Solved

Barracuda spam filter 300 "deferred" messages inbound

Posted on 2010-09-15
5
10,637 Views
Last Modified: 2013-11-16
This is an older device, but up until a couple of months ago was fairly reliable. Lately we're seeing a lot of both spam and legit inbound emails being "deferred" due to "timeouts". Some of the legit emails end up getting delivered hours later, but some do not. Some email domains send successfully to us and at other times do not, i.e. there is no common thread in regards to remote domains.

Vendor support claims it must be a network issue somewhere in between our network and the remote mail server, since they see the device connected full 100, no errors there in regards to CRC etc. But since nothing else in our network seems to be having any network-related issues I can only blame the Barracuda device. For example we have a remote desktop server that is being used all the time by 10-15 telecommuters and if it goes down we hear about it.

I'm not seeing any errors on the switch the Barracuda is plugged into either. Besides changing out the Ethernet cable is there anything else you guys (and gals) can recommend? Or hopefully someone has seen this before?? FYI the device is running on the latest firmware.
0
Comment
Question by:vanbarsoun
  • 3
  • 2
5 Comments
 
LVL 12

Expert Comment

by:FDiskWizard
Comment Utility
Hmm, on your status screen do you ever have emails piling up on the inbound queue?
We had to upgrade to 600's a while back because of the increase in SPAM. But I don't know if errors were happening. It just got bogged down. So, possibly...

From the Advanced TAB > troubleshooting start a ping on an external IP address.
Maybe your providers 1st hop outside of your network.
See if anything drops.
I started a ping to Yahoo.com while typing... steady at about 50ms.
Also do a ping to an inside IP...
0
 
LVL 9

Author Comment

by:vanbarsoun
Comment Utility
I've never noticed any inbound emails piling up, queue is almost always close to 0.
I will try the ping to see if there's anything obvious, but i'm not really hopeful, since the problem is very intermittent.
0
 
LVL 9

Accepted Solution

by:
vanbarsoun earned 2 total points
Comment Utility
Device was replaced and still getting deferred messages, so most likely problem is further upstream.
0
 
LVL 12

Expert Comment

by:FDiskWizard
Comment Utility
Hello again...
If you're having inbound emails pile up on the Barracuda I think that would indicate that emails are getting through from outside. But Barrcuda cannot forward message on to your Exchange... so I would look on the Exchange side. Enable some diagnostic logging.
Nice to-the-point article on tracking/diagnostics:
http://www.msexchange.org/tutorials/Exchange-Server-2003-Mailflow-Part-2.html

Message tracking on one of the senders may not show up if it never lands in the Exchange queues.

Normally I've only seen emails pile up on Barracuda if there is a problem with Exchange.
Like a couple of mail floods we've had due to crazy applications. So, the Barrcuda couldn't xfer to Exchange because Exchange was bogged down.

Performance OK on Exchange? Disk Queue Length?
any odd errors in App log?



0
 
LVL 9

Author Comment

by:vanbarsoun
Comment Utility
Thanks FDiskWizard but the emails aren't getting queued and sitting there, they are getting blocked/rejected with reason "deferred". 99% of them seem to be spam. I believe this has always been the behavior but my assumption is that older firmware never reported this as an "alert" so were never made aware, since we're seeing this only relatively recently after upgrading the firmware. I'm good to leave it alone for now.
0

Featured Post

Why You Should Analyze Threat Actor TTPs

After years of analyzing threat actor behavior, it’s become clear that at any given time there are specific tactics, techniques, and procedures (TTPs) that are particularly prevalent. By analyzing and understanding these TTPs, you can dramatically enhance your security program.

Join & Write a Comment

This short article will present "How to import ICS Calendar onto Office 365 Calendar". I was searching for free (or not free) tools to convert ICS to CSV without success. The only tools I found & working well were online tools...this was too hard to…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
In this video we show how to create a Resource Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: Navigate to the Recipients >> Resources tab.: "Recipients" is our default selection …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now