event 7004: smtp protocol error
i've seen several questions/answers posted here regarding this issue. actually, i don't even know if it's an issue! i've also referred to http://support.microsoft.com/kb/843106
no success with anything i've came across so far
my sbs 2003 server generates one or two of these a day. notice the description is different in both events:
Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7004
Date: 3/17/2010
Time: 9:31:03 AM
User: N/A
Computer: SBSERVER
Description:
This is an SMTP protocol error log for virtual server ID 1, connection #19. The remote host "173.10.163.53", responded to the SMTP command "xexch50" with "504 Need to authenticate first ". The full command sent was "XEXCH50 2500 2 ". This will probably cause the connection to fail.
---------------
Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7004
Date: 3/16/2010
Time: 2:31:45 PM
User: N/A
Computer: SBSERVER
Description:
This is an SMTP protocol error log for virtual server ID 1, connection #10. The remote host "207.251.96.23", responded to the SMTP command "rcpt" with "550 sorry, no mailbox here by that name. (#5.1.1) ". The full command sent was "RCPT TO:<doubletree@h1.hilton.c
are these a problem? no users are complaining but everyday i'm getting notified and my manager wants to know why. please help. thanks.
no success with anything i've came across so far
my sbs 2003 server generates one or two of these a day. notice the description is different in both events:
Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7004
Date: 3/17/2010
Time: 9:31:03 AM
User: N/A
Computer: SBSERVER
Description:
This is an SMTP protocol error log for virtual server ID 1, connection #19. The remote host "173.10.163.53", responded to the SMTP command "xexch50" with "504 Need to authenticate first ". The full command sent was "XEXCH50 2500 2 ". This will probably cause the connection to fail.
---------------
Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7004
Date: 3/16/2010
Time: 2:31:45 PM
User: N/A
Computer: SBSERVER
Description:
This is an SMTP protocol error log for virtual server ID 1, connection #10. The remote host "207.251.96.23", responded to the SMTP command "rcpt" with "550 sorry, no mailbox here by that name. (#5.1.1) ". The full command sent was "RCPT TO:<doubletree@h1.hilton.c
are these a problem? no users are complaining but everyday i'm getting notified and my manager wants to know why. please help. thanks.
Alan Hardisty
What firewall are you behind?
ASKER
untangle
port 25 is only forwarding requests from our mail server
port 25 is only forwarding requests from our mail server
Hmm - not one that I know.
Can you please drop me an email with your domain name / IP in - firstly to check your outbound mail (it will get rejected if your config is bad) and secondly to allow me to check your domain / config out without broadcasting your details on EE for all to see.
Will understand if you are reluctant to do this - in which case I will have to make some general suggestions and point you to my EE Article:
https://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Problems-sending-mail-to-one-or-more-external-domains.html
Can you please drop me an email with your domain name / IP in - firstly to check your outbound mail (it will get rejected if your config is bad) and secondly to allow me to check your domain / config out without broadcasting your details on EE for all to see.
Will understand if you are reluctant to do this - in which case I will have to make some general suggestions and point you to my EE Article:
https://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Problems-sending-mail-to-one-or-more-external-domains.html
ASKER
@alan
i sent you an email
i sent you an email
Got your email and it would appear that your SPF record for the domain you sent from is not setup to allow the domain name / IP address that you are sending from.
ASKER
i visited http://www.mxtoolbox.com/spf.aspx and it looked like my domain has a record.
TXT domainhere.com 60 min v=spf1 a mx ptr ip4:66.237.157.xxx ip4:67.22x.24.xx ~all
the last ip is my mail servers external ip
i dont know what the first ip listed it
TXT domainhere.com 60 min v=spf1 a mx ptr ip4:66.237.157.xxx ip4:67.22x.24.xx ~all
the last ip is my mail servers external ip
i dont know what the first ip listed it
Ah - posted wrong comment in wrong question - sorry. I did get your email and am looking at it now.
Well your config seems fine - I got your emails and if there were issues then they would have been rejected.
Is your server up-to-date with patches and Service Packs?
Have you got Exchange 2003 Service Pack 2 installed?
What Firewall sdo you have installed on your network?
Is your server up-to-date with patches and Service Packs?
Have you got Exchange 2003 Service Pack 2 installed?
What Firewall sdo you have installed on your network?
ASKER
all updates applied
exchange sp 2 applied
we use an untangle firewall
we only allow port 25 to be forwarded FROM our appriver anti spam servers
exchange sp 2 applied
we use an untangle firewall
we only allow port 25 to be forwarded FROM our appriver anti spam servers
ASKER
any ideas?
Sorry - as you are up-to-date and your mails are getting through to me, I can only suggest that your Firewall may be interfering with the flow of communications between you and them. Do you have an alternative firewall that you can use temporarily?
I'll check with another Expert and see if they have an ideas for you.
Hold fire.
I'll check with another Expert and see if they have an ideas for you.
Hold fire.
Sorry - no additional ideas from another Top EE Expert.
Does this only happen with a few domains?
Does this only happen with a few domains?
ASKER
no it happens with several, everyday its different. can't pinpoint the exact domain. what kind of explanation should i give my manager?
ASKER
this one just happened:
Log: Application
Type: Error
Event: 7004
Time: 3:10:47 pm 22-Mar-10 UTC
Source: MSExchangeTransport
Category: SMTP Protocol
Username: N/A
Computer: SBSERVER
Description: This is an SMTP protocol error log for virtual server ID 1, connection #46.
The remote host "209.85.221.28", responded to the SMTP command "rcpt" with "550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 http://mail.google.com/support/bin/answer.py?answer=6596 36si7525159qyk.98 ".
The full command sent was "RCPT TO:<sunil.udkar02@gmail.co
Log: Application
Type: Error
Event: 7004
Time: 3:10:47 pm 22-Mar-10 UTC
Source: MSExchangeTransport
Category: SMTP Protocol
Username: N/A
Computer: SBSERVER
Description: This is an SMTP protocol error log for virtual server ID 1, connection #46.
The remote host "209.85.221.28", responded to the SMTP command "rcpt" with "550-5.1.1 The email account that you tried to reach does not exist. Please try 550-5.1.1 double-checking the recipient's email address for typos or 550-5.1.1 unnecessary spaces. Learn more at 550 5.1.1 http://mail.google.com/support/bin/answer.py?answer=6596 36si7525159qyk.98 ".
The full command sent was "RCPT TO:<sunil.udkar02@gmail.co
Okay - the last one is a problem at Google as the mail server you are hitting is not setup for the particular user you are sending to.
ASKER
lol i should've read the description better! good eye good eye
our server alerts us via email everytime event 7004 is triggered. but yeah, that last one can't be resolved ;-)
our server alerts us via email everytime event 7004 is triggered. but yeah, that last one can't be resolved ;-)
The second error in your question is the same, but not sure about the first.
It seems that you are trying to authenticate to the initial error connection. Is this the case? Do you send mail via appriver on your outbound connection?
It seems that you are trying to authenticate to the initial error connection. Is this the case? Do you send mail via appriver on your outbound connection?
ASKER
no, appriver is not used on outbound
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
i saw this kb before i posted the quesiton but i really didn't think it applied.....
well since i've patched with those two hot fixes, the problem hasnt resurfaced. thanks for the help.
well since i've patched with those two hot fixes, the problem hasnt resurfaced. thanks for the help.