TCP & UDP connections to server dropped from the Windows 2003 Server

Hi,

We reloaded Windows 2003 Server SBS, and unable to access the
any shared resources (i.e. shared folders). Also, the server
cannot do Windows update, and when try to browse the net using
IE or Firefox, we realized that it can't access the internet
and other network resources.

Using ping, tracert, nslookup yielded positive result so the NIC
is confirmed to be ok.

Our router is acting as DHCP server, so DHCP service for the server
has been disabled.

Whether the firewall is enabled or disabled, the effect is the same.
The TCP and UDP connections were dropped by the system as shown in the
log file of the Windows firewall when enabled.

Please help!!!


Windows firewall logged files shows the following: (snippets for sample)
**************************************************
#Version: 1.5
#Software: Microsoft Windows Firewall
#Time Format: Local
#Fields: date time action protocol src-ip dst-ip src-port dst-port size
tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path

2008-06-24 11:02:14 OPEN-INBOUND TCP 192.168.178.51 192.168.178.7 3338
445 - - - - - - - - -
2008-06-24 11:02:14 OPEN-INBOUND TCP 192.168.178.51 192.168.178.7 3339
139 - - - - - - - - -
2008-06-24 11:02:14 CLOSE TCP 192.168.178.7 192.168.178.51 445 3335 - -
- - - - - - -
2008-06-24 11:02:14 CLOSE TCP 192.168.178.7 192.168.178.51 445 3338 - -
2008-06-25 10:51:00 OPEN UDP 192.168.178.7 192.168.178.33 137 137 - - -
- - - - - -
2008-06-25 10:51:00 OPEN-INBOUND TCP 192.168.178.33 192.168.178.7 1930
139 - - - - - - - - -
2008-06-25 10:51:00 CLOSE TCP 192.168.178.7 192.168.178.33 139 1930 - -
- - - - - - -
2008-06-25 10:51:17 CLOSE UDP 192.168.178.7 192.168.178.1 1035 53 - - -
- - - - - -
2008-06-25 10:51:09 DROP TCP 192.168.178.1 192.168.178.7 3717 14013 60 S
1546179079 0 5840 - - - RECEIVE
2008-06-25 10:51:26 DROP UDP 192.168.178.33 255.255.255.255 1931 2225 33
- - - - - - - RECEIVE

- - - - - - -

**************************************************

Larry
Wed Jun 25 04:07:07 PDT 2008

Hi Rene:

This could be a long thread. :-(. It is impossible to determine from your
description what all you have done or not done, so lets start at the
beginning:

I will have to be away most of today, but others will help. And maybe have
more questions after you post back some basic information.

SBS Standard or Premium? If premium, have you installed ISA?

"Reloaded" do you mean a fresh install from the original media or a base
install and restore from backup?

If a fresh install from original media, have you removed the workstations
from the old domain, used the wizards to create the users and computers and
joined them using /connectcomputer?

If a restore from backup, from the server console are the shares shown, and
are the share permissions and security settings as they should be?

What errors do you get when you attempt any of the procedures listed in your
post that do not respond correctly?

What errors are in your event logs at the server?

Have you run the CEICW without error?

The Windows Firewall Service, as shown in the list of services at the SBS
console, is not meant to be running. It should have been installed as
"disabled".

Have you downloaded and run the SBS BPA? You can do this on another
system, save the file, transfer it to the SBS with a flash drive, and then
install and run it.

www.sbsbpa.com


Turn the DHCP off on the router and let your SBS perform this function.

Then:
Please post the unedited output of the following:

ipconfig /all > c:\iptest.txt

from your server and from a workstation.

--
Larry


"rene" <ryaxyeke@gmail.com> wrote in message
news:%23nJSFHn1IHA.2064@TK2MSFTNGP05.phx.gbl...
> Hi,
>
> We reloaded Windows 2003 Server SBS, and unable to access the
> any shared resources (i.e. shared folders). Also, the server
> cannot do Windows update, and when try to browse the net using
> IE or Firefox, we realized that it can't access the internet
> and other network resources.
>
> Using ping, tracert, nslookup yielded positive result so the NIC
> is confirmed to be ok.
>
> Our router is acting as DHCP server, so DHCP service for the server
> has been disabled.
>
> Whether the firewall is enabled or disabled, the effect is the same. The
> TCP and UDP connections were dropped by the system as shown in the log
> file of the Windows firewall when enabled.
>
> Please help!!!
>
>
> Windows firewall logged files shows the following: (snippets for sample)
> **************************************************
> #Version: 1.5
> #Software: Microsoft Windows Firewall
> #Time Format: Local
> #Fields: date time action protocol src-ip dst-ip src-port dst-port size
> tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info path
>
> 2008-06-24 11:02:14 OPEN-INBOUND TCP 192.168.178.51 192.168.178.7 3338
> 445 - - - - - - - - -
> 2008-06-24 11:02:14 OPEN-INBOUND TCP 192.168.178.51 192.168.178.7 3339
> 139 - - - - - - - - -
> 2008-06-24 11:02:14 CLOSE TCP 192.168.178.7 192.168.178.51 445
> 3335 - - - - - - - - -
> 2008-06-24 11:02:14 CLOSE TCP 192.168.178.7 192.168.178.51 445 3338 - -
> 2008-06-25 10:51:00 OPEN UDP 192.168.178.7 192.168.178.33 137
> 137 - - - - - - - - -
> 2008-06-25 10:51:00 OPEN-INBOUND TCP 192.168.178.33 192.168.178.7 1930
> 139 - - - - - - - - -
> 2008-06-25 10:51:00 CLOSE TCP 192.168.178.7 192.168.178.33 139
> 1930 - - - - - - - - -
> 2008-06-25 10:51:17 CLOSE UDP 192.168.178.7 192.168.178.1 1035
> 53 - - - - - - - - -
> 2008-06-25 10:51:09 DROP TCP 192.168.178.1 192.168.178.7 3717 14013 60 S
> 1546179079 0 5840 - - - RECEIVE
> 2008-06-25 10:51:26 DROP UDP 192.168.178.33 255.255.255.255 1931 2225
> 33 - - - - - - - RECEIVE
>
> - - - - - - -
>
> **************************************************