Link to home
Start Free TrialLog in
Avatar of lucado01
lucado01

asked on

Old email appears in smtp queues after Exchange reboot

We rebooted our Exchange server (Exchange 2003 SP2) after installing MS security updates. When the server came back up there were over 50 email messages in SMTP queue.  Each had varying dates, and some dated back to the last time the server was rebooted (almost 2 months ago). All of the message recipients I looked at in the SMTP queues were from other domains (yahoo, gmail, etc.)

The Exchange server uses an SMTP connector, which happens to be our Barracuda anti-spam appliance. I have been administering the Exchange server for several months and haven't seen any messages lingering in the queues for more than 20 minutes, nor have I ever rebooted the server and then had mail flow, especially from two months ago.

I also have checked the Badmail folder and the Exchange Anti-Virus quarantine, I didn't see any of the messages that got sent out after the reboot.

There must be a folder I'm missing on the Exchange server that held these messages. When the Exchange server was rebooted on Friday, a brick level backup was running. I thought that perhaps the back up job being cut off like that may have explained why the messages suddenly appeared and went out. However, a user reported today that a message they sent last month  arrived to it's intended recpipients last Friday night.

Experts, help!
Avatar of Erik Pitti
Erik Pitti
Flag of United States of America image

Perhaps the messages ended up in the queue or pickup folder after the reboot.

See here for Exchange SMTP special folders:
http://support.microsoft.com/kb/306043
ASKER CERTIFIED SOLUTION
Avatar of Sembee
Sembee
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of lucado01
lucado01

ASKER

I am fairly certain the messages weren't in those folders.

Regarding the anti-virus, is this something I should be able to spot in the program's quarantine field and release it? Would it be held anywhere else? Would the vendor (Symantec) admit to this?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Depends where the software is holding the message and which one is holding it. It is not unusual for a message to just disappear only to reappear when the server is rebooted.

Simon.