Question

  Asked: Jul 16 2008   4:10 PM GMT
  Asked by: ITKE


In the Application Event Viewer on my Exchange 2003 Server, I'm seeing lot of entries like this: The remote host "58.89.214.194" . . .


Event Viewer, Exchange 2003, Exchange error messages

In the Application Event Viewer on my Exchange 2003 Server, I'm seeing lot of entries like this:

The remote host "58.89.214.194", responded to the SMTP command "rcpt" with "550 No such address ". The full command sent was "RCPT TO:<+._-63terasaki@waseda.jp> ". This will probably cause the connection to fail.

Anti-virus and anti-spam controls are in place in my environment and I do not have an open relay.

Is there a way I can determine the source of these rogue outbound emails?

Subscribe to Alerts! Get questions and answers delivered to your Inbox.


E-mail me updates on this question



   SUBSCRIBE

hidden modal window

Answer Wiki (Improve, edit or add to this answer)


Start this Answer and Earn your Knowledge Points!

By clicking "Create Answer", you can write the answer to this question that can be improved upon by your peers using the Answer Wiki.

Browse more Questions and Answers on Microsoft Windows and Exchange.

Looking for relevant Microsoft Windows Whitepapers? Visit the SearchEnterpriseDesktop.com Research Library.


Discuss This Answer


You must be logged-in to discuss a question. Log-in/Register

Labnuke99  |   Jul 16 2008  4:54PM GMT

If they are rogue e-mails, are you absolutely sure you do not have an open relay? Try this service or this one to see if your host is permitting some relay. Check your connectors also to ensure that they are properly configured for your network. Turn on message tracking and review the logs.