tony

Hi there,

I recently have lots of "warning event 4000 & 4001" in my system event. I
got like 10 warning every minute.

These errors are like these below:

Message delivery to the remote domain 'celadons.com' failed. The error
message is 'An SMTP protocol error occurred.
'. The SMTP verb which caused the error is 'RCPT'. The response from the
remote server is '550 5.7.1 <qhdwsovzg@celadons.com>... Relaying denied
'.

another one..

Message delivery to the remote domain 'messageasap.com' failed for the
following reason: The remote server did not respond to a connection attempt.


Please help... I have to clear out the warning every day to stop the log
from being full.

I'm running the stmp server on win2k as a relay server for my exchange 5.5.

Any help would be greatly appreciated.

Tony

m.marien

See my post "System Event Log filling with Warnings" on Oct 19, 2004.

I think it's a problem when you use the MS SMTP server to relay for other
mail servers. If the message is rejected by the other mail server the MS
SMTP server creates a NDR and tries to deliver it. This is futile when the
original message is SPAM and there is no valid reply address. This is where
your 4000 errors are coming from.

I also found another problem. The SMTP server should abort trying to deliver
the NDR after 24 hours, but I had a message stuck for over two weeks ???

I don't think there is a way to solve this problem other than having your
Exchange server silently drop the message rather than returning an error.
That way your SMTP relay won't generate NDRs and try to deliver them.

Here is a view of my event log:

http://landsur.sasktelwebsite.net/eventlog.JPG

I had a quick look to see how it's doing since I tried to fix the problem.
Take a look at the two errors for nov.20.2004. Now what the heck it that all
about. My clock was moved ahead a few days? There is just no end to
surprises eh?