Re: XP SP2 event ID 4226 - TCP/IP has reached the security limit imposed on the number of concurrent TCP connect attempts

From: Eitan Caspi (eitanc_at_yahoo.com)
Date: 09/01/04


Date: Wed, 1 Sep 2004 20:48:11 +0200

Thank you Torgeir,

The text you referred to is similar to the one from the link in the link
followed from the event ID description.

I have also found this "patch", that hacks tcpip.sys, but I don't want to
use it until I read an official statement by MS regarding this issue, and of
course, it is not so safe to use such unknown solution. you can never know
when this "hacked" version will hit you.
This is why I didn't mention it here or provided a link.

I understand MS base reasoning for this issue, but it can't decide for me
what is "normal" in the way I activate my system.
Not all half-open TCP connections are driven from a malicious cause. Maybe I
am network admin scanning my network for threats?

I believe MS should provide a registry value to be added, that will omit
this limitation for users who know what they are doing, and know how to
protect themselves in the first place.
The current state is really not acceptable, and it is defecting XP.

-- 
Eitan Caspi
"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@hydro.com> wrote in message 
news:e$rMjOEkEHA.556@tk2msftngp13.phx.gbl...
> Eitan Caspi wrote:
>
>> Hello,
>>
>> After installing windows XP SP2, I was unable to browse web sites or send 
>> / receive emails.
>> I disabled the use of windows firewall (I am using another personal fw).
>>
>> My system is not infected by anything, checked.
>>
>> I have found in the "system" event log the event ID 4226 - "TCP/IP has 
>> reached the security limit imposed on the number of concurrent TCP 
>> connect attempts".
>>
>> I was able to find a text referring to this issue only by clicking the 
>> link within the event ID description. It didn't include a way to overcome 
>> this limitation.
>> I could not find any TechNet article by MS referring to this issue and 
>> thus not a workaround, either by a binary or by a registry key / value.
>>
>> I wish to know, preferably by someone from "Microsoft", how can I remove 
>> this limitation or set it to a higher limit?
> Hi
>
> http://www.microsoft.com/technet/prodtechnol/winxppro/maintain/sp2netwk.mspx
>
> Click TCP/IP in the link above and look for:
>
> "Limited number of simultaneous incomplete outbound TCP connection 
> attempts"
>
>
> You should not be able to reach this limit by only surfing some Web
> sites and send / receive emails manually. There must be something
> else in your computer that creates a lot of TCP connections.
>
> There is no supported way to change the limitation, but I have seen
> statements that it is possible to do a hex edit on the tcpip.sys file
> to increase the limit.
>
>
> -- 
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx 


Relevant Pages

  • Re: Script to get users office location
    ... You are probably referring to the attribute named "physicalDeliveryOfficeName": ... There's several scripting examples here: ... > Im looking for a script or LDAP query I can use to get a users office ...
    (microsoft.public.scripting.vbscript)
  • Re: The post you are referring to is one year old.
    ... It is found while implementing, Windows Update API, in VB scripting. ... The post you are referring to is one year old. ... EggHeadCafe - Software Developer Portal of Choice ...
    (microsoft.public.scripting.vbscript)
  • Re: check for presence of a registry key on remote computers
    ... > What if I simply want to verify if a key exists, without retrieving its ... > Which is, referring to your example. ... Microsoft MVP Scripting and WMI, ...
    (microsoft.public.scripting.vbscript)
  • Re: ITCHING for x64!!
    ... I was not referring to what you have. ... torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windowsxp.general)