I am having a recurring problem with my exchnge server which does not seem to be going away, I am having the follwong event ID error reported:
Category; SMTP Protocol
Event ID: 7010
This is an SMTP protocol log for virtual server ID X, connection #8, the client at 18.104.22.168 sent a "rcpt" command and the SMTP server responded with XXX.X.X.X Unable to relay for email@example.com. This will probably cause the connection to fail.
I have checked that the relay is not open, I have also checked the FQDN which is fine and that the Inegrated Windows Authentication is ticked, The biggest concern here is that the mail which is being brought up in the error messages is obviously spam from all sorts of domains. It makes me think that a third party is trying to use the server to relay outgoing messages or worse they have manged to get some form of access to the server which is the really big concern.
Exchange 2003 SP2, SBS 2003 premium with ISA 2004 and Trend Micro CSM, with Vista clients.
I hope somebody knows what is going on here.