Solved

Exchange Server IMS, event ID 4031

Posted on 2002-05-07
6
921 Views
Last Modified: 2009-12-16
We recently got a whole bunch of event log error ID 4031, source: MSExchangeIMS, SMTP Interface Events, saying that something like the target server reported error 550, unrecognized user, or relay denied, or recipient not exist, any idea?

What is common situation that this error will come up?

We do not allow relay, only to our specified domain. Platform: Exchange 5.5 with sp4 on WIndows 2000 AS, sp2.

Thanks in advance

Robert100

0
Comment
Question by:robert100
  • 3
  • 2
6 Comments
 
LVL 23

Expert Comment

by:slink9
ID: 6996140
0
 
LVL 4

Expert Comment

by:bluezoo7
ID: 6997191
Its possible an unauthorized client (i.e., spammer) is attempting (and failing) to send mail from your server.

You can test this yourself by setting up a client outside your network and not part of your domain and then trying to send mail using your mailserver.

Do you get the error consistently? Did you get a batch of them and then they stopped? Could you leave a copy of the exact error? Is the target server your mail server?

0
 

Author Comment

by:robert100
ID: 6997536
Thanks.

I got these errors constantly since last week. One of the error messages is as follows:

The following message could not be delivered to <SizeDoesMatter@msn.com>. The destination server reported: 550 5.2.1 SizeDoesMatter@msn.com... Mailbox disabled, not accepting messages From: <> Subject: Undeliverable: GOT A SMALL OR AVERAGE PENIS? DO YOU WANT A MASSIVE PENIS!

This is another one:

The following message could not be delivered to <ibbuinytromte@hotmail.com>. The destination server reported: 550 Requested action not taken:user account inactive From: <> Subject: Undeliverable: Record Low MORTGAGE rates! *Act Fast*                       11060


I agree that it maybe someone tried to use our mail server to relay messages. Any other idea?

Robert100
0
Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

 
LVL 23

Expert Comment

by:slink9
ID: 6997586
The original question says that you do not allow relay.  What have you done to not allow this?
Have you looked at http://support.microsoft.com/default.aspx?scid=kb;en-us;Q193922 or http://support.microsoft.com/default.aspx?scid=kb;en-us;Q257538
0
 
LVL 4

Accepted Solution

by:
bluezoo7 earned 100 total points
ID: 6997801
I'm with Slink9. I'm suspicious that your mail server is indeed acting as a mail relay.

The error message you posted indicate that someone is sending mail to Internet-based mail servers (hotmail, msn).

MSN and HotMail are rejecting the mail either as a relay or because the recipient's mailbox is overlimit or inactive. The recipient's mail server sends it back to the originating mail server (evidentally yours).

See how the "From" field is blank in the error from MSN? This is a classic spammer technique.

Use Slink's links to verify your relay settings are correct.
0
 
LVL 23

Expert Comment

by:slink9
ID: 7009964
Why did you accept an answer that agreed with me and directed you to use the links I posted to verify it?
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question