Solved

Sent email time difference

Posted on 2011-02-28
13
702 Views
Last Modified: 2012-06-21
Hi Experts,

I have a client site with SBS 2008 and Terminal Server 2008 R2 running on Esxi 4.0.  The issues lies with the email time stamp.  

When the email is recieved, the time that it was sent is an hour  early eg The email below was sent at 7:05 (as per the subject line) however it is stamped as 6:05.

date Tue, Mar 1, 2011 at 6:05 AM
subject 7:05

We live in Perth Western Australia where there was daylight savings, now there is not - I have checked both servers and the they state they are in the correct time zone and are reporting the correct time.  They also correctly state that there is no daylight savings in this time zone.  I do not understand where this time stamp may be coming from.  

Any assistance on this one would be appreciated.  
0
Comment
Question by:domdig
  • 6
  • 6
13 Comments
 
LVL 8

Expert Comment

by:pmorton23
ID: 35002751
can you please post full header info from one of the emails in question. does this happen for every email or just ceratin ones.
0
 
LVL 8

Expert Comment

by:pmorton23
ID: 35002776
the timestamp could be coming from a firewall or the last hop to the internet.
0
 

Author Comment

by:domdig
ID: 35002793
Full unedited email headers are below

Received: from out11.sjc.mx.trendmicro.com (216.99.131.48) by
 remote.domaindigital.com.au (192.168.3.248) with Microsoft SMTP Server (TLS)
 id 8.1.393.1; Tue, 1 Mar 2011 07:03:16 +0800
Received: from in11.sjc.mx.trendmicro.com (unknown [10.30.239.134])      by
 out11.sjc.mx.trendmicro.com (Postfix) with ESMTP id 8F44F980436      for
 <charlie@domaindigital.com.au>; Mon, 28 Feb 2011 23:03:13 +0000 (UTC)
Received: from outbound.icp-qv1-irony-out6.iinet.net.au (unknown
 [203.59.1.109])      by in11.sjc.mx.trendmicro.com (Postfix) with ESMTP id
 CC7E6B3B02A      for <charlie@domaindigital.com.au>; Mon, 28 Feb 2011 23:03:11
 +0000 (UTC)
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Av0EAPu3a03LO431/2dsb2JhbACCTqN3dLtVhWEEhQ2HD4NY
X-IronPort-AV: E=Sophos;i="4.62,243,1297008000";
   d="scan'208,217";a="216358990"
Received: from unknown (HELO companyweb.city-life.com.au) ([203.59.141.245])
  by outbound.icp-qv1-irony-out6.iinet.net.au with ESMTP/TLS/AES128-SHA; 01
 Mar 2011 07:03:09 +0800
Received: from CLSBS.city-life.local ([fe80::50ca:7523:20ab:2c4c]) by
 CLSBS.city-life.local ([fe80::50ca:7523:20ab:2c4c%13]) with mapi; Tue, 1 Mar
 2011 08:03:07 +0900
From: City-Life Admin <cladmin@city-life.com.au>
To: "'charlie@domaindigital.com.au'" <charlie@domaindigital.com.au>
Date: Tue, 1 Mar 2011 07:03:07 +0900
Subject: 7:03
Thread-Topic: 7:03
Thread-Index: AcvXm6tuz+Lb7rSPRO2oSaLcCZcjfg==
Message-ID: <2D702F83362F6F46AAFC145432A5906E67431EA3CF@CLSBS.city-life.local>
Accept-Language: en-US, en-AU
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US, en-AU
X-TM-AS-Product-Ver: SMEX-8.6.0.1374-6.500.1024-17608.004
X-TM-AS-Result: No--2.939200-5.000000-31
X-TM-AS-User-Approved-Sender: No
X-TM-AS-User-Blocked-Sender: No
Content-Type: multipart/alternative;
      boundary="_000_2D702F83362F6F46AAFC145432A5906E67431EA3CFCLSBScitylife_"
MIME-Version: 1.0
X-TM-AS-Result-Detail: Spam:No-Score:-4.7681-Baseline:ModeratelyHigh-Other:Lowest
X-TM-AS-URLRatingInfo: 81-38-=?us-ascii?B?aHR0cDovL3NjaGVtYXMubWljcm9zb2Z0Lm
      NvbS9vZmZpY2UvMjAwNC8xMi9vbW1s?=
X-TM-AS-URLRatingAct: 60-Delivered
Return-Path: cladmin@city-life.com.au
X-MS-Exchange-Organization-PRD: city-life.com.au
X-MS-Exchange-Organization-SenderIdResult: None
Received-SPF: None (DOMAINSBS.domaindigital.local: cladmin@city-life.com.au
 does not designate permitted sender hosts)
X-MS-Exchange-Organization-SCL: 0
0
 
