dping28
asked on
Exchange 2003
Hi I just recently was asked to maintain an Exchange 2003 server which I have had no previous experience with so I am learning as I go.. Couple days ago started getting alert emails saying:
-----Original Message-----
From: ELM
Sent: Tuesday, April 11, 2006 2:00 PM
To: Administrator
Subject: EEMSVR Error from "SERVER IP removed"
Event Log Message from "SERVER IP removed" at 2:00:22 PM Error Event 5509 in the
Alerts log From EEMSVR (User None)
--------------------------
SMTP monitor failed to connect to "SERVER IP removed"
Failed Failed 258
Connect: "SERVER IP removed":25
Read: 220 "DOMAIN removed" Microsoft ESMTP MAIL Service, Version:
6.0.3790.1830 ready at Tue, 11 Apr 2006 17:00:12 -0400 <CR><LF>
Write: HELO "DOMAIN removed"<CR><LF> Read Error: 0x80070102 Error
0x80070102, The wait operation timed out.
Disconnect
then 5 minutes later get a message saying it connected successfully.. and then I get
-----Original Message-----
From: ELM
Sent: Tuesday, April 11, 2006 5:45 PM
To: Administrator
Subject: EEMSVR Error from "SERVER IP removed"
Event Log Message from "SERVER IP removed" at 5:45:03 PM Error Event 5509 in the
Alerts log From EEMSVR (User None)
--------------------------
SMTP monitor failed to connect to "SERVER IP removed"
Failed Failed 10061
Disconnect
Connect Error, host="SERVER IP removed" port=25
0x8007274d Error 0x8007274D, No connection could be made because
the target machine actively refused it.
and when I go to Exchange Systems Manager - Tools - Monitoring and Status - Status it has a critical alert saying the SMTP queue growth is at like 800+.. Could someone walk me through where I need to look to determine what is going on with this/these issues? Thanks!
-D
-----Original Message-----
From: ELM
Sent: Tuesday, April 11, 2006 2:00 PM
To: Administrator
Subject: EEMSVR Error from "SERVER IP removed"
Event Log Message from "SERVER IP removed" at 2:00:22 PM Error Event 5509 in the
Alerts log From EEMSVR (User None)
--------------------------
SMTP monitor failed to connect to "SERVER IP removed"
Failed Failed 258
Connect: "SERVER IP removed":25
Read: 220 "DOMAIN removed" Microsoft ESMTP MAIL Service, Version:
6.0.3790.1830 ready at Tue, 11 Apr 2006 17:00:12 -0400 <CR><LF>
Write: HELO "DOMAIN removed"<CR><LF> Read Error: 0x80070102 Error
0x80070102, The wait operation timed out.
Disconnect
then 5 minutes later get a message saying it connected successfully.. and then I get
-----Original Message-----
From: ELM
Sent: Tuesday, April 11, 2006 5:45 PM
To: Administrator
Subject: EEMSVR Error from "SERVER IP removed"
Event Log Message from "SERVER IP removed" at 5:45:03 PM Error Event 5509 in the
Alerts log From EEMSVR (User None)
--------------------------
SMTP monitor failed to connect to "SERVER IP removed"
Failed Failed 10061
Disconnect
Connect Error, host="SERVER IP removed" port=25
0x8007274d Error 0x8007274D, No connection could be made because
the target machine actively refused it.
and when I go to Exchange Systems Manager - Tools - Monitoring and Status - Status it has a critical alert saying the SMTP queue growth is at like 800+.. Could someone walk me through where I need to look to determine what is going on with this/these issues? Thanks!
-D
omegamueller
Do you have an event log monitoring software installed?
ASKER
Im not really sure... Im guessing by the emails that are being sent some kind of software package is installed.. but other then that I cant find anything to monitor exchange other then the Exchange Systems Manager and ive been looking through the Event Viewer and cant find any errors pertaining to exchange other then some basic missing MasterSID errors which I have already taken care of.
This could be the result of having SenderID filtering enabled without having an SMTP patch installed. http://support.microsoft.com/kb/905214/en-us .
Download the Exchange Server Best Practice Analyzer (ExBPA), install it on a PC in the domain (not the Exchange server) and run it. It will give you good info about possible problem areas, and tips on how to fix them.
Download the Exchange Server Best Practice Analyzer (ExBPA), install it on a PC in the domain (not the Exchange server) and run it. It will give you good info about possible problem areas, and tips on how to fix them.
ASKER
ok after running ExBPA I came up with 2 critical issues:
Cannot connect to port 25 of routing group master
&
Permissions inheritance block on Exchange database object
The second one doesnt list any help just links to never display again. the first one I went to that page and it didnt really help me trouble shoot the problem that much. I cant telnet to it from my workstation but if I go on the server it self I can telnet to port 25.
Cannot connect to port 25 of routing group master
&
Permissions inheritance block on Exchange database object
The second one doesnt list any help just links to never display again. the first one I went to that page and it didnt really help me trouble shoot the problem that much. I cant telnet to it from my workstation but if I go on the server it self I can telnet to port 25.
The first issue is probably just the windows firewall on the PC blocking outgoing TCP port 25. The second issue isn't likely to be causing the problem you're experiencing.
In ExBPA, have a look at the "Full Issues List". There may be something in there (in particular, something about updating the TCPIP driver).
In ExBPA, have a look at the "Full Issues List". There may be something in there (in particular, something about updating the TCPIP driver).
ASKER
Ok under the All Issues Tab I have these listed:
Intelligent Message Filter recommendation
RUS did not process all changes
Cannot connect to port 25 of routing group master
Permissions inheritance block on Exchange database object
Network card driver 'CPQTeamMP' is more than two years old
Network card driver 'q57w2k' is more than two years old
Storage driver 'Smart Array 5i' is more than two years old
McAfee GroupShield update available
SMTP configuration warning
SMTP performance warning
Temporary file path optimization
Recovery storage group enabled
SMTP configuration warning
Journaling recipient points to the local server
Network card teaming is enabled
Single global catalog in topology
SMTP server accepts Basic authentication
Auto debug disabled
Exchange resident on global catalog server
BIOS update available
Crash upload logging disabled
Outlook connection range
WINS secondary is blank
There were a couple others but I went and corrected those, still working through the list.. Any of these pop out as what be causing my SMTP Queue to just keep growing in the Status and Monitoring section? Whats weird is sending emails is fine.. Thanks!
Intelligent Message Filter recommendation
RUS did not process all changes
Cannot connect to port 25 of routing group master
Permissions inheritance block on Exchange database object
Network card driver 'CPQTeamMP' is more than two years old
Network card driver 'q57w2k' is more than two years old
Storage driver 'Smart Array 5i' is more than two years old
McAfee GroupShield update available
SMTP configuration warning
SMTP performance warning
Temporary file path optimization
Recovery storage group enabled
SMTP configuration warning
Journaling recipient points to the local server
Network card teaming is enabled
Single global catalog in topology
SMTP server accepts Basic authentication
Auto debug disabled
Exchange resident on global catalog server
BIOS update available
Crash upload logging disabled
Outlook connection range
WINS secondary is blank
There were a couple others but I went and corrected those, still working through the list.. Any of these pop out as what be causing my SMTP Queue to just keep growing in the Status and Monitoring section? Whats weird is sending emails is fine.. Thanks!
ASKER
I managed to solve my SMTP Queue problem on my own. I applied a sender and a recipient filter to keep from sending NDR's to the spam addresses and removed the messages in the queue manually applied the filters and its been fine since..
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.