Exchange not sending/receiving email

Hi
I have an sbs 2003 exchange box that has stopped sending emails,
all  users are connected to exchange, if i send an internal or external email they are not been received.
 
I just checked exchange queue and see there is a lot of unwanted emails in queue,
i.e .tw domains.
Would this be related?  i dont have exchange server set as a relay server,
what is best way to resolve this?
I check event log and saw a couple of event ids for exchange, not sure if they woudl cause it but there added below:
Thanks
stephen

*************
Event Type:      Information
Event Source:      ESE
Event Category:      Online Defragmentation
Event ID:      700
Date:            20/04/2010
Time:            09:16:18
User:            N/A
Computer:      GPSSERVER
Description:
Information Store (4032) First Storage Group: Online defragmentation is beginning a full pass on database 'D:\program folders\Exchsrvr\MDBDATA\priv1.edb'.
*********************************************************************************
Event Type:      Error
Event Source:      MSExchangeIS
Event Category:      General
Event ID:      9646
Date:            20/04/2010
Time:            09:16:31
User:            N/A
Computer:      GPSSERVER
Description:
Mapi session "/o=First Organization/ou=first administrative group/cn=Recipients/cn=vryan" exceeded the maximum of 500 objects of type "objtFolderView".

 For more information, click http://www.microsoft.com/contentredirect.asp.
cstephen100Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Tiras25Commented:
0
cstephen100Author Commented:
hi thanks for above,
would the above eventid cause the server to not send/receive email
or
is the reason they are not receiveing/sending due to all the .tw emails in exchnge queue?I
I have around 2000 of them in queue.
Thanks
stephen
0
Alan HardistyCo-OwnerCommented:
Please have a read of my article which should help you - sounds like you have an authenticated relay attack, or you are suffering from NDR spam:
http://www.experts-exchange.com/articles/Software/Server_Software/Email_Servers/Exchange/Why-are-my-outbound-queues-filling-up-with-mail-I-didn't-send.html 
0
Acronis Data Cloud 7.8 Enhances Cyber Protection

A closer look at five essential enhancements that benefit end-users and help MSPs take their cloud data protection business further.

MegaNuk3Commented:
If you restart the SMTP service do all mails go (do the Queues empty) or do they just fill up again after a short while OR not process at all?
0
cstephen100Author Commented:

Hi
i cleared down the queues and then restarted the smtp service,
however the smtp service stopped and wouldnt restart, the server now doesnt reboot,
i am going on site now :-(, ill post back shortly.
thanks stephen
0
MegaNuk3Commented:
How did you clear down the queues?

Have a look at installing:
http://support.microsoft.com/kb/950757/en-us Messages stuck in categorizer/queues

OR this one which is later with the same files:
http://support.microsoft.com/kb/957496/en-us Message causes store crash
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
MegaNuk3Commented:
can you go onto www.mxtoolbox.com and verify that it is not showing your server as an open relay?
0
cstephen100Author Commented:

Hi Mega,
Thanks for above, got server back online,
and we are not receiving email.  However no external email seems to be sending.
When lok at quese, i see that the Exchange MTA is not running.
Would this cause Smtp mail not to send?
i get the follwoing information in event viewer:

*******************************************8
Event Type:      Information
Event Source:      MSExchangeIS Mailbox Store
Event Category:      Transport Delivering
Event ID:      9650
Date:            21/04/2010
Time:            12:30:00
User:            N/A
Computer:      GPSSERVER
Description:
Message delivery is being attempted.
Internet Msg Id:<15E476084EA33244918D526C537A93C7399193@horizongpschina>, Submit Time: 04/21/2010 11:29:59.0000000, Recipient:/o=First Organization/ou=first administrative group/cn=Recipients/cn=vryan, MDB:First Storage Group\Mailbox Store (GPSSERVER).
*************************************88

Thanks
stephen

0
MegaNuk3Commented:
How big is that message? @horizongpschina? How BIG are your message restrictions to and from the internet? 5Mb, 10Mb, 20Mb or unrestricted?

Have you checked on mxtoolbox.com to make sure that you aren't an open relay?
0
MegaNuk3Commented:
MTA Stacks service is not needed in Exchange 2003. this is only for non-smtp messages like Lotus Notes connectors etc...
0
MegaNuk3Commented:
did you apply either of those hotfixes I gave you?
0
MegaNuk3Commented:
Also, what version of store.exe are you running?
0
MegaNuk3Commented:
and what version of exsmtp.dll?
0
lscarborCommented:
You might try this:
If you do have an open relay, as mentioned above, correct that issue. Usually, it's best to go to the smtp server in Exchange, go to Access, Relay Restrictions, grant access to only the list below.
Put in the server IP, the mask and the local host IP (127.0.0.1)
Uncheck 'allow all computer that authenticate'. It is very likely that an internal machine will have a mysteriously enabled IIS or SMTP on it that is sending spam to the Exchange server.
stop the Exchange services. Usually stopping the system attendant is good enough (accept the additional services that want to stop as a result). In particular make sure the information store is stopped.
Go to this directory:
C:\Program Files\Exchsrvr\Mailroot\vsi 1>
the object is to stop the queue objects (all your in-process mail) from going out. They are probably mostly spam.
use the command prompt--the gui may take a long time because it has to read the entire queue before it will list. Make a directory, name it something like queueold.
copy queue\*.* to queold. Double check that this worked.
Then delete queue\*.*
Now, start the services again, using the reverse order : start the system attendant (and whatever wants to start automatically) and then all the other services that say Microsoft Exchange. (I like to sort by the startup type--all the Exchange services will be listed in a row and all should be started from the top down).
If the queue fills up again, you have to start over. You haven't found the offending machine yet.
Several things can cause this, all nefarious. Look for some workstation that has IIS running on it first. Make sure your SMTP server in Exchange is set correctly. And then do it again.
The objects in the queue directory can be copied back into the queue if they are legit. Delete the other ones.
You may not be receiving mail because the BadMail directory is so full that you are out of room on drive C:.
Also, the First Storage Group  mail and public stores should be running, right click and click mount store.
But I suggest fixing the SMTP and move the queue files first.
0
MegaNuk3Commented:
thanks for the points, did the hotfixes solve your issue?
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
SBS

From novice to tech pro — start learning today.