Event ID 7010 MS Exchange Transport Error Message

Hi

I am having a recurring problem with my exchnge server which does not seem to be going away, I am having the follwong event ID error reported:

Source; MSExchangeTransport
Category; SMTP Protocol
Event ID: 7010
Computer; Server

This is an SMTP protocol log for virtual server ID X, connection #8, the client at 222.122.12.123 sent a "rcpt" command and the SMTP server responded with XXX.X.X.X Unable to relay for xxx@domainname.com. This will probably cause the connection to fail.

I have checked that the relay is not open, I have also checked the FQDN which is fine and that the Inegrated Windows Authentication is ticked, The biggest concern here is that the mail which is being brought up in the error messages is obviously spam from all sorts of domains. It makes me think that a third party is trying to use the server to relay outgoing messages or worse they have manged to get some form of access to the server which is the really big concern.

Exchange 2003 SP2, SBS 2003 premium with ISA 2004 and Trend Micro CSM, with Vista clients.

I hope somebody knows what is going on here.

Kind Regards

Dan
danboy1Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SembeeCommented:
I see nothing wrong with the above message. It looks like you simply have logging turned up too high.
The message is tell you that the server was unable to relay - which is what is supposed to happen. It simply means someone is trying to relay through your server - it could be a spammer or it could be one of the open relay testers.

Simon.
0
danboy1Author Commented:
Hi Simon

Thanks for the reply, this is a releif as I was beggining to think they could access my server.

I think I am in the wrong place for this but in terms of spam would it be best to implement third party spam control or try to control it through SBS exchange 2003. I must admit that I am struggling to keep this under control especially the spam that appears to come from from my own address, which as also able to circumvent the CSM and Exchnage filtering.

Kind REgards

Dan
0
SembeeCommented:
Spam is on going war. Even the oursourcers are not perfect. Any third party who claims 100% success rate is probably lying.

Personally the solution that I use is a combination of greylisting and IMF. I find that those two do the job for me quite well. Greylisting is provided by Vamsoft ORF.
With that combination I get two or three spam messages to my desktop a week at most.

Simon.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.