emails not being received

For about a month, we haven't received emails from a specific location.  These are notification emails that of course are sent from an address that is not monitored.  From what I've been told, these emails stopped arriving when I enabled the anti-spam in exchange 2007.  I had a threshold of 9 set to be rejected, and a threshold of 6 set to be quarantined.  I then took off the reject message, and still no emails (not even in quarantine). Then yesterday I completely disabled the spam filter altogether, and still no emails.  I have a ticket in with the place that is sending these notifications, and they say according to their message log messages are being sent out.  Is there anything I can do on my end to help troubleshoot this?  
Don't know if the two are related, but also other internal notification emails are not being received as well.  These come from our timecard program, but ever since I switched the server they are supposed to be sent through, they are not arriving.  I even switched back, and still no notifications.

 Thank you.
LVL 2
WinstinkAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

 
serchlopCommented:
I don't know if you have restarted the transport service after you make the changes. To enable this changes is necesary restart transport service. Maybe a full server restart would be a good idea. Look at the tools in exch. Management console to verify if these emails are arriving to your server. Maybe could give you a trace to solve the problem.
0
 
Praveen BalanSolution ArchitectCommented:
2 things,

Is the notification comes from your network or from internet?

If it is internal, check for your relay configuration for that application/ If they have changed the application server, you need to do the configuration changes at your end as well.

If it is external you may ask them to get the NDR/error if any, if nothing get the email address/domain and do a white list on your anti-spam configuration. ref - https://exchangepedia.com/2007/01/exchange-2007-content-filter-the-whitelist-is-here.html
0
 
WinstinkAuthor Commented:
Well, both really.

For internal, the only thing I changed was the mail server.  Perhaps I need to change something else in a different place.  I'll look into that.  However, when I changed it back, still nothing.

External, the mailbox isn't monitored, so I don't think they know if they get an NDR/error.  I've disabled the spam filter for now.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

 
ckeshavSr. Infrastructure SpecialistCommented:
Anti-Spam is not disabled until you restart the Transport Service.
If you have a quarantine mailbox configured, you can even release the Quarantined mails
0
 
WinstinkAuthor Commented:
sorry, I should have specified.  Yes, I restarted transport service,  had a quarantine mailbox, but the messages weren't showing up there.  when using mail flow troubleshooter, I get "The SMTP host was not specified.."

0
 
Praveen BalanSolution ArchitectCommented:
Did you do the changes at the Application server, since you changed the mail server.

For, get the email address which is used to send out emails to your exchange and white list that ID(add exception). restart transport services..

Let me know the results, we will use some alternate way to workaround this.
0
 
WinstinkAuthor Commented:
I didn't at first, then I did, and the messages weren't being received.  Then I switched back, and they're still not being received.

I disabled the spam filter for now until the messages start arriving
0
 
-Juddy-Commented:
Are you using any other software on your mailserver such as MS Forefront?
0
 
WinstinkAuthor Commented:
Vipre, from Sunbelt software, but it's malfunctioning, I think.  :-)
0
 
-Juddy-Commented:
No familiar with it.  Is it just AV gateway software or does it handle Spam also?
0
 
WinstinkAuthor Commented:
it handles spam also.  Supposed to quarantine it in users' individual mailboxes.  
0
 
-Juddy-Commented:
If you think it's malfunctioning, why not uninstall or disable and see if it sorts your problems?  We use Forefront and I think it's excellent.  If you download it you get either a 60 or 90 day trial:

http://www.microsoft.com/downloads/en/details.aspx?FamilyID=2ceb14d4-404b-4d8f-8a21-ebfc71b2e82b&displaylang=en

It's very easy to install / uninstall, just make sure you run the Windows update post install.  You will get another quarantine with this software, more control over Spam, it integrates with Ex 2007 and handles AV.
0
 
-Juddy-Commented:
I forgot to say, it also quarantines Spam (or suspected Spam) in a queue on the server so you can release or delete it without bothering end users.  It also has 6 different AV engines giving far greater protection from viruses than a single solution.

If you track the mail using the message tracker on the Ex 2007 console, can you find them?
0
 
WinstinkAuthor Commented:
we've been evaluating different anti-spam/AV programs, as our support renewal is up next week.  I haven't liked the spam filter that you can install as part of ex07, but I will give forefront a run.  
0
 
-Juddy-Commented:
With Forefront, they run like a charm.  Uninstall Vipre and reboot, install Forefront and reboot if required, then run Microsoft Update.  I would then enable the Exchange anti spam agents (info here: http://technet.microsoft.com/en-us/library/bb201691%28EXCHG.80%29.aspx) and configure Forefront; good guide here:

http://www.techrepublic.com/article/fine-tuning-microsoft-forefront-server-security-for-exchange/190671

If you go down the Forefront route, you should use the Exchange 2007 Anti-Spam functionality as well as the inter-mesh.

Another thing; I'd make sure you are running the lastest service packs for 2007; remember we are up to SP3 now with subsequent updates.
0
 
WinstinkAuthor Commented:
is there a way I can see if these messages are at least coming to my mail server while I evaluate forefront?
0
 
-Juddy-Commented:
Use message tracking in the Exchange Console (toolbox).
0
 
WinstinkAuthor Commented:
either I am not doing it right, or this isn't working right.  I've done a search for emails from that address, and I do not see anything, even before the spam filter was enabled.  
0
 
-Juddy-Commented:
Do you have NDR's enabled?  So if I'm correct, mails from a certain domain are not arriving?  Do they get an NDR?
0
 
WinstinkAuthor Commented:
I have NDR's enabled.  Cannot tell if the sender is getting an NDR, as the reports are automated, and come from a mailbox that is not monitored.  

i did a search on the old mail server (switched ex07 mail servers, long story) and found messages before I routed mail to the new server.  
0
 
WinstinkAuthor Commented:
Problem resolved.  for the external addresses, it was the sender had a "Soft fail" on the SPF.  with the spam filter with ex07 disabled, vipre was still rejecting it.  I re-enabled the spam fitler, and set SPF to just stamp and send on.  

For the internal notifications, the application itself wasn't sending out the notifications.  I opened a ticket with the application company, and they pointed me in the right direction.  
0

Experts Exchange Solution brought to you by ConnectWise

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
 
WinstinkAuthor Commented:
problem was with SPF and the application was not sending out notifications.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.