Well, it works now in less than 20 seconds. The only difference between today and yesterday is that we were using a 'Dynamic IP' (PPoE on a Linksys DSL router) to create the tunnel between firewalls. The IP was static in the sense that we had it for at 2 days at a time. Enough to create the tunnel and have traffic go across. The story behind why it is dynamic is a short one - Verizon botched the static job and we got dynamic. Now we have static IP for the VPN to use and for whatever reason it works great.
The other possibility is that the client had virus issues (Bagel) and this may have caused the Exchange servers to be unresponsive. Either way it is hard to tell because of two simultaneous issues. Before this, we could ping the server by name and IP, we could also use the RPCPing util to verify we were getting Thanks to all for your help and suggestions. Damian -----Original Message----- From: Scoles, Damian Sent: Thursday, March 04, 2004 8:35 AM To: Exchange Discussions Subject: RE: Check Names - VERY long time to complete That's what we're looking at now. We did find out that the VPN does not allow DNS queries through, which we had not noticed before because we decided to put in a local DNS server to the client as a test. Also, when we use a dialup connection, it works in like 10 seconds. This tells me that the VPN connection is different and is dropping traffic somewhere. I am having out engineer look at it in a bit and then we'll know for sure. The RPCPing utility worked fine on all test so I know we have RPC connectivity. The local DNS does resolve the name for us, so this is not the issue either. NetBIOS resolution works too as I had turned off DNS resolution on the client and I could still ping the server by name (NetBIOS name that is). NetBIOS over TCP/IP is enabled. My focus is on the VPN as the dialup worked with the same DNS/WINS servers. Thanks for all your help on this problem. Damian Scoles Senior Technical Analyst MCSE, CCNP, CNA, A+ -----Original Message----- From: Sander Van Butzelaar [mailto:[EMAIL PROTECTED] Sent: Thursday, March 04, 2004 3:19 AM To: Exchange Discussions Subject: RE: Check Names - VERY long time to complete I might be way off, but I would have a look at what type of traffic flows i.e. TCP and/or UDP. What does the VPN allow? Secondly I would look at the client order/bindings in which it resolves things, the client - exchange server relationship seems still pretty much bases on NetBIOS names. Is the Enable/Allow NetBIOS over TCP/IP enabled? I know they are shots in the dark, but worth checking anyway. Sander -----Original Message----- From: Scoles, Damian [mailto:[EMAIL PROTECTED] Sent: 03 March 2004 03:05 PM To: Exchange Discussions Subject: RE: Check Names - VERY long time to complete No. Just a VPN tunnel over the internet between two firewalls. -----Original Message----- From: Aaron Brasslett [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 4:06 PM To: Exchange Discussions Subject: RE: Check Names - VERY long time to complete Any NAT going on between the server and the client machine? -----Original Message----- From: Scoles, Damian [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 5:07 PM To: Exchange Discussions Subject: RE: Check Names - VERY long time to complete OK. I did find out an interesting piece of news. The Exchange servers were not listed in DNS. I only assumed they were.... BTW this is for a client so I don't have access to their DNS servers. I installed a local DNS server that does resolve the names just fine. However, the Check Name process still takes a lot of time. When we check the firewall logs we see traffic on ports 135 and 1061 for about 20 or so seconds. After that the traffic stops until the 'check name' finally resolves the user name. Any idea what might be wrong? Thanks. Damian Scoles Senior Technical Analyst MCSE, CCNP, CNA, A+ -----Original Message----- From: David, Andy [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 1:07 PM To: Exchange Discussions Subject: RE: Check Names - VERY long time to complete My first thought with these is name resolution as well, but it may be nothing more than your connection sux eggs. Can you check the fw logs and see if anything is being dropped? -----Original Message----- From: Scoles, Damian [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 1:43 PM To: Exchange Discussions Subject: RE: Check Names - VERY long time to complete Yes. The DNS server it is getting from DHCP is correct and online. -----Original Message----- From: David, Andy [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 12:36 PM To: Exchange Discussions Subject: RE: Check Names - VERY long time to complete Is the Outlook client pointing to a valid DNS server? -----Original Message----- From: Scoles, Damian [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 11:11 AM To: Exchange Discussions Subject: Check Names - VERY long time to complete I have a user who is trying to add a new profile to a new laptop. He enters the user name and then hits the Check Name button. It can take as long as 45 minutes to complete this. Here is the current setup: Windows 2000 On NT 4.0 domain DHCP - Workstation gets IP, WINS, DNS, default gateway, DNS suffix Outlook 2000 User name is the same as the login name used for the network The user is behind a Nokia IP firewall with all ports open to the IPs for the domain controllers, mail servers, and DNS/WINS servers. The network connection is as follows - Linksys Fast Ethernet switch --> Nokia firewall --> Linksys DSL router --> WestTell Tech DSL modem --> Internet --> --> Firewall LAN where DC, Mail, DNS and WINS servers are. There is a --> VPN tunnel connecting the two networks. We are able to join the machine to the domain, but unable to get check names to resolve faster or Outlook to connect. I suspect name resolution or something configured incorrectly on the LAN firewall, but I am unsure where to look. I can ping all servers by name and IP. What am I missing? Thanks. Damian Scoles Senior Technical Analyst MCSE, CCNP, CNA, A+ _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang =english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&; lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/cgi-bin/lyris.pl?enter=exchange&text_mode=&lang=english To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
