Solved

Mail Sitting in Queue Exchange 2010

Posted on 2011-03-17
15
4,682 Views
Last Modified: 2012-12-05
I am currently having a problem with my Exchange 2010 server. After an email is sent from the user it sits in the queue for around 30 minutes and then finally sends. Now for most this may not be a major problem but for my company it is a HUGE problem. This problem did not start until we changed our ISP a few months ago. Once we did that we started getting alot of emails sitting in queue that looked like this

Identity: exchange\25735\20490
Subject: Undeliverable: FW: !!! HOT !!!  Due date change for l Plant 1
Internet Message ID: <f8237f68-3f5d-431f-8156-d5e91e7e85e5@domain.com>
From Address: <>
Status: Active
Size (KB): 49
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 3/17/2011 1:03:08 PM
Expiration Time: 3/19/2011 1:03:08 PM
Last Error:
Queue ID: exchange\25735
Recipients:  SRS0=OuLN4Q=WK=bis.na.blackberry.com=blackberry_internet_services@srs.bis.na.blackberry.com

Now what i have noticed is if i keep these cleaned out all the time the emails get sent out within a couple minutes of hitting the queue. Please help with this.


Information:

Server 2008 Standard
Exchange Server 2010 SP1
We use a smarthost to filter our mail through.
0
Comment
Question by:Tomwo
  • 6
  • 5
  • 3
  • +1
15 Comments
 
LVL 7

Expert Comment

by:waleeda
ID: 35159113
check your internet connectivity on your exchange server
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35159141
Okay - the messages are NDR messages from Postmaster to external users, probably spoofed senders, so most will sit there and this is known as Backscatter and is as bad a problem as being a spammer yourself, which unintentionally, you are!

Do you receive mail direct to your server or via a 3rd party for spam filtering?

If direct - you need to install the Anti-Spam tools and then enable Recipient Filtering.

If you receive the mail via a 3rd party - they need to enable Recipient Filtering.

Some light reading:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_4257-Exchange-2007-2010-Backscatter-and-how-to-resolve-it.html
0
 

Author Comment

by:Tomwo
ID: 35159355
We send and received mail through a smart host. They do all of our spam filtering and so forth. We were using them before we switched ISP's and at that time did not have a problem at all. the problem started when we switched from a local cable company to ATT/Bellsouth.
0
Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

 

Expert Comment

by:atuldolas
ID: 35159360
It seems that there is a Reverse NDR attack on your Exchange Server. Check if your connecting IP is blacklisted on Internet. You can check the connecting IP by using the link: http://whatismyIP.com/

How are the mails routed from Exchange Server to Internet? Please check the following links for enabling Anti-Spam functionality on your E2010 box.

http://technet.microsoft.com/en-us/library/bb201691.aspx

http://technet.microsoft.com/en-us/library/aa996604.aspx


Also, you can remove the NDR pilling up in the queue by using following steps:

1. Stop Transport service

2. Rename the queued database

3. Start the service.

You should be able to see the queue is clear now.
0
 
LVL 7

Expert Comment

by:waleeda
ID: 35159361
i'm sure that your internet line is the problem
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35160519
Did you configure Reverse DNS on your new IP Address with your new ISP?
0
 

Author Comment

by:Tomwo
ID: 35165014
I did not change anything dns related other then changing the dns servers that we were using.
0
 
LVL 7

Expert Comment

by:waleeda
ID: 35165032
is you mx record ip still the same or it has been changed?
0
 

Author Comment

by:Tomwo
ID: 35165818
When we changed ISP's the MX record changed as well.
0
 

Author Comment

by:Tomwo
ID: 35165949
Identity: exchange\25891\21891
Subject: Undeliverable: RE: RFQ - K1272-56113   QL # 9940
Internet Message ID: <050e5295-1510-4e03-b38f-4a393352aef8@domain.com>
From Address: <>
Status: Ready
Size (KB): 73
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 3/18/2011 9:33:32 AM
Expiration Time: 3/20/2011 9:33:32 AM
Last Error: 421 4.4.2 Connection dropped due to SocketError
Queue ID: exchange\25891
Recipients:  SRS0=P0sgHl=WL=bis.na.blackberry.com=blackberry_internet_services@srs.bis.na.blackberry.com
 
Emails that bounce similar to this are whats clogging my queue up. As soon as i clear them out manually my email flows like normal
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35166937
What is the FQDN (Fully Qualified Domain Name) on your SEND Connector?  Something like mail.domain.com or different (if so - what)?

So you have definitely changed the Reverse DNS Record?
0
 

Author Comment

by:Tomwo
ID: 35167400
ATM there is no FQDN in response to HELO. The smart host address is na0109.smtpout.com
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35167449
If you don't have an FQDN - you won't be sending too much mail as most server will reject you.

Drop me a test message if you like to alan @ it-eye.co.uk so I can see how you present yourself to the world.

Alan
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 35169190
Okay - I received your test email - thank you.

My findings are as follows:

Your sending server on IP 12.234.xxx.xxx does not have Reverse DNS configured.  If you have a fixed IP Address - you should call your ISP and ask them to configure Reverse DNS as exchange.domain.com.  If you are not on a fixed IP address - then don't worry!

Your Smarthosting company is listed on Backscatterer.org, which says to me that they are not filtering mail for invalid recipients and as a result, sending NDR messages back to the senders of the invalid email messages, only a lot of them will be spoofed addresses.

Telnetting to your server directly results in a 421 4.3.2 Error messages - which I think suggests you are suffering from Backpressure and my article covers this:

http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/A_4259-Exchange-2007-2010-Backpressure-Quick-Fix.html

You may be very low on disk space on your server.
0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 35171374
Have you got Exchange 2010 SP1 RU3 installed on your server?

If you have - please have a read of the following:

http://blogs.technet.com/b/exchange/archive/2011/03/14/exchange-2010-sp1-rollup-3-and-blackberrys-sending-duplicate-messages.aspx

Essentially - there seems to be a problem with RU3 and Blackberries sending duplicate messages.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Learn to move / copy / export exchange contacts to iPhone without using any software. Also see the issues in configuration of exchange with iPhone to migrate contacts.
This article aims to explain the working of CircularLogArchiver. This tool was designed to solve the buildup of log file in cases where systems do not support circular logging or where circular logging is not enabled
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…
how to add IIS SMTP to handle application/Scanner relays into office 365.

770 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question