WINS issues

A firewall change (site to site VPN) seems to have started up some WINS
replication issues. We have 5 sites all over USA with domain controllers
running WINS. Replication was working fine before last Thursday when VPN
was moved to new firewall. It seems that all communication except for WINS
replication is working with no issues. I can telnet in both directions on
port 42 to all WINS servers. I have verified the config of WINS and all
replication partners are setup identically.

Event log states:
Event Type: Error
Event Source: Wins
Event Category: None
Event ID: 4102
Date: 3/19/2008
Time: 12:59:35 PM
User: N/A
Computer: $$$$$$
Description:
The connection was aborted by the remote WINS. Remote WINS may not be
configured to replicate with the server.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 1c 03 00 00 08 00 00 e0 .......à

and
Event Type: Error
Event Source: Wins
Event Category: None
Event ID: 4243
Date: 3/19/2008
Time: 12:54:31 PM
User: N/A
Computer: $$$$$
Description:
WINS Pull thread encountered an error during the process of sending a push
notification to another WINS. The error code is given in the data section.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: fb 09 00 00 08 00 00 e0 û......à

I'm also seeing the following on remote WINS servers.
Event Type: Error
Event Source: Wins
Event Category: None
Event ID: 4283
Date: 3/19/2008
Time: 12:26:33 PM
User: N/A
Computer: $$$$$$
Description:
WINS encountered an error while processing a push trigger or update
notification. The error code is given in the data section. If it indicates a
communication failure, check to see if the remote WINS that sent the trigger
went down. If the remote WINS is on a different subnet, then maybe the
router is down.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: bf 0c 00 00 08 00 00 e0 ¿......à

and

Event Type: Error
Event Source: Wins
Event Category: None
Event ID: 4307
Date: 3/19/2008
Time: 12:06:11 PM
User: N/A
Computer: $$$$$$
Description:
The WINS replicator Pull thread encountered an error while processing a
request. Check other log entries to determine what went wrong.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Data:
0000: b8 02 00 00 08 00 00 e0 ¸......à

Any ideas?

Have you opened both TCP and UDP ports? quoted from MS: "TCP port 42 and UDP
port 42 are the default WINS replication ports".

Bob Lin, MS-MVP, MCSE & CNE
Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.HowToNetworking.com
"Randy Smith" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
>A firewall change (site to site VPN) seems to have started up some WINS
>replication issues. We have 5 sites all over USA with domain controllers
>running WINS. Replication was working fine before last Thursday when VPN
>was moved to new firewall. It seems that all communication except for WINS
>replication is working with no issues. I can telnet in both directions on
>port 42 to all WINS servers. I have verified the config of WINS and all
>replication partners are setup identically.
>
> Event log states:
> Event Type: Error
> Event Source: Wins
> Event Category: None
> Event ID: 4102
> Date: 3/19/2008
> Time: 12:59:35 PM
> User: N/A
> Computer: $$$$$$
> Description:
> The connection was aborted by the remote WINS. Remote WINS may not be
> configured to replicate with the server.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: 1c 03 00 00 08 00 00 e0 .......à
>
> and
> Event Type: Error
> Event Source: Wins
> Event Category: None
> Event ID: 4243
> Date: 3/19/2008
> Time: 12:54:31 PM
> User: N/A
> Computer: $$$$$
> Description:
> WINS Pull thread encountered an error during the process of sending a push
> notification to another WINS. The error code is given in the data section.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: fb 09 00 00 08 00 00 e0 û......à
>
> I'm also seeing the following on remote WINS servers.
> Event Type: Error
> Event Source: Wins
> Event Category: None
> Event ID: 4283
> Date: 3/19/2008
> Time: 12:26:33 PM
> User: N/A
> Computer: $$$$$$
> Description:
> WINS encountered an error while processing a push trigger or update
> notification. The error code is given in the data section. If it indicates
> a communication failure, check to see if the remote WINS that sent the
> trigger went down. If the remote WINS is on a different subnet, then maybe
> the router is down.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: bf 0c 00 00 08 00 00 e0 ¿......à
>
> and
>
> Event Type: Error
> Event Source: Wins
> Event Category: None
> Event ID: 4307
> Date: 3/19/2008
> Time: 12:06:11 PM
> User: N/A
> Computer: $$$$$$
> Description:
> The WINS replicator Pull thread encountered an error while processing a
> request. Check other log entries to determine what went wrong.
>
> For more information, see Help and Support Center at
> http://go.microsoft.com/fwlink/events.asp.
> Data:
> 0000: b8 02 00 00 08 00 00 e0 ¸......à
>
> Any ideas?
>

Hi Robert,

Yes, actually all ports are opened between our sites.


