No connection could be made because the target machine actively refused it 127.0.0.1:25, 127.0.0.1:587, 127.0.0.1:995


I changed the following settings:

Set-ImapSettings -Server CAS1 -UnencryptedOrTLSBindings 10.41.25.60:143 -SSLBindings 10.41.25.60:993 -X509CertificateName mail.contoso.com
Set-ImapSettings -Server CAS2 -UnencryptedOrTLSBindings 10.41.25.60:143 -SSLBindings 10.41.25.60:993 -X509CertificateName mail.contoso.com
Set-PopSettings -Server CAS1 -UnencryptedOrTLSBindings 10.41.25.61:110, 10.41.25.60:110 -SSLBindings 10.41.25.61:995, 10.41.25.60:995 -X509CertificateName mail.contoso.com -LoginType PlainTextLogin
Set-PopSettings -Server CAS2 -UnencryptedOrTLSBindings 10.41.25.62:110, 10.41.25.60:110 -SSLBindings 10.41.25.62:995, 10.41.25.60:995 -X509CertificateName mail.contoso.com -LoginType PlainTextLogin


Set-ReceiveConnector -Identity "CAS1\Client frontend CAS1" -Enabled $false
Set-ReceiveConnector -Identity "CAS2\Client frontend CAS2" -Enabled $false
Set-ReceiveConnector -Identity "CAS1\Default Frontend CAS1" -Enabled $false
Set-ReceiveConnector -Identity "CAS2\Default Frontend CAS2" -Enabled $false
Set-ReceiveConnector -Identity "CAS1\Outbound Proxy Frontend CAS1" -Enabled $false
Set-ReceiveConnector -Identity "CAS2\Outbound Proxy Frontend CAS2" -Enabled $false

Set-ReceiveConnector "MBX1\Default MBX1" -AuthMechanism Tls, ExchangeServer -Bindings 10.41.23.71:25 MaxLocalHopCount 8 -MaxMessageSize "15 MB" PermissionGroups ExchangeServers ProtocolLoggingLevel Verbose -RemoteIPRanges 10.41.23.72, 10.41.23.73, 10.41.249.65, 10.41.3.63, 10.41.3.62, 10.41.3.61, 10.41.25.61, 10.41.25.62
Set-ReceiveConnector "MBX2\Default MBX2" -AuthMechanism Tls, ExchangeServer -Bindings 10.41.23.72:25 MaxLocalHopCount 8 -MaxMessageSize "15 MB" PermissionGroups ExchangeServers ProtocolLoggingLevel Verbose -RemoteIPRanges 10.41.23.72, 10.41.23.73, 10.41.249.65, 10.41.3.63, 10.41.3.62, 10.41.3.61, 10.41.25.61, 10.41.25.62

Set-ReceiveConnector "CAS1\Client Frontend CAS1" -AuthMechanism Tls, BasicAuth, BasicAuthRequireTLS -Bindings 10.41.25.60:587 -Fqdn mail.contoso.com -MessageRateLimit unlimited -MaxMessageSize "30 MB" -PermissionGroups ExchangeUsers -ProtocolLoggingLevel Verbose -RemoteIPRanges 10.0.0.0-10.255.255.255 -MaxLocalHopCount 8
Set-ReceiveConnector "CAS1\Client Frontend CAS1" -PermissionGroups AnonymousUsers,ExchangeUsers
Set-ReceiveConnector "CAS2\Client Frontend CAS2" -AuthMechanism Tls, BasicAuth, BasicAuthRequireTLS -Bindings 10.41.25.60:587  -Fqdn mail.contoso.com -MessageRateLimit unlimited -MaxMessageSize "30 MB" -PermissionGroups ExchangeUsers -ProtocolLoggingLevel Verbose -RemoteIPRanges 10.0.0.0-10.255.255.255 -MaxLocalHopCount 8
Set-ReceiveConnector "CAS2\Client Frontend CAS2" -PermissionGroups AnonymousUsers,ExchangeUsers

Set-ReceiveConnector -Identity "CAS1\Client Frontend CAS1" -MaxHeaderSize "64 KB (65,536 bytes)"
Set-ReceiveConnector -Identity "CAS2\Client Frontend CAS2" -MaxHeaderSize "64 KB (65,536 bytes)"

