| Event Id | 3022 |
| Source | MSExchangeTransport |
| Description | A non-delivery report with a status code of %1 was generated for recipient %2 (Message-ID %3).Cause: This message indicates a generic protocol error (SMTP error). For example, the remote SMTP responds to an issued EHLO with a 500 level error and the sending system will QUIT the connection and report this with NDR indicating the remote SMTP server canĘt handle the protocol.Solution: View the SMTP log or run a netmon trace to see why the remote SMTP server rejects the protocol request. |
| Event Information | "According To Microsoft: CAUSE: This Warning event indicates that a generic protocol error (SMTP error) has caused message delivery to fail. This event may occur if the remote SMTP server cannot handle the protocol. For example, if a sending server sends an EHLO to a remote SMTP server, the remote server may send back a 500-level error. If a 500-level error is received, the sending server will issue a QUIT command and drop the connection. In this example, when the connection is dropped, a non-delivery report (NDR) is generated. RESOLUTION: TO Resolve this error, do one or more of the following: 1. Enable SMTP logging and examine the SMTP log for other events that may provide more information about the underlying cause of this event. 2. Use Network Monitor to capture network traffic. The information provided in the network trace may help you understand why the remote SMTP server rejected the protocol request. |
| Reference Links | Microsoft product: Exchange Version: 6.5.7596.0 Event Source: MSExchangeTransport Event ID: 3022 |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.