?
Solved

Exchange Server IMS, event ID 4031

Posted on 2002-05-07
6
Medium Priority
?
972 Views
Last Modified: 2009-12-16
We recently got a whole bunch of event log error ID 4031, source: MSExchangeIMS, SMTP Interface Events, saying that something like the target server reported error 550, unrecognized user, or relay denied, or recipient not exist, any idea?

What is common situation that this error will come up?

We do not allow relay, only to our specified domain. Platform: Exchange 5.5 with sp4 on WIndows 2000 AS, sp2.

Thanks in advance

Robert100

0
Comment
Question by:robert100
  • 3
  • 2
6 Comments
 
LVL 23

Expert Comment

by:slink9
ID: 6996140
0
 
LVL 4

Expert Comment

by:bluezoo7
ID: 6997191
Its possible an unauthorized client (i.e., spammer) is attempting (and failing) to send mail from your server.

You can test this yourself by setting up a client outside your network and not part of your domain and then trying to send mail using your mailserver.

Do you get the error consistently? Did you get a batch of them and then they stopped? Could you leave a copy of the exact error? Is the target server your mail server?

0
 

Author Comment

by:robert100
ID: 6997536
Thanks.

I got these errors constantly since last week. One of the error messages is as follows:

The following message could not be delivered to <SizeDoesMatter@msn.com>. The destination server reported: 550 5.2.1 SizeDoesMatter@msn.com... Mailbox disabled, not accepting messages From: <> Subject: Undeliverable: GOT A SMALL OR AVERAGE PENIS? DO YOU WANT A MASSIVE PENIS!

This is another one:

The following message could not be delivered to <ibbuinytromte@hotmail.com>. The destination server reported: 550 Requested action not taken:user account inactive From: <> Subject: Undeliverable: Record Low MORTGAGE rates! *Act Fast*                       11060


I agree that it maybe someone tried to use our mail server to relay messages. Any other idea?

Robert100
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
LVL 23

Expert Comment

by:slink9
ID: 6997586
The original question says that you do not allow relay.  What have you done to not allow this?
Have you looked at http://support.microsoft.com/default.aspx?scid=kb;en-us;Q193922 or http://support.microsoft.com/default.aspx?scid=kb;en-us;Q257538
0
 
LVL 4

Accepted Solution

by:
bluezoo7 earned 300 total points
ID: 6997801
I'm with Slink9. I'm suspicious that your mail server is indeed acting as a mail relay.

The error message you posted indicate that someone is sending mail to Internet-based mail servers (hotmail, msn).

MSN and HotMail are rejecting the mail either as a relay or because the recipient's mailbox is overlimit or inactive. The recipient's mail server sends it back to the originating mail server (evidentally yours).

See how the "From" field is blank in the error from MSN? This is a classic spammer technique.

Use Slink's links to verify your relay settings are correct.
0
 
LVL 23

Expert Comment

by:slink9
ID: 7009964
Why did you accept an answer that agreed with me and directed you to use the links I posted to verify it?
0

Featured Post

Free recovery tool for Microsoft Active Directory

Veeam Explorer for Microsoft Active Directory provides fast and reliable object-level recovery for Active Directory from a single-pass, agentless backup or storage snapshot — without the need to restore an entire virtual machine or use third-party tools.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

If something goes wrong with Exchange, your IT resources are in trouble.All Exchange server migration processes are not designed to be identical and though migrating email from on-premises Exchange mailbox to Cloud’s Office 365 is relatively simple…
This article will help to fix the below errors for MS Exchange Server 2016 I. Certificate error "name on the security certificate is invalid or does not match the name of the site" II. Out of Office not working III. Make Internal URLs and Externa…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

840 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question