Event ID: 2012 / 2013 SMTPSVC [ANNOYING ANNOYING ANNOYING]

[RandyH]

I get these errors every hour on the hour for the past week.

My logs look nasty with all these reds and yellows...me no likey, MS plz
fix. thank you.

Ode to Event ID: 2012 and 2013
Stop errors are Red
Warning are yellow
If I get more of these errors
my server will not say HELO

Event Type: Warning
Event Source: smtpsvc
Event Category: None
Event ID: 2012
Date: 4/27/2004
Time: 6:57:22 AM
User: N/A
Computer: CASEYEXCH
Description:
SMTP could not connect to the DNS server '10.0.0.25'. The protocol used was
'UDP'. It may be down or inaccessible.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d5 04 00 00 Õ...

Event Type: Warning
Event Source: smtpsvc
Event Category: None
Event ID: 2012
Date: 4/27/2004
Time: 6:58:52 AM
User: N/A
Computer: CASEYEXCH
Description:
SMTP could not connect to the DNS server '10.0.0.15'. The protocol used was
'UDP'. It may be down or inaccessible.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: d5 04 00 00 Õ...

Event Type: Error
Event Source: smtpsvc
Event Category: None
Event ID: 2013
Date: 4/27/2004
Time: 6:58:52 AM
User: N/A
Computer: CASEYEXCH
Description:
SMTP could not connect to any DNS server. Either none are configured, or all
are down.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7c 26 00 00 |&..

[Kirill S. Palagin]

So, does that machine have an access to operational DNS server? Confirm that
with
nslookup -type=mx microsoft.com
at server's keyboard.

[RandyH]

absolutely.

C:\>nslookup -type=mx microsoft.com
Server: servername.company.com
Address: 10.0.0.25

microsoft.com MX preference = 10, mail exchanger = maila.microsoft.com
microsoft.com MX preference = 10, mail exchanger = mailb.microsoft.com
microsoft.com MX preference = 10, mail exchanger = mailc.microsoft.com
maila.microsoft.com internet address = 131.107.3.124
maila.microsoft.com internet address = 131.107.3.125
mailb.microsoft.com internet address = 131.107.3.123
mailb.microsoft.com internet address = 131.107.3.122
mailc.microsoft.com internet address = 131.107.3.121
mailc.microsoft.com internet address = 131.107.3.126

C:\>

"Kirill S. Palagin" <kpal...@nomail.phxint.please.ru> wrote in message
news:408E7636...@nomail.phxint.please.ru...

[Kirill S. Palagin]

See if this webcast helps
http://support.microsoft.com/default.aspx?scid=kb;en-us;324759

RandyH wrote:

> absolutely.
>
> <snip>

[RandyH]

Thanks, I've watched that before. Nothing I've come across actually
addressess this error. I know from the emails I get from other ppl, that I
am not the only one getting this error.

"Kirill S. Palagin" <kpal...@nomail.phxint.please.ru> wrote in message

news:408F721F...@nomail.phxint.please.ru...

[Richard Roddy [MSFT]]

I found the following in a prior support case. See if any of this helps at
all in figuring out what might be going on:

*** Problem Description ***
1. We are receiving Events 2013 and 2012 for the SMTPSVC in the System Log
of an
Exchange 2003 server

Event Type: Error
Event Source: smtpsvc
Event Category: None
Event ID: 2013

Date: 11/3/2003
Time: 8:17:09 AM
User: N/A
Computer: SERVERNAME

Description:
SMTP could not connect to any DNS server. Either none are configured, or
all are
down.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 7c 26 00 00 |&..

Event Type: Warning

Event Source: smtpsvc
Event Category: None
Event ID: 2012

Date: 11/3/2003
Time: 8:17:09 AM
User: N/A
Computer: SERVERNAME
Description:
SMTP could not connect to the DNS server '10.250.1.55'. The protocol used

was
'UDP'. It may be down or inaccessible.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:

0000: d5 04 00 00 Õ... .

