There is a problem with Receive Side Scaling and Windows 2003 SP2, when you are doing one of the following…
1) using NAT….nat is what? come on, say it….EVIL!
2) you are using ICS.
3) you are using the Microsoft Firewall service…like when you are an ISA Server.
This will first manifest as REALLY SLOW logins. Then you will see error 1053 in the event log…RPC service not available. Looking at a trace, you’ll see the affected system SYN to the RPC EPM on a DC, the DC will SYN ACK, then your box will RST. If you look at the ISA logs, you’ll see 0xc0040034 FWX_E_SEQ_ACK_MISMATCH.
You can reproduce this by doing a “gpresult /force” [enter].
Then do “net stop microsoft firewall” [enter].
This time, do a “gpresult /force” [enter] and all should work perfectly.
It seems that Receive Side Scaling on the NIC is to blame. If you go into the properties of the NIC, Advanced, and down to RSS, you can disable it. That will drop all connection momentarily, but you can reconnect almost immediately.
You can also disable this in the registry…see the following kb.
http://support.microsoft.com/default.aspx?scid=kb;EN-US;927695
keywords: ISA, RPC errors, RST
You might also enjoy:
