Question : SBS 2003 Exchange Application log lots of Event ID 7010

Checking the application log on an SBS 2003 server, has a lot of these in it.

This is an SMTP protocol log for virtual server ID 1, connection #42. The client at "111.222.333.44" sent a "rcpt" command, and the SMTP server responded with "550 5.7.1 Unable to relay for [email protected]  ". The full command sent was "rcpt TO: <[email protected]>".  This will probably cause the connection to fail.

Should I have Global Settings / Message Delivery Properties / Sender ID filtering set to REJECT? I checked an article by Sembee http://www.amset.info/exchange/spam-cleanup.asp and in first section "Check Whether the Exchange Server is an Open SMTP Relay using a Telnet Test"  I get the "550 5.7.1 Unable to relay for [email protected]" so the server is not an open smtp relay.  There are no messages queued either but I was wondering how to stop these messages

Should I have

Answer : SBS 2003 Exchange Application log lots of Event ID 7010

You don't. You have to allow connections to receive legitimate email, and those connections can *attempt* to abuse the connection they've made. Thus, an attempted abuse gets logged. This is precisely what you want to happen.

-Cliff