Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Connections sitting in SMTP current sessions a long time.

Posted on 2006-11-22
10
Medium Priority
?
5,146 Views
Last Modified: 2010-05-18
Good day,

We recently started hosting our own email on our Exchange 2000/W2K Server and have developed a problem.  We are still receiving mail but one of our customers is having a delivery issue. They are getting this message:

451 4.4.1 timeout writing message to mail.mycompany.com : Resource temporarily unavailable.  

I took a look at the SMTP virtual server and noticed a few connections sitting in current connections for long periods of time.  I did some tracing back and discovered the connections were from the customer having this problem.  This is a major customer for us and a big deal.  What can I do to make those connections complete?  We are still getting in mail from other places (plenty of junk) so what would cause this one to fail?

I forgot to mention.  Yesterday I sent and email from a yahoo account to myself and I never got it and I didn't get an NDR.  So some mail is just going poof?

I got a copy of the attachment in the NDR they are getting and it says......

Reporting-MTA: dns; gamwsm02.mwga.mailwatch.com
Arrival-Date: Wed, 22 Nov 2006 08:50:26 -0500 (EST)

Final-Recipient: RFC822; rkidd@digitron-pkg.com
Action: delayed
Status: 4.4.2
Remote-MTA: DNS; mail.digitron-pkg.com
Last-Attempt-Date: Wed, 22 Nov 2006 10:33:22 -0500 (EST)
Will-Retry-Until: Sun, 26 Nov 2006 08:50:26 -0500 (EST)

I also found a connection in our SMTP log that never was delivered to the users..

216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 0, 32, 329, 250, 0, EHLO, -, +gamwsm02.mwga.mailwatch.com,
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 0, 42, 42, 250, 0, MAIL, -, +From:<bpennin6@customer.com>,
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 16, 37, 40, 250, 0, RCPT, -, +To:<bbarackman@mycompany-pkg.com>,
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 0, 35, 38, 250, 0, RCPT, -, +To:<dzanvich@mycompany-pkg.com>,
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:11:58, SMTPSVC1, EXCHANGE, 10.1.30.1, 0, 32, 35, 250, 0, RCPT, -, +To:<rkidd@mycompany-pkg.com>,

The next entry I can find related to their server is....
216.157.255.16, gamwsm02.mwga.mailwatch.com, 11/22/2006, 11:12:47, SMTPSVC1, EXCHANGE, 10.1.30.1, 370531, 4, 46, 240, 370703, QUIT, -, gamwsm02.mwga.mailwatch.com,
Why is all the darn spam coming in but not the ones we need.  Please help this is becoming a major issue.



Thanks!
0
Comment
Question by:joedigitron
  • 6
  • 3
10 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 2000 total points
ID: 17997292
The usual place I look first is firewall.
If you are using a firewall, check that it doesn't have any SMTP scanning features. If it does, turn them off. The Cisco PIX has a feature.
The next place to look is antivirus and antispam applications. Those can cause this sort of problem as well.
Ensure that any desktop antivirus software is not set to scan SMTP traffic or any of the Exchange directories.

Simon.
0
 

Author Comment

by:joedigitron
ID: 17997534
I checked our firewall and it dosen't have SMTP scanning.  It's a Sonicwall.
I'm not sure about the antivirus/antispam.  However I'm not seeing anything in those logs.  

The odd part about the whole thing is some messages are coming through from our customer and some are not.  I wanted to turn up my SMTP log settings so I can get more information but I don't see where I can do that.
0
 

Author Comment

by:joedigitron
ID: 17997548
I should also point out you can actually see the hung connections from their server in Current connections for the Default SMTP server.
0
What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

 
LVL 104

Expert Comment

by:Sembee
ID: 17997657
If the connection is being interfered with, then you would see it in the current connections list. That behaviour is to be expected in these circumstances as the connection isn't being dropped in the correct way.

Simon.
0
 

Author Comment

by:joedigitron
ID: 17997712
I figured that thanks.  Some new information too.  This rather large customer has other mail servers.  In reviewing the SMTP logs I found a few entries from the other server and in every single case the messages were delivered correctly.  Could there be some issue related to just one (unfortunately the one we get most mail from) of their servers?  A change on their end?

Thanks
0
 
LVL 104

Expert Comment

by:Sembee
ID: 17997969
If there has been a change in the email configuration anywhere then that is the first place that you have to look.

