Solved

Connections sitting in SMTP current sessions a long time.

Posted on 2006-11-22
10
4,775 Views
Last Modified: 2010-05-18
Good day,

We recently started hosting our own email on our Exchange 2000/W2K Server and have developed a problem.  We are still receiving mail but one of our customers is having a delivery issue. They are getting this message:

451 4.4.1 timeout writing message to mail.mycompany.com : Resource temporarily unavailable.  

I took a look at the SMTP virtual server and noticed a few connections sitting in current connections for long periods of time.  I did some tracing back and discovered the connections were from the customer having this problem.  This is a major customer for us and a big deal.  What can I do to make those connections complete?  We are still getting in mail from other places (plenty of junk) so what would cause this one to fail?

I forgot to mention.  Yesterday I sent and email from a yahoo account to myself and I never got it and I didn't get an NDR.  So some mail is just going poof?

I got a copy of the attachment in the NDR they are getting and it says......

Reporting-MTA: dns; gamwsm02.mwga.mailwatch.com
Arrival-Date: Wed, 22 Nov 2006 08:50:26 -0500 (EST)

Final-Recipient: RFC822; rkidd@digitron-pkg.com
Action: delayed
Status: 4.4.2
Remote-MTA: DNS; mail.digitron-pkg.com
Last-Attempt-Date: Wed, 22 Nov 2006 10:33:22 -0500 (EST)
Will-Retry-Until: Sun, 26 Nov 2006 08:50:26 -0500 (EST)

I also found a connection in our SMTP log that never was delivered to the users..

216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 0, 32, 329, 250, 0, EHLO, -, +gamwsm02.mwga.mailwatch.com,
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 0, 42, 42, 250, 0, MAIL, -, +From:<bpennin6@customer.com>,
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 16, 37, 40, 250, 0, RCPT, -, +To:<bbarackman@mycompany-pkg.com>,
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 0, 35, 38, 250, 0, RCPT, -, +To:<dzanvich@mycompany-pkg.com>,
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 0, 32, 35, 250, 0, RCPT, -, +To:<rkidd@mycompany-pkg.com>,

The next entry I can find related to their server is....
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:12:47, SMTPSVC1, EXCHANGE, 10.1.30.1, 370531, 4, 46, 240, 370703, QUIT, -, gamwsm02.mwga.mailwatch.com,
Why is all the darn spam coming in but not the ones we need.  Please help this is becoming a major issue.



Thanks!
0
Comment
Question by:joedigitron
  • 6
  • 3
10 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 500 total points
ID: 17997292
The usual place I look first is firewall.
If you are using a firewall, check that it doesn't have any SMTP scanning features. If it does, turn them off. The Cisco PIX has a feature.
The next place to look is antivirus and antispam applications. Those can cause this sort of problem as well.
Ensure that any desktop antivirus software is not set to scan SMTP traffic or any of the Exchange directories.

Simon.
0
 

Author Comment

by:joedigitron
ID: 17997534
I checked our firewall and it dosen't have SMTP scanning.  It's a Sonicwall.
I'm not sure about the antivirus/antispam.  However I'm not seeing anything in those logs.  

The odd part about the whole thing is some messages are coming through from our customer and some are not.  I wanted to turn up my SMTP log settings so I can get more information but I don't see where I can do that.
0
 

Author Comment

by:joedigitron
ID: 17997548
I should also point out you can actually see the hung connections from their server in Current connections for the Default SMTP server.
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17997657
If the connection is being interfered with, then you would see it in the current connections list. That behaviour is to be expected in these circumstances as the connection isn't being dropped in the correct way.

Simon.
0
 

Author Comment

by:joedigitron
ID: 17997712
I figured that thanks.  Some new information too.  This rather large customer has other mail servers.  In reviewing the SMTP logs I found a few entries from the other server and in every single case the messages were delivered correctly.  Could there be some issue related to just one (unfortunately the one we get most mail from) of their servers?  A change on their end?

Thanks
0
Too many email signature changes to deal with?

