Hi Guys, I'm seeing client connections to one of my MBX servers. I was expecting to see only Connections from the CAS servers. Using port 35437 not currently listed in the ports for exchange 2010... Odd... Current Solution Two Sites Two Cas Arrays - X3 HUB/HT Nodes per array One DAG - 8x Nodes MBX All nodes Exchange 2010 SP1 RU5 FYI - We are still part migration from exchange 2003 From a Netstat -a list goes on but you get the idea TCP 10.6.100.7:35437 wt61000086:1226 ESTABLISHED TCP 10.6.100.7:35437 we77670029:1419 ESTABLISHED TCP 10.6.100.7:35437 we61000000:1295 ESTABLISHED TCP 10.6.100.7:35437 wt61000092:1177 ESTABLISHED TCP 10.6.100.7:35437 we77670028:2523 ESTABLISHED TCP 10.6.100.7:35437 wt61000091:1397 ESTABLISHED TCP 10.6.100.7:35437 we77670035:1171 ESTABLISHED TCP 10.6.100.7:35437 wt61000090:1481 ESTABLISHED TCP 10.6.100.7:35437 we61199644:1748 ESTABLISHED TCP 10.6.100.7:35437 we61199644:1752 ESTABLISHED TCP 10.6.100.7:35437 we55550017:49309 ESTABLISHED TCP 10.6.100.7:35437 wt61180213:1380 ESTABLISHED TCP 10.6.100.7:35437 wt61180049:2685 ESTABLISHED TCP 10.6.100.7:35437 we61183045:50414 ESTABLISHED TCP 10.6.100.7:35437 we02000022:1771 ESTABLISHED TCP 10.6.100.7:35437 we02487010:50037 ESTABLISHED TCP 10.6.100.7:35437 we61184871:49306 ESTABLISHED TCP 10.6.100.7:35437 we55550630:1675 ESTABLISHED TCP 10.6.100.7:35437 we61184992:49311 ESTABLISHED TCP 10.6.100.7:35437 we53204870:49304 ESTABLISHED TCP 10.6.100.7:35437 we55550026:49298 ESTABLISHED TCP 10.6.100.7:35437 we53207405:51377 ESTABLISHED TCP 10.6.100.7:35437 we55550016:56014 ESTABLISHED

Matched port to PID 2650 Microsoft.Exchange.RPCClientAccess.service.exe Confirmed only MBX role on this server

Hmmm..... MBX server hosting a PF Database.... RPC connections direct... ok just being stupid!!!!