Simon.
0
 

Author Comment

by:joedigitron
ID: 17998517
We haven't made any changes in the last 2 weeks.  I've opened a ticket with the customers support team.  Maybe they can shine some light on this.
0
 

Author Comment

by:joedigitron
ID: 18038959
I have some logs from the customer mail servers now too.  I still dont understand whats going on here.  Any help?

$ grep -i "kATGNpik021015" sendmail
Nov 29 11:23:51 lomwsm02 sm-mta[21015]: [ID 801593 mail.info] kATGNpik021015: from=<wschmude@ford.com>, size=10122, class=0, nrcpts=2, msgid=<A36F4DE317F76A4289459513D879D4DA0F875B@na1fcm04.dearborn.ford.com>, proto=ESMTP, daemon=MTA-v4, relay=lomw-smout-vip.mwlo.mailwatch.com [216.157.241.105]
Nov 29 11:23:51 lomwsm02 sm-mta[21022]: [ID 801593 mail.info] kATGNpik021015: to=<kbrown@digitron-pkg.com>,<rkidd@digitron-pkg.com>, delay=00:00:00, xdelay=00:00:00, mailer=esmtp, pri=160122, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=2.0.0, stat=Sent ( <A36F4DE317F76A4289459513D879D4DA0F875B@na1fcm04.dearborn.ford.com> Queued mail for delivery)
$ grep i^C
$ grep -i "kASH2Tmp018505" sendmail
Nov 29 00:07:50 lomwsm02 sendmail[25284]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 00:07:50 lomwsm02 sendmail[25284]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=12:05:21, xdelay=00:06:52, mailer=esmtp, pri=2337438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 00:33:54 lomwsm02 sendmail[2034]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 00:33:54 lomwsm02 sendmail[2034]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=12:31:25, xdelay=00:10:39, mailer=esmtp, pri=2427438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 00:48:01 lomwsm02 sendmail[4987]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 00:48:01 lomwsm02 sendmail[4987]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=12:45:32, xdelay=00:09:09, mailer=esmtp, pri=2517438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 01:01:14 lomwsm02 sendmail[12106]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 01:01:14 lomwsm02 sendmail[12106]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=12:58:45, xdelay=00:11:19, mailer=esmtp, pri=2607438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 01:13:12 lomwsm02 sendmail[14395]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable
Nov 29 01:13:12 lomwsm02 sendmail[14395]: [ID 801593 mail.info] kASH2Tmp018505: to=<rkidd@digitron-pkg.com>,<tanderson@digitron-pkg.com>, delay=13:10:43, xdelay=00:09:10, mailer=esmtp, pri=2697438, relay=mail.digitron-pkg.com. [207.7.255.162], dsn=4.0.0, stat=Deferred
Nov 29 01:21:44 lomwsm02 sendmail[17865]: [ID 801593 mail.crit] kASH2Tmp018505: SYSERR(root): timeout writing message to mail.digitron-pkg.com.: Resource temporarily unavailable

0
 

Author Comment

by:joedigitron
ID: 18040019
Well I'm closing this out.  Your initial comment was right on the money.  While I was unaware of this I probably should have been.  Our firewall DID indeed have an SMTP scanner buried in it that was active.  Shuting this down flushed all the messages through.  I've now encountered an entierly different problem which I'll post in another request.

Thanks for the help!
0
 

Expert Comment

by:jsalestrom70
ID: 32349086
FYI for those of you having the "SMTP Current Session" issue:  Another place to look is your MTU settings.  One of our clients had their DSL MTU hard coded @ 1492, which is fine.  Once we added an MTU record within SBS 2003's registry @ 1492, mail began to flow for the few domains which had issues sending to the SBS box.  Hope this helps

http://www.windowsreference.com/windows-2000/how-to-manually-set-the-mtu-size-in-windows-xp-2003-2000-vista

http://help.expedient.com/broadband/mtu_ping_test.shtml



0

Featured Post

Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Exchange administrators are always vigilant about Exchange crashes and disasters that are possible any time. It is quite essential to identify the symptoms of a possible Exchange issue and be prepared with a proper recovery plan. There are multiple…
Microsoft Jet database engine errors can crop up out of nowhere to disrupt the working of the Exchange server. Decoding why a particular error occurs goes a long way in determining the right solution for it.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…
Suggested Courses

571 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question