MDaemon’s eventlog codes – Everything MDaemon

MDaemon generates a number of entries in the Windows eventlogs to assist administrators in monitoring for specific important events. Below is a list of the various eventlog codes that MDaemon uses at this time:

500	** ALERT ** ODBC DSN %s for list %s could not be opened; message to list was not sent to ODBC members [EvODBC]
501	** ALERT ** RFC 2822 states that you MUST define a %s alias [EvRFC]
502	** ALERT ** Network subsystem failure, WINSOCK.DLL not loaded [EvNetwork]
503	** ALERT ** %s %s:%d could not be initialized [EvNetwork]
504	** ALERT ** DNS server IP address is blank; please provide a DNS server IP [EvDNS]
505	** ALERT ** MDaemon’s database connection failed so MDaemon was forced to refuse a mail session [EvDatabase]
506	** ALERT ** %s tried to send a message as %s without proper authentication [EvSecurity]
507	** ALERT ** MDaemon could not start because NTUtil.dll could not be loaded, err:%d [EvDLL]
508	** ALERT ** LDaemon LDAP server could not be started [EvProcess]
509	** ALERT ** MDaemon could not start because CFilter.dll could not be loaded [EvDLL]
510	** ALERT ** MDaemon could not start because MDUser.dll, MDUserODBC.dll, or MDUserLDAP.dll could not be loaded [EvDLL]
511	** ALERT ** MDaemon could not start because MDCalendar.dll could not be loaded [EvDLL]
512	** ALERT ** MDaemon could not start because MDList.dll could not be loaded [EvDLL]
513	** ALERT ** Failed to start process %s (FailPoint: %d, Error: %d/%d) [EvProcess]
514	** ALERT ** Failed to start process CFENGINE.EXE; mail can be queued but not delivered (FailPoint: %d, Error: %d/%d) [EvProcess]
515	** ALERT ** Failed to start process %s as user ‘%s’ on ‘%s’; started as default user instead; (FailPoint: %d, Error: %d/%d) [EvProcess]
521	** ALERT ** %s gave false logon/password to POP server; user: %s [EvSecurity]
522	** ALERT ** The ‘[Special] RefuseNULLReturnPath’ option is set to YES in MDaemon.ini; this is an RFC violation [EvRFC]
523	** ALERT ** RFC does not require that HELO or MAIL identification match to the sending server yet MDaemon is configured to refuse mail in these cases (Reverse Lookup properties) [EvRFC]
524	** ALERT ** $AVLONGPRODUCTNAME$ subscription/trial has expired; contact %s or visit http://www.altn.com for renewal instructions [EvSecurity]
525	** ALERT ** WorldClient was expected to be running but wasn’t; restart attempt was %s [EvProcess]
527	** ALERT ** Spam Filter did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]
528	** ALERT ** MDaemon requires an installed and enabled Network Interface Card; software can not load [EvDLL]
529	** ALERT ** RFC 2142 states that you MUST define an %s alias [EvRFC]
530	** ALERT ** Attempt to logon and impersonate user ‘%s’ on domain %s failed (Thread ID: %d, Error: %d) [EvProcess]
531	** ALERT ** AntiVirus did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]
532	** ALERT ** MDaemon could not load HashCash.dll. HashCash stamps can not be minted [EvDLL]
533	** ALERT ** MDaemon could not start MDSpamD.exe. AntiSpam services will not be possible [EvProcess]

Happy monitoring!

MDaemon’s eventlog codes by Dave Warren (everything-mdaemon.com) is licensed under a Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 International License.

13 Replies to “MDaemon’s eventlog codes”

Help me!

****Alert****MDaemon requirelled an installed and enabled Network Interface Card; Software can not load [EvDLL].

Thanks,

Could you help me,please?

**** ALERT **** RFC 2822 states that you MUST define a [email protected] alias [EvRFC]

Thanks

Amr,

You’ll need to add an alias of [email protected] for each of your domains, as required by RFC2821. This alias should point to whoever is responsible for maintaining your server, as a point of contact for other mail server administrators when needed.

Couls you please help me on :
506 **** ALERT **** %s tried to send a message as %s without proper authentication [EvSecurity]

Thanks,

hola me sale un error en el mdaemon que al pasar unos mintos el mdaemon se cierra el error es ****ALERT **** RFC 2822

That particular error won’t cause a crash or MDaemon to stop, the crash is unrelated to this error.

If MDaemon is crashing on startup you might want to contact Alt-N support for assistance.

Hi !
Currently you have to install and to use MDaemon Mail server deployment in the company.
Problems checking mail using normal mail client, Mail server temporarily stable operation. But she fails without finding out the cause:
Other applications on the server when opening the window l / v is normal, but in the open window MailServer l / v is not understood how big the window is not open, so if you want to use and move How to use the tab button, because there are a number of hidden buttons, ie when you open the MDaemon does not end window of the software MDaemon

To fix the bug on me I just hope and help them to mail my system stable
Sincerely
Nguyễn Hữu Thịnh

Please help me how to resolve this issue
I have been seeing a planty of these in my eventlog

How to resolve it

521 **** ALERT **** %s gave false logon/password to POP server; user: %s [EvSecurity]

Lawrence, there isn’t necessarily anything wrong here, this just indicates that someone is attempting to access an account on your server, but is using an incorrect password.

