Solved

Exch07 - Large attachment got around limits, killed servers

Posted on 2009-05-19
1
253 Views
Last Modified: 2012-05-07
I'm in the middle of performing a migration from one Exchange 07 server to another 07 server.  Both are setup as closely as possible in terms of roles (Mailbox, Hub Transport, CAS, UM) with similar settings.  Most of the users are still on the old server, some have been migrated to the new one.

There is a limit of 20MB for attachments set in Organizational Configuration-Hub Transport-Global Settings-Transport settings.  In Server Configuration-Hub Transport-Recieve connectors for both servers, the same limit is in place as well.

Yesterday, a user tried to email a 800MB video file.  Even though they got a non-delivery report saying the attachment was too large, it seems Exchange still attempted to process it.  Some of the symptons we saw included:

* An error email from Forefront saying it could not scan the message
* Users reporting emails from various sources not getting through (the first reported incident was scanned documents from multi-functions not being recieved)
* Our helpdesk website was generating "insufficient resources" errors
* Noone could send email, the items just sat in the outbox.
* The edgetransport.exe process was using higher than normal CPU

Steps taken after the incident was reported:

* Looked up the "insufficnet resources" error, which suggested not enough disk space for the queue.  Both servers had more than enough space.
* The event log had entries relating to resource pressure increase for the Version Buckets, as well as the Hub Transport service not responding.
* Reviewed the mail queues and found them backing up
* Reviewed the message logs and found entries relating to the cause, with interaction between both servers in these entries

We found that there were 2 emails with very large attachments, with the details matching the error emails generated by Forefront.  After deleting them, service appeared to return to normal.

Is there anything I missed in the configuration of the server?  The NDR email suggests the attachment limits, but the message log entries and the resulting problems suggest that it didn't work properly.  Any ideas, suggestions, etc would be appreciated.  Thanks.
0
Comment
Question by:jpboyce
1 Comment
 
LVL 26

Accepted Solution

by:
jar3817 earned 500 total points
ID: 24467095
It didn't really get around the limit,  because it sent an NDR, which I'm sure didn't help matters since it was an 800MB NDR.

A message of that size is going to mess all sorts of things up, no matter what measures you have setup. At the very least you should tar and feather this user as an example to the others.
0

Featured Post

Enabling OSINT in Activity Based Intelligence

Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

Join & Write a Comment

"Migrate" an SMTP relay receive connector to a new server using info from an old server.
Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…

758 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now