IOT HUB Ip has been prevented to connect to the endpoint

59453771 0

Hello,

All of a sudden IOT HUB service endpoint stopped working.

I am getting following error

<Error>

<Detail>Ip has been prevented to connect to the endpoint. For more information see: Virtual Network service endpoints: Event Hubs: https://go.microsoft.com/fwlink/?linkid=2044192 Service Bus: https://go.microsoft.com/fwlink/?linkid=2044235 IP Filters: Event Hubs: https://go.microsoft.com/fwlink/?linkid=2044428 Service Bus: https://go.microsoft.com/fwlink/?linkid=2044183 TrackingId:5c238b25-a0c2-46b5-a6f0-ec17a3f2e39e_G2S2, SystemTracker:iothub-ns-flowbird-t-17196010-26c0b098ac.servicebus.windows.net:, Timestamp:2023-02-02T15:15:50</Detail>

</Error>

When trying to connect the EventHubClient.CreateFromConnectionString

All was fine yesterday and now it just stopped

Any ideas?

Best regards:
Stoyan

1 answer

Sander van de Velde | MVP 31,211 Reputation points MVP

2023-02-02T16:27:10.3833333+00:00
Hello @Stoyan Jordanov,

Are you sure you use the right Azure IoT Device Client SDK?

The latest stable version is:

Microsoft.Azure.Devices.Client -Version 1.41.3

Note: the 2.0 version is in preview.

I see an EventHubClient mentioned.

You should use the device client:

var client = DeviceClient.CreateFromConnectionString("");

Else, it could be the network.

can you check if the IoT Hub still allows public access from any location?

If this is a non-production site, you could try switching a few times between these settings, just to be sure the underlying logic is running as expected.

Next to that, the network your device is on, does it support access to the internet (check for outbound firewall rules, proxy settings, etc.)?

Finally, you can also try to see if you can reach the IoT Hub using a telnet session:

Here, I can telnet to the iot hub over the MQTT and AMQP ports (connected). The 5672 is not working (for comparison).

Note: I'm only interested in Connected or Trying. The telnet itself does nothing.

-

If the response helped, do "Accept Answer". If it doesn't work, please let us know the progress. All community members with similar issues will benefit by doing so. Your contribution is highly appreciated.
Please sign in to rate this answer.
59453771 0 Reputation points

2023-02-02T20:30:13.2866667+00:00

Hello,

Thank you very much for your answer.

This is not device connection this is the service connection (built in end point).

I have app running on my server that is getting the hub messages and process them. All was just fine since yesterday.

That's why I am using EventHubClient.

connection string like this:

Endpoint=sb://xxx.windows.net/;SharedAccessKeyName=service;SharedAccessKey=xxx=;EntityPath=xxx

What I know so far:

yesterday I stopped public access (from you screenshot) to disabled. I needed to cut devices access for about 5 hours.

Then I enabled it back and devices resumed pushing messages, but the service end point stopped with error "Ip has been prevented to connect to the endpoint", of course I tried 3 different networks (one is vpn from another country) but still same error

Telnet is not working ( I would not expect it to for the service endpoint)

I have another iot hub and it is still ok

using browser:

https://bad hub.servicebus.windows.net/

<Error>

<Code>401</Code>

<Detail>Ip has been prevented to connect to the endpoint. For more information see: Virtual Network service endpoints: Event Hubs: https://go.microsoft.com/fwlink/?linkid=2044192 Service Bus: https://go.microsoft.com/fwlink/?linkid=2044235 IP Filters: Event Hubs: https://go.microsoft.com/fwlink/?linkid=2044428 Service Bus: https://go.microsoft.com/fwlink/?linkid=2044183 TrackingId:14a714ed-fd86-4065-85cd-eeea6eac7ea5_G3S3, SystemTracker:iothub-ns-flowbird-t-17196010-26c0b098ac.servicebus.windows.net:, Timestamp:2023-02-02T19:52:05</Detail>

</Error>

https://good hub.servicebus.windows.net/

<feed xmlns="http://www.w3.org/2005/Atom"><title type="text">Publicly Listed Services</title><subtitle type="text">This is the list of publicly-listed services currently available.</subtitle><id>uuid:e11d324f-435c-4d9d-afd9-437ec551b250;id=790</id><updated>2023-02-02T20:26:00Z</updated><generator>Service Bus 1.1</generator></feed>

I am not sure if this is relevant

For some reason Event Hub compatible endpoint just stopped working with the error above!

Thanks again!

Stoyan

59453771 0 Reputation points

2023-02-02T20:45:29.72+00:00

Hello,

Thank you for your answer but this is not the problem.

The problem is with the built-in end points, both.

I have a server side app that is getting messages from the devices.

So I am using EventHubClient to receive the messages form the devices.

