I received the above error on my SBS 2003 server which has Exchange 2003 on
it. When I looked into the sessions on the default Smtp Virtual Server, I
saw hundreds of sessions from my ISP server which is configured as a backup
for my server. If my server is down, the ISP spools the messages and then
sends them to my exchange server when it comes back up. I terminated all the
sessions and rebooted the system and my external email is now coming through
OK. But I see these same connections from the backup server showing up
again. They do not terminate. It looks like a new connection is created
every 20 minutes or so. I can manually terminate them so they don't clog up
the server.
Anyone know what's going on?

RE: Event ID 402 by SteveSchwab

SteveSchwab
Wed May 14 05:46:01 PDT 2008

I still haven't figured this out yet. Any help would be appreciated.

Why won't my connections time out? I have the Defualt Smtp Virtual Server
Properties set for a connection time-out of 10 min but many connections live
much longer. Is there another setting someplace that I'm missing?

"Steve Schwab" wrote:

> I received the above error on my SBS 2003 server which has Exchange 2003 on
> it. When I looked into the sessions on the default Smtp Virtual Server, I
> saw hundreds of sessions from my ISP server which is configured as a backup
> for my server. If my server is down, the ISP spools the messages and then
> sends them to my exchange server when it comes back up. I terminated all the
> sessions and rebooted the system and my external email is now coming through
> OK. But I see these same connections from the backup server showing up
> again. They do not terminate. It looks like a new connection is created
> every 20 minutes or so. I can manually terminate them so they don't clog up
> the server.
> Anyone know what's going on?

RE: Event ID 402 by v-terliu

v-terliu
Wed May 14 22:54:34 PDT 2008

Hello Steve,

Thank you for posting here.

According to your description, I understand that event error 402 on your
SBS. If I have misunderstood the problem, please don't hesitate to let me
know.

Based on my research, I suggest we try the following steps to see if we can
resolve this issue:

I. I suggest you perform the following steps to rerun the CEICW on SBS to
reconfigure the Exchange:

Go through the follow KB and Rerun CEICW again carefully.

How to configure Internet access in Windows Small Business Server 2003
http://support.microsoft.com/kb/825763/en-us

Detailed steps for your reference:

a. Open Server Management.
b. Click To Do List.
c. Click Connect to the Internet.
d. Proceed to the "Firewall" page and select "Enable Firewall".
e. On the "Services Configuration" page, make sure that "E-mail" service
has been checked.
f. On the "Web Services Configuration" page, check the web services that
you want to publish.
g. On the "Web Server Certificate" page, choose "Create a new Web server
certificate" and key in your public domain name in the box.
h. On the "Internet E-mail" page, choose "Enable Internet e-mail".
i. On the "E-mail Delivery Method" page, choose DNS (Use DNS to route
e-mail) or Smart Host (Forward all e-mail to e-mail server at your ISP) to
route your email, If you select smart host, you need to input the IP
address of your smart host.
j. If you're using POP3 connector, please enable POP3 Connector.
k. Key in your e-mail domain name in "Email Domain Name" page.
l. Finish the wizard.

II. Based on my knowledge, this event may be logged if the number of the
SMTP virtual server connection is reached the limit. It's not a critical
error. To avoid this, you can increase the connection limit on the SMTP
virtual server or disable the feature as below.

1. On the Exchange 2003 server, open Exchange System Manager.
2. Expand Servers -> <servername> -> Protocols -> SMTP.
3. Right click on the Default SMTP Virtual Server, and click properties.
4. On the General tab, uncheck "Limit number of connections to" option, or
increase the number.
5. On the Delivery tab, click Outbound connections button.
6. Uncheck "Limit number of connections to" and "Limit number of
connections per domain to" options, or increase the number.

NOTE: The outgoing connections limit should be greater than or equal to the
per domain connections limit.

7. On the Delivery tab, click Advanced button.
8. Uncheck "Perform reverse DNS lookup on incoming messages" option.
9. Stop and restart IIS Admin service for the changes to take effect.

III. In addition, I suggest you monitor the SMTP queue to find why the
connection limit is reached, and double check whether someone sends spam
mails via your Exchange server. You can refer to the following Knowledge
Base article to prevent the spam emails in Exchange 2003 Server.

