Link to home
Start Free TrialLog in
Avatar of dnack
dnack

asked on

Event ID 4000 SMTPSVC Error.

My server is a SMTP smart host which diabled open relay. I have lots of bad mail in my c:\inetpub\mailroot\badmail (550 thousands bad mails in 2 months). the event log will generate event ID 4000

I open the bad mails and found that most of them are non delivery reply mail from my postmaster. I have disable NDR  


example 1
Message delivery to the remote domain 'boac.com.au' failed.  The error message is 'An SMTP protocol error occurred.
'. The SMTP verb which caused the error is 'RCPT'.  The response from the remote server is '550 5.1.1 <lhnslnvie@boac.com.au> is not a valid mailbox
'.

Example 2
Message delivery to the remote domain 'rrk.nu' failed for the following reason: The remote server did not respond to a connection attempt.

Example 3

Message delivery to the remote domain 'drillerssupply.com' failed for the following reason: Unable to bind to the destination server in DNS.
 
Avatar of Stacy Spear
Stacy Spear
Flag of United States of America image

These are NDR messages that your server tried to send in response to spam. If this is Exchange box go to your internet mail settings and disable NDRs to the internet. Enable the tar pit feature as well. http://support.microsoft.com/kb/842851
You have windows 2000? That setting above doesn't work with it I think.
Exact version information would help, but if you are getting badmail then it sounds like you are on Exchange 2000. As already pointed out, recipient filtering the tarpit are not available in Exchange 2000.

It sounds like your server is being abused, via NDR spam. To deal with that you will have to go third party. I usually suggest Vamsoft ORF to help with that.
I would suggest that you read this question from earlier in the week. It is probably an identical problem.
https://www.experts-exchange.com/questions/22974202/Yikes-25-000-Spam-messages-in-10-hours-What-do-I-do-now.html

Simon.
Avatar of dnack
dnack

ASKER

i have 2 servers. I am using Imail as the mail sever and GFI Mail Essentail (anti Spam) as smtp gateway/smarthost. The error occurs on the SMTP gateway. tested no open reply,
Avatar of dnack

ASKER

sorry, typpo error... i mean tested no open relay
ASKER CERTIFIED SOLUTION
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial