[Webinar] Streamline your web hosting managementRegister Today

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1385
  • Last Modified:

Exchange Event ID's 3005,4000,4006,7002,7004

HELP!!! I'm getting Event ID's 3005(NDR), 4000(Connection Manager), 4006(Connection Manager), 7002(SMTP Protocol), 7004(SMTP Protocol) over and over again in Event Viewer. How do I stop this? I suspect something fishy but, can't find it.
0
drbox
Asked:
drbox
  • 6
  • 2
1 Solution
 
marc_nivensCommented:
Can you give us the description to these event ID's?
0
 
drboxAuthor Commented:
4000 - Message delivery to the remote domain 'areyoureadyministries.org' failed for the following reason: SMTP could not connect to any DNS server.

3005 - A non-delivery report with a status code of 4.4.6 was generated for recipient rfc822;jsaeger@burt.biz (Message-ID  <BURTEXCHSRVkatd4gmS00000851@www.burt.biz>).  
Cause: The maximum hop count was exceeded for this message.  This non-delivery report can also be caused if a looping condition exists between sending and receiving servers that are not in the same Exchange organization. In this situation, the message bounces back and forth until the hop count is exceeded.  A configuration error in the e-mail system can also cause the message to bounce between two servers or to be forwarded between two recipients.      
Solution: The maximum hop count is a property set on each virtual server and you can manually override it.  The default maximum hop count is 15. Also, check for any situations that might cause loops between servers.

4006 - Message delivery to the host '204.251.15.170' failed while delivering to the remote domain  'deepsleep.org' for the following reason: The remote server did not respond to a connection attempt.
0
 
drboxAuthor Commented:
7004 - This is an SMTP protocol error log for virtual server ID 1, connection #35253. The remote host "205.158.62.200", responded to the SMTP command "rcpt" with "550 <regulatoryphuno@hadden.com>: User unknown  ". The full command sent was "RCPT TO:<regulatoryphuno@hadden.com>  ".  This will probably cause the connection to fail.
0
Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

 
drboxAuthor Commented:
Looks like some type of spaming going on. But I'm not sure what to do next.
0
 
drboxAuthor Commented:
As a test, I froze all of the messages in Que Viewer. Now I'm getting the Event ID: 4000 - Message delivery to the remote domain 'areyoureadyministries.org' failed for the following reason: SMTP could not connect to any DNS server.

non stop with a different remote domain every time.
0
 
marc_nivensCommented:
It does sound like spam.  You need to check the queues and see if these are regular spam messages or NDR's.  If they're regular spam then you're probably open for relay.  If they are NDR's, you will need to disable non-delivery reports to make it stop.
0
 
drboxAuthor Commented:
How do I clear the Queues?
0
 
SembeeCommented:
Check out my article on cleaning up and what to secure.

http://www.amset.info/exchange/spam-cleanup.asp

Simon.
0
 
drboxAuthor Commented:
I was able to accomplish the NDR and Open Relay issue. EXCELLANT ARTICLE. Thanks Guys
0

Featured Post

Easily manage email signatures in Office 365

Managing email signatures in Office 365 can be a challenging task if you don't have the right tool. CodeTwo Email Signatures for Office 365 will help you implement a unified email signature look, no matter what email client is used by users. Test it for free!

  • 6
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now