821746 How to prevent unsolicited commercial e-mail in Exchange 2003
http://support.microsoft.com/default.aspx?scid=kb;EN-US;821746

How to block open SMTP relaying and clean up Exchange Server SMTP queues in
Windows Small Business Server
http://support.microsoft.com/default.aspx?scid=kb;EN-US;324958

IV. Some antivirus or anti-spam software may hang SMTP connections the
queue and cause this event. If you install any antivirus or anti-spam
software on SBS, please try to disable or uninstall it for test this issue.
Or you can do clean boot to isolate this issue:

To clean boot the problematic computer, please use the steps below:
a. Click Start, click Run, and then in the Open box, type "MSCONFIG"
(without the quotation marks). Click OK.

b. In the System Configuration Utility (MSConfig) window, click to select
the Selective Startup button.

c. Click to clear the check mark from the "Load startup items" below
Selective Startup.

d. Click the Services tab, click to check the "Hide All Microsoft Services"
box, and remove all the check marks from the remained Non-Microsoft
Services. Please note that the Exchange services could be marked as
non-Microsoft. Please do not disable those services.

e. Click OK to close the MSConfig window. Click Yes when you are asked to
restart your computer in order to enable the changes.

f. After restarting, please check whether this issue will reoccur.

g. If there are no more problems, please use the above steps to enable
services and startup items one by one in order to figure out the root cause
of this issue.

If we cannot resolve the issue after we perform the above steps, please
help me collect some information for further investigation:

Please collect the MPS Report for Exchange:

a) Download MPSRPT_Exchange.EXE from the following link:
http://www.microsoft.com/downloads/details.aspx?familyid=cebf3c7c-7ca5-408f-
88b7-f9c79b7306c0&displaylang=en

b) Double-click the executable file to start the report gathering tool, and
then accept the end-user licensing agreement (EULA). Note Please be patient
while MPS Reports collects data. The tool may appear to stop responding
(hang) because it may take from five to 15 minutes to collect the data.

c) The tool creates a CAB file named "%COMPUTERNAME%_MPSReports_.CAB" in
the %systemroot%\MPSReports\Setup\Reports\Cab folder. The CAB file contains
the reports that the MPS Reporting Tool generated. If the tool does not
create the CAB file, copy all the files in the
%systemroot%\MPSReport\Setup\Reports folder to a compressed (zipped) file.
Note The %systemroot% folder is the folder where you installed the
operating system. By default, this is the C:\WINDOWS folder.

d) Send me the CAB file or the compressed (zipped) file at:
v-terliu@microsoft.com.

For more information, please refer to the following article:
818742 Overview of the Microsoft Configuration Capture Utility (MPS_REPORTS)
http://support.microsoft.com/?id=8187423

I hope these steps will give you some help.

Thanks and have a nice day!

Best regards,

Terence Liu (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
| Thread-Topic: Event ID 402
| thread-index: Aci1wHcnK9gDCeAUSh+tiA7rZHAExQ==
| X-WBNR-Posting-Host: 207.46.193.207
| From: =?Utf-8?B?U3RldmUgU2Nod2Fi?= <SteveSchwab@discussions.microsoft.com>
| References: <67DFC28E-BC96-43FD-BF08-3F8FCFF35ECD@microsoft.com>
| Subject: RE: Event ID 402
| Date: Wed, 14 May 2008 05:46:01 -0700
| Lines: 19
| Message-ID: <733ABF11-1F9D-46C2-8E81-19EEC6981A7E@microsoft.com>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
| Newsgroups: microsoft.public.windows.server.sbs
| Path: TK2MSFTNGHUB02.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:107615
| NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
| X-Tomcat-NG: microsoft.public.windows.server.sbs
|
| I still haven't figured this out yet. Any help would be appreciated.
|
| Why won't my connections time out? I have the Defualt Smtp Virtual
Server
| Properties set for a connection time-out of 10 min but many connections
live
| much longer. Is there another setting someplace that I'm missing?
|
| "Steve Schwab" wrote:
|
| > I received the above error on my SBS 2003 server which has Exchange
2003 on
| > it. When I looked into the sessions on the default Smtp Virtual
Server, I
| > saw hundreds of sessions from my ISP server which is configured as a
backup
| > for my server. If my server is down, the ISP spools the messages and
then
| > sends them to my exchange server when it comes back up. I terminated
all the
| > sessions and rebooted the system and my external email is now coming
through
| > OK. But I see these same connections from the backup server showing up
| > again. They do not terminate. It looks like a new connection is
created
| > every 20 minutes or so. I can manually terminate them so they don't
clog up
| > the server.
| > Anyone know what's going on?
|