Re: NDR messages...

Tech-Archive recommends: Fix windows errors by optimizing your registry

"Adrian Brown" <adrian@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:ukOfv%234eHHA.4364@xxxxxxxxxxxxxxxxxxxxxxx
Ive checked the log file and i get several things that look like this

Focussing on the first of these:

2007-4-9 0:0:23 GMT 127.0.0.1 apbcomputerservices.co.uk - APB-DC01
127.0.0.1 Adrian@xxxxxxxxxxxxxxxxxxxxxxxxx 1033
000001c77a3a$0bc01ce0$0200a8c0@xxxxxxxxxxxxxxxxxxxxxxxxxx 3 0 12305 1 - 0
Version: 6.0.3790.1830 - Boost your sexval power now urielh@xxxxxxxxxxx -

If my reading is correct then:

2007-4-9 0:0:23 GMT is when the message was logged.

127.0.0.1 is the client-ip of the machine that caused the request. I have
NDRs turned off (see my previous posting), and I don't have 127.0.0.1 in my
logs - nor can I tell whether I used to get them for NDRs.

apbcomputerservices.co.uk is the client host-name. Judging by my own logs
I would expect this to be the dns name of the computer that made the
request.

- Partner-name. No idea what this is, always blank ("-") in my logs.

APB-DC01 the name of your server.

127.0.0.1 the ip address of your server. In my logs this is always "-"

Adrian@xxxxxxxxxxxxxxxxxxxxxxxxx - Recipient address.

1033 Event ID. 1033 (according to
http://support.microsoft.com:80/?id=821905) means SMTP message categorized
and queued for routing.

000001c77a3a$0bc01ce0$0200a8c0@xxxxxxxxxxxxxxxxxxxxxxxxxx MSGID.

Looking at my logs I always have events before 1033. It might be interesting
to search on the MSGID for the first time the message is mentioned in your
logs. That entry hopefully will show where the message originated from.

I'm assuming at this point that you have NDRs disabled (as per my first
reply in this thread, but your reply to Cris implies that you might not ...)
--
Brian Cryer
www.cryer.co.uk/brian




.

Relevant Pages

  • Re: URLScan and Server Variables - ASP.NET
    ... Request will be rejected. ... > of logging ASP.NET page with Server Variables. ... HTML page would not have any processing, ... > track this using IIS Logs? ...
    (microsoft.public.inetserver.iis.security)
  • Re: Page Cannot Be Displayed Errors
    ... not IIS, but something else. ... >>> directly on the web server, ... >>>>> I have done some additional checking in the logs. ... >>>>> either the request isn't even getting to IIS at this point, ...
    (microsoft.public.inetserver.iis)
  • SSL Tunnel Issues
    ... SSL-Tunnel request, and users do have the rights go out 443, but are showing ... THe logs show 2 attempts as ... HTTPS from Internal to External for all Authenticated users. ... > server is a secure-nat and web proxy client. ...
    (microsoft.public.isa)
  • Re: URLScan and Server Variables - ASP.NET
    ... I was confirming that it is not a log produced by HTML page - where due ... Request will be rejected. ... > of logging ASP.NET page with Server Variables. ... >> track this using IIS Logs? ...
    (microsoft.public.inetserver.iis.security)
  • Re: IIS 6 Ports Stop Responding
    ... If you do not see any traffic in those logs, then traffic is not getting to ... the server and is the cause for "Cannot find server or DNS Error". ... have networking issues unrelated to IIS. ... > or failed request), then the problem is not likely an IIS issue since the ...
    (microsoft.public.inetserver.iis)