We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now

x

Undeliverable Mail Messages..

dercoss
dercoss asked
on
Medium Priority
452 Views
Last Modified: 2008-02-01
I am running Exchange Server as part of Small Business Server 2003 and have started getting email messages saying...

"Your message did not reach some or all of the intended recipients.

      Subject:      hi Lesley.
      Sent:      05/11/2006 03:06

The following recipient(s) could not be reached:

      iamjustsendingthisleter@MY_DOMAIN.COM on 05/11/2006 06:56
            A configuration error in the e-mail system caused the message to bounce between two servers or to be forwarded between two recipients.  Contact your administrator"

(where MY_DOMAIN.COM is my actual domain name used...)
         

I assume this is some sort of spam related issue because all the addresses are using my domain name and just replacing the first part of the email address each time. I am getting about 7 or 8 a day now. Is there anything that might be causing this that I can resolve?

I am using Avast Antivirus on the server and client pc's..

dc
Comment
Watch Question

Commented:
No, this is not spam e-mail.

Your exchange server is not configured correctly.
Please check Default SMTP Virtual Server configurations and the Connector configurations.

Cheers,
NITADMIN

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts

Author

Commented:
What am I looking for in particular?

dc

Author

Commented:
I've had a dig about and I've found that the emails are all related to 4 virtual SMTP servers that I can see when I got to SERVERS -QUEUES. Should these virtual servers be here at all? They are nothing to do with my server..

dc
CERTIFIED EXPERT

Commented:
some time it may be a Reverse NDR attack. check your NDR rules if any.

and do you have spam filter on your exchange? http://www.microsoft.com/technet/prodtechnol/exchange/downloads/2003/imf/default.mspx

pk

Author

Commented:
I don't have any NDR rules that I know of. Where would I check for them? I don't have any 3rd party spam filer running either. I have Avast Antivirus fro SBS 2003 installed but I don't think that has a spam filter on it..

dc
CERTIFIED EXPERT
Commented:

Author

Commented:
I've worked though the Microsoft suggestions above and so far I haven't had the problem happen reappear. I'll get back tomorrow with an update..

dc

Author

Commented:
Ignore the "happen" between "problem" and "reappear"... oops..

dc

Author

Commented:
Hmm. The problem is still there.

I have worked through some of the above and it appears that when I run Telnet as suggested  I get the following

250 2.1.5 user@spam.com

This apparently means my exchange server is an open smtp relay.

I have worked through the steps to stop this but it seems to make no difference. In fact, the settings are just as the article describes them.

What could I be doing wrong here??

dc

Author

Commented:
Also, under the PROTOCOLS - SMTP - DEFAULT SMTP SERVER - PROPERTIES - ACCESS, there is an entry for the the internal IP addrress of the server (192.168.0.6) and also one for 127.0.0.1. Is this correct?

dc
CERTIFIED EXPERT

Commented:
you should close relay if it's not relevent for your issue..

at my exchange server i have selected only the list below and the list is empty, and selected allow all computers which sussesfully ath....

pk
CERTIFIED EXPERT

Commented:

Author

Commented:
That's the kb I worked through but I must be doing something wrong because the SMTP Open Relay is apparently still there...

dc
CERTIFIED EXPERT

Commented:
why do you add 127.0.0.1 ? and what happend when you remove 127.0.0.1

pk

Author

Commented:
I don't remember adding it. I have taken in out to see what happens.. I'll be back..

dc

Author

Commented:
I've now found that some of the emails leaving my network get "stuck" on the Exchange Server. If I go into the Queue I can see some emails on various SmallBusiness SMTP Connectors. If I right click and select "force connection" and then refresh it seems the emails are then sent.

I am getting more confused by the day here...

dc

Author

Commented:
And now my email seems to have dried up completely...

dc

Author

Commented:
I seem to have solved the problem by deleting the existing SMTP connector and running the CEICW again. I think the DNS servers were originally part of the problem. Apparently they should have been changed to new ones according to my ISP. I think my fiddling around just made the problem worse..

I'll see how it goes over the next day..



dc

Author

Commented:
A day later and all still seems ok..

dc
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.