I have a helpdesk system that sends mails through the local exchange server. Until a few days ago, I never had issues with it.
For the last week we have started getting complaints about missing emails (that were supposed to be sent to users but were not) and turns out there were errors "5.7.1 Unable to Relay"
This apparently happens on 10% of the emails. Most of them work just fine.
I have checked the incoming transport logs on the server and there is absolutely no sign of those missing emails. I'm looking at date/time second and source address or any other SMTP connection attempt but there is nothing (at least obvious).
Any ideas where to look? Any other logs that I can see? Except event viewer?