MDaemon’s eventlog codes

MDaemon generates a number of entries in the Windows eventlogs to assist administrators in monitoring for specific important events. Below is a list of the various eventlog codes that MDaemon uses at this time:

500 **** ALERT **** ODBC DSN %s for list %s could not be opened; message to list was not sent to ODBC members [EvODBC]
501 **** ALERT **** RFC 2822 states that you MUST define a %s alias [EvRFC]
502 **** ALERT **** Network subsystem failure, WINSOCK.DLL not loaded [EvNetwork]
503 **** ALERT **** %s %s:%d could not be initialized [EvNetwork]
504 **** ALERT **** DNS server IP address is blank; please provide a DNS server IP [EvDNS]
505 **** ALERT **** MDaemon’s database connection failed so MDaemon was forced to refuse a mail session [EvDatabase]
506 **** ALERT **** %s tried to send a message as %s without proper authentication [EvSecurity]
507 **** ALERT **** MDaemon could not start because NTUtil.dll could not be loaded, err:%d [EvDLL]
508 **** ALERT **** LDaemon LDAP server could not be started [EvProcess]
509 **** ALERT **** MDaemon could not start because CFilter.dll could not be loaded [EvDLL]
510 **** ALERT **** MDaemon could not start because MDUser.dll, MDUserODBC.dll, or MDUserLDAP.dll could not be loaded [EvDLL]
511 **** ALERT **** MDaemon could not start because MDCalendar.dll could not be loaded [EvDLL]
512 **** ALERT **** MDaemon could not start because MDList.dll could not be loaded [EvDLL]
513 **** ALERT **** Failed to start process %s (FailPoint: %d, Error: %d/%d) [EvProcess]
514 **** ALERT **** Failed to start process CFENGINE.EXE; mail can be queued but not delivered (FailPoint: %d, Error: %d/%d) [EvProcess]
515 **** ALERT **** Failed to start process %s as user ‘%s’ on ‘%s’; started as default user instead; (FailPoint: %d, Error: %d/%d) [EvProcess]
521 **** ALERT **** %s gave false logon/password to POP server; user: %s [EvSecurity]
522 **** ALERT **** The ‘[Special] RefuseNULLReturnPath’ option is set to YES in MDaemon.ini; this is an RFC violation [EvRFC]
523 **** ALERT **** RFC does not require that HELO or MAIL identification match to the sending server yet MDaemon is configured to refuse mail in these cases (Reverse Lookup properties) [EvRFC]
524 **** ALERT **** $AVLONGPRODUCTNAME$ subscription/trial has expired; contact %s or visit http://www.altn.com for renewal instructions [EvSecurity]
525 **** ALERT **** WorldClient was expected to be running but wasn’t; restart attempt was %s [EvProcess]
527 **** ALERT **** Spam Filter did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]
528 **** ALERT **** MDaemon requires an installed and enabled Network Interface Card; software can not load [EvDLL]
529 **** ALERT **** RFC 2142 states that you MUST define an %s alias [EvRFC]
530 **** ALERT **** Attempt to logon and impersonate user ‘%s’ on domain %s failed (Thread ID: %d, Error: %d) [EvProcess]
531 **** ALERT **** AntiVirus did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]
532 **** ALERT **** MDaemon could not load HashCash.dll. HashCash stamps can not be minted [EvDLL]
533 **** ALERT **** MDaemon could not start MDSpamD.exe. AntiSpam services will not be possible [EvProcess]

Happy monitoring!

CC BY-NC-ND 4.0 MDaemon’s eventlog codes by Dave Warren (everything-mdaemon.com) is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

13 Replies to “MDaemon’s eventlog codes”

  1. Help me!

    ****Alert****MDaemon requirelled an installed and enabled Network Interface Card; Software can not load [EvDLL].

    Thanks,

  2. Amr,

    You’ll need to add an alias of [email protected] for each of your domains, as required by RFC2821. This alias should point to whoever is responsible for maintaining your server, as a point of contact for other mail server administrators when needed.

  3. Couls you please help me on :
    506 **** ALERT **** %s tried to send a message as %s without proper authentication [EvSecurity]

    Thanks,

  4. hola me sale un error en el mdaemon que al pasar unos mintos el mdaemon se cierra el error es ****ALERT **** RFC 2822

  5. That particular error won’t cause a crash or MDaemon to stop, the crash is unrelated to this error.

    If MDaemon is crashing on startup you might want to contact Alt-N support for assistance.

  6. Hi !
    Currently you have to install and to use MDaemon Mail server deployment in the company.
    Problems checking mail using normal mail client, Mail server temporarily stable operation. But she fails without finding out the cause:
    Other applications on the server when opening the window l / v is normal, but in the open window MailServer l / v is not understood how big the window is not open, so if you want to use and move How to use the tab button, because there are a number of hidden buttons, ie when you open the MDaemon does not end window of the software MDaemon

    To fix the bug on me I just hope and help them to mail my system stable
    Sincerely
    Nguyễn Hữu Thịnh

  7. Please help me how to resolve this issue
    I have been seeing a planty of these in my eventlog

    How to resolve it

    521 **** ALERT **** %s gave false logon/password to POP server; user: %s [EvSecurity]

  8. Lawrence, there isn’t necessarily anything wrong here, this just indicates that someone is attempting to access an account on your server, but is using an incorrect password.

    This could be a user with a misconfigured mail client (for example, if they changed their password recently but left their old password in their cell phone’s mail client), or it could be someone external trying to gain access to your server.

    Check MDaemon’s Security options, specifically looking at Tarpitting and/or Dynamic Screening to automatically delay these attempts, or to lock out IPs for some time to reduce the odds that an attacker gets through.

  9. Hello Mdaemon, we have a problem whit the 2 alerts below. how do we solve this event from showing on the server it seems that the services is running bu y stil get it.

    greets from the netherlands.
    thanks for youre help

    527 **** ALERT **** Spam Filter did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]

    531 **** ALERT **** AntiVirus did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]

  10. 521 **** ALERT **** %s gave false logon/password to POP server; user: %s [EvSecurity]

  11. Dear Mdaemon,
    I have the issue with 2 warnings and 1 error. What about it and how to solve it? Please help me. Thanks.

    • **** ALERT **** RFC 2822 states that you MUST define a [email protected] alias [EvRFC]

    • **** ALERT **** RFC 2142 states that you MUST define an Abuse@mydomain alias [EvRFC]

    • sshd: PID 6540: error: Could not load host key: /etc/ssh_host_ecdsa_key

  12. Regarding the RFC warnings, what part of the error isn’t clear? Create the required alias.

    As for SSHD, is that coming from MDaemon?

Leave a Reply

Your email address will not be published. Required fields are marked *

*

This site uses Akismet to reduce spam. Learn how your comment data is processed.