Microsoft KB Archive/293161

= &quot;STOP 0x000000D1&quot; When Passing Fragmented Packets Without NAT =

Article ID: 293161

Article Last Modified on 10/26/2007

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2000 Standard Edition

-



This article was previously published under Q293161



SYMPTOMS
If the Network Address Translation (NAT) driver on an Internet Security and Acceleration (ISA) Server-based server is stopped and the data that is being sent outbound is larger than the Maximum Transmission Unit (MTU) setting, fragmented packets pass through ISA Server, which may cause the following error message on a blue screen:

STOP 0x000000D1 (0x0000010e, 0x00000002, 0x00000000, 0xbfee8c70) DRIVER_IRQL_NOT_LESS_OR_EQUAL error code.

When this occurs, the following Event log entry is generated:

Event Type: Information

Event Source: Save Dump

Event Category: None

Event ID: 1001

Date:

Time:

User: N/A

Computer:

Description:

The computer has rebooted from a bugcheck. The bugcheck was: 0x000000d1 (0x0000010e, 0x00000002, 0x00000000, 0xbfee8c70). Microsoft Windows 2000 [v15.2195]. A dump was saved in: %SystemRoot%\MEMORY.DMP.



CAUSE
The Mspfltex.sys module stops working correctly in such a scenario. The problem can occur when you are using the Firewall client or in the S-NAT configuration.



RESOLUTION
A supported hotfix is now available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains this hotfix.

To resolve this problem, submit a request to Microsoft Online Customer Services to obtain the hotfix. To submit an online request to obtain the hotfix, visit the following Microsoft Web site:

http://go.microsoft.com/?linkid=6294451

Note If additional issues occur or any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. To create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support

The English version of this fix should have the following file attributes or later:   Date       Time      Version      Size    File name --  7/01/2001  11:06:42  3.0.1200.61  41,904  Mspfltex.sys



STATUS
Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.



MORE INFORMATION
It is unusual for the NAT driver to stop without manual intervention. Some other service or problem may have caused the NAT driver to stop. For testing purposes, you can stop the NAT driver by using the following command:

net stop ipnat

The error message might also occur if IP routing (ICMP pass-through) is enabled and a ping (ICMP) packet that is larger than the MTU setting is sent to a remote host.

Additional query words: HF HF61 isahf61.exe

Keywords: kbproductlink kbqfe kbhotfixserver kbenv kbfix kbprb KB293161

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.