my sonicwall hungs everytime when there is a access to my xchg server

[yojo]

anyone who can help will be greatly appreciated..
I got a Sonicwall Pro 300 as our firewall and I have a Exchange 2000 server sit behind it. Everytime when a user accessed my exchange server (specially when they used OWA) the Sonicwall hungs (as of there is an attacked from within the network and shuts itself down). My guess is my Exchange Server must have been compromised but I can't find any trace on it cause from the Sonicwall's access log didn't shown anything. I have also checked all the services from the Exchange server, there seems to be nothing abnormal.... Someone please lite me up a little bit and show me the where should I start looking???

 

[Marcs41]

I don't see how Exchange would be able to disturb your firewall.
I think you better post this question in the Firewall forums.

Marc
_{If 'something' 'somewhere' gives 'some' error, expect random guesses or no replies at all. Please specify details.
Free Tip: The F1 Key does NOT destroy your PC!}

 

[yojo]

Thanks Marc, I'll try the Firewall forum

 

[Marcs41]

Good luck

 

[BWilson77080]

are they able to get through eventually, or does it close conenction?
you may have ssl enabled on the virtual server (port 443), and the firewall may only be able to send through regular pop3 mail (thats the default for sonicwall).

just a guess at it...but i have worked with this same setup before......
never any probs

BWilson77080
MCSE, MCSA, A+

 

[yojo]

it actully closed the internet connection totally, I'll have to reset the sonicwall to reopen the internet connection. The Xchg 2000 down't have the SSL enabled neither my sonicwall passing the SSL thru the virtual server either... I am kind of wondering maybe there is some hacker code is running that is triggered by the exchange access, do you know is there any utility can check the system to find out if there's any known hacker code is running?

 

[BWilson77080]

how is sonicwall configured?

is it using NAT, DHCP, etc?

soho300 series you said right

 

[yojo]

Basically, I got all ports locked down and only allows pop/smtp access to the internet Xchg 2000, the Sonicwall is Por 300, NAT enabled, DHCP disabled (DHCP server is running from the Small Business Server 2000 which is the same box that runs my Xchg 2000 server), One-to-one NAT was created with only one address that maps to the Xchg 2000.. Other then allowing outside traffic to come in thru port 25, 110 and 80 for OWA, all other external traffic were closed. and from LAN to Wan are open with no restrictions at this moment,

 

[BWilson77080]

does it work ok with POP3 over 110 or same result?

 

[yojo]

it'll bring down the sonicwall either way

 

[BWilson77080]

did this work before and just recently became a problem??

or a new setup and jsut wont work....

in other words...how old is this firewall, and could hardware failure be a possibility?

 

[yojo]

it was working fine and I originally also think that was hardware failure cause I can't find any trace on it, we had a Pro 200 before and Sonicwall replaced it with a Pro 300, but the problem persist after the replacement. Therefore, this ruled out the hardware failure...