none
exchange2013 SmtpReceive RRS feed

 > 

  • 问题

  • Question
    登录进行投票
    0
    登录进行投票

    在exchange2013服务器上，有很多这种报警日专

    event id 1035

    接收連接器 Client Frontend SUNLUEN-TX9 的輸入驗證失敗，錯誤為 LogonDenied。驗證機制是 Login。嘗試驗證 Microsoft Exchange 的用戶端來源 IP 位址是 [127.0.0.1]。

    2014年10月22日 3:31
    |

答案

全部回复

  • Question
    登录进行投票
    0
    登录进行投票

    你好，

    建议参考下面的KB文章解决问题：
    https://support.microsoft.com/kb/979174/zh-cn?wa=wsignin1.0

    谢谢！

    Niko Cheng
    TechNet Community Support

    2014年10月23日 6:51
    |
    版主
  • Question
    登录进行投票
    0
    登录进行投票

    组织内只有一台exchange服务器，是有两个域名的邮件服务器，用戶端來源 IP 位址是 [127.0.0.1]。不就是本身服务器吗？应该不是此类问题。

    我也试过此方法中改注册表，也不行。


    2014年10月23日 10:14
    |
  • Question
    登录进行投票
    0
    登录进行投票

    在smtp日志中找到如下东西
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,26,127.0.0.1:587,127.0.0.1:18426,<,EHLO SmtpClientSubmissionProbe,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,27,127.0.0.1:587,127.0.0.1:18426,*,None,Set Session Permissions
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,28,127.0.0.1:587,127.0.0.1:18426,*,,Client certificate chain validation status: 'EmptyCertificate'
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,29,127.0.0.1:587,127.0.0.1:18426,*,,TlsDomainCapabilities='None'; Status='NoRemoteCertificate'
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,30,127.0.0.1:587,127.0.0.1:18426,*,,TlsDomainCapabilities='None'; Status='NoRemoteCertificate'
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,31,127.0.0.1:587,127.0.0.1:18426,*,None,Set Session Permissions
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,32,127.0.0.1:587,127.0.0.1:18426,>,250-sunluen-tx9.sunluen-tx.local Hello [127.0.0.1],
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,33,127.0.0.1:587,127.0.0.1:18426,>,250-SIZE 20971520,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,34,127.0.0.1:587,127.0.0.1:18426,>,250-PIPELINING,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,35,127.0.0.1:587,127.0.0.1:18426,>,250-DSN,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,36,127.0.0.1:587,127.0.0.1:18426,>,250-ENHANCEDSTATUSCODES,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,37,127.0.0.1:587,127.0.0.1:18426,>,250-AUTH GSSAPI NTLM LOGIN,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,38,127.0.0.1:587,127.0.0.1:18426,>,250-8BITMIME,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,39,127.0.0.1:587,127.0.0.1:18426,>,250-BINARYMIME,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,40,127.0.0.1:587,127.0.0.1:18426,>,250 CHUNKING,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,41,127.0.0.1:587,127.0.0.1:18426,<,AUTH LOGIN,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,42,127.0.0.1:587,127.0.0.1:18426,>,334 <authentication response>,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,43,127.0.0.1:587,127.0.0.1:18426,>,334 <authentication response>,
    2014-10-24T08:09:12.234Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,44,127.0.0.1:587,127.0.0.1:18426,*,,Inbound AUTH LOGIN failed because of LogonDenied
    2014-10-24T08:09:12.249Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,45,127.0.0.1:587,127.0.0.1:18426,*,,User Name: HealthMailbox9faf5016db994f4998c8e32c165c86a1@XXXXX.com
    2014-10-24T08:09:12.249Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,46,127.0.0.1:587,127.0.0.1:18426,*,Tarpit for '0.00:00:05',
    2014-10-24T08:09:17.249Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,47,127.0.0.1:587,127.0.0.1:18426,>,535 5.7.3 Authentication unsuccessful,
    2014-10-24T08:09:17.249Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,48,127.0.0.1:587,127.0.0.1:18426,<,QUIT,

    2014-10-24T08:09:17.249Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,49,127.0.0.1:587,127.0.0.1:18426,*,None,Set Session Permissions

    2014-10-24T08:09:17.249Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,50,127.0.0.1:587,127.0.0.1:18426,>,221 2.0.0 Service closing transmission channel,
    2014-10-24T08:09:17.249Z,SUNLUEN-TX9\Client Frontend SUNLUEN-TX9,08D1BB54885B4A0B,51,127.0.0.1:587,127.0.0.1:18426,-,,Local

    是不是这个邮箱HealthMailbox9faf5016db994f4998c8e32c165c86a1@XXXXX.com 验证通不过呀？
    怎样解决？

    2014年10月24日 8:26
    |
  • Question
    登录进行投票
    0
    登录进行投票
    终于解决了，删除全部HealthMailbox信箱，重启Manages Exchange server health服务
    • 已标记为答案 liuxg168 2014年11月6日 6:39
    2014年11月6日 6:39
    |