This could be a user with a misconfigured mail client (for example, if they changed their password recently but left their old password in their cell phone’s mail client), or it could be someone external trying to gain access to your server.

Check MDaemon’s Security options, specifically looking at Tarpitting and/or Dynamic Screening to automatically delay these attempts, or to lock out IPs for some time to reduce the odds that an attacker gets through.

Hello Mdaemon, we have a problem whit the 2 alerts below. how do we solve this event from showing on the server it seems that the services is running bu y stil get it.

greets from the netherlands.
thanks for youre help

527 **** ALERT **** Spam Filter did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]

531 **** ALERT **** AntiVirus did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]

521 **** ALERT **** %s gave false logon/password to POP server; user: %s [EvSecurity]

Dear Mdaemon,
I have the issue with 2 warnings and 1 error. What about it and how to solve it? Please help me. Thanks.

• **** ALERT **** RFC 2822 states that you MUST define a [email protected] alias [EvRFC]

• **** ALERT **** RFC 2142 states that you MUST define an Abuse@mydomain alias [EvRFC]

• sshd: PID 6540: error: Could not load host key: /etc/ssh_host_ecdsa_key

Regarding the RFC warnings, what part of the error isn’t clear? Create the required alias.

As for SSHD, is that coming from MDaemon?

Dau Thanh Cao on 2009-10-12 at 22:55 said:

Help me!

****Alert****MDaemon requirelled an installed and enabled Network Interface Card; Software can not load [EvDLL].

Thanks,
Amr on 2010-01-11 at 21:45 said:

Could you help me,please?

**** ALERT **** RFC 2822 states that you MUST define a [email protected] alias [EvRFC]

Thanks
Dave Warren on 2010-01-11 at 22:02 said:

Amr,

You’ll need to add an alias of [email protected] for each of your domains, as required by RFC2821. This alias should point to whoever is responsible for maintaining your server, as a point of contact for other mail server administrators when needed.
Ram on 2010-02-18 at 10:33 said:

Couls you please help me on :
506 **** ALERT **** %s tried to send a message as %s without proper authentication [EvSecurity]

Thanks,
jorgito on 2010-07-14 at 08:07 said:

hola me sale un error en el mdaemon que al pasar unos mintos el mdaemon se cierra el error es ****ALERT **** RFC 2822
Dave Warren on 2010-07-14 at 21:09 said:

That particular error won’t cause a crash or MDaemon to stop, the crash is unrelated to this error.

If MDaemon is crashing on startup you might want to contact Alt-N support for assistance.
Nguyen Huu Thinh on 2010-08-03 at 18:19 said:

Hi !
Currently you have to install and to use MDaemon Mail server deployment in the company.
Problems checking mail using normal mail client, Mail server temporarily stable operation. But she fails without finding out the cause:
Other applications on the server when opening the window l / v is normal, but in the open window MailServer l / v is not understood how big the window is not open, so if you want to use and move How to use the tab button, because there are a number of hidden buttons, ie when you open the MDaemon does not end window of the software MDaemon

To fix the bug on me I just hope and help them to mail my system stable
Sincerely
Nguyễn Hữu Thịnh
Lawrence Aquilia on 2011-03-17 at 10:27 said:

Please help me how to resolve this issue
I have been seeing a planty of these in my eventlog

How to resolve it

521 **** ALERT **** %s gave false logon/password to POP server; user: %s [EvSecurity]
Dave Warren on 2011-03-22 at 15:44 said:

Lawrence, there isn’t necessarily anything wrong here, this just indicates that someone is attempting to access an account on your server, but is using an incorrect password.

This could be a user with a misconfigured mail client (for example, if they changed their password recently but left their old password in their cell phone’s mail client), or it could be someone external trying to gain access to your server.

Check MDaemon’s Security options, specifically looking at Tarpitting and/or Dynamic Screening to automatically delay these attempts, or to lock out IPs for some time to reduce the odds that an attacker gets through.
Gerry on 2011-04-07 at 03:30 said:

Hello Mdaemon, we have a problem whit the 2 alerts below. how do we solve this event from showing on the server it seems that the services is running bu y stil get it.

greets from the netherlands.
thanks for youre help

527 **** ALERT **** Spam Filter did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]

531 **** ALERT **** AntiVirus did not respond within expected time limit; CFEngine may have stopped responding; it will be stopped and restarted [EvProcess]
yudi on 2013-06-09 at 20:01 said:

521 **** ALERT **** %s gave false logon/password to POP server; user: %s [EvSecurity]
SDMA on 2015-06-24 at 19:04 said:

Dear Mdaemon,
I have the issue with 2 warnings and 1 error. What about it and how to solve it? Please help me. Thanks.

• **** ALERT **** RFC 2822 states that you MUST define a [email protected] alias [EvRFC]

• **** ALERT **** RFC 2142 states that you MUST define an Abuse@mydomain alias [EvRFC]

• sshd: PID 6540: error: Could not load host key: /etc/ssh_host_ecdsa_key
Dave Warren on 2015-06-27 at 17:17 said:

Regarding the RFC warnings, what part of the error isn’t clear? Create the required alias.

As for SSHD, is that coming from MDaemon?

This site uses Akismet to reduce spam. Learn how your comment data is processed.

13 Replies to “MDaemon’s eventlog codes”

Leave a Reply