partners that run the DNS server. 2) Open DnsManager and connect in turn to each of the replication partners. 3) On each server, check the host (A record) registration for THIS server. 4) Delete any A records that do NOT correspond to IP addresses of this server. 5) If there are no A records for this server, add at least one A record corresponding to an address on this server, that the replication partner can contact. (In other words, if there multiple IP addresses for this DNS server, add at least one that is on the same network as the Active Directory DNS server you are updating.) 6) Note, that is not necessary to update EVERY replication partner. It is only necessary that the records are fixed up on enough replication partners so that every server that replicates with this server will receive (through replication) the new data.


Source Event ID Last Occurrence Total Occurrences
DNS 4004 7/10/2008 10:16 AM 4 *
The DNS server was unable to complete directory service enumeration of zone amandajackson.local. This DNS server is configured to use information obtained from Active Directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and repeat enumeration of the zone. The extended error debug information (which may be empty) is "". The event data contains the error.


Source Event ID Last Occurrence Total Occurrences
DNS 4015 7/10/2008 10:16 AM 1
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.


Any Ideas?

 

[gavm99]

Does DNS on the server LAN card point to 127.0.0.1 ?
Do you have vaild forwarders in DNS?

Gavin Moorhouse

http://www.lucidcomputersolutions.co.uk

 

[wahnula]

Do you have one NIC or two?

Tony

Users helping Users...

 

[ShackDaddy]

Go into the Services list on your server, sort it by Startup Type, then scan through all the services that are set to Automatic and see which ones aren't running. Normally there are one or two that won't be running, but it seems like in your situation, there's a critical AD-related service that isn't functioning.

Also, make sure that the server is pointed to ITSELF for DNS resolution.

Can the server ping the default gateway? Can it ping a host outside of your network by it's IP address? I would assume it can.

Dave Shackelford
Shackelford Consulting

 

[sac9829]

No it points to 192.168.111.2 which is the IP of server when I do ipconfig

Haven't changed forwarders so everything should be find.

Server has one NIC and is setup to run from modem in bridge mode to firewall and the to the Server.

I can ping and access the firewall but when I try to ping by IP outside the network which appears to work but says Destination Net Unreachable

I can ping the server itself and also the default gateway which is the firewall.

Have check all services and all but one of auto are started. The one not started is just the performance and reporting so doesn't need to be.


Any ideas?

 

[ShackDaddy]

Sounds like this is a firewall problem. From the firewall you should be able to get a status and check on whether the WAN interface is online. Most firewall/routers also have a way for you to perform pings, so from the firewall console, ping an external host and see if that works.

Have you already tried powering off the modem and firewall and bringing the modem online again and then the firewall?

Dave Shackelford
Shackelford Consulting

 

[maya14]

I have exactly the same problem for 3 days now. SBS and clients dont have Internet access and or email connectivity with Exchange or ISP POP accounts. Ran Internet & Email wizard several times but no luck. Cant ping Internet DNS names, only sometimes IP address. Cisco router belongs to ISP and they say they can ping fine from router to Internet.Perhaps SBS DNS not correctly forwarding requests to ISP DNS?
Had this error once:
Source Event ID DNS 4015
The DNS server has encountered a critical error from the Active Directory. Check that the Active Directory is functioning properly. The extended error debug information (which may be empty) is "". The event data contains the error.

 

[sac9829]

I have been researching and it looks like the following might have something to do this it.

http://blogs.technet.com/sbs/archiv...alling-hotfix-948110-on-sbs-2003-servers.aspx

Volume shadow copy doesn't seem to be working for me but MSSQL$SHAREPOINT service is started and appears to work.

Have tried stopping and starting but no improvement.

 

[wahnula]

Good link sac9829. Apparently there is a serious issue with this hotfix.

Dave, have you had to deal with this yet? I figure with all your SBS boxes humming away somewhere or other that this issue would pop up.

Not much use to you folks suffering right now, but when I built my server my advisor told me to manually install updates and only the ones that add or repair functionality. So, I run with Automatic Updates turned OFF and run the service occasionally to see what's available.

