Home All Groups Group Topic Archive Search About

MX record points to local host error

Author
12 Oct 2007 2:00 PM
Richard S
Hello,
The following error is appearing on my exchange 2003 server in the event log
on a regular basis, emails are still being sent & received ok as far as I can
tell. Nothing on the server has been changed recently. Any help would be
appreciated.

Regards
Richard

Event Type:    Warning
Event Source:    MSExchangeTransport
Event Category:    SMTP Protocol
Event ID:    7002
Date:        12/10/2007
Time:        09:04:17
User:        N/A
Computer:    EMAIL-SERVER
Description:
This is an SMTP protocol warning log for virtual server ID 1, connection
#690. The remote host "xxx.xx.xx.xx", responded to the SMTP command "rcpt"
with "451 lowest numbered MX record points to local host “. The full command
sent was "RCPT TO:<mail***@domain.co.uk>  ".  This may cause the connection
to fail.

Author
13 Oct 2007 12:13 AM
Ed Crowley [MVP]
Is domain.co.uk your domain?  Is your Exchange server configured to receive
mail for that domain in a recipient policy?
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

Show quote
"Richard S" <Richa***@discussions.microsoft.com> wrote in message
news:F5A7C311-7A60-451A-95CF-B84902CDB234@microsoft.com...
> Hello,
> The following error is appearing on my exchange 2003 server in the event
> log
> on a regular basis, emails are still being sent & received ok as far as I
> can
> tell. Nothing on the server has been changed recently. Any help would be
> appreciated.
>
> Regards
> Richard
>
> Event Type: Warning
> Event Source: MSExchangeTransport
> Event Category: SMTP Protocol
> Event ID: 7002
> Date: 12/10/2007
> Time: 09:04:17
> User: N/A
> Computer: EMAIL-SERVER
> Description:
> This is an SMTP protocol warning log for virtual server ID 1, connection
> #690. The remote host "xxx.xx.xx.xx", responded to the SMTP command "rcpt"
> with "451 lowest numbered MX record points to local host ". The full
> command
> sent was "RCPT TO:<mail***@domain.co.uk>  ".  This may cause the
> connection
> to fail.
>
>
Author
15 Oct 2007 8:46 AM
Richard S
Ed,
Thank you for your reply. Yes the .co.uk domain is ours and that domain is
set in the default recipient policy.

Regards
Richard

Show quote
"Ed Crowley [MVP]" wrote:

> Is domain.co.uk your domain?  Is your Exchange server configured to receive
> mail for that domain in a recipient policy?
> --
> Ed Crowley
> MVP - Exchange
> "Protecting the world from PSTs and brick backups!"
>
> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
> news:F5A7C311-7A60-451A-95CF-B84902CDB234@microsoft.com...
> > Hello,
> > The following error is appearing on my exchange 2003 server in the event
> > log
> > on a regular basis, emails are still being sent & received ok as far as I
> > can
> > tell. Nothing on the server has been changed recently. Any help would be
> > appreciated.
> >
> > Regards
> > Richard
> >
> > Event Type: Warning
> > Event Source: MSExchangeTransport
> > Event Category: SMTP Protocol
> > Event ID: 7002
> > Date: 12/10/2007
> > Time: 09:04:17
> > User: N/A
> > Computer: EMAIL-SERVER
> > Description:
> > This is an SMTP protocol warning log for virtual server ID 1, connection
> > #690. The remote host "xxx.xx.xx.xx", responded to the SMTP command "rcpt"
> > with "451 lowest numbered MX record points to local host ". The full
> > command
> > sent was "RCPT TO:<mail***@domain.co.uk>  ".  This may cause the
> > connection
> > to fail.
> >
> >
>
>
>
Author
15 Oct 2007 5:29 PM
Ed Crowley [MVP]
What is the host at the IP address you x'ed out?
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

