Event ID: 4115 Source: MSExchangeIMC

Event ID/Source search

Keyword search

Example: Windows cannot unload your registry file

EventID.Net Splunk Add-on

Build a great reporting interface using Splunk, one of the leaders in the Security Information and Event Management (SIEM) field, linking the collected Windows events to www.eventid.net. The EventId.Net for Splunk Add-on assumes that Splunk is collecting information from Windows servers and workstation via the Splunk Universal Forwarder.

Event ID: 4115 Source: MSExchangeIMC

Source: MSExchangeIMC

Type: Error

Description:
The message from the spool file <file name> seems to be looping through the routing extension for the Internet Mail Service. Please check that the routing DLL is configured properly.

English: Request a translation of the event description in plain English.

Concepts to understand:
What is a DLL?
What is the role of the Microsoft Exchange Internet Mail Connector service?

Comments:
Anonymous
This problem cleared up for me once I stopped rerouting incoming SMTP mail through the Internet Mail Service.
Click if the comment is good!

^{x
4}

Anonymous
This happened when I applied service pack 4 to 5.5 running service park 3. I had to change the file version in IMS to correct it and I haven't been able to correct the problem in the MS Mail Connector.
Click if the comment is good!

^{x
3}

EventID.Net
This behavior occurs because Internet Mail Service is connecting to itself in an attempt to deliver the message. See ME260247 for more information.
Click if the comment is good!

^{x
1}

EventID.Net
See the links below for suggestions on how to troubleshoot this event. Also, suggested on a newsgroup post: "Turn on the SMTP Protocol Log category of Diagnostics Logging on the IMS. Set the level to "Maximum". Stop and restart the IMS. Wait for the 4115 to show up, then stop the IMS, turn off the SMTP Protocol Log. Now have a look through the log files for the "too many hops" line and work UP the file until you see the RCPT TO header. That'll tell you where the message was going. From there it should be easy to figure out what's happening."
Click if the comment is good!

^{x
2}

Private comment: Subscribers only. See example of private comment

Links: ME189095, ME260247

Search: Google - Bing - Microsoft - Yahoo - EventID.Net Queue (0) - More links...

Feedback: Send comments or solutions - Notify me when updated

Printer friendly