durge
asked on
SBS 2003 Smtp port
Hi,
i have an issue with an SBS server. The SMTP service is running in services. yet when i try to run default smtp virtual server in exchange system manager i get the following error
Event Type: Error
Event Source: SMTPSVC
Event Category: None
Event ID: 115
Date: 16/03/2009
Time: 13:35:04
User: N/A
Computer: APSERVER01
Description:
The service could not bind instance 1. The data is the error code.
For more information, see Help and Support Centre at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 40 27 00 00 @'..
I have changed the port for the default SMTP and it starts fine. Yet when you change it back to 25 it no longer works.
If I telnet to it I get the following error
Invalid user.
Connection to host lost.
C:\Documents and Settings\rich>
It looks like something else has taken control of port 25, but i cant find what it is.
Thanks in advance.
i have an issue with an SBS server. The SMTP service is running in services. yet when i try to run default smtp virtual server in exchange system manager i get the following error
Event Type: Error
Event Source: SMTPSVC
Event Category: None
Event ID: 115
Date: 16/03/2009
Time: 13:35:04
User: N/A
Computer: APSERVER01
Description:
The service could not bind instance 1. The data is the error code.
For more information, see Help and Support Centre at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 40 27 00 00 @'..
I have changed the port for the default SMTP and it starts fine. Yet when you change it back to 25 it no longer works.
If I telnet to it I get the following error
Invalid user.
Connection to host lost.
C:\Documents and Settings\rich>
It looks like something else has taken control of port 25, but i cant find what it is.
Thanks in advance.
ASKER
the only thing that has changed was wamp was installed on thursday by there web developer. however this is not running and both the wamp services are stopped.
They use cloudmark for webfiltering however this has been this way for months and worked withotu any issues.
They use cloudmark for webfiltering however this has been this way for months and worked withotu any issues.
Hello durge,
since you have an SBS server, you should use the WIZARDS.
rerun the CEICW and check for any errors.
http://www.sbs-rocks.com/sbs2k3/sbs2k3-n2.htm
and for the logs (in case of errors): http://sbs.editme.com/logs
Regards,
suppsaws
since you have an SBS server, you should use the WIZARDS.
rerun the CEICW and check for any errors.
http://www.sbs-rocks.com/sbs2k3/sbs2k3-n2.htm
and for the logs (in case of errors): http://sbs.editme.com/logs
Regards,
suppsaws
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I get a load messages like
TCP 192.168.18.2:25 123.123.123.123.:49345 TIME_WAIT
the 123.123.123.123 addrersses are public IP addresses I do not recocnise (mai being delivered?)
The ports are all different and VERY high mostly in the 50000 + range
No PID...
TCP 192.168.18.2:25 123.123.123.123.:49345 TIME_WAIT
the 123.123.123.123 addrersses are public IP addresses I do not recocnise (mai being delivered?)
The ports are all different and VERY high mostly in the 50000 + range
No PID...
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I;ve ran malwarebytes an it hasnt picked anything up. will run spybots and adawre now. but i havent seen any of the normal signs of spyware whilst trouble shooting this.
and also check for open relay:
http://www.amset.info/exchange/smtp-openrelay.asp
http://www.amset.info/exchange/smtp-openrelay.asp
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Tested open relay and it is not, have up to date AV, running spybot now but clean so far...
ASKER
I ran portqry.exe -n 192.168.18.2 -e 25 -p TCP
And got the bellow basically saying invalid user, this was done logged in as administrator
Querying target system called:
192.168.18.2
Attempting to resolve IP address to a name...
IP address resolved to myserver.mydomain.local
querying...
TCP port 25 (smtp service): LISTENING
Data returned from port:
Invalid user.
portqry.exe -n 192.168.18.2 -e 25 -p TCP exits with return code 0x00000000.
And got the bellow basically saying invalid user, this was done logged in as administrator
Querying target system called:
192.168.18.2
Attempting to resolve IP address to a name...
IP address resolved to myserver.mydomain.local
querying...
TCP port 25 (smtp service): LISTENING
Data returned from port:
Invalid user.
portqry.exe -n 192.168.18.2 -e 25 -p TCP exits with return code 0x00000000.
about that 'wamp', are you sure that isn't taking over port 25?
btw, the "X" is a number that corresponds to one or more of your defined Web sites that are using Host Headers.
btw, have you read this?
http://support.microsoft.com/kb/190008
http://support.microsoft.com/kb/284984
could be alot, one more thing I think about, is skype installed on this server?
btw, the "X" is a number that corresponds to one or more of your defined Web sites that are using Host Headers.
btw, have you read this?
http://support.microsoft.com/kb/190008
http://support.microsoft.com/kb/284984
could be alot, one more thing I think about, is skype installed on this server?
forgot one
http://support.microsoft.com/kb/281760
http://support.microsoft.com/kb/281760
Are you using any programs to filter email for viruses or Spam which is installed on your server? What products?
Thanks,
eric