danboy1
asked on
Event ID 7010 MS Exchange Transport Error Message
Hi
I am having a recurring problem with my exchnge server which does not seem to be going away, I am having the follwong event ID error reported:
Source; MSExchangeTransport
Category; SMTP Protocol
Event ID: 7010
Computer; Server
This is an SMTP protocol log for virtual server ID X, connection #8, the client at 222.122.12.123 sent a "rcpt" command and the SMTP server responded with XXX.X.X.X Unable to relay for xxx@domainname.com. This will probably cause the connection to fail.
I have checked that the relay is not open, I have also checked the FQDN which is fine and that the Inegrated Windows Authentication is ticked, The biggest concern here is that the mail which is being brought up in the error messages is obviously spam from all sorts of domains. It makes me think that a third party is trying to use the server to relay outgoing messages or worse they have manged to get some form of access to the server which is the really big concern.
Exchange 2003 SP2, SBS 2003 premium with ISA 2004 and Trend Micro CSM, with Vista clients.
I hope somebody knows what is going on here.
Kind Regards
Dan
I am having a recurring problem with my exchnge server which does not seem to be going away, I am having the follwong event ID error reported:
Source; MSExchangeTransport
Category; SMTP Protocol
Event ID: 7010
Computer; Server
This is an SMTP protocol log for virtual server ID X, connection #8, the client at 222.122.12.123 sent a "rcpt" command and the SMTP server responded with XXX.X.X.X Unable to relay for xxx@domainname.com. This will probably cause the connection to fail.
I have checked that the relay is not open, I have also checked the FQDN which is fine and that the Inegrated Windows Authentication is ticked, The biggest concern here is that the mail which is being brought up in the error messages is obviously spam from all sorts of domains. It makes me think that a third party is trying to use the server to relay outgoing messages or worse they have manged to get some form of access to the server which is the really big concern.
Exchange 2003 SP2, SBS 2003 premium with ISA 2004 and Trend Micro CSM, with Vista clients.
I hope somebody knows what is going on here.
Kind Regards
Dan
ASKER
Hi Simon
Thanks for the reply, this is a releif as I was beggining to think they could access my server.
I think I am in the wrong place for this but in terms of spam would it be best to implement third party spam control or try to control it through SBS exchange 2003. I must admit that I am struggling to keep this under control especially the spam that appears to come from from my own address, which as also able to circumvent the CSM and Exchnage filtering.
Kind REgards
Dan
Thanks for the reply, this is a releif as I was beggining to think they could access my server.
I think I am in the wrong place for this but in terms of spam would it be best to implement third party spam control or try to control it through SBS exchange 2003. I must admit that I am struggling to keep this under control especially the spam that appears to come from from my own address, which as also able to circumvent the CSM and Exchnage filtering.
Kind REgards
Dan
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
The message is tell you that the server was unable to relay - which is what is supposed to happen. It simply means someone is trying to relay through your server - it could be a spammer or it could be one of the open relay testers.
Simon.