agiliopereira
asked on
The description for Event ID ( 4006 ) in Source ( smtpsvc ) cannot be found
The description for Event ID ( 4006 ) in Source ( smtpsvc ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: 61.187.98.7, 0733.com, The remote server did not respond to a connection attempt.
.
.
ASKER
How about solving this error.
Crystal ball is still on the blink...
You have left out all of the key information...
Exchange version and service pack?
Windows version and service pack?
What else is installed on this machine?
Are there messages stuck in the queue?
Is this a one off error, or reoccurring regularly?
Any patterns?
We can only work with what you have given us, and at the moment that is nothing whatsoever to go on.
Simon.
You have left out all of the key information...
Exchange version and service pack?
Windows version and service pack?
What else is installed on this machine?
Are there messages stuck in the queue?
Is this a one off error, or reoccurring regularly?
Any patterns?
We can only work with what you have given us, and at the moment that is nothing whatsoever to go on.
Simon.
ASKER
Ok Simon. Exchange server 2003 with service pack 2 on windows server 2000. It has only exchange installed. This started just a month back. The queue shows 10 messages stick and retrying to send to a domain mboxx04.com. Seems to be a chinese website. Do not know how to track the machine casuing this problem.
Thanks
Agilio
Thanks
Agilio
It looks like a straight connection error.
Chinese stuff is always suspicious.
It could be a form of relaying - either authenticated, NDR or straight open relay. You will need to check for all three.
If you are relaying messages they normally show up in the queues.
As you are on Windows 2000 I can't really recommend enabling recipient filtering as it opens you to a dictionary attack.
Turn on Message tracking and see if the messages are coming from inside or outside.
Simon.
Chinese stuff is always suspicious.
It could be a form of relaying - either authenticated, NDR or straight open relay. You will need to check for all three.
If you are relaying messages they normally show up in the queues.
As you are on Windows 2000 I can't really recommend enabling recipient filtering as it opens you to a dictionary attack.
Turn on Message tracking and see if the messages are coming from inside or outside.
Simon.
ASKER
Sorry Simon, little raw with a couple of new issues. Where do I find the message tracking option and what happens if I find something there, or will I find something there?
Agilio
Agilio
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi Sembee,
Whole place closed for Easter. Cannot test anything till Tuesday. Is it possible to keep this open?
Thanks again
Agilio
Whole place closed for Easter. Cannot test anything till Tuesday. Is it possible to keep this open?
Thanks again
Agilio
And your question is?
Cos my crystal ball is playing up at the moment.
Simon.