Link to home
Start Free TrialLog in
Avatar of davehaycox
davehaycox

asked on

Advanced Queue Failed to Deliver Message on one email domain

We have Exchange 2003 SP1 on SBS2003 using several email domains, all of which work fine apart from one.  For that domain (call it domain.com), most emails show the following entries in the Message Tracking Center, and fail:

SMTP: Message Submitted to Advanced Queuing
SMTP: Started Message Submission to Advanced Queue
SMTP: Advanced Queue Failed to Deliver Message

whereas all other domains (call one of them e.g. domain.co.uk) show the following, and deliver correctly:

SMTP: Message Submitted to Advanced Queuing
SMTP: Started Message Submission to Advanced Queue
SMTP: Message Submitted to Categorizer
SMTP: Message Categorized and Queued for Routing
SMTP: Message Queued for Local Delivery
SMTP: Message Delivered Locally to user@domain.co.uk
SMTP Store Driver: Message Delivered Locally to Store to user@domain.co.uk

Email addresses are entered correctly for each user in AD, recipient policies correct and updated.

The odd thing about it is that mails are sometimes delivered, depending on where they are sent from.  For example, if I send a message to user@domain.com from a remote computer (Outlook Express) through an ISP’s SMTP server, it will be delivered if I send it from my correct email address, but not if I send from a made-up address.  Any mails sent to the other domains (user@domain.co.uk) from any email address, genuine or not, will arrive correctly as they should.  From some locations (e.g. Hotmail) they always fail when sent to domain.com.

Mail comes through a separate Windows 2000 Server running ISA (but I ruled this out by temporarily replacing it with a hardware router forwarding port 25).

We are running GFI MailEssentials on the SBS2003 server - I disabled this and it makes no difference.

The server was upgraded from SBS2000, but we didn't using the troublesome domain until after the upgrade.

Any help appreciated, thanks.
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

Are you getting an NDR back on emails to this domain? If so, what does it say?
My instinct is that they are filtering their email and you are being blocked for some reason, but the NDR message will confirm that.

Simon.
Avatar of davehaycox
davehaycox

ASKER

No NDR, that's the odd thing (and yes, NDRs are enabled!). I know that all the mails are arriving at the Exchange server, so it's not an ISP filtering problem, if that's what you mean.

If I telnet in on port 25 from outside the network, any message I send using the SMTP command line will be delivered correctly, so I thought it might be something to do with the email header format.  We had our ISP forward all mail to domain.com (%1@domain.com forwarded to %1@domain.co.uk) and this made no difference at all.

David
ASKER CERTIFIED SOLUTION
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Yes, this is inbound email with the problem.
It's direct SMTP delivery.
I have tried using the POP3 connector instead, this appears to make no difference.

The remote sites do not get NDRs, that's the frustrating thing - if I knew why it was failing it would give me something to go on.  I couldn't find any way in Exchange to determine why the mails were failing.

AV is Symantec Corporate v9.0, the standard version not the Exchange one.  I recently upgraded from 8.0 to 9.0 and took the opportunity to check the problem with AV uninstalled - no change.

I will uninstall GFI and see what happens.

David
Well, you were right, it was GFI Mail Essentials causing the problem!

It was the first place I looked, but clearly I didn't look hard enough.

Problem solved, thanks very much!

Of course, now I have spam coming in unchecked.  If I reinstall GFI afresh do you think it will recreate the problem?

Thanks again

David
Which version of GFI is it? It might pay to check their web site to see if there are any patches or sub releases that you can install. You could even download it again and then just enter your key.
It all depends on where was the problem within GFI.

Simon.
GFI was version 9 I think - just checked and there is a later version.

I'll download it and give it a try.

Slightly off-topic perhaps, but I've switched off NDRs now and they're still being sent.  I've also deleted the email address to send a copy of NDRs to under the SMTP connector, and the copy of the NDR is still coming as well.  I have rebooted, no change.

I'll raise another question perhaps if I can't sort it out, I've probably missed something.

David