Anti-spam agents are enabled, but the list of internal SMTP servers is empty
Topic Last Modified: 2007-11-16
The Microsoft Exchange Server 2007 Management Pack for Operations Manager monitors the Windows Application log on computers that are running Exchange Server 2007 and generates this alert when the event or events specified in the following Details table are logged.
To learn more about this event, do one or more of the following:
Review the description of the event that includes the variables specific to your environment. From the Operator Console, select this alert, and then click the Properties tab.
Review all events that have been logged that meet the criteria of this Operations Manager alert. From the Operator Console, click the Events tab, and then double-click the event in the list for which you want to review the event description.
Details
Product Name |
Exchange |
Product Version |
8.0 (Exchange Server 2007) |
Event ID |
1022 |
Event Source |
MSExchangeTransport |
Alert Type |
Warning |
MOM Rule Path |
Microsoft Exchange Server/Exchange 2007/Common Components/Hub Transport and Edge Transport/Transport |
MOM Rule Name |
Anti-spam agents are enabled, but the list of internal SMTP servers is empty. To populate this list, use the Set-TransportConfig cmdlet in the Exchange Management Shell. |
Explanation
The Warning event indicates that Microsoft Exchange Server 2007 anti-spam agents are enabled and the list of internal Simple Mail Transfer Protocol (SMTP) servers is empty.
In some organizations, the Hub Transport server role or Edge Transport server role that is running connection filtering is installed on computers that don't process SMTP requests directly on the Internet. In this scenario, the Exchange 2007 transport server is behind another front-end SMTP server that processes inbound messages directly from the Internet. The Connection Filter agent must be able to extract the correct originating IP address from the message. To extract and evaluate the originating IP address, the Connection Filter agent must parse the Received headers from the message and compare those headers with the known SMTP server in the perimeter network.
When an RFC-compliant SMTP server receives a message, the server updates the message's Received header with the domain name and IP address of the sender. Therefore, for each SMTP server that is between the originating sender and the Exchange 2007 transport server, the SMTP server adds an additional Received header entry.
User Action
To resolve this warning, you must specify all internal SMTP servers on the transport configuration object in the Active Directory directory service forest before you run connection filtering.
Specify the internal SMTP servers by using the InternalSMTPServers parameter on the Set-TransportConfig cmdlet. For more information, see Set-TransportConfig.
For more information about how to configure connection filtering see Configuring Connection Filtering.
For More Information
To search the Microsoft Knowledge Base articles based on criteria that generated this alert, visit the Search the Support Knowledge Base (KB) Web site.
To review Exchange 2007 event message articles that may not be represented by Exchange 2007 alerts, see the Events and Errors Message Center.
If you are not already doing so, consider running the tools that Microsoft Exchange offers to help administrators analyze and troubleshoot their Exchange environment. These tools can help you make sure that your configuration is in line with Microsoft best practices. They can also help you identify and resolve performance issues, improve mail flow, and better manage disaster recovery scenarios. Go to the Toolbox node of the Exchange Management Console to run these tools now. For more information about these tools, see Toolbox in the Exchange Server 2007 Help.