Are you constantly being asked to update your organization's email signatures? Do they take up too much of your time? Wouldn't you love to be able to manage all signatures from one central location, easily design them and deploy them quickly to users. Well, you can!

 
LVL 104

Expert Comment

by:Sembee
ID: 17997969
If there has been a change in the email configuration anywhere then that is the first place that you have to look.

Simon.
0
 

Author Comment

by:joedigitron
ID: 17998517
We haven't made any changes in the last 2 weeks.  I've opened a ticket with the customers support team.  Maybe they can shine some light on this.
0
 

Author Comment

by:joedigitron
ID: 18038959
I have some logs from the customer mail servers now too.  I still dont understand whats going on here.  Any help?

$ grep -i "kATGNpik021015" sendmail
Nov 29 11:23:51 lomwsm02 sm-mta[21015]: [ID 801593 mail.info] kATGNpik021015: from=<wschmude@ford.com>, size=10122, class=0, nrcpts=2, msgid=<A36F4DE317F76A4289459513D879D4DA0F875B@na1fcm04.dearborn.ford.com>, proto=ESMTP, daemon=MTA-v4, relay=lomw-smout-vip.mwlo.mailwatch.com [216.157.241.105]
Nov 29 11:23:51 lomwsm02 sm-mta[21022]: [ID 801593 mail.info] kATGNpik021015: to=<kbrown@digitron-pkg.com>,<rkidd@digitron-pkg.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=160122, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=2.0.0, stat=Sent ( <A36F4DE317F76A4289459513D879D4DA0F875B@na1fcm04.dearborn.ford.com> Queued mail for delivery)
$ grep i^C
$ grep -i "kASH2Tmp018505" sendmail
Nov 29 00:07:50 lomwsm02 sendmail[25284]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 00:07:50 lomwsm02 sendmail[25284]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=12:05:21, xdelay=00:06:52, mailer=esmtp, pri=2337438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 00:33:54 lomwsm02 sendmail[2034]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 00:33:54 lomwsm02 sendmail[2034]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=12:31:25, xdelay=00:10:39, mailer=esmtp, pri=2427438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 00:48:01 lomwsm02 sendmail[4987]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 00:48:01 lomwsm02 sendmail[4987]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=12:45:32, xdelay=00:09:09, mailer=esmtp, pri=2517438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 01:01:14 lomwsm02 sendmail[12106]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 01:01:14 lomwsm02 sendmail[12106]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=12:58:45, xdelay=00:11:19, mailer=esmtp, pri=2607438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 01:13:12 lomwsm02 sendmail[14395]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 01:13:12 lomwsm02 sendmail[14395]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=13:10:43, xdelay=00:09:10, mailer=esmtp, pri=2697438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 01:21:44 lomwsm02 sendmail[17865]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable

0
 

Author Comment

by:joedigitron
ID: 18040019
Well I'm closing this out.  Your initial comment was right on the money.  While I was unaware of this I probably should have been.  Our firewall DID indeed have an SMTP scanner buried in it that was active.  Shuting this down flushed all the messages through.  I've now encountered an entierly different problem which I'll post in another request.

Thanks for the help!
0
 

Expert Comment

by:jsalestrom70
ID: 32349086
FYI for those of you having the "SMTP Current Session" issue:  Another place to look is your MTU settings.  One of our clients had their DSL MTU hard coded @ 1492, which is fine.  Once we added an MTU record within SBS 2003's registry @ 1492, mail began to flow for the few domains which had issues sending to the SBS box.  Hope this helps

http://www.windowsreference.com/windows-2000/how-to-manually-set-the-mtu-size-in-windows-xp-2003-2000-vista

http://help.expedient.com/broadband/mtu_ping_test.shtml



0

Featured Post

Maximize Your Threat Intelligence Reporting

Reporting is one of the most important and least talked about aspects of a world-class threat intelligence program. Here’s how to do it right.

Join & Write a Comment

Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
how to add IIS SMTP to handle application/Scanner relays into office 365.

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now