Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17


How can I tell if my Exchange server is timing out or not accepting connections?

Posted on 2009-07-16
Medium Priority
Last Modified: 2012-05-07
I have two MX records for my mail server, a primary(10) which points to my public IP address which is then NAT'd on the firewall to my server, and then a backup MX record(90) which points to my ISP's server in the event that our server is down, they will collect email until it is back up again.  Anyways, we are able to send and receive email 24/7 just fine with no issues.  An issue came up th other day where another domain behind our firewall can't send us email, it just get's "lost".  Sometimes we get it hours or days later.....So my ISP said they checked their logs for their server and there's a TON of emails not getting through to us.  Here's a sample from the log (all entries are the same error):

Jul 16 10:24:52 mailx mx/error[59967]: 5339EC9469: to=<>, relay=none, delay=278907, delays=278907/0.03/0/0, dsn=4.4.2, status=deferred (delivery temporarily suspended: lost connection with[<MY PUBLIC IP>] while sending MAIL FROM)
Question by:tenover
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 11

Accepted Solution

tmeunier earned 2000 total points
ID: 24873835
What is  This is typically a firewall or other network problem.  It would help to be able to see a session, though.

Author Comment

ID: 24874280
I think I fixed it by creating a rule on our Sonicwall.  Since both of our seperate networks are behind the same firewall, it wouldn't let us see each others public mail server IP addresses.  I created a rule that said "just use each others internal IP addresses for SMTP to each other" and that seems to have done it.  One more question though......What would cause an Exchange server to sometimes respond to telnet on port 25 and not other times?  I ask because our backup MX record (ISPs) has a boatload of email in it that for some reason went to that MX instead of our primary.....
LVL 11

Expert Comment

ID: 24874307
Well, your server should ALWAYS be answering on port 25, and if you want to ensure that it is, there are a number of good utilities that can attempt connection every x seconds/minutes etc.  IPCHECK or ServersAlive or WhatsUp Gold, can be had for cheap.  At any rate, the most common reason I see mails queuing at a 2ndary MX is because spammers know that many times we purchase expensive messaging hygeine apps for our primary MX, but leave our secondaries unprotected.  So I would ordinarily expect to see tons of SPAM going to the 2ndary MX, and less valid mail.  If you have this happening a lot, definitely set up one of the keep-alive checker utils, to hit your server from an external location, and alarm.  

Author Comment

ID: 24874376
That makes sense, and I actually thought that might be the case (Spam going to secondary MX).  I guess there's no way to really check though, huh?

Author Closing Comment

ID: 31604388
Was an issue on the firewall due to the two different LANs being behind the same firewall.  I needed to create explicit rules to allow SMTP to flow between the two LANs.  Thanks for your help.

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A list of top three free exchange EDB viewers that helps the user to extract a mailbox from an unmounted .edb file and get a clear preview of all emails & other items with just a single click on mailboxes.
New style of hardware planning for Microsoft Exchange server.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to:…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses

670 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question