Solved

legit incoming mail stuck in smtpvirtual server

Posted on 2011-02-14
17
393 Views
Last Modified: 2012-05-11
new sbs 2003 box install.  most mail works, but 2 legit domains are stuck in the smtp virtual server and never get delievered.  times climng into the hundreds of seconds. ( see attachment)

how do i get these external users to authenticate and get the mail delivered?
Capture.JPG
0
Comment
Question by:phrea84
  • 11
  • 6
17 Comments
 
LVL 2

Author Comment

by:phrea84
ID: 34896611
Noone?  This has to be a pretty common issue--someone has not know how to resolve this.

0
 

Expert Comment

by:ollietait
ID: 34896784
Hi phrea84,
The shot you have shown shows SMTP connections to other servers and clients. There are several connections with p3plex1out02.prod.phx3.secureserver.net or similar, and one to travelzoo.com

I'm not sure what your question is...

Is the question how to get external users to successfully submit mail for relay
"how do i get these external users to authenticate and get the mail delivered?"

or is the question that you have undeliverable mail from internal clients to external recipients?
"but 2 legit domains are stuck in the smtp virtual server and never get delievered".
0
 
LVL 2

Author Comment

by:phrea84
ID: 34897651
my question is this:

the mail in the queue in the attached pic is incoming mail from godaddy and tavelzoo.com.  its legit and we want it, but it never finishes the process of receiveing.  i am able to receive mail fine from other domains and if i watch this queue the time is normal for the sending server to connect and drop.  why wont these 2 domains successfully transmit mail to us and how do i fix this?

thanks for your time
0
 

Expert Comment

by:ollietait
ID: 34897851
Ok.
Do the senders get an NDR / bounce back message? The content of that usually indicates the problem.

Also right-click default SMTP server and enable logging.
0
 

Expert Comment

by:ollietait
ID: 34898034
If logging is already enabled look in c:\windows\system32\logs\smtpsvc1\XYZ.log (default location)

The log files should be named with date  exyymmdd.log so todays log ex110215.log. Do you see the sessions in there from the relevant IP addresses?
0
 

Expert Comment

by:ollietait
ID: 34898095
it also looks like those sending addresses are on blacklists.
Do you have any filtering enabled / gateway email filter?

see here
0
 
LVL 2

Author Comment

by:phrea84
ID: 34898949
the bounce back says it times out.  these messages will keep trying until they eventually bounce.

i had just recieepient filtering enabled.  i just turned it off and restarted the smpt service.  ill let you go.
0
 
LVL 2

Author Comment

by:phrea84
ID: 34898993
so wierd--i turned off all mail filtering, restarted and i can send.  turned back on all filtering, restarted, and it still works.

i messed with the filtering settings for hours last night.  what do you think happened that fixed this?
0
Want to promote your upcoming event?

Attending an event? Speaking at a conference? Or exhibiting at a tradeshow? Easily inform your contacts by using a promotional banner in your email signature. This will ensure your organization’s most important contacts are in the know.

 
LVL 2

Author Comment

by:phrea84
ID: 34899275
it looks that only fixed it for the godaddy.  travelzoo and others are still stuck in this queue.

ideas?
0
 

Expert Comment

by:ollietait
ID: 34904745
Did you look for the transactions in the log file?
0
 

Expert Comment

by:ollietait
ID: 34904760
have you applied all the MS updates for exchage and SBS?
0
 
LVL 2

Author Comment

by:phrea84
ID: 34912268
sbs 2003 is fully patched and updated.  looking at logs now and will post back.

what would cause incoming AND outgoing mail to be hit and miss on specific domains?
0
 
LVL 2

Author Comment

by:phrea84
ID: 34912391
does this help???


#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2011-02-17 00:01:39
#Fields: time c-ip cs-method cs-uri-stem sc-status
00:01:39 208.71.172.139 EHLO - 250
00:01:39 208.71.172.139 MAIL - 250
00:01:39 208.71.172.139 RCPT - 250
00:01:39 208.71.172.139 BDAT - 250
00:01:39 208.71.172.139 MAIL - 250
00:01:39 208.71.172.139 RCPT - 250
00:01:39 208.71.172.139 BDAT - 250
00:01:40 208.71.172.139 QUIT - 240
00:01:43 184.105.195.74 EHLO - 250
00:01:43 184.105.195.74 MAIL - 250
00:01:43 184.105.195.74 RCPT - 250
00:01:43 184.105.195.74 BDAT - 250
00:01:43 184.105.195.74 MAIL - 250
00:01:43 184.105.195.74 RCPT - 250
00:01:45 184.105.195.74 BDAT - 250
00:01:45 184.105.195.74 MAIL - 250
00:01:45 184.105.195.74 RCPT - 250
00:01:45 184.105.195.74 BDAT - 250
00:01:45 184.105.195.74 MAIL - 250
00:01:45 184.105.195.74 RCPT - 250
00:01:45 184.105.195.74 BDAT - 250
00:01:45 184.105.195.74 QUIT - 240
00:03:31 204.152.95.99 EHLO - 250
00:03:31 204.152.95.99 MAIL - 250
00:03:31 204.152.95.99 RCPT - 250
00:04:12 174.36.86.119 EHLO - 250
00:04:12 174.36.86.119 MAIL - 250
00:04:12 174.36.86.119 RCPT - 250
00:04:12 174.36.86.119 BDAT - 250
00:04:12 174.36.86.119 MAIL - 250
00:04:12 174.36.86.119 RCPT - 250
00:04:12 174.36.86.119 BDAT - 250
00:04:12 174.36.86.119 MAIL - 250
00:04:12 174.36.86.119 RCPT - 250
00:04:14 174.36.86.119 BDAT - 250
00:04:14 174.36.86.119 QUIT - 240
00:04:52 204.152.95.166 EHLO - 250
00:04:52 204.152.95.166 MAIL - 250
00:04:52 204.152.95.166 RCPT - 250
00:05:13 208.71.172.139 EHLO - 250
00:05:13 208.71.172.139 MAIL - 250
00:05:13 208.71.172.139 RCPT - 250
00:05:14 208.71.172.139 BDAT - 250
00:05:16 208.71.172.139 QUIT - 240
00:05:26 210.241.98.241 EHLO - 250
00:05:26 210.241.98.241 MAIL - 250
00:05:27 210.241.98.241 RCPT - 250
00:05:41 83.156.127.30 HELO - 250
00:05:43 83.156.127.30 MAIL - 250
00:05:43 83.156.127.30 RCPT - 250
00:05:46 83.156.127.30 DATA - 250
00:05:46 83.156.127.30 QUIT - 240
00:05:51 174.36.86.119 EHLO - 250
00:05:51 174.36.86.119 MAIL - 250
00:05:51 174.36.86.119 RCPT - 250
00:05:52 174.36.86.119 BDAT - 250
00:05:52 174.36.86.119 QUIT - 240
00:06:55 186.86.123.52 EHLO - 250
00:06:55 186.86.123.52 MAIL - 250
00:06:55 186.86.123.52 RCPT - 250
00:06:57 186.86.123.52 DATA - 250
00:06:57 186.86.123.52 QUIT - 240
00:07:28 204.152.95.17 EHLO - 250
00:07:28 204.152.95.17 MAIL - 250
00:07:28 204.152.95.17 RCPT - 250
00:07:46 204.152.95.99 QUIT - 240
00:07:46 204.152.95.166 QUIT - 240
00:07:46 210.241.98.241 QUIT - 240
00:07:46 204.152.95.17 QUIT - 240
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2011-02-17 00:14:33
#Fields: time c-ip cs-method cs-uri-stem sc-status
00:14:33 208.71.172.139 EHLO - 250
00:14:33 208.71.172.139 MAIL - 250
00:14:33 208.71.172.139 RCPT - 250
00:14:33 208.71.172.139 BDAT - 250
00:14:33 208.71.172.139 QUIT - 240
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2011-02-17 00:16:51
#Fields: time c-ip cs-method cs-uri-stem sc-status
00:16:51 76.96.30.32 EHLO - 250
00:16:51 76.96.30.32 MAIL - 250
00:16:51 76.96.30.32 RCPT - 250
00:16:57 76.96.30.32 QUIT - 240
0
 
LVL 2

Author Comment

by:phrea84
ID: 34912466
i really need to get this fixed?  where are all the experts at?  why is only 1 person trying to help!?!?

please...someone assist me in resolving this.
0
 
LVL 2

Author Comment

by:phrea84
ID: 34912633
would it just be easier for me to use a 3rd party filter for incoming and outgoing??
0
 
LVL 2

Accepted Solution

by:
phrea84 earned 0 total points
ID: 34913024
fixed via microsoft paid support.
0
 
LVL 2

Author Closing Comment

by:phrea84
ID: 34941426
fixed via microsoft paid support
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Suggested Solutions

Title # Comments Views Activity
Exchange 2013 - unable to recieve external emails 14 36
exchange 2 35
exchange 6 32
Exchange 2007 export to PST 12 62
Check out this infographic on what you need to make a good email signature that will work perfectly for your organization.
Local Continuous Replication is a cost effective and quick way of backing up Exchange server data. The following article describes the steps required to configure Local Continuous Replication. Also, the article tells you how to restore from a backup…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
This video discusses moving either the default database or any database to a new volume.

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now