Solved

Incoming SMTP mail disappearing with no NDR - Exchange 2003

Posted on 2007-03-24
10
914 Views
Last Modified: 2008-02-01
I am running SBS 2003

Exchange 2003 is running SP2 and the IMF is enabled

We use SMTP for both incoming and outgoing delivery

Recently we have been experiencing issues with incoming e-mails. Messages are not being deivered to maiboxes and the sender does not get an NDR. This is only happening when messges are sent from certain external sources but mail from these senders also gets through sometimes (slightly ruling out spam checkers) and it is happening at random times!

SMTP logging is enabled and the interesting thing is that I can see the e-mail arriving at the SBS server, see an example below:

2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 EHLO - +moutng.kundenserver.de 250 0 314 27 0 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 MAIL - +FROM:<rmacparland@cfreelpg.co.uk> 250 0 51 49 0 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 RCPT - +TO:<andrew@haggards.co.uk> 250 0 34 31 0 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 RCPT - +TO:<chris@haggards.co.uk> 250 0 33 30 0 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 DATA - +<!&!AAAAAAAAAAAYAAAAAAAAAKdPUAwzhxNInOCRp5gxa1jCgAAAEAAAAOWOTNEy2YhHrNIgJETQcC4BAAAAAA==@cfreelpg.co.uk> 250 0 188 73521 515 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 QUIT - moutng.kundenserver.de 240 609 68 4 0 SMTP - - - -

This e-mail never reached the intended mailboxes - both of which are valid

IMF is enabled but I have used IMF Companion to check if the message was blocked but nothing there!

The event log was fairly clear although at the time of the message ariving it does seem as though the online defrag was running. No errors/warnings.

It is very frustrating and hard to troubleshoot as the messages just seem to be disappearing!

Heeeeelp!
0
Comment
Question by:tommybrand
  • 4
  • 2
  • 2
  • +1
10 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 63 total points
ID: 18785132
Have you got message tracking enabled?
If not, then you need to enable it to see what Exchange is doing with the message.

Simon.
0
 
LVL 4

Expert Comment

by:shoaibbhatti007
ID: 18785344
I have also faced same error. I deleted the old connector and re-created a new connector. Now it is working properly (Connector for Internet Emails)
0
 

Author Comment

by:tommybrand
ID: 18788468
Thanks for that. I will try re-creating the connector immediately and post how I get on. It may take a few days to see if the issue has in fact gone.

Tom
0
 
LVL 4

Assisted Solution

by:shoaibbhatti007
shoaibbhatti007 earned 62 total points
ID: 18790942
Second Problem is Antivirus, Kindly disable SYMANTEC EXCHANGE protection option. It also creates problem.
I am using SCAN MAIL (Trend Micro) This is the best.
0
VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

 

Author Comment

by:tommybrand
ID: 18791192
I am using Scan Mail already.
0
 

Author Comment

by:tommybrand
ID: 18819377
I tried re-creating the SMTP connector but it looks like we are still getting the same problem. I was thinking about that anyway and I can't see why incoming mail would be affected by the SMTP connector as this deals with outgoing mail (as far as I can see anyway).

I checked the message tracking and found one of the mails that is not getting through - the entries it lists are below.

26/03/2007 14:30    SMTP:Message Submitted to Advanced Queuing
26/03/2007 14:30    SMTP:Started Message Submission to Advanced Queue
26/03/2007 14:30    SMTP:Message submitted to Categorizer

I am just wondering if it is worth disabling IMF for a while?
0
 
LVL 104

Expert Comment

by:Sembee
ID: 18820164
If it was IMF stopping the message, message tracking would say.
Messages stopping at the categoriser is usually a sign that AV or antispam has blocked the message as that is where they do their thing.

Simon.
0
 

Author Comment

by:tommybrand
ID: 18832231
Thanks
We are currently running a failry old version of the Trend Micro AV suite for SBS. I will upgrade to the latest version and report back.
0
 
LVL 1

Expert Comment

by:Computer101
ID: 20286967
Forced accept.

Computer101
EE Admin
0

Featured Post

Will my email signature work in Office 365?

You've built an email signature using raw HTML code in Office 365, but you can't review how it looks with Transport Rules. So you have to test it over and over again before it can be used. Isn't this a bit of a waste of your time? Wouldn't a WYSIWYG editor make it a lot easier?

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Exchange 2010 smtp and senderbase ratings 3 49
Exchange Online Archive 2 57
Exchange 365 Mailbox Issue 3 29
exchange, 2 15
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…
This video discusses moving either the default database or any database to a new volume.

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now