Welcome to TechNet Blogs Sign in | Join | Help

The Official SBS Blog

The official blog for Small Business Server (SBS) support and product group communications.

News

  • Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. This weblog does not represent the thoughts, intentions, plans or strategies of Microsoft. Use of included script samples are subject to the terms specified at http://www.microsoft.com/info/cpyright.htm
Loss of Internet Connectivity After Installing 951748 and 951746

We have received reports of customers loosing Internet connectivity after installing MS08-037 (951748 and 951746).  This issue can occur on both the server and the clients.  This issue may occur when customers are running ZoneAlarm or Check Point Endpoint Security (previously named Check Point Integrity).  Our investigation so far has shown that no other customers are affected by this issue.

If you are encountering this issue please review the following:

Watch the post for updates as we uncover more information.

Update: Please see the following post with newly discovered information that could affect your SBS servers

http://blogs.technet.com/sbs/archive/2008/07/17/some-services-may-fail-to-start-or-may-not-work-properly-after-installing-ms08-037-951746-and-951748.aspx

Posted: Friday, July 11, 2008 1:48 PM by SBS Bloggers

Comments

THE OFFICIAL BLOG OF THE SBS "DIVA" said:

The Official SBS Blog : Loss of Internet Connectivity After Installing 951748 and 951746: http://blogs

# July 11, 2008 8:38 PM

dd said:

I dont have ZA or Check Point Endpoint Security installed but still have to uninstall KB951748.

I suspect NOD32 2.7

# July 12, 2008 4:03 PM

joeaas said:

I don't have ZA or any other third party software firewall.  Upon installing the two updates I lost DNS.  I had to uninstall the two updates to get it working again.  I manage about 20 SBS 2003 servers.  I would like to know when I can install these updates.  Does anyone know?

# July 14, 2008 10:39 AM

HandyAndy said:

I also ran into this and had to remove the updates to get ipsec to run. The effected server had neither zone alarm or checkpoint installed. Any word on when the updates will be updated?

# July 14, 2008 3:48 PM

Margie said:

Brought down connectivity--couldn't even ping by IP after installing 951746 on the DNS server. Seemed ok after rolling it back. Does anyone know of any fix for this problem yet or whats causing these issues? No ZA or EndPoint Security. There is Symantec Antivirus 10.

# July 15, 2008 2:59 PM

rainmaker23 said:

We had this problem with someone running Symantec Endpoint Security.  We had to uninstall KNB951748, KB951746, and KB950159.  Does anyone know if there's an update to the update?

# July 15, 2008 5:13 PM

182 said:

Also internet connection problems after installing the update. No firewall on the DNS server but a ISA 2004 server and Zyxel router between internal DNS and DNS server ISP.

After installing the updates the DNS server generate a lot of UDP traffic to the ISP DNS server.

# July 16, 2008 5:58 AM

Team Blog for EMEA SBS Team. said:

If you have been seeing any of the two issues below with your SBS 2003, then please follow the link to

# July 16, 2008 8:59 AM

MacUser said:

After installing this update on domain controllers, Apple MAC 10.4 and 10.5 clients are having issues logging onto/binding to the domain.  ANy word on if this is affecting Apple clients talking to Active Directory or anything?

# July 16, 2008 9:57 AM

MacUser said:

After installing KB951748 on our domain controllers, Apple OS X 10.5 client machines are having difficulties logging in/binding to the domain.

# July 16, 2008 1:56 PM

D Steele said:

We are running Filezilla server on Win XP Pro, and have been getting continual '425 Cannot open data connection' messages when a 'List' command is sent from the client.  AllTel customer support says they have been 'inundated' with calls, and they pointed us to KB951746.  Uninstalling it seems to be working.

# July 16, 2008 4:59 PM

willisbrianl said:

Found a client's SBS2003 R2 environment was suffering with network traffic moving in 'bursts' after 951748 was installed via WSUS. Identified over 2700 UDP sessions active to localhost on 0.0.0.0 on Server running under DNS.EXE (compared to 6 or 7 UDP sessions on other non-patched servers I looked at). Reverted DNS back from 5.2.3790.4318 to 5.2.3790.4171 (uninstalled just 951748 from Server and left 951746 on all systems). Will have to wait for client's staff to show up for work tomorrow to know if the problem has gone away, and if not will also uninstall 951746. I will post a followup here when I know more.

System is fully patched other than this issue. Only other applications outside basic SBS2003 R2 standard on this system are:

Symantec Endpoint Protection Manager and Client (v11.0.2010.25)

Symantec Information Foundation for Exchange (v6.0.6.235)

3Ware 3DM 2 version 2.03.00.025

SuperMicro SuperoDoctor III client v1.25

# July 16, 2008 9:06 PM

The Official SBS Blog said:

[Today's post comes to us courtesy of John Bay, Damian Leibaschoff, Justin Crosby and Chris Puckett]

# July 17, 2008 1:41 PM

Nick Whittome - The Naked MVP said:

Direct copy from the SBS Blogpost here . One important comment to note is that the MaxUserPort registry

# July 18, 2008 8:27 AM

smokey mcpott said:

.. ok guys i have been having this prob as well .. i will follow the blogs and un-istall these updates.

we have a network using SBS 2003 sp1 .. with clients running vista and xp sp2.. both clients have been affected.

We also employ

Symantec Endpoint Protection Manager and Client (v11.0.2010.25)

A temp fix was done by assigning each of the affected users a static IP address.

I will uninstall the updates and post the results.

Thanks once again guys.

# July 23, 2008 10:53 AM

smokey mcpott said:

.. ok guys i have been having this prob as well .. i will follow the blogs and un-istall these updates.

we have a network using SBS 2003 sp1 .. with clients running vista and xp sp2.. both clients have been affected.

We also employ

Symantec Endpoint Protection Manager and Client (v11.0.2010.25)

A temp fix was done by assigning each of the affected users a static IP address.

I will uninstall the updates and post the results.

Thanks once again guys.

Nb: I will also uninstall KB950159 as i have read it can cause probs on the network aswell.

# July 23, 2008 10:55 AM

Gary Karasik said:

On one SBS 2003/Premium/SP2 server, clients are suffering extremely poor DNS performance while browsing the web: lots of Network Access errors, and very slow page downloads. Also Network Access error messages when users type YAHOO.COM instead of WWW.YAHOO.COM. Problems resolved by uninstallin 951748. The only 3rd-party app not on my other SBS servers (none of which is having a problem) is Blackberry Enterprise Server.

# August 6, 2008 11:34 PM
New Comments to this post are disabled
Page view tracker