Please Read: Significant Update Planned, Migrating Forum Software This Month

See more
See less


  • Filter
  • Time
  • Show
Clear All
new posts

  • Rpc_out_data/rpc_in_data

    Good afternoon members.

    My Outlook (2003) Clients connect to their mailboxes using RPC over HTTPS. The server is Server 2003 Enterprise running with Exchange Server 2003 Enterprise. I am running a single server configuration. In addition to this, I host a website (Apache) which listens on port 80. Everything is running fine.

    Last week I applied the latest service packs (SP2) for both Server 2003 and Exchange 2003, along with the fun patches for DST.

    Everything still runs fine except now, in my Apache Web Logs I am getting logs with the following regarding MSRPC which were never there before. An excerpt is shown below. (I replaced my company's name as you can tell)

    [12/Mar/2007:16:24:26 -0400] "RPC_OUT_DATA /rpc/rpcproxy.dll?mycompanysFQDN:593 HTTP/1.1" 501 230
    [12/Mar/2007:16:24:26 -0400] "RPC_OUT_DATA /rpc/rpcproxy.dll?mycompanysFQDN:593 HTTP/1.1" 501 230 "-" "MSRPC"
    [12/Mar/2007:16:24:26 -0400] "RPC_IN_DATA /rpc/rpcproxy.dll?mycompanysFQDN:593 HTTP/1.1" 400 226
    [12/Mar/2007:16:24:26 -0400] "RPC_IN_DATA /rpc/rpcproxy.dll?mycompanysFQDN:593 HTTP/1.1" 400 226 "-" "MSRPC"

    I understand that the 501 means the service is not implemented and the 400 is a bad request. My question to you is why do these requests for port 593 keep getting referred to Apache? I speculate it has something to do with the service packs but I canít figure out what.

    I have checked IIS numerous times and it is still set to handle all https requests. I have also checked my SSL certificate as well as the registry entries for RPC and am still stumped.

    The weird part is that remote users are connecting without any issues, yet I am still getting these logs. Sorry about the length of this post.

    Thanks in advance for any help or insight.


  • #2
    Re: Rpc_out_data/rpc_in_data

    Less than 17 hours is too long of a response time?

    Sorry Jason but you violated the rules by double posting.

    Reported to admins.

    Network Consultant/Engineer
    Baltimore - Washington area and beyond