2. We are also getting these events on the Exchange 2003 server and on the
DNS
server for the domain:
Event Type: Information
Event Source: DnsApi
Event Category: None
Event ID: 11160
Date: 11/3/2003
Time: 10:42:19 AM
User: N/A
Computer: SERVERNAME
Description:
The system failed to register pointer (PTR) resource records (RRs) for
network
adapter
with settings:

Adapter Name : {AA5ABF3D-3F13-4BE7-BA1E-5C40F618DAE5}
Host Name : SERVERNAME
Adapter-specific Domain Suffix : office.compunet1.com
DNS server list :
10.250.1.55
Sent update to server : 192.175.48.1
IP Address : 10.250.1.56

The reason that the system could not register these RRs was because of a
security
related problem. The cause of this could be (a) your computer does not have
permissions to register and update the specific DNS domain name set for
this
adapter, or (b) there might have been a problem negotiating valid
credentials with
the DNS server during the processing of the update request.

You can manually retry DNS registration of the network adapter and its
settings by
typing "ipconfig /registerdns" at the command prompt. If problems still
persist,
contact your DNS server or network systems administrator.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:

0000: 39 23 00 00 9#..

<><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><><>
<>
*** Resolution ***

1. We analyzed MPS reports taken from both domain controllers in the domain
and the
Exchange 2003 server.
2. All looked clean except for a couple obsolete domain A records for a
domain
controller that was no longer in the domain.
3. We deleted the obsolete domain A records for the domain controller that
no
longer existed.
4. We also removed DNS from a secondary DC (which the customer did not want
it to
be a DNS server any longer).
5. After the above actions, the missing PTR records populated.
6. The Event IDs 2012 and 2013 are no longer occurring in the System Log of
the
Exchange 2003 server.

Thanks,
Richard Roddy
Microsoft Exchange Support

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Reply-To: "RandyH" <RHo...@HotMail.com>
>From: "RandyH" <RHo...@HotMail.com>
>References: <ubNDkCFL...@TK2MSFTNGP12.phx.gbl>
<408E7636...@nomail.phxint.please.ru>
<#IA$YmGLEH...@tk2msftngp13.phx.gbl>
<408F721F...@nomail.phxint.please.ru>
>Subject: Re: Event ID: 2012 / 2013 SMTPSVC [ANNOYING ANNOYING ANNOYING]
>Date: Wed, 28 Apr 2004 08:06:54 -0400
>Lines: 18
>Organization: http://www.Randy.Hollaway.com
>X-Priority: 3
>X-MSMail-Priority: Normal
>X-Newsreader: Microsoft Outlook Express 6.00.2800.1409
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409
>Message-ID: <##oXLlRLE...@TK2MSFTNGP12.phx.gbl>
>Newsgroups: microsoft.public.exchange.admin
>NNTP-Posting-Host: 15.002-ridc-1.fwb.nauticom.net 66.212.158.16
>Path:
cpmsftngxa10.phx.gbl!TK2MSFTFEED01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFTNGP12
.phx.gbl
>Xref: cpmsftngxa10.phx.gbl microsoft.public.exchange.admin:424682
>X-Tomcat-NG: microsoft.public.exchange.admin

[RandyH]

Thanks, I ran ipconfig/registerdns although I had A records for the machine,
what I did just notice that there wasn't a PTR record for that machine, I've
added the PTR record to DNS, we shall see.

Thanks Richard for your post!!!

fyi, i rebooted the exch srvr yesterday morning, i was getting sick of all
the red and yellow events filling up my logs, since rebooting, the error
hasn't been recorded, but i've noticed that before on previous reboots. I
will see if the error returns....................

"Richard Roddy [MSFT]" <rro...@online.microsoft.com> wrote in message
news:Dz5$XKeLEH...@cpmsftngxa10.phx.gbl...

[RandyH]

Adding the PTR record did not help. Event ID's 2012 and 2013 are filling up
the logs every hour on the hour....

HOTFIX HOTFIX HOTFIX........

"RandyH" <RHo...@HotMail.com> wrote in message
news:%23YOJmEf...@tk2msftngp13.phx.gbl...