His "If it ain't broke don't fix it" attitude has paid off more than once, just thought it worth a mention. <ducks away and covers back of head>

Tony

Users helping Users...

 

[ShackDaddy]

Sac, I don't think that sharepoint issue is related to what's happening.

Tony, this hasn't happened at any of my sites (knock on wood). If it did happen at one of my sites, I'd be doing some DNS troubleshooting using nslookup, and I'd be using some of the tools on the firewall/router to isolate the actual problem. It would be nice if someone with this problem would call me so that I could resolve it and post a resolution.

I use the same approach to updates, especially with my most mission-critical customers. Sometimes (barring any major outbreak) I won't do any updates to a server for several months at a time, just to get a feel for whether the updates are causing problems for the Patch Tuesday crowd.

Sac, what router/firewall are you using?

Dave Shackelford
Shackelford Consulting

 

[maya14]

Any luck yet sac9829? I have also lost my Internet connection with SBS and clients for 4 days now. ISP cant find any fault on their side or router. No firewall. Tested ADSL - no problem. Email also fails intermittently. Changed DNS forwarders and still no luck. Nslookup/ping and tracert gives intermitted results. Pinging and traceroute shows better results when actioned from router. What else can i try to resolve this important issue?

 

[gavm99]

Let's forget about the server for a second.

Have you simply connected a laptop to your router and tried to access the Internet directly? What happens? Can you get webpages by IP and by name?

This is a very easy of way be being sure where the fault is.

Thanks.

Gavin Moorhouse

http://www.lucidcomputersolutions.co.uk

 

[sac9829]

Yes I have tested the modem and it is working fine. The lights on the modem also show this.

Currently I have it setup as follows:

Server: 192.168.111.2
with gateway and DNS set to 192.168.111.2

Firewall:192.168.111.1

and then the modem is in bridge mode

Also the error started exactly the same time as the issue from Microsoft with the update started and the server has been setup for years with no problems connecting to the internet and no resent chnages.

Any ideas on what to test next? (Could I remove firewall for now to make things simplier?)

 

[ShackDaddy]

Is your server really pointing to itself for the gateway? It should be pointing to the firewall for its gateway. I assume you made a typo.

Dave Shackelford
Shackelford Consulting

 

[sac9829]

No sorry it was a typo.

Is set to 192.168.111.1

 

[ShackDaddy]

Gavin is suggesting that you configure a laptop the same way the WAN interface of your firewall is configured, and see if you can get internet access straight from the laptop through your modem. That would take the gateway out of the loop. When you do that, configure your laptop to use an outside DNS server and not the internal one. If this works, then you know the issue is either with the firewall or with the server.

Another thing you could do is configure a client on the inside to use an external DNS server temporarily and see if it can get on the internet. If it can, then it's a DNS problem on your SBS server. If it can't then the issue most assuredly exists on the firewall or the modem.

Dave Shackelford
Shackelford Consulting

 

[ShackDaddy]

Ok, I figured this out. Go to Add/Remove Programs and uninstall these three patches:

KB951748, KB951746, and KB948110

They are known to cause a problem with SharePoint and to kill network connectivity in some situations. Mirosoft product support has been able to resolve the issue by having customers roll them back.

Dave Shackelford
Shackelford Consulting

 

[sac9829]

Ok thanks I will have a look when I can access the server on Monday

 

[maya14]

In my case i dont have those updates installed. ISP tested router today again and says SBS is having DNS resolving problems. If that's the case how can i repair DNS on SBS?
I realy need some expert advice here as we've been having intermitted or no Internet and email access for 5 days now.

 

[ShackDaddy]

Maya, is your DNS server configured with forwarders from your ISP?

Try adding these and making them priority:
66.51.205.100
66.51.206.100

These are another ISP's DNS server IP's that accept queries from the world. Use them for the short term until you figure out if it's your ISP's DNS that are the problem.

Or try removing your forwarders.

Maya, when you sit down at your server and type "nslookup" at the command-line, what do you get? And then type "novell.com", what results get returned then?

Then type "server 66.51.205.100"
Then type "novell.com" and tell me if your results are different.

Your answers will give us a clue as to how your DNS is functioning on the server.

Dave Shackelford
Shackelford Consulting