Event ID 7010 (MSExchangeTransport) on Exchange 2003

In my eventviewer I got a great amount of event ID errors 7010, MSEXchangeTransport. After reviewing the description I noticed all events came from the same IP-address. When looking up this IP, I found it to be a Unix/Linux host.

The full event ID is:

Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7010
User:  N/A
Computer: EXCHANGESERVER
Description:
This is an SMTP protocol log for virtual server ID 1, connection #1126. The client at “192.168.0.2” sent a “mail” command, and the SMTP server responded with “501 5.5.4 Invalid Address  “. The full command sent was “mail FROM:  “.  This will probably cause the connection to fail.
For more information, click http://www.microsoft.com/contentredirect.asp.

What this Unix/Linux host does is sending the HELO command with the FQDN name of the mailserver. Except it also has a trailing dot (.). For example :

HELO domain.test.com.

When this is sent to an Exchange 2003 server it generates the following error:

501 5.5.4 Invalid Address

Solution

You are able to change Exchange and allow the trailing dot, but as this is not RFC compliant behaviour, I simply made sure the Unix/Linux host was configured to not send mail anymore.

If you want to change the behaviour of Exchange read the following knowledge base aricle : “501 5.5.4 Invalid Address” error message from a sending UNIX server

Hans Sleurink

Hans Sleurink works as a Senior Project Consultant at VodafoneZiggo in the Netherlands where he designs and deploys Microsoft Unified Communications solutions. His main focus is on, but not limited to, Microsoft Teams, Skype for Business / Lync including Enterprise Voice, Anywhere365, AudioCodes, Direct Routing, Exchange, Office 365, Active Directory and other UC related topics.

More Posts - Website

Follow Me:
LinkedIn

Leave a Reply

  

  

  

This site uses Akismet to reduce spam. Learn how your comment data is processed.