LVL 8

Expert Comment

by:pmorton23
ID: 35002808
Received: from unknown (HELO companyweb.city-life.com.au) ([203.59.141.245])
  by outbound.icp-qv1-irony-out6.iinet.net.au with ESMTP/TLS/AES128-SHA; 01
 Mar 2011 07:03:09 +0800
Received: from CLSBS.city-life.local ([fe80::50ca:7523:20ab:2c4c]) by
 CLSBS.city-life.local ([fe80::50ca:7523:20ab:2c4c%13]) with mapi; Tue, 1 Mar
 2011 08:03:07 +0900
From: City-Life Admin <cladmin@city-life.com.au>
To: "'charlie@domaindigital.com.au'" <charlie@domaindigital.com.au>
Date: Tue, 1 Mar 2011 07:03:07 +0900

clsbs.city-life.local is showing a timestamp of 803
this server has incorrect time or is in a different timezone.
0
 
LVL 8

Expert Comment

by:pmorton23
ID: 35002837
there is also a difference in the UTC number. the first stamp shows utc of +9 and the later ones show utc of +8. unless the servers in a differnet time zone they should be the same.
0
 

Author Comment

by:domdig
ID: 35002891
OK - Thanks - Good spot - I can see this now you have pointed it out.  The next question is "why"

This server is in the correct time zone (Perth GMT +8) with the correct time.  

Where else can I look to determine where this issue may lie?
0
Free Trending Threat Insights Every Day

Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

 
LVL 8

Expert Comment

by:pmorton23
ID: 35002925
check the ironport boxes and the trendmicro
0
 

Author Comment

by:domdig
ID: 35003010
OK - the iron port is with the ISP.  This might take a while.....

Thanks for your assistance.  Will report back.  

0
 
LVL 8

Expert Comment

by:pmorton23
ID: 35003017
it might be an issue with the ISP then. emails are delivered on time they just show the wrong stamp. good luck
0
 
LVL 16

Expert Comment

by:Postmaster
ID: 35003286
Time stamps are converted into the correct zone by sender and recipient machines.
So if the sender has the wrong settting, then nothing you do can fix that.

Your recipient simply takes the provided value (in GMT) and converts it for display.

To: "'charlie@domaindigital.com.au'" <charlie@domaindigital.com.au>
Date: Tue, 1 Mar 2011 07:03:07 +0900

The sender time zone is wrong. (should be +0800)
All your servers correctly stamp the message with +0800 as the mail moves from one to the other.
0
 

Author Comment

by:domdig
ID: 35043411
I am no longer thinking this is an ISP issue.....

Looking at the following:

Received: from CLSBS.city-life.local ([fe80::50ca:7523:20ab:2c4c]) by
 CLSBS.city-life.local ([fe80::50ca:7523:20ab:2c4c%13]) with mapi; Tue, 1 Mar
 2011 08:03:07 +0900

This looks to be a IPv6 address from the source server - Could there be somthing strange happening here as it appears to be where the time changes to +900?
0
 

Accepted Solution

by:
domdig earned 0 total points
ID: 35153066
There was apparently a second NIC used for testing at some stage that was still active.  Somehow the traffic was passing from one interface to the other and getting the time stamps mixed up on the way though.  

Disabling the second NIC resolved the issue.
0
 

Author Closing Comment

by:domdig
ID: 35178865
I could not find a reason why there would be a time difference between the two NICs - Comments on this may be useful.  The issue is however resolved.
0

Featured Post

How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

Join & Write a Comment

Suggested Solutions

Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
Are you unable to connect or configure Hotmail email account in Microsoft Outlook 2010, 2007? Or Outlook.com emails are not downloading to Outlook? Lets’ see the problem and resolve Outlook Connector error syncing folder hierarchy (0x8004102A).
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
The viewer will learn how to use the =DISCRINV command to create a discrete random variable, use this command to model a set of probabilities and outcomes in a Monte Carlo simulation, and learn how to find the standard deviation of a set of probabil…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now