Solved

Event ID 7010 MS Exchange Transport Error Message

Posted on 2007-03-21
3
4,362 Views
Last Modified: 2010-08-05
Hi

I am having a recurring problem with my exchnge server which does not seem to be going away, I am having the follwong event ID error reported:

Source; MSExchangeTransport
Category; SMTP Protocol
Event ID: 7010
Computer; Server

This is an SMTP protocol log for virtual server ID X, connection #8, the client at 222.122.12.123 sent a "rcpt" command and the SMTP server responded with XXX.X.X.X Unable to relay for xxx@domainname.com. This will probably cause the connection to fail.

I have checked that the relay is not open, I have also checked the FQDN which is fine and that the Inegrated Windows Authentication is ticked, The biggest concern here is that the mail which is being brought up in the error messages is obviously spam from all sorts of domains. It makes me think that a third party is trying to use the server to relay outgoing messages or worse they have manged to get some form of access to the server which is the really big concern.

Exchange 2003 SP2, SBS 2003 premium with ISA 2004 and Trend Micro CSM, with Vista clients.

I hope somebody knows what is going on here.

Kind Regards

Dan
0
Comment
Question by:danboy1
  • 2
3 Comments
 
LVL 104

Expert Comment

by:Sembee
ID: 18768252
I see nothing wrong with the above message. It looks like you simply have logging turned up too high.
The message is tell you that the server was unable to relay - which is what is supposed to happen. It simply means someone is trying to relay through your server - it could be a spammer or it could be one of the open relay testers.

Simon.
0
 

Author Comment

by:danboy1
ID: 18772877
Hi Simon

Thanks for the reply, this is a releif as I was beggining to think they could access my server.

I think I am in the wrong place for this but in terms of spam would it be best to implement third party spam control or try to control it through SBS exchange 2003. I must admit that I am struggling to keep this under control especially the spam that appears to come from from my own address, which as also able to circumvent the CSM and Exchnage filtering.

Kind REgards

Dan
0
 
LVL 104

Accepted Solution

by:
Sembee earned 250 total points
ID: 18775940
Spam is on going war. Even the oursourcers are not perfect. Any third party who claims 100% success rate is probably lying.

Personally the solution that I use is a combination of greylisting and IMF. I find that those two do the job for me quite well. Greylisting is provided by Vamsoft ORF.
With that combination I get two or three spam messages to my desktop a week at most.

Simon.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Utilizing an array to gracefully append to a list of EmailAddresses
Easy CSR creation in Exchange 2007,2010 and 2013
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now