I get them all the time; most of them are EXEC2STATE DROP and stuff like that from either misconfigured Ex2k installs thinking I am a routing group or *nix boxes doing other stuff. This is why I've been wanting to find out the IP of the offending box, but nothing matches up in my logs... I do see port 25 blocks in the fw log, but not at the same time that the smtpevt shows up... ----- Original Message ----- From: Kirk Poser To: [ISAserver.org Discussion List] Sent: Thursday, August 23, 2001 1:48 PM Subject: [isalist] Error 17220 http://www.ISAserver.org Has anyone run across this yet? In the event viewer, I am seeing this daily: Event ID 17220 "An unknown SMTP command" Source: smtpevt I am running ISA on a member server, and behind it on another server is Exchange 2000. I can't seem to find out any information on this error? Kapt Kirk kaptinkirk@xxxxxxx ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: kaptinkirk@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: thor@xxxxxxxxxxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') Get more from the Web. FREE MSN Explorer download : http://explorer.msn.com