Show quote
"Richard S" <Richa***@discussions.microsoft.com> wrote in message
news:5E0B5C2F-1EE5-42AB-ADCF-10D43EC4CE1A@microsoft.com...
> Ed,
> Thank you for your reply. Yes the .co.uk domain is ours and that domain is
> set in the default recipient policy.
>
> Regards
> Richard
>
> "Ed Crowley [MVP]" wrote:
>
>> Is domain.co.uk your domain?  Is your Exchange server configured to
>> receive
>> mail for that domain in a recipient policy?
>> --
>> Ed Crowley
>> MVP - Exchange
>> "Protecting the world from PSTs and brick backups!"
>>
>> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
>> news:F5A7C311-7A60-451A-95CF-B84902CDB234@microsoft.com...
>> > Hello,
>> > The following error is appearing on my exchange 2003 server in the
>> > event
>> > log
>> > on a regular basis, emails are still being sent & received ok as far as
>> > I
>> > can
>> > tell. Nothing on the server has been changed recently. Any help would
>> > be
>> > appreciated.
>> >
>> > Regards
>> > Richard
>> >
>> > Event Type: Warning
>> > Event Source: MSExchangeTransport
>> > Event Category: SMTP Protocol
>> > Event ID: 7002
>> > Date: 12/10/2007
>> > Time: 09:04:17
>> > User: N/A
>> > Computer: EMAIL-SERVER
>> > Description:
>> > This is an SMTP protocol warning log for virtual server ID 1,
>> > connection
>> > #690. The remote host "xxx.xx.xx.xx", responded to the SMTP command
>> > "rcpt"
>> > with "451 lowest numbered MX record points to local host ". The full
>> > command
>> > sent was "RCPT TO:<mail***@domain.co.uk>  ".  This may cause the
>> > connection
>> > to fail.
>> >
>> >
>>
>>
>>
Author
16 Oct 2007 11:01 AM
Richard S
I don't know the host but here is the ip address 212.53.64.43

Show quote
"Ed Crowley [MVP]" wrote:

> What is the host at the IP address you x'ed out?
> --
> Ed Crowley
> MVP - Exchange
> "Protecting the world from PSTs and brick backups!"
>
> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
> news:5E0B5C2F-1EE5-42AB-ADCF-10D43EC4CE1A@microsoft.com...
> > Ed,
> > Thank you for your reply. Yes the .co.uk domain is ours and that domain is
> > set in the default recipient policy.
> >
> > Regards
> > Richard
> >
> > "Ed Crowley [MVP]" wrote:
> >
> >> Is domain.co.uk your domain?  Is your Exchange server configured to
> >> receive
> >> mail for that domain in a recipient policy?
> >> --
> >> Ed Crowley
> >> MVP - Exchange
> >> "Protecting the world from PSTs and brick backups!"
> >>
> >> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
> >> news:F5A7C311-7A60-451A-95CF-B84902CDB234@microsoft.com...
> >> > Hello,
> >> > The following error is appearing on my exchange 2003 server in the
> >> > event
> >> > log
> >> > on a regular basis, emails are still being sent & received ok as far as
> >> > I
> >> > can
> >> > tell. Nothing on the server has been changed recently. Any help would
> >> > be
> >> > appreciated.
> >> >
> >> > Regards
> >> > Richard
> >> >
> >> > Event Type: Warning
> >> > Event Source: MSExchangeTransport
> >> > Event Category: SMTP Protocol
> >> > Event ID: 7002
> >> > Date: 12/10/2007
> >> > Time: 09:04:17
> >> > User: N/A
> >> > Computer: EMAIL-SERVER
> >> > Description:
> >> > This is an SMTP protocol warning log for virtual server ID 1,
> >> > connection
> >> > #690. The remote host "xxx.xx.xx.xx", responded to the SMTP command
> >> > "rcpt"
> >> > with "451 lowest numbered MX record points to local host ". The full
> >> > command
> >> > sent was "RCPT TO:<mail***@domain.co.uk>  ".  This may cause the
> >> > connection
> >> > to fail.
> >> >
> >> >
> >>
> >>
> >>
>
>
>
Author
17 Oct 2007 5:07 AM
Ed Crowley [MVP]
Well, that resolves to relay1.netnames.net, and, oddly enough, it's not in
any MX record for netnames.net.  To whom is the mail being sent that
generates this response?
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

