NDRs from mail filtering service don't show in Exchange 2007

Posted on 2011-10-26
Medium Priority
Last Modified: 2012-05-12
I have an issue with a customer. They have Exchange 2007 as part of SBS2008. We use Webroot mail filtering to do our antispam etc - it's an SMTP service like Mimecast/Postini etc.

I am not getting any NDRs come back.

So I send a mail to fakeaddress@hotmail.com and can see it in my Exchange message tracking log and can see it hit webroot. I can also see an NDR being sent AND ACCEPTED by my Exchange server, but nothing in the Exchange Server mail tracking log.

I have "Accept NDRs" and "delivery reports" enabled on the Edge transport.

Anyone any ideas as I'm a bit stumped !
Question by:UKBerty
  • 3
  • 2
LVL 21

Expert Comment

by:Hendrik Wiese
ID: 37036380
Have you got your Content Filtering Enabled on the Edge as well?

If so, try one of the following:
1. Disable the Content Filtering as a whole.

1. On the Content Filtering Properties go to the Action tab
2. Now change your SCL rating to 8 and see if it resolves the issue.

Hope this helps!!!

Author Comment

ID: 37069275
Hendrik - thanks for your reply

SCL is completely disabled already so shouldn't be poking its nose in. As I say, the weird thing is that there is no entry in message tracking for this mail although I can see the SMTP log from Webroot to my Exchange server and Exchange accepts the mail. When I have seen the SCL delete things it's always been recorded in the tracking log.

Here's the log of the NDR from Webroot to Exchange...

250 2.1.0 Sender OK
RCPT TO:<sadmin@xxxx.co.uk>
250 2.1.5 Recipient OK
354 Start mail input; end with <CRLF>.<CRLF>
250 Message accepted for delivery

So it's got no "mail from" address because it's an NDR.

I have just noticed that although WSUS is set up properly this Exchange server is only on SP1 (I've seen this on other small business server sites). I'll apply SP3 and rollup5 tonight and see if that fixes it.

I'll report back.


Accepted Solution

UKBerty earned 0 total points
ID: 37077157
OK - I have now got to the bottom of this.....

Upgrading to SP3 rollup 5 didn't make any difference.

The problem was that the NDR generated from Webroot had no sender address.

Noticed we had a protocol inspector set on the SMTP rule on our Kerio firewall. I turned this off and the email got through to Exchange, which rejected it as the sender ID was blank - but the email now apperas in the Exchange message log.

Turned off the Sender ID anti-spam in Exchange 2007 and the NDR gets through to the user.

Thanks for your help anyway Hendrik.


Author Closing Comment

ID: 37098888
Resolved issue without assistance from EE
LVL 21

Expert Comment

by:Hendrik Wiese
ID: 37077193
Glad your issue was resolved.


Featured Post

Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to effectively resolve the number one email related issue received by helpdesks.
There can be many situations demanding the conversion of Outlook OST files to PST format and as such, there is no shortage of automated tools to perform this conversion. However, what makes Stellar OST to PST converter stand above the rest? Let us e…
In this video we show how to create an Address List in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Organization >> Ad…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online. The email signature template has been downloaded from: www.mail-signatures…
Suggested Courses

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question