Event ID: 3017, 3018

[HKNinja]

Hi all,

Obviously this is not a new issue but I can't seem to find a good solution to this just yet.

Event ID: 3017
Category: NDR
Description:
A non-delivery report with a status code of 5.3.5 was generated for recipient rfc822;aa0305@tomail.com.tw (Message-ID <VFCCRUNNGQYEYVWBUCMHVNOD@ms17.hinet.net>).
Causes: A looping condition was detected. (The server is configured to route mail back to itself). If you have multiple SMTP Virtual Servers configured on your Exchange server, make sure they are defined by a unique incoming port and that the outgoing SMTP port configuration is valid to avoid looping between local virtual servers.
Solution: Check the configuration of the virtual serverÆs connectors for loops and ensure each virtual server is defined by a unique incoming port.

Event ID: 3018 is basically the same error.

I receive tons of this error on my Exchange server. This seem to have clog up my SMTP Virtual Server and cause mail not to be delivered to users. I have to stop/start my SMTP Virtual Server a number of times this week. Anybody has solution to this problem?

 

[HKNinja]

btw, I already check my DNS as Microsoft suggested with no luck.

http://support.microsoft.com/default.aspx?scid=kb;en-us;555418&sd=rss&spid=1773

 

[karmic]

i'm thinking it's the same error I just fought with late last week... Turned out the pres was messing with a blackberry and created a contact for forwarding email off the domain, but the contact email was the same as the domain email.

Fixed the contact and all was well.

Maybe nothing, maybe something.

~ K.I.S.S - Don't make it any more complex than it has to be ~

 

[HKNinja]

It has something to do with NDR attacks. Google NDR attack and you should find solutions to lockdown the Exchange server and prevent unwanted Queues hitting the server.