Solved

External Emails to users going to distribution group but can't figure out why

Posted on 2010-08-25
9
627 Views
Last Modified: 2013-11-30
This has just started happening and trying to figure out why - If an external email comes in to usera then gets sent to usera but also to a distribution group.  I have checked and the users do not have autoforwards, rules or forwards in AD that would be causing the problem.

We have GFI Mailessentials 2010 which was playing up

So in message tracking shows
SMTP: Message Submitted to Advanced Queuing
SMTP: Started Message Submission to Advanced Queue
SMTP: Message Submitted to Categorizer
SMTP: Message Queued for Local Delivery
SMTP: Message delivered Locally to usera@domain
SMTP Store Driver: Message Delivered Locall to Store to usera@domain
SMTP: Message Submitted to Advanced Queuing
SMTP: Started Message Submission to Advanced Queue
SMTP: Message Submitted to Categorizer
SMTP: Message Categorized and Queued for Routing
SMTP: Message Categorized and Queued for Routing
SMTP: Message Queued for Local Delivery
SMTP: Message Delivered Locally to group@domain
SMTP Store Driver: Message Delivered Locally to Store to group@domain
SMTP: Message Delivered Locally to multiple recipients
SMTP Store Driver: Message Delivered Locally to Store to userongroupa@domain
SMTP Store Driver: Message Delivered Locally to Store to userongroupb@domain
SMTP Store Driver: Message Delivered Locally to Store to userongroupb@domain

This seems to be happening to majority of users and I am stumped.  I have upgraded the GFI to latest version released today and server has been restarted - this just started happening this week and resulting in everybody on the group getting tons of emails and mails that should not be forwarded on

Running Exchange 2003

Any ideas?

0
Comment
Question by:Compsysuk
9 Comments
 
LVL 14

Assisted Solution

by:Shabarinath Ramadasan
Shabarinath Ramadasan earned 250 total points
Comment Utility
Try disabling GFI and see.
Also, is this issue just specific on one user?
if so, I would suggest you to check the targetaddress attribute too through adsiedit.

Good luck.
Shaba
0
 

Author Comment

by:Compsysuk
Comment Utility
no appears to be affecting all users - very peculiar
0
 
LVL 17

Expert Comment

by:aoakeley
Comment Utility
Is the Mailbox Store set to journal to the distribution group?
0
 
LVL 8

Expert Comment

by:Mkris9
Comment Utility
Can try disabling GFI as

SMTP Store Driver: Message Delivered Locall to Store to usera@domain
SMTP: Message Submitted to Advanced Queuing

suggests that something is forwarding emails to the group. is there a journal mailbox that's forwarding emails to this group ?
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 

Author Comment

by:Compsysuk
Comment Utility
There appears to be a journal setup but to archive@domain not group@domain so so also see it going to there in the message tracking - I have checked there is no forward or rules on the archive account to forward to distribution group
0
 
LVL 8

Expert Comment

by:Mkris9
Comment Utility
Missed this before -

SMTP: Message Submitted to Categorizer
SMTP: Message Categorized and Queued for Routing
SMTP: Message Categorized and Queued for Routing

Any message categories set up ? as, it shouldn't say 'Message Categorized and Queued for Routing' if there were no category based route set up
0
 
LVL 19

Expert Comment

by:R--R
Comment Utility
Can you send a test message to usera from intermally account and external account and see if this happens.
0
 
LVL 28

Expert Comment

by:sunnyc7
Comment Utility
Can you try stopping GFI and then sending emails and see if they get delivered to designated users mailbox ?
0
 

Accepted Solution

by:
Compsysuk earned 0 total points
Comment Utility
I thought I had updated this post - it turns out that the problem was down to Mail Monitoring settings in GFI.  I stoppeed GFI and resolved so went through all the different features till found something pointing at group@domain

Thanks for the comments
0

Featured Post

What Is Threat Intelligence?

Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

Join & Write a Comment

We are happy to announce a brand new addition to our line of acclaimed email signature management products – CodeTwo Email Signatures for Office 365.
Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now