Connection string is as follow:

Endpoint=sb://xxx.servicebus.windows.net/;SharedAccessKeyName=service;SharedAccessKey=xxx;EntityPath=xxx

all was good since yesterday, when I had to disable devices access for few hours. I disabled public access for few hours so devices cannot push messages.

Then I reenabled public access and devices started pushing messages again. So far so good, but the built-in endpoints stopped working.

I have another Iot Hub instance that is OK. So what I noticed is that using a browser:

https://good.servicebus.windows.net/

<feed xmlns="http://www.w3.org/2005/Atom"><title type="text">Publicly Listed Services</title><subtitle type="text">This is the list of publicly-listed services currently available.</subtitle><id>uuid:4e293172-ad92-4589-9ae2-b74a35093e15;id=865</id><updated>2023-02-02T20:43:22Z</updated><generator>Service Bus 1.1</generator></feed>

https://bad.servicebus.windows.net/

This XML file does not appear to have any style information associated with it. The document tree is shown below.

<Error>

<Code>401</Code>

<Detail>Ip has been prevented to connect to the endpoint. For more information see: Virtual Network service endpoints: Event Hubs: https://go.microsoft.com/fwlink/?linkid=2044192 Service Bus: https://go.microsoft.com/fwlink/?linkid=2044235 IP Filters: Event Hubs: https://go.microsoft.com/fwlink/?linkid=2044428 Service Bus: https://go.microsoft.com/fwlink/?linkid=2044183 TrackingId:77c0a8e7-672e-4b01-8c62-c35b009e4a79_G2S3, SystemTracker:iothub-ns-flowbird-t-17196010-26c0b098ac.servicebus.windows.net:, Timestamp:2023-02-02T20:43:38</Detail>

</Error>

No other changes, nor anything. If I put wrong key in the connection string I got bad signature error.

Best regards:
Stoyan

LeelaRajeshSayana-MSFT 13,966 Reputation points

2023-02-03T01:12:49.27+00:00

Hello Stoyan, thank you for your feedback and sharing additional information. Looking at the details shared, I understand that you only switched the network option of the IoT Hub to Disabled for 5 hours to disconnect the IoT Hub and allowed network traffic later.

Can you provide more details on your app implementation that is responsible for pushing data to build in event hub end point and how your app receives data from IoT Hub? The documentation available on Send Events to Event Hub mentions usage of EventHubProducerClient to send data. Can you provide any resources you might have used in building your application that uses EventHubClient.

I have another Iot Hub instance that is OK

When you say the above statement, do you mean that the application writes data to the built in end point of the second IoT Hub without any issues?

May I also know if the server app was stopped when you toggled the Network to the IoT Hub? If not, can you try to restart the server app, if possible, and see if it detects the correct network configuration.

I appreciate it if you can share the above requested information to help us better assist you with the issue.

59453771 0 Reputation points

2023-02-03T05:44:05+00:00

Hello, Yes server app is used to receive messages from the IoT Hub (and push messages to the devices). Code looks like: EventHubClient eventHubClient = EventHubClient.CreateFromConnectionString(connectionString); EventHubRuntimeInformation res = await eventHubClient.GetRuntimeInformationAsync(); <-- EXCEPTION HERE String[] partitions = res.PartitionIds; List<DispThread> threads = new List<DispThread>(); foreach (string partition in partitions) { //start event polling thread } Yes server app was also stopped while I have disabled the public network access. Yes - After the problem ocurred I create brand new IoT Hub instance and using the new connection string it works. So as I am trying to explain for some reason IoT Hub built end point just stopped working. I can reconfigure the devices to use the new IoT Hub but I need to send technician to update all 163 device manually and as this cannot be done in one go I will be in big trouble! So the problem is serious for me. Thank you very much! Best regards:

LeelaRajeshSayana-MSFT 13,966 Reputation points

2023-02-03T13:13:34.1966667+00:00

Hello Stoyan, thank you for providing the additional information. For a deeper investigation and immediate assistance on this issue, please file a support request @ https://aka.ms/azsupt? If you do not have access to a support plan, could you please send an email with the below details, so that we can work closely on this matter.

Thread URL: Link to this thread.
Azure Subscription ID:
Email Subject : Attn Leela

59453771 0 Reputation points

2023-02-03T14:27:26.4533333+00:00

Thank you very much.

Email sent. I have support case 2302030050001234:

Hope this can be sorted soon as the customer is jumping on my head!

Best regards:
Stoyan

LeelaRajeshSayana-MSFT 13,966 Reputation points

2023-02-03T14:45:56.27+00:00

Thank you Stoyan for sharing the details. I will monitor the case 2302030050001234 closely and let you know more details as soon as I have them.
Sign in to comment

Share via

IOT HUB Ip has been prevented to connect to the endpoint

1 answer