NDRs from mail filtering service don't show in Exchange 2007

Posted on 2011-10-26
Last Modified: 2012-05-12
I have an issue with a customer. They have Exchange 2007 as part of SBS2008. We use Webroot mail filtering to do our antispam etc - it's an SMTP service like Mimecast/Postini etc.

I am not getting any NDRs come back.

So I send a mail to and can see it in my Exchange message tracking log and can see it hit webroot. I can also see an NDR being sent AND ACCEPTED by my Exchange server, but nothing in the Exchange Server mail tracking log.

I have "Accept NDRs" and "delivery reports" enabled on the Edge transport.

Anyone any ideas as I'm a bit stumped !
Question by:UKBerty
    LVL 20

    Expert Comment

    by:Hendrik Wiese
    Have you got your Content Filtering Enabled on the Edge as well?

    If so, try one of the following:
    1. Disable the Content Filtering as a whole.

    1. On the Content Filtering Properties go to the Action tab
    2. Now change your SCL rating to 8 and see if it resolves the issue.

    Hope this helps!!!

    Author Comment

    Hendrik - thanks for your reply

    SCL is completely disabled already so shouldn't be poking its nose in. As I say, the weird thing is that there is no entry in message tracking for this mail although I can see the SMTP log from Webroot to my Exchange server and Exchange accepts the mail. When I have seen the SCL delete things it's always been recorded in the tracking log.

    Here's the log of the NDR from Webroot to Exchange...

    MAIL FROM:<>
    250 2.1.0 Sender OK
    RCPT TO:<>
    250 2.1.5 Recipient OK
    354 Start mail input; end with <CRLF>.<CRLF>
    250 Message accepted for delivery

    So it's got no "mail from" address because it's an NDR.

    I have just noticed that although WSUS is set up properly this Exchange server is only on SP1 (I've seen this on other small business server sites). I'll apply SP3 and rollup5 tonight and see if that fixes it.

    I'll report back.


    Accepted Solution

    OK - I have now got to the bottom of this.....

    Upgrading to SP3 rollup 5 didn't make any difference.

    The problem was that the NDR generated from Webroot had no sender address.

    Noticed we had a protocol inspector set on the SMTP rule on our Kerio firewall. I turned this off and the email got through to Exchange, which rejected it as the sender ID was blank - but the email now apperas in the Exchange message log.

    Turned off the Sender ID anti-spam in Exchange 2007 and the NDR gets through to the user.

    Thanks for your help anyway Hendrik.


    Author Closing Comment

    Resolved issue without assistance from EE
    LVL 20

    Expert Comment

    by:Hendrik Wiese
    Glad your issue was resolved.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Granting full access permission allows users to access mailboxes present in their database. By giving full access permission one can open and read the content of any mailbox but cannot send emails from that mailbox.
    Get an idea of what you should include in an email disclaimer with these Top 5 email disclaimer tips.
    In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
    In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now