Turn relay on and see if the queues clear. If so, do a trace on SMTP traffic and get a list of who's sending what. If those are legitimate business uses, consider an exception in the relay rule or fix the program or person generating the mail getting relayed so it submits from within the organization. There are ways to properly automate a MAPI or SMTP profile to properly send mail to an Exchange server, regardless of the sending platform.
Anyway, let us know what happens after you allow relaying for an hour or so. (:= -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Clishe, Jason Sent: Wednesday, September 04, 2002 2:10 PM To: Exchange Discussions Subject: IMC crashing every night; Event ID 4132: receiving 5 or 6 every minute I have a client with an NT 4 SP5, Exchange 5.0 SP2 box. Server is PDC, WINS, DHCP. It's the only server in the organization, about 15 employees. Every morning when they come in, the IMC is stopped. They are able to restart it fine. The only error in the event logs is 4132 events coming from the MSExchangeIMC. The description is as follows: Event ID: 4132 Type: Error Source: MSExchangeIMC Description: The Internet Mail Service has failed attempting to deliver a system message. It will be moved from the queue into the ARCHIVE directory. The spool file name can be found in the Data section of this event. I have only been able to find 2 MSKB articles that discuss this error (Q189095 and Q185108) Q189095 indicates that this message can appear when IMC size restrictions are enforced, and is for information only. My client is not enforcing IMC size restrictions. Q185108 says the following: "One possible cause may be incorrect information in the Routing Address tab of the Connected Sites property page of the Internet Mail Connector. These errors may also be logged when the Internet Mail Connector is not able to resolve the remote Internet Mail Connector domain name or IP address. You should try verifying entries in DNS Manager." My client only has one site, and the Connected Sites tab is empty. Interestingly, they had relaying turned on until about a month ago. These errors started showing up within a few days of turning off relaying. Also, the outbound IMC queue is constantly full of hundreds of pending messages; I'm assuming these messages are probably NDR's that Exchange is trying to send to people attempting to relay. Can anyone shed some light on what might be going on here? Thanks Jason _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe: mailto:[EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED]