Set-ReceiveConnector "MBX1\Client Proxy MBX1" -Bindings  10.41.23.71:465 -MessageRateLimit unlimited -MaxLocalHopCount 8   -MaxMessageSize "15 MB"
Set-ReceiveConnector "MBX2\Client Proxy MBX2" -Bindings  10.41.23.72:465 -MessageRateLimit unlimited -MaxLocalHopCount 8   -MaxMessageSize "15 MB

Set-ReceiveConnector -Identity "MBX1\Client Proxy MBX1" -MaxHeaderSize "64 KB (65,536 bytes)"
Set-ReceiveConnector -Identity "MBX2\Client Proxy MBX2" -MaxHeaderSize "64 KB (65,536 bytes)"

New-ReceiveConnector -Name "Printer CAS1" -Server "CAS1" -Bindings 10.41.25.60:25 -Fqdn mail.contoso.com -RemoteIPRanges 10.41.3.39 -PermissionGroups AnonymousUsers -Usage Custom -MaxLocalHopCount 8 -MaxMessageSize 30Mb
Set-ReceiveConnector -Identity "CAS1\Printer CAS1" -RemoteIPRanges "IP Address printer"
Set-ReceiveConnector -Identity "CAS1\Printer CAS1" -MaxHeaderSize "64 KB (65,536 bytes)"

where:
- 10.41.25.60 - VIP NLB IP Address
- 10.41.249.65 - EDGE Server
- 10.41.23.72, 10.41.23.73 - MBX Exchange 2013
-  10.41.25.61, 10.41.25.62 - CAS Exchange 2013
- 10.41.3.63, 10.41.3.62, 10.41.3.61 - Old CAS+HUB Exchange 2010

After applying the settings and restarting the server, the following error
- CAS:
ManagedAvailability ID 4
1. Exception: System.InvalidOperationException: Unable to initialise TCP Network connection ---> System.Net.Sockets.SocketException: No connection could be made because the target machine actively refused it 127.0.0.1:995
2. The client submission probe failed 3 times over 15 minutes.No connection could be made because the target machine actively refused it 127.0.0.1:587
3. The inbound proxy probe failed 3 times over 15 minutes.No connection could be made because the target machine actively refused it 127.0.0.1:25

-MBX:
ManagedAvailability ID 4
1. The HubAvailabilityProbe has failed 5 or more times in 15 minutes. Last failing server: ''.
2. Mailbox Transport Submission - the verification that the probe messages were successfully submitted within 5 minutes to HUB has failed.
      This could indicate that the mailbox submissions are taking too long or not progressing at all.
      SequenceNumber: 635703947136680580
       
      Error: MapiSubmitLAMProbe finished with CheckPreviousMail failure.
      FailureContext: MapiSubmitLAMProbe finished with CheckPreviousMail failure.
      ExecutionContext: MapiSubmitLAMProbe started. This performs - 1. Submits a new message to Store 2. Checks results from previous Send Mail operation. Sequence # = 635703947136680580. First Run? = False. Previous mail submission to store was successful. Results -  # of previous results: 0.  Could Not Find stages that ran.  Previous SendMail failure -  Mail submitted to Store during the previous run never reached SendAsCheck.
                        This may indicate a latency from Store to Submission Service. Investigating.  Found lower SA latency. Indicates an issue in Submission service

June 26th, 2015 7:13am

Hi,

This error generally means that the SMTP server is not configured to accept connections, either because it is blocking the IP or because the SMTP server is not enabled on this port.
995 port is used for POP3 client, 587 is used for SMTP client authenticated. The default Received connector named "Client Frontend <Server name>" listens for authenticated SMTP client submissions on port 587 on the Client Access server.
More details about Network ports for clients and mail flow in Exchange 2013, please refer to: https://technet.microsoft.com/en-us/library/bb331973(v=exchg.150).aspx

For your question, please run Get-SenderConnector | FL check the setting for send connector to ensure outbound mail flow firstly.

Thanks

Free Windows Admin Tool Kit Click here and download it now
June 29th, 2015 4:30am

Hi,

This error generally means that the SMTP server is not configured to accept connections, either because it is blocking the IP or because the SMTP server is not enabled on this port.
995 port is used for POP3 client, 587 is used for SMTP client authenticated. The default Received connector named "Client Frontend <Server name>" listens for authenticated SMTP client submissions on port 587 on the Client Access server.
More details about Network ports for clients and mail flow in Exchange 2013, please refer to: https://technet.microsoft.com/en-us/library/bb331973(v=exchg.150).aspx

For your question, please run Get-SenderConnector | FL check the setting for send connector to ensure outbound mail flow firstly.

June 30th, 2015 3:15am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics