Solved

Incoming SMTP mail disappearing with no NDR - Exchange 2003

Posted on 2007-03-24
10
926 Views
Last Modified: 2008-02-01
I am running SBS 2003

Exchange 2003 is running SP2 and the IMF is enabled

We use SMTP for both incoming and outgoing delivery

Recently we have been experiencing issues with incoming e-mails. Messages are not being deivered to maiboxes and the sender does not get an NDR. This is only happening when messges are sent from certain external sources but mail from these senders also gets through sometimes (slightly ruling out spam checkers) and it is happening at random times!

SMTP logging is enabled and the interesting thing is that I can see the e-mail arriving at the SBS server, see an example below:

2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 EHLO - +moutng.kundenserver.de 250 0 314 27 0 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 MAIL - +FROM:<rmacparland@cfreelpg.co.uk> 250 0 51 49 0 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 RCPT - +TO:<andrew@haggards.co.uk> 250 0 34 31 0 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 RCPT - +TO:<chris@haggards.co.uk> 250 0 33 30 0 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 DATA - +<!&!AAAAAAAAAAAYAAAAAAAAAKdPUAwzhxNInOCRp5gxa1jCgAAAEAAAAOWOTNEy2YhHrNIgJETQcC4BAAAAAA==@cfreelpg.co.uk> 250 0 188 73521 515 SMTP - - - -
2007-03-21 08:07:34 212.227.126.171 moutng.kundenserver.de SMTPSVC1 HCSBS 192.168.0.4 0 QUIT - moutng.kundenserver.de 240 609 68 4 0 SMTP - - - -

This e-mail never reached the intended mailboxes - both of which are valid

IMF is enabled but I have used IMF Companion to check if the message was blocked but nothing there!

The event log was fairly clear although at the time of the message ariving it does seem as though the online defrag was running. No errors/warnings.

It is very frustrating and hard to troubleshoot as the messages just seem to be disappearing!

Heeeeelp!
0
Comment
Question by:tommybrand
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 2
  • 2
  • +1
10 Comments
 
LVL 104

Accepted Solution

by:
Sembee earned 63 total points
ID: 18785132
Have you got message tracking enabled?
If not, then you need to enable it to see what Exchange is doing with the message.

Simon.
0
 
LVL 4

Expert Comment

by:shoaibbhatti007
ID: 18785344
I have also faced same error. I deleted the old connector and re-created a new connector. Now it is working properly (Connector for Internet Emails)
0
 

Author Comment

by:tommybrand
ID: 18788468
Thanks for that. I will try re-creating the connector immediately and post how I get on. It may take a few days to see if the issue has in fact gone.

Tom
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 
LVL 4

Assisted Solution

by:shoaibbhatti007
shoaibbhatti007 earned 62 total points
ID: 18790942
Second Problem is Antivirus, Kindly disable SYMANTEC EXCHANGE protection option. It also creates problem.
I am using SCAN MAIL (Trend Micro) This is the best.
0
 

Author Comment

by:tommybrand
ID: 18791192
I am using Scan Mail already.
0
 

Author Comment

by:tommybrand
ID: 18819377
I tried re-creating the SMTP connector but it looks like we are still getting the same problem. I was thinking about that anyway and I can't see why incoming mail would be affected by the SMTP connector as this deals with outgoing mail (as far as I can see anyway).

I checked the message tracking and found one of the mails that is not getting through - the entries it lists are below.

26/03/2007 14:30    SMTP:Message Submitted to Advanced Queuing
26/03/2007 14:30    SMTP:Started Message Submission to Advanced Queue
26/03/2007 14:30    SMTP:Message submitted to Categorizer

I am just wondering if it is worth disabling IMF for a while?
0
 
LVL 104

Expert Comment

by:Sembee
ID: 18820164
If it was IMF stopping the message, message tracking would say.
Messages stopping at the categoriser is usually a sign that AV or antispam has blocked the message as that is where they do their thing.

Simon.
0
 

Author Comment

by:tommybrand
ID: 18832231
Thanks
We are currently running a failry old version of the Trend Micro AV suite for SBS. I will upgrade to the latest version and report back.
0
 
LVL 1

Expert Comment

by:Computer101
ID: 20286967
Forced accept.

Computer101
EE Admin
0

Featured Post

Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…

729 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question