The connection was dropped by the remote host

From: Jesper Frier (jef_at_nowaco.com)
Date: 03/05/04


Date: Fri, 5 Mar 2004 12:35:15 +0100

We are using Exchange 2003 on Windows 2003 Server as backend mail server.
We have two SMTP Gateway Servers (Windows 2003) - both with reverse DNS
entries.

We have daily/periodic Event 4005 Warning ("The connection was dropped by
the remote host").
Sometimes we have this Warning to e.g. example.com, sometimes not ... ???

Is this normal SMTP behavior ?

Event Log entries from our primary SMTP Server:
---------------------cut------------------------
4006,WARNING,smtpsvc,Fri Mar 05 11:23:25 2004,No User, 213.180.200.1
yandex.ru The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Fri Mar 05 10:22:54 2004,No User, 61.156.10.196
nowaco.com.cn The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Thu Mar 04 12:58:20 2004,No User, 212.74.114.41
tinyworld.co.uk The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Thu Mar 04 12:52:09 2004,No User, 210.230.247.146
kanehide.co.jp The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Thu Mar 04 10:56:26 2004,No User, 61.156.10.196
nowaco.com.cn The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Thu Mar 04 08:42:28 2004,No User, 61.156.10.196
nowaco.com.cn The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 16:45:20 2004,No User, 61.156.10.196
nowaco.com.cn The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 16:20:21 2004,No User, 212.154.26.17
arihan.com.tr The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 16:08:51 2004,No User, 61.156.10.196
nowaco.com.cn The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 15:38:02 2004,No User, 212.154.26.17
arihan.com.tr The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 15:21:21 2004,No User, 61.156.10.196
nowaco.com.cn The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 07:54:17 2004,No User, 61.156.10.196
nowaco.com.cn The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 04:54:15 2004,No User, 203.150.2.244
poppymail.com The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 03:53:34 2004,No User, 203.150.2.244
poppymail.com The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 02:52:34 2004,No User, 203.150.2.244
poppymail.com The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 01:51:49 2004,No User, 203.150.2.244
poppymail.com The connection was dropped by the remote host.
4006,WARNING,smtpsvc,Wed Mar 03 00:51:31 2004,No User, 203.150.2.244
poppymail.com The connection was dropped by the remote host.
---------------------cut------------------------

Thanks
Jesper



Relevant Pages

  • Re: IIS not sending SMTP
    ... Please try to disable your software firewall (you will still be protected by ... "The connection was dropped by the remote host" ... and see what you have around the time you try to send to a remote host. ... >>> Is the remote server the ISP in this case? ...
    (microsoft.public.inetserver.iis)
  • Re: IIS 6 FTP Cannot logon externally
    ... That works through the VPN tunnel. ... unable to access the server directly from outside. ... IE 7 ftp connection is not working for isolation mode, ... Still getting connection closed by remote host when trying to connect ...
    (microsoft.public.inetserver.iis.ftp)
  • RE: SSH Attempts: Link to RedHat?
    ... I received a single connection attempt on three of my ... by remote host. ... I connected to the website connected to this server, ... and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: SSH Attempts: Link to RedHat?
    ... > by remote host. ... > runs the server. ... > any, caused this connection attempt. ... But if he's offering a complete stranger root access to ...
    (Incidents)
  • SSH Attempts: Link to RedHat?
    ... I received a single connection attempt on three of my ... address blocked to protect user) ... by remote host. ... I connected to the website connected to this server, ...
    (Incidents)