Monitor unlimited number of servers
Filter log events
Create email and web-based reports

Direct access to Microsoft articles
Customized keywords for major search engines
Access to premium content

Event ID: 12051 Source: POP3Connector

Level
Description
POP3: An error occurred. Cannot connect to the <host name> POP3 host for user <email address>. The error is <Winsock error number>
Comments
 

Error code 11001 ="Host not found". May indicate a connectivity problem, DNS problem or any other issue that may stop the SBS from obtaining the IP address of the remote POP3 host. Check that you have a name server(s) and/or host table configured. If you are using a name server(s), check whether the server host(s) are up (e.g. try to ping the server). You could also try to resolve another hostname you know should work, to check that the name resolution server application is running.

Error code 11002 ="Non-authoritative host found". This is usually a temporary error and means that the local server did not receive a response from an authoritative server. A retry at some time later may be successful.
From a newsgroup post: "You have a bad message in the ISPs queue. I have seen this a few times with the SBS pop3 connector. You will need to manually telnet to port 110 on the report server and delete the message that is killing the download. Start with ME165186 and learn how to pop3 from there. you can type help for a list of commands at any time. You will end up deleting message and all will run well."

Error code 11004 = "Valid name, no data of that type". See the comments for 11001.

Error code 10060 = "Connection timed out". A connect or send request failed because the connected party did not properly respond after a period of time. Check the obvious first: check that the destination address is a valid IP address. If you used a hostname, did it resolve to the correct address? If the hostname resolution uses a local host table, it's possible you resolved to an obsolete address. Can you ping that hostname? Do you have a router configured? Is the router up and running (check by pinging it, and then ping an address on the other side of it)? Try a traceroute to the destination address to check that all the routers are functioning. Check your subnet mask. If you don't have the proper subnet mask, your network system may treat a local address as a remote address (so it forwards addresses on the local subnet to the router, rather than broadcasting an ARP request locally), or visa versa.
From a newsgroup post: "This turned out to be a global problem at the ISP.".

Error code 10065 = "No route to host". Try to ping the destination host, to see if you get the same results (chances are, you will). Check the destination address itself; is it the one you wanted to go to? Check whether you have a router configured in your network system. Do a traceroute to try to determine where the failure occurs along the route between your host and the destination host.
From a newsgroup post: "Scenario: SBS2000, Dialup connection to Internet, POP3 connector. Email comes in successfully with Outlook Express on the server. POP3 connector returns 10065 error. ICW has been run. IE browses out to the Internet ok.
Resolution:
Open the ISA Manager.
Go to Servers & Arrays, Servername (whatever it is), Access Policy, IP
Packet Filters.
Create a new Custom Filter. Call it "POP3".
This custom filter has the following parameters:
IP Protocol: TCP
Protocol Number: 6
Direction: Outbound
Local Port: All Ports
Remote Port: Fixed Port
Remote Port Number: 110
Local Computer: This Filter Applies to: Default IP Addresses on the external IP Interfaces
Remote Computer: This Filter Applies to: All remote computers

SBS ICW is supposed to set all this up, but it apparently doesn't.

Windows Event Log Analysis Splunk App

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net.

Read more...

 

Cisco ASA Log Analyzer Splunk App

Obtain enhanced visibility into Cisco ASA firewall logs using the free Firegen for Cisco ASA Splunk App. Take advantage of dashboards built to optimize the threat analysis process.

Read more...