This event may be seen when the SMTP service on an Exchange server has one or more mail-delivery problems. These mail delivery problems could be caused by several factors such as DNS, IP configuration, or wrong DLL files installed.
Sample Event:
Event Type: Warning
Event Source: SMTPsvc
Event Category: None
Event ID: 4000
Description: Message delivery to the remote domain "_c78290b817c75f4bac724d36582fdeea_D" failed. The error message is "Unable to bind to the destination server in DNS.
Event Type: Warning
Event Source: SMTPsvc
Event Category: None
Event ID: 4000
Description: Message delivery to the remote domain "domain.com" failed. An internal DNS error caused a failure to find the remote server.
0000: c00402e7
The internet-facing network interface card is lower in the binding order than the internal-facing network interface card.
Change the IP configuration so that the internet-facing network interface card is higher up in the binding order.
Use a different DNS server that supports TCP queries. Alternatively, configure the DNS server so it does not use TCP queries and uses User Datagram Protocol (UDP) instead.
Make sure that the Exchange DLLs are correctly registered by running Exchange Setup and choosing Reinstall.
For more information, search the Microsoft Knowledge Base for articles about IIS events.
Target | Microsoft.Exchange.Protocol.SMTP | ||
Category | EventCollection | ||
Enabled | True | ||
Event_ID | 4000 | ||
Event Source | SMTPSVC | ||
Alert Generate | True | ||
Alert Severity | Warning | ||
Alert Priority | Normal | ||
Remotable | True | ||
Alert Message |
| ||
Event Log | System |
ID | Module Type | TypeId | RunAs |
---|---|---|---|
_907D4578_146C_11D3_AB21_00A0C98620CE_ | DataSource | Microsoft.Windows.EventProvider | Default |
GenerateAlert | WriteAction | System.Health.GenerateAlert | Default |
<Rule ID="Message_delivery_to_the_remote_domain_failed_" Enabled="onEssentialMonitoring" Target="Exch2003Core!Microsoft.Exchange.Protocol.SMTP" ConfirmDelivery="false" Remotable="true" Priority="Normal" DiscardLevel="100">
<Category>EventCollection</Category>
<DataSources>
<DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" TypeID="Windows!Microsoft.Windows.EventProvider">
<ComputerName>.</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>Channel</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>System</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>SMTPSVC</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>4000</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</DataSource>
</DataSources>
<WriteActions>
<WriteAction ID="GenerateAlert" TypeID="SystemHealth!System.Health.GenerateAlert">
<Priority>1</Priority>
<Severity>1</Severity>
<AlertOwner>$Data/PublisherName$</AlertOwner>
<AlertMessageId>$MPElement[Name="Message_delivery_to_the_remote_domain_failed_.AlertMessage"]$</AlertMessageId>
<AlertParameters>
<AlertParameter1>$Data/EventDescription$</AlertParameter1>
</AlertParameters>
<Suppression>
<SuppressionValue/>
</Suppression>
</WriteAction>
</WriteActions>
</Rule>