Solved

Old email appears in smtp queues after Exchange reboot

Posted on 2007-04-09
5
1,313 Views
Last Modified: 2008-06-05
We rebooted our Exchange server (Exchange 2003 SP2) after installing MS security updates. When the server came back up there were over 50 email messages in SMTP queue.  Each had varying dates, and some dated back to the last time the server was rebooted (almost 2 months ago). All of the message recipients I looked at in the SMTP queues were from other domains (yahoo, gmail, etc.)

The Exchange server uses an SMTP connector, which happens to be our Barracuda anti-spam appliance. I have been administering the Exchange server for several months and haven't seen any messages lingering in the queues for more than 20 minutes, nor have I ever rebooted the server and then had mail flow, especially from two months ago.

I also have checked the Badmail folder and the Exchange Anti-Virus quarantine, I didn't see any of the messages that got sent out after the reboot.

There must be a folder I'm missing on the Exchange server that held these messages. When the Exchange server was rebooted on Friday, a brick level backup was running. I thought that perhaps the back up job being cut off like that may have explained why the messages suddenly appeared and went out. However, a user reported today that a message they sent last month  arrived to it's intended recpipients last Friday night.

Experts, help!
0
Comment
Question by:lucado01
  • 2
  • 2
5 Comments
 
LVL 14

Expert Comment

by:Erik Pitti
ID: 18879864
Perhaps the messages ended up in the queue or pickup folder after the reboot.

See here for Exchange SMTP special folders:
http://support.microsoft.com/kb/306043
0
 
LVL 104

Accepted Solution

by:
Sembee earned 400 total points
ID: 18881496
Not unusual for this to happen.
The most common reason is that antivirus software has hung on to the messages and it is only when the services are restarted by a reboot that they are released.

Simon.
0
 

Author Comment

by:lucado01
ID: 18883827
I am fairly certain the messages weren't in those folders.

Regarding the anti-virus, is this something I should be able to spot in the program's quarantine field and release it? Would it be held anywhere else? Would the vendor (Symantec) admit to this?
0
 
LVL 14

Assisted Solution

by:Erik Pitti
Erik Pitti earned 100 total points
ID: 18885875
Sembee: Thats kinda the direction I was heading.  

Lucado01: I've seen Trend's AV do this as well, esp after a clustered Exchange server failover.  But I'm sure it could also happen after a reboot.  Probably no big deal.  You may want to contact your AV vendor and ask if there's an update available that will curb the behavior.
0
 
LVL 104

Expert Comment

by:Sembee
ID: 18886330
Depends where the software is holding the message and which one is holding it. It is not unusual for a message to just disappear only to reappear when the server is rebooted.

Simon.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Utilizing an array to gracefully append to a list of EmailAddresses
This article explains in simple steps how to renew expiring Exchange Server Internal Transport Certificate.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question