Show quote
"Richard S" <Richa***@discussions.microsoft.com> wrote in message
news:ACA0580A-F780-49B8-B496-8B29624B4798@microsoft.com...
>I don't know the host but here is the ip address 212.53.64.43
>
> "Ed Crowley [MVP]" wrote:
>
>> What is the host at the IP address you x'ed out?
>> --
>> Ed Crowley
>> MVP - Exchange
>> "Protecting the world from PSTs and brick backups!"
>>
>> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
>> news:5E0B5C2F-1EE5-42AB-ADCF-10D43EC4CE1A@microsoft.com...
>> > Ed,
>> > Thank you for your reply. Yes the .co.uk domain is ours and that domain
>> > is
>> > set in the default recipient policy.
>> >
>> > Regards
>> > Richard
>> >
>> > "Ed Crowley [MVP]" wrote:
>> >
>> >> Is domain.co.uk your domain?  Is your Exchange server configured to
>> >> receive
>> >> mail for that domain in a recipient policy?
>> >> --
>> >> Ed Crowley
>> >> MVP - Exchange
>> >> "Protecting the world from PSTs and brick backups!"
>> >>
>> >> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
>> >> news:F5A7C311-7A60-451A-95CF-B84902CDB234@microsoft.com...
>> >> > Hello,
>> >> > The following error is appearing on my exchange 2003 server in the
>> >> > event
>> >> > log
>> >> > on a regular basis, emails are still being sent & received ok as far
>> >> > as
>> >> > I
>> >> > can
>> >> > tell. Nothing on the server has been changed recently. Any help
>> >> > would
>> >> > be
>> >> > appreciated.
>> >> >
>> >> > Regards
>> >> > Richard
>> >> >
>> >> > Event Type: Warning
>> >> > Event Source: MSExchangeTransport
>> >> > Event Category: SMTP Protocol
>> >> > Event ID: 7002
>> >> > Date: 12/10/2007
>> >> > Time: 09:04:17
>> >> > User: N/A
>> >> > Computer: EMAIL-SERVER
>> >> > Description:
>> >> > This is an SMTP protocol warning log for virtual server ID 1,
>> >> > connection
>> >> > #690. The remote host "xxx.xx.xx.xx", responded to the SMTP command
>> >> > "rcpt"
>> >> > with "451 lowest numbered MX record points to local host ". The full
>> >> > command
>> >> > sent was "RCPT TO:<mail***@domain.co.uk>  ".  This may cause the
>> >> > connection
>> >> > to fail.
>> >> >
>> >> >
>> >>
>> >>
>> >>
>>
>>
>>
Author
18 Oct 2007 10:45 AM
Richard S
Ed,
RCPT TO:<technical-department_num_44***@natwest.co.uk>  this is what it says
in the event log, to me this looks a fake email address?

Regards
Richard

Show quote
"Ed Crowley [MVP]" wrote:

> Well, that resolves to relay1.netnames.net, and, oddly enough, it's not in
> any MX record for netnames.net.  To whom is the mail being sent that
> generates this response?
> --
> Ed Crowley
> MVP - Exchange
> "Protecting the world from PSTs and brick backups!"
>
> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
> news:ACA0580A-F780-49B8-B496-8B29624B4798@microsoft.com...
> >I don't know the host but here is the ip address 212.53.64.43
> >
> > "Ed Crowley [MVP]" wrote:
> >
> >> What is the host at the IP address you x'ed out?
> >> --
> >> Ed Crowley
> >> MVP - Exchange
> >> "Protecting the world from PSTs and brick backups!"
> >>
> >> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
> >> news:5E0B5C2F-1EE5-42AB-ADCF-10D43EC4CE1A@microsoft.com...
> >> > Ed,
> >> > Thank you for your reply. Yes the .co.uk domain is ours and that domain
> >> > is
> >> > set in the default recipient policy.
> >> >
> >> > Regards
> >> > Richard
> >> >
> >> > "Ed Crowley [MVP]" wrote:
> >> >
> >> >> Is domain.co.uk your domain?  Is your Exchange server configured to
> >> >> receive
> >> >> mail for that domain in a recipient policy?
> >> >> --
> >> >> Ed Crowley
> >> >> MVP - Exchange
> >> >> "Protecting the world from PSTs and brick backups!"
> >> >>
> >> >> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
> >> >> news:F5A7C311-7A60-451A-95CF-B84902CDB234@microsoft.com...
> >> >> > Hello,
> >> >> > The following error is appearing on my exchange 2003 server in the
> >> >> > event
> >> >> > log
> >> >> > on a regular basis, emails are still being sent & received ok as far
> >> >> > as
> >> >> > I
> >> >> > can
> >> >> > tell. Nothing on the server has been changed recently. Any help
> >> >> > would
> >> >> > be
> >> >> > appreciated.
> >> >> >
> >> >> > Regards
> >> >> > Richard
> >> >> >
> >> >> > Event Type: Warning
> >> >> > Event Source: MSExchangeTransport
> >> >> > Event Category: SMTP Protocol
> >> >> > Event ID: 7002
> >> >> > Date: 12/10/2007
> >> >> > Time: 09:04:17
> >> >> > User: N/A
> >> >> > Computer: EMAIL-SERVER
> >> >> > Description:
> >> >> > This is an SMTP protocol warning log for virtual server ID 1,
> >> >> > connection
> >> >> > #690. The remote host "xxx.xx.xx.xx", responded to the SMTP command
> >> >> > "rcpt"
> >> >> > with "451 lowest numbered MX record points to local host ". The full
> >> >> > command
> >> >> > sent was "RCPT TO:<mail***@domain.co.uk>  ".  This may cause the
> >> >> > connection
> >> >> > to fail.
> >> >> >
> >> >> >
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>
Author
19 Oct 2007 3:42 AM
Ed Crowley [MVP]
Looks legal but phony to me too.
--
Ed Crowley
MVP - Exchange
"Protecting the world from PSTs and brick backups!"

