Solved

Mail Sitting in Queue Exchange 2010

Posted on 2011-03-17
15
4,655 Views
Last Modified: 2012-12-05
I am currently having a problem with my Exchange 2010 server. After an email is sent from the user it sits in the queue for around 30 minutes and then finally sends. Now for most this may not be a major problem but for my company it is a HUGE problem. This problem did not start until we changed our ISP a few months ago. Once we did that we started getting alot of emails sitting in queue that looked like this

Identity: exchange\25735\20490
Subject: Undeliverable: FW: !!! HOT !!!  Due date change for l Plant 1
Internet Message ID: <f8237f68-3f5d-431f-8156-d5e91e7e85e5@domain.com>
From Address: <>
Status: Active
Size (KB): 49
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 3/17/2011 1:03:08 PM
Expiration Time: 3/19/2011 1:03:08 PM
Last Error:
Queue ID: exchange\25735
Recipients:  SRS0=OuLN4Q=WK=bis.na.blackberry.com=blackberry_internet_services@srs.bis.na.blackberry.com

Now what i have noticed is if i keep these cleaned out all the time the emails get sent out within a couple minutes of hitting the queue. Please help with this.


Information:

Server 2008 Standard
Exchange Server 2010 SP1
We use a smarthost to filter our mail through.
0
Comment
Question by:Tomwo
  • 6
  • 5
  • 3
  • +1
15 Comments
 
LVL 7

Expert Comment

by:waleeda
ID: 35159113
check your internet connectivity on your exchange server
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35159141
Okay - the messages are NDR messages from Postmaster to external users, probably spoofed senders, so most will sit there and this is known as Backscatter and is as bad a problem as being a spammer yourself, which unintentionally, you are!

Do you receive mail direct to your server or via a 3rd party for spam filtering?

If direct - you need to install the Anti-Spam tools and then enable Recipient Filtering.

If you receive the mail via a 3rd party - they need to enable Recipient Filtering.

Some light reading:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_4257-Exchange-2007-2010-Backscatter-and-how-to-resolve-it.html
0
 

Author Comment

by:Tomwo
ID: 35159355
We send and received mail through a smart host. They do all of our spam filtering and so forth. We were using them before we switched ISP's and at that time did not have a problem at all. the problem started when we switched from a local cable company to ATT/Bellsouth.
0
 

Expert Comment

by:atuldolas
ID: 35159360
It seems that there is a Reverse NDR attack on your Exchange Server. Check if your connecting IP is blacklisted on Internet. You can check the connecting IP by using the link: http://whatismyIP.com/

How are the mails routed from Exchange Server to Internet? Please check the following links for enabling Anti-Spam functionality on your E2010 box.

http://technet.microsoft.com/en-us/library/bb201691.aspx

http://technet.microsoft.com/en-us/library/aa996604.aspx


Also, you can remove the NDR pilling up in the queue by using following steps:

1. Stop Transport service

2. Rename the queued database

3. Start the service.

You should be able to see the queue is clear now.
0
 
LVL 7

Expert Comment

by:waleeda
ID: 35159361
i'm sure that your internet line is the problem
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35160519
Did you configure Reverse DNS on your new IP Address with your new ISP?
0
 

Author Comment

by:Tomwo
ID: 35165014
I did not change anything dns related other then changing the dns servers that we were using.
0
Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

 
LVL 7

Expert Comment

by:waleeda
ID: 35165032
is you mx record ip still the same or it has been changed?
0
 

Author Comment

by:Tomwo
ID: 35165818
When we changed ISP's the MX record changed as well.
0
 

Author Comment

by:Tomwo
ID: 35165949
Identity: exchange\25891\21891
Subject: Undeliverable: RE: RFQ - K1272-56113   QL # 9940
Internet Message ID: <050e5295-1510-4e03-b38f-4a393352aef8@domain.com>
From Address: <>
Status: Ready
Size (KB): 73
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 3/18/2011 9:33:32 AM
Expiration Time: 3/20/2011 9:33:32 AM
Last Error: 421 4.4.2 Connection dropped due to SocketError
Queue ID: exchange\25891
Recipients:  SRS0=P0sgHl=WL=bis.na.blackberry.com=blackberry_internet_services@srs.bis.na.blackberry.com
 
Emails that bounce similar to this are whats clogging my queue up. As soon as i clear them out manually my email flows like normal
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35166937
What is the FQDN (Fully Qualified Domain Name) on your SEND Connector?  Something like mail.domain.com or different (if so - what)?

So you have definitely changed the Reverse DNS Record?
0
 

Author Comment

by:Tomwo
ID: 35167400
ATM there is no FQDN in response to HELO. The smart host address is na0109.smtpout.com
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35167449
If you don't have an FQDN - you won't be sending too much mail as most server will reject you.

Drop me a test message if you like to alan @ it-eye.co.uk so I can see how you present yourself to the world.

Alan
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35169190
Okay - I received your test email - thank you.

My findings are as follows:

Your sending server on IP 12.234.xxx.xxx does not have Reverse DNS configured.  If you have a fixed IP Address - you should call your ISP and ask them to configure Reverse DNS as exchange.domain.com.  If you are not on a fixed IP address - then don't worry!

Your Smarthosting company is listed on Backscatterer.org, which says to me that they are not filtering mail for invalid recipients and as a result, sending NDR messages back to the senders of the invalid email messages, only a lot of them will be spoofed addresses.

Telnetting to your server directly results in a 421 4.3.2 Error messages - which I think suggests you are suffering from Backpressure and my article covers this:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_4259-Exchange-2007-2010-Backpressure-Quick-Fix.html

You may be very low on disk space on your server.
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 35171374
Have you got Exchange 2010 SP1 RU3 installed on your server?

If you have - please have a read of the following:

http://blogs.technet.com/b/exchange/archive/2011/03/14/exchange-2010-sp1-rollup-3-and-blackberrys-sending-duplicate-messages.aspx

Essentially - there seems to be a problem with RU3 and Blackberries sending duplicate messages.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
Following basic email etiquette rules will help you write a professional email and achieve a good, lasting impression with your contacts.
Familiarize people with the process of utilizing SQL Server views from within Microsoft Access. Microsoft Access is a very powerful client/server development tool. One of the SQL Server objects that you can interact with from within Microsoft Access…
In this video we show how to create an Accepted Domain in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Ac…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

20 Experts available now in Live!

Get 1:1 Help Now