Hello,
I have recently inherited a network consisting of a 2000 DC with Exchange 2000 running on it. The poor machine is starting to show its age but untill my new hardware arrives it will have to hold together.
The problem is mail flow has almost stoped with queues of a ridiculus length, when investigated two problems seem apparent:
1. 1706 1707 MSExchangetransport pop up every ten minutes in the application log with diagnostic logging enabled.
2. The SMTP logs show about 80, 000 of the following entries per 12 hour period.
2008-08-27 01:11:01 116.24.225.172 ertert SMTPSVC1 myserver 10.6.0.11 0 EHLO 250 SMTP -
2008-08-27 01:11:04 116.24.225.172 ertert SMTPSVC1 myserver 10.6.0.11 0 RCPT 550 SMTP -
2008-08-27 01:11:04 116.24.225.172 ertert SMTPSVC1 myserver 10.6.0.11 0 RCPT 550 SMTP -
2008-08-27 01:11:04 116.24.225.172 ertert SMTPSVC1 myserver 10.6.0.11 0 DATA 554 SMTP -
2008-08-27 01:11:05 116.24.225.172 ertert SMTPSVC1 myserver 10.6.0.11 0 MAIL 250 SMTP -
2008-08-27 01:11:06 116.24.225.172 ertert SMTPSVC1 myserver 10.6.0.11 0 QUIT 240 SMTP -
Now im assuming because i am getting 550 and 554 that i am not relaying these on.
A good proportion seem to be coming from multiple IP addresses with the same cs-username.
For:
1. I will try to do an offline integrity check of the database.
2. ?? is there any way i can stop these from reaching the smtp virtual server with exchange 2000? I dont really want to buy any new software/hardware as in 4 weeks i will get 4 new Win 2003 servers and two Exchange 2007 licences.
Also would 80000 of these smpt connections slow down my machines ability to move messages (celeron 1700 dont laugh its not funny) or should i be looking into other avenues?
Any ideas or avenues of interest will be greatly appreciated and please dont feel afraid to shoot me down if i have made any glaring mistakes in my logical thinking.
Start Free Trial