Solved

Exchange server 2003 oversize e-mails keep trying to be delivered every time we reboot exchange server

Posted on 2010-11-23
4
895 Views
Last Modified: 2012-05-10
Exchange server 2003 oversize e-mails keep trying to be delivered every time we reboot exchange server, see example below. They are not showing in any of the queues and they are relatively large for this example is 350 MB so you can see their causing a lot of problems.
All I want to do is find them and then delete them.
Any thoughts would be much appreciated

Over restriction (attachment size) has been detected,and Pass has been
taken on 23/11/2010 09:50:15.
Message details:
Server: EXCHANGE1
Server: EXCHANGE1
Sender: awestgarth@******.com;
Recipient:
madams@******.com;ialford@******.com;sbarber@******.com;cbarrow@******.com;lbath@******.com;bbell@******.com;abennett@******.com;jbennett@******.com;sberry@******.com;dberryman@******.com;jberryman@******.com;besadmin@******.com;vbesnier@******.com;abeveridge@******.com;kbilling@******.com;pblackmore@******.com;sboucher@******.com;abratton@******.com;sbray@******.com;jbreinbjerg@******.com;nbrignall@******.com;vburgos@******.com;lburnard@******.com;jburnham@******.com;mbutton@******.com;dbuzzard@******.com;jcarman@******.com;dchapman@******.com;nchapman@******.com;mchappell@******.com;mclark@******.com;oclark@******.com;pgclutterbuck@******.com;coastalexplorer@******.com;jcockett@******.com;jcolligan@******.com;rcollison@******.com;/O=******/OU=FIRST
ADMINISTRATIVE
GROUP/CN=RECIPIENTS/CN=Bcorrell;fcouch@******.com;mcrimp@******.com;dcrowle@******.com;adaddow@******.com;bdean@******.com;DeepDiver@******.com;pdonkin@******.com;drillstore@******.com;sduffield@******.com;rdunstan@******.com;becclestone@******.com;mempson@******.com;bevans@******.com;tevans@******.com;vevans@******.com;excalibur@******.com;exchange1@******.com;fabshop@******.com;afenwick@******.com;mford@******.com;rfraser@******.com;afrazer@******.com;lfrazer@******.com;rfrazer@******.com;sfrazer@******.com;ess@******.com;jygleadowe@******.com;igoodreid@******.com;goodsinwards@******.com;mgreenfield@******.com;lgribble@******.com;lgriffin@******.com;wgriffiths@******.com;pgummow@******.com;mgwynn@******.com;phackwell@******.com;thalliday2@******.com;rhancock@******.com;rhannaford@******.com;jhayter@******.com;hhayward@******.com;ihenderson@******.com;thollow@******.com;chorne@******.com;mhosen@******.com;thosen@******.com;bjenkins@******.com;gjenkins@******.com;cjermyn@******.com;mjervis@******.com;ajones@******.com;ljones@******.com;juniper@******.com;skent@******.com;clangsdon@******.com;mlatham@******.com;elaw@******.com;ldapsync@******.com;pletchford@******.com;slloyd@******.com;dlovelock@******.com;llugg@******.com;/O=******/OU=FIRST
ADMINISTRATIVE
GROUP/CN=RECIPIENTS/CN=Imaclean;dmantle@******.com;master@******.com;smaynard@******.com;rmills@******.com;hmostyn@******.com;mnaughton@******.com;nrb@******.com;dnunn@******.com;sorchard@******.com;eosman@******.com;gould@******.com;lpasmore@******.com;gpenhaligon@******.com;mpeters@******.com;dpettigrew@******.com;lPettigrew@******.com;gphillips@******.com;jphillips@******.com;jpollard@******.com;npowney@******.com;lprentice@******.com;nputtick@******.com;mrampley@******.com;martha.rampley@******.com;Reception@******.com;hreed@******.com;rnreed@******.com;drembisz@******.com;ireynolds@******.com;mrichards@******.com;prichards@******.com;srichards@******.com;krichardson@******.com;mrichardson@******.com;drickard@******.com;rrosevear@******.com;mrounding@******.com;ssaunders@******.com;vschaper@******.com;sedwards@******.com;skate2d@******.com;skate2e@******.com;sdadd@******.com;lstephens@******.com;mstephens@******.com;astevens@******.com;rstevens@******.com;lstogsdill@******.com;nstubley@******.com;psykes@******.com;test@******.com;thamestideway.marine@******.com;rthomas-evers@******.com;lthornton@******.com;gtrebilcock@******.com;rtrewin@******.com;strewin@******.com;rtuckwell@******.com;ptyrrell@******.com;hvangi@******.com;averity@******.com;svowles@******.com;Webserver@******.com;awestgarth@******.com;swhitaker@******.com;jwhite@******.com;lwhite@******.com;swhite@******.com;jwhitton@******.com;cwicks@******.com;swilkins@******.com;pwilkinson@******.com;jwilliams@******.com;mwilliams@******.com;stephen.williams@******.com;swilliams@******.com;workexp@******.com;jworth@******.com;swright@******.com;yard@******.com;
Subject: Football Match
Attachment name: Fc Vs Constantine.zip
0
Comment
Question by:Seacore
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 4

Expert Comment

by:The_Dark1
ID: 34196155
If they are not present in any queue's exchange emails are located here...

(However before you "delete" any I would suggest you move them to another location)

1. Stop SMTP Service
2 Browse to Your Exchange Server install path - by default it is:

c:\program files\exchsrvr\mailroot\vsi 1\Queue

The folder above this has 2 other folders

You may find the emails in there you are trying to locate

Once you have moved them out, restart the SMTP Service

test email delivery

0
 

Author Comment

by:Seacore
ID: 34196276
As you quite rightly say there is three folders, the problem is there is nothing in any of them!
Anywhere else to look?
0
 
LVL 4

Accepted Solution

by:
The_Dark1 earned 500 total points
ID: 34200975
Hi There

Have you checked to ensure that none of your workstations are comparmised, and trying to deliver this message?

Have you checked to ensure that you are not an open realy and under attack

http://www.amset.info/exchange/spam-cleanup.asp

I would enable SMTP Logging as well

http://www.msexchange.org/tutorials/Logging_the_SMTP_Service.html

Having said that, I would also look at flushing the SMTP Queue

http://www.msexchange.org/tutorials/Queue_Viewer_Improvements_in_Exchange_2003.html

0
 

Author Comment

by:Seacore
ID: 34851015
It was an offsite mail queue which tried again every time the exchange server was rebooted
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Sha…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…

756 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question