UKBerty
asked on
NDRs from mail filtering service don't show in Exchange 2007
I have an issue with a customer. They have Exchange 2007 as part of SBS2008. We use Webroot mail filtering to do our antispam etc - it's an SMTP service like Mimecast/Postini etc.
I am not getting any NDRs come back.
So I send a mail to fakeaddress@hotmail.com and can see it in my Exchange message tracking log and can see it hit webroot. I can also see an NDR being sent AND ACCEPTED by my Exchange server, but nothing in the Exchange Server mail tracking log.
I have "Accept NDRs" and "delivery reports" enabled on the Edge transport.
Anyone any ideas as I'm a bit stumped !
I am not getting any NDRs come back.
So I send a mail to fakeaddress@hotmail.com and can see it in my Exchange message tracking log and can see it hit webroot. I can also see an NDR being sent AND ACCEPTED by my Exchange server, but nothing in the Exchange Server mail tracking log.
I have "Accept NDRs" and "delivery reports" enabled on the Edge transport.
Anyone any ideas as I'm a bit stumped !
ASKER
Hendrik - thanks for your reply
SCL is completely disabled already so shouldn't be poking its nose in. As I say, the weird thing is that there is no entry in message tracking for this mail although I can see the SMTP log from Webroot to my Exchange server and Exchange accepts the mail. When I have seen the SCL delete things it's always been recorded in the tracking log.
Here's the log of the NDR from Webroot to Exchange...
MAIL FROM:<>
250 2.1.0 Sender OK
RCPT TO:<sadmin@xxxx.co.uk>
250 2.1.5 Recipient OK
DATA
354 Start mail input; end with <CRLF>.<CRLF>
.
250 Message accepted for delivery
So it's got no "mail from" address because it's an NDR.
I have just noticed that although WSUS is set up properly this Exchange server is only on SP1 (I've seen this on other small business server sites). I'll apply SP3 and rollup5 tonight and see if that fixes it.
I'll report back.
Chris
SCL is completely disabled already so shouldn't be poking its nose in. As I say, the weird thing is that there is no entry in message tracking for this mail although I can see the SMTP log from Webroot to my Exchange server and Exchange accepts the mail. When I have seen the SCL delete things it's always been recorded in the tracking log.
Here's the log of the NDR from Webroot to Exchange...
MAIL FROM:<>
250 2.1.0 Sender OK
RCPT TO:<sadmin@xxxx.co.uk>
250 2.1.5 Recipient OK
DATA
354 Start mail input; end with <CRLF>.<CRLF>
.
250 Message accepted for delivery
So it's got no "mail from" address because it's an NDR.
I have just noticed that although WSUS is set up properly this Exchange server is only on SP1 (I've seen this on other small business server sites). I'll apply SP3 and rollup5 tonight and see if that fixes it.
I'll report back.
Chris
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Resolved issue without assistance from EE
Glad your issue was resolved.
Cheers!!!
Cheers!!!
If so, try one of the following:
Option1:
1. Disable the Content Filtering as a whole.
Option2:
1. On the Content Filtering Properties go to the Action tab
2. Now change your SCL rating to 8 and see if it resolves the issue.
Hope this helps!!!