<div>
In the Exchange smtp configuration, has someone ticked the box asking for dns verification of senders?
</div>


<div>
I have these same problems.<br />
<br />
Do you mean the 'Perform Reverse DNS lookup on incoming messages' checkbox?<br />
<br />
Adam
</div>


<div>
Hi duncaninnz,<br />
&nbsp; &nbsp; it looks liek someone is sending to an invalid address.<br />
<br />
Can I suggest you check that you are not being used as an open relay at the following address.<br />
<br />
<a href="http://www.abuse.net/relay.html" rel="ugc">http://www.abuse.net/relay<wbr />.html</a><br />
<br />
If it was only a small amount, then i would suggest that one or two people are typing addresses incorrectly, but with that volume I would look at ensuring your server is tied down and not an open relay.<br />
<br />
May i also suggest enabling the Intelligent Message Filter to reject emails for Unknown Recipients. (i.e. Any email address that is NOT listed in AD)<br />
<br />

</div>


<div>
Its not repeating just from the same address. Theres loads of different addresses. see screens shot.<br />
Exchange is setup with default relaying and I have tested remotely now for open relay and it is not open. <br />
<a href="https://filedb.experts-exchange.com/incoming/2008/07_w30/43411/Publication2.jpg" target="_blank" class="file-inline" title="More events (276 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>Publication2.jpg</a>
</div>


Publication2.jpg

<div>
As you are not showing as an Open Relay, if you look at your mail queues, are the lots of outbound emails to spurious email domains?
</div>


<div>
Sorry for the delay. The client is now mine and I have taken over their server so have full remote access.<br />
reverse dns on incoming messages is not ticked.<br />
There are outbound messages in the queues for some genuine some invalid domains. They look like NDR's.<br />
The filter recipients was not ticked. I have changed this and configured recipient filtering.<br />
In server properties for exchange transport maximum is set for smtp logging<br />
<br />

</div>


<div>
Logging was set to maximum therefore wasnt a problem at all. Tried with another server got the same kind of events. Thanks for that a nother lesson learned.
</div>


<div>
<div class="content wysiwyg-content">
I have been looking at a new clients SBS 2003 Premium (ISA 2004) server and found the event log to be full of these errors going back six months. I've read the eventid.net stuff on them which seems to suggest theres nothing to worry about. However it just looks as though something worrying is going on. Particularly over such a long period of time. They appear constantly going back as far as the log goes - six months. Looks spam related. Any ideas about what and why its happening would be appreciated and hopefully how to stop it.<br />
<br />
<a href="https://filedb.experts-exchange.com/incoming/2008/07_w30/43361/Publication1.jpg" target="_blank" class="file-inline" title="Event log errors (448 KB)"><svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 512 512"><path d="M67.508 468.467c-58.005-58.013-58.016-151.92 0-209.943l225.011-225.04c44.643-44.645 117.279-44.645 161.92 0 44.743 44.749 44.753 117.186 0 161.944l-189.465 189.49c-31.41 31.413-82.518 31.412-113.926.001-31.479-31.482-31.49-82.453 0-113.944L311.51 110.491c4.687-4.687 12.286-4.687 16.972 0l16.967 16.971c4.685 4.686 4.685 12.283 0 16.969L184.983 304.917c-12.724 12.724-12.73 33.328 0 46.058 12.696 12.697 33.356 12.699 46.054-.001l189.465-189.489c25.987-25.989 25.994-68.06.001-94.056-25.931-25.934-68.119-25.932-94.049 0l-225.01 225.039c-39.249 39.252-39.258 102.795-.001 142.057 39.285 39.29 102.885 39.287 142.162-.028A739446.174 739446.174 0 0 1 439.497 238.49c4.686-4.687 12.282-4.684 16.969.004l16.967 16.971c4.685 4.686 4.689 12.279.004 16.965a755654.128 755654.128 0 0 0-195.881 195.996c-58.034 58.092-152.004 58.093-210.048.041z"/></svg>Publication1.jpg</a>
</div>
</div>


Publication1.jpg

I have been looking at a new clients SBS 2003 Premium (ISA 2004) server and found the event log to be full of these errors going back six months. I've read the eventid.net stuff on them which seems to suggest theres nothing to worry about. However it just looks as though something worrying is going on. Particularly over such a long period of time. They appear constantly going back as far as the log goes - six months. Looks spam related. Any ideas about what and why its happening would be appreciated and hopefully how to stop it.


MSExchangeTransport errors 7002 7004 7010

Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.

Exchange

Small Business Server (SBS) is a line of server operating systems targeted at small businesses by bundling the operating system with a number of other Microsoft products that would normally need to be purchased or licensed separately. The most notable inclusions are Exchange, SQL Server, SharePoint and ISA/TMG (Microsoft's firewall and proxy server).