Exchange not forwarding emails to users
Hello,
I am running SMS 2003, Exchange 2003 on one box. My router sends all POP3 and SMTP packets (via NAT) to this box. I installed Symantec AV about 6 months ago. All has been working fine until 4/20/05. On this day, I noticed the server just stopped routing emails to the users -- all users are affected.
First I checked the protocols and noticed Exhcnage complaining about x.400. Then I checked the Services and noticed it was not running. I started it -- no luck. I then noticed some messages were "unreadable" by Evolution (on my Linux box). I deleted those emails. I also noticed my other account also had suspecious emails (heck, one had a subject: This is the file ....). I believe these were all virus files. No one has opened these files as far as I know. I also performed a virus scan of the entire hard drive and two infected files were quarantined.
At this moment, I am still unable to have emails forwarded by Exchange.
Any ideas what I might try to get this resolved?
I am running SMS 2003, Exchange 2003 on one box. My router sends all POP3 and SMTP packets (via NAT) to this box. I installed Symantec AV about 6 months ago. All has been working fine until 4/20/05. On this day, I noticed the server just stopped routing emails to the users -- all users are affected.
First I checked the protocols and noticed Exhcnage complaining about x.400. Then I checked the Services and noticed it was not running. I started it -- no luck. I then noticed some messages were "unreadable" by Evolution (on my Linux box). I deleted those emails. I also noticed my other account also had suspecious emails (heck, one had a subject: This is the file ....). I believe these were all virus files. No one has opened these files as far as I know. I also performed a virus scan of the entire hard drive and two infected files were quarantined.
At this moment, I am still unable to have emails forwarded by Exchange.
Any ideas what I might try to get this resolved?
virag
can be a dns problem..can you give the error msg or are the message stuck queues
Let me find the post that I have from a few days ago. It's one of the security features of Exchange and it's configured just below the org level.
ASKER
Thanks for responding. My dns is running on a Liinux box. I am able to ping using hostnames and am able to surf accordingly. I hope its not dns, buit will check dmesg for any errors.
One thing I did notice is that there is an email in my draft folder that will not open in Outlook. I tried to delete it, but it says it was either removed or moved. Yet, it shows up and Outlook resets the "Message Read" flag to "Unread" after I receive the error. I can move that emial from one folder to another, but I cannot delete it.
Unfortunately, the server is not available to me at this time -- geographical location issue. However, when I get there, can you tell me what logs I should review on the Exchange server (specifically, which files) to understand this problem?
Thanks.
One thing I did notice is that there is an email in my draft folder that will not open in Outlook. I tried to delete it, but it says it was either removed or moved. Yet, it shows up and Outlook resets the "Message Read" flag to "Unread" after I receive the error. I can move that emial from one folder to another, but I cannot delete it.
Unfortunately, the server is not available to me at this time -- geographical location issue. However, when I get there, can you tell me what logs I should review on the Exchange server (specifically, which files) to understand this problem?
Thanks.
ASKER
flyguybob:
This server has been working without flaw for quite some time -- and it just stopped routing the emails to the users.
Does this security feature turn on by itself ?
PLEASE NOTE: I can actually see emails in the directory (I forgot the exact dirctory name) ready to be delivered -- they were dated 5/3/2005. However, Outlook does not show any new emails as of 4/20/2005 -- so, they are just not getting to the user account (right??).
This server has been working without flaw for quite some time -- and it just stopped routing the emails to the users.
Does this security feature turn on by itself ?
PLEASE NOTE: I can actually see emails in the directory (I forgot the exact dirctory name) ready to be delivered -- they were dated 5/3/2005. However, Outlook does not show any new emails as of 4/20/2005 -- so, they are just not getting to the user account (right??).
Open ESM
Open Global Settings
Open Internet Message Formats
Right click the domain name (default is * ) and select properties
Select the Advanced Tab.
Modify what you wish (automatic replies, automatic forwards)
I usually stop the SMTP and Routing Engine service and then start the Routing Engine and then SMTP. It's a brief interruption in service, but will not cause the IS to crash.
Open Global Settings
Open Internet Message Formats
Right click the domain name (default is * ) and select properties
Select the Advanced Tab.
Modify what you wish (automatic replies, automatic forwards)
I usually stop the SMTP and Routing Engine service and then start the Routing Engine and then SMTP. It's a brief interruption in service, but will not cause the IS to crash.
Oh...if this is something that just happened out of the blue, then we should look elsewhere.
ASKER
flyguybob: actually, it is something that happened out of the blue. However, I will still take a look at your suggestion and report my findings this evening.
are the message stuck up in the queue..also if message tracking is enabled (if not please enalbe it ) jst check whether its being properly routed.
also is any antiviurs in between. i faced the problem for the same..i had interscan viruswall with checkpoint opsec and suddenly one fine day the messages stopping going.so is there anything in between.
also is any antiviurs in between. i faced the problem for the same..i had interscan viruswall with checkpoint opsec and suddenly one fine day the messages stopping going.so is there anything in between.
ASKER
virag, since I have been working in the Linux world for the past few months, I will need more details of how to perform the things you suggest. In particular,
1. How can I tell if the message is being properly routed?
2. I have Symantec email enabled -- however, I don't know if its trapping anything. Can I look at any log files to determine this -- and where would these files be located?
I set this server up about a year ago and have not had to mess with it until now. Its amazing how quickly you can forget things! So, as much detailed help you can provide would be appreciated.
Cheers.
1. How can I tell if the message is being properly routed?
2. I have Symantec email enabled -- however, I don't know if its trapping anything. Can I look at any log files to determine this -- and where would these files be located?
I set this server up about a year ago and have not had to mess with it until now. Its amazing how quickly you can forget things! So, as much detailed help you can provide would be appreciated.
Cheers.
ASKER
Ok, I figured it out.
I decided to perform a full virus scan. In so doing, I found that one of the Symantec Email virus scanning services was stopped. I suspect that a recent power failure (which occurred around 4/20/05 timeframe) may have caused the unknown state. As a result, when SBS rebooted, a lot of the Exahange and Symantec services were not started. In any case, I just restarted the services and am now able to send/receive internal email. My final tests will be sending/receiving external emails.
I decided to perform a full virus scan. In so doing, I found that one of the Symantec Email virus scanning services was stopped. I suspect that a recent power failure (which occurred around 4/20/05 timeframe) may have caused the unknown state. As a result, when SBS rebooted, a lot of the Exahange and Symantec services were not started. In any case, I just restarted the services and am now able to send/receive internal email. My final tests will be sending/receiving external emails.
Nice work!
If you need a points refund, you can go to the community support newsgroup and request that they PAQ with refund.
Cheers,
Bob
If you need a points refund, you can go to the community support newsgroup and request that they PAQ with refund.
Cheers,
Bob
nice to know the problem has been sorted out
ASKER
The question has been sent to Community Support for PAQ/Refund request.
Sold! to Netminder for 0 points!
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.