• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 6695
  • Last Modified:

'421 4.4.1 connection timed out' error on some outgoing email in Exchange 2007

I have a customer who has a strange issue with the mentioned error on roughly 2-3% of outgoing email.  Its exchange 2007 and I am using Symantec Mail Security (SMSME v6).  I'm not getting other application errors in the eventlog.  Everything is running fine.

Have checked mxtoolbox and they are on no RBL's which was my first thought.  Has anyone come across this?
0
gambit120
Asked:
gambit120
  • 5
  • 4
  • 3
  • +3
1 Solution
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
It could be some other problems with their firewall i guess .... there is no issues at your end.

- Rancy
0
 
S_K_SCommented:
Are the outgoing emails going to any specific domain. Why not checking through http://testexchangeconnectivity.com/

Regards
SKS
0
 
gambit120Author Commented:
the sender id validation came back with:

"Attempting to find the SPF record using a DNS TEXT record query.
  ExRCA wasn't able to find the SPF record."

Test was successful with the above as a warning on the last step.
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
Sushil SonawaneCommented:
Disable the Symantec Mail Security (SMSME v6) and try to resend the mail.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Hope you ahve Exclusions for SMSME not to scan Exchange files ?

- Rancy
0
 
jennylembertCommented:
You might want to have a look at this discussion for more info:
http://www.petri.co.il/forums/showthread.php?t=42478
0
 
gambit120Author Commented:
Disabling SMSME and trying the test ended up with the same result.  Rancy what files should SMSME not be scanning?
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
Exchange Database ..... Microsoft folder and setup files.

http://support.microsoft.com/kb/323664

- Rancy
0
 
gambit120Author Commented:
Rancy that has already been done.
0
 
S_K_SCommented:
Well do you mind updating us if the problem is with the outgoing emails going to any specific domain or is it any domain. Are you able to send out at all?
0
 
gambit120Author Commented:
its only a small percentage of email outgoing to certain domains.  Everything else is working.  I am going to create an SPF record to see if that changes anything.
0
 
S_K_SCommented:
Had to ask that question I put up on the last note as I didnot want to simply jump onto giving vague suggestions. now that my question is answered and the error you shared from testexchangeconnectivity.com it makes sense working on your SPF records.

http://efreedom.com/Question/2-326996/Exchange-Failing-Outbound-Smtp-Test

Kindly keep us updated on how things go and in case of any query feel free to ask.

Regards,
SKS
0
 
Sushil SonawaneCommented:
SPF record will be help you and it's better for your mail domain.
0
 
Manpreet SIngh KhatraSolutions Architect, Project LeadCommented:
You need to understand what the issue is as if the issue isnt related to SPF then not sure how it will help this cause ?
Anyways if you are trying and done let us know what happens for us to be able to check more things if it doesnt resolves.

- Rancy
0
 
Exchange_GeekCommented:
Understand, SPF Record is not going to help you. If you had SPF Failures, you would have seen NDR Code "#5.7.1 smtp;550 5.7.1 Rejected due to SPF policy for sender"

Hence, your issue is purely network -
=> it could be network issue to reach out the MX Record of the recipient domain
=> it could be issue where recipient domain couldn't send SMTP hand-shake response to your domain.

Too many causes.

What can be a conclusive solution is to find out if repeatedly you are unable to send emails to a particular domain? if yes, try sending from external domains - say gmail.com / hotmail.com etc. If it works externally - you should try creating a SMTP connector and point to MX Record by adding the IP as smart host.

If this doesn't work, get your network folks involved and have them review firewall logs.

That's your step by step solution for this issue.

Regards,
Exchange_Geek
0
 
gambit120Author Commented:
Was only certain domains that rejected email consistently. But will try what you said.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

  • 5
  • 4
  • 3
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now