Show quote
"Richard S" <Richa***@discussions.microsoft.com> wrote in message
news:285A500C-B172-4F3E-ABDC-093E71618932@microsoft.com...
> Ed,
> RCPT TO:<technical-department_num_44***@natwest.co.uk>  this is what it
> says
> in the event log, to me this looks a fake email address?
>
> Regards
> Richard
>
> "Ed Crowley [MVP]" wrote:
>
>> Well, that resolves to relay1.netnames.net, and, oddly enough, it's not
>> in
>> any MX record for netnames.net.  To whom is the mail being sent that
>> generates this response?
>> --
>> Ed Crowley
>> MVP - Exchange
>> "Protecting the world from PSTs and brick backups!"
>>
>> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
>> news:ACA0580A-F780-49B8-B496-8B29624B4798@microsoft.com...
>> >I don't know the host but here is the ip address 212.53.64.43
>> >
>> > "Ed Crowley [MVP]" wrote:
>> >
>> >> What is the host at the IP address you x'ed out?
>> >> --
>> >> Ed Crowley
>> >> MVP - Exchange
>> >> "Protecting the world from PSTs and brick backups!"
>> >>
>> >> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
>> >> news:5E0B5C2F-1EE5-42AB-ADCF-10D43EC4CE1A@microsoft.com...
>> >> > Ed,
>> >> > Thank you for your reply. Yes the .co.uk domain is ours and that
>> >> > domain
>> >> > is
>> >> > set in the default recipient policy.
>> >> >
>> >> > Regards
>> >> > Richard
>> >> >
>> >> > "Ed Crowley [MVP]" wrote:
>> >> >
>> >> >> Is domain.co.uk your domain?  Is your Exchange server configured to
>> >> >> receive
>> >> >> mail for that domain in a recipient policy?
>> >> >> --
>> >> >> Ed Crowley
>> >> >> MVP - Exchange
>> >> >> "Protecting the world from PSTs and brick backups!"
>> >> >>
>> >> >> "Richard S" <Richa***@discussions.microsoft.com> wrote in message
>> >> >> news:F5A7C311-7A60-451A-95CF-B84902CDB234@microsoft.com...
>> >> >> > Hello,
>> >> >> > The following error is appearing on my exchange 2003 server in
>> >> >> > the
>> >> >> > event
>> >> >> > log
>> >> >> > on a regular basis, emails are still being sent & received ok as
>> >> >> > far
>> >> >> > as
>> >> >> > I
>> >> >> > can
>> >> >> > tell. Nothing on the server has been changed recently. Any help
>> >> >> > would
>> >> >> > be
>> >> >> > appreciated.
>> >> >> >
>> >> >> > Regards
>> >> >> > Richard
>> >> >> >
>> >> >> > Event Type: Warning
>> >> >> > Event Source: MSExchangeTransport
>> >> >> > Event Category: SMTP Protocol
>> >> >> > Event ID: 7002
>> >> >> > Date: 12/10/2007
>> >> >> > Time: 09:04:17
>> >> >> > User: N/A
>> >> >> > Computer: EMAIL-SERVER
>> >> >> > Description:
>> >> >> > This is an SMTP protocol warning log for virtual server ID 1,
>> >> >> > connection
>> >> >> > #690. The remote host "xxx.xx.xx.xx", responded to the SMTP
>> >> >> > command
>> >> >> > "rcpt"
>> >> >> > with "451 lowest numbered MX record points to local host ". The
>> >> >> > full
>> >> >> > command
>> >> >> > sent was "RCPT TO:<mail***@domain.co.uk>  ".  This may cause the
>> >> >> > connection
>> >> >> > to fail.
>> >> >> >
>> >> >> >
>> >> >>
>> >> >>
>> >> >>
>> >>
>> >>
>> >>
>>
>>
>>

AddThis Social Bookmark Button