"Robert L. (MS-MVP)" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> Have you opened both TCP and UDP ports? quoted from MS: "TCP port 42 and
> UDP port 42 are the default WINS replication ports".
>
> Bob Lin, MS-MVP, MCSE & CNE
> Networking, Internet, Routing, VPN Troubleshooting on
> http://www.ChicagoTech.net
> How to Setup Windows, Network, VPN & Remote Access on
> http://www.HowToNetworking.com
> "Randy Smith" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>>A firewall change (site to site VPN) seems to have started up some WINS
>>replication issues. We have 5 sites all over USA with domain controllers
>>running WINS. Replication was working fine before last Thursday when VPN
>>was moved to new firewall. It seems that all communication except for
>>WINS replication is working with no issues. I can telnet in both
>>directions on port 42 to all WINS servers. I have verified the config of
>>WINS and all replication partners are setup identically.
>>
>> Event log states:
>> Event Type: Error
>> Event Source: Wins
>> Event Category: None
>> Event ID: 4102
>> Date: 3/19/2008
>> Time: 12:59:35 PM
>> User: N/A
>> Computer: $$$$$$
>> Description:
>> The connection was aborted by the remote WINS. Remote WINS may not be
>> configured to replicate with the server.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: 1c 03 00 00 08 00 00 e0 .......à
>>
>> and
>> Event Type: Error
>> Event Source: Wins
>> Event Category: None
>> Event ID: 4243
>> Date: 3/19/2008
>> Time: 12:54:31 PM
>> User: N/A
>> Computer: $$$$$
>> Description:
>> WINS Pull thread encountered an error during the process of sending a
>> push notification to another WINS. The error code is given in the data
>> section.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: fb 09 00 00 08 00 00 e0 û......à
>>
>> I'm also seeing the following on remote WINS servers.
>> Event Type: Error
>> Event Source: Wins
>> Event Category: None
>> Event ID: 4283
>> Date: 3/19/2008
>> Time: 12:26:33 PM
>> User: N/A
>> Computer: $$$$$$
>> Description:
>> WINS encountered an error while processing a push trigger or update
>> notification. The error code is given in the data section. If it
>> indicates a communication failure, check to see if the remote WINS that
>> sent the trigger went down. If the remote WINS is on a different subnet,
>> then maybe the router is down.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: bf 0c 00 00 08 00 00 e0 ¿......à
>>
>> and
>>
>> Event Type: Error
>> Event Source: Wins
>> Event Category: None
>> Event ID: 4307
>> Date: 3/19/2008
>> Time: 12:06:11 PM
>> User: N/A
>> Computer: $$$$$$
>> Description:
>> The WINS replicator Pull thread encountered an error while processing a
>> request. Check other log entries to determine what went wrong.
>>
>> For more information, see Help and Support Center at
>> http://go.microsoft.com/fwlink/events.asp.
>> Data:
>> 0000: b8 02 00 00 08 00 00 e0 ¸......à
>>
>> Any ideas?
>>
>

In news:(E-Mail Removed),
Randy Smith <(E-Mail Removed)> typed:
> Hi Robert,
>
> Yes, actually all ports are opened between our sites.

Including UDP >1023?

Also, take a look at this:

Troubleshooting WINS error event ID 4102, 4243, 4242, and 4286 messages
http://support.microsoft.com/kb/321208


--
Regards,
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT,
MVP Microsoft MVP - Directory Services
Microsoft Certified Trainer

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Infinite Diversities in Infinite Combinations