[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1779
  • Last Modified:

Inbound emails through exchange 2010 very slow

background:

I had exchange 2010 installed on a standalone windows 2008 R2 server.
I migrated all mailboxes to a VM running on a windows 2008 R2, using HyperV.

I can send emails super fast. But emails coming in are SUPER slow. sometimes it takes up to 2-3 hours to receive the emails. on random occasions emails are delivered IMMEDIATELY.

I went on exchange connectivity test website and ran the INBOUND test and go tthe error messages attached.

I decommissioned the old exchange successfully, so it's only one exchange server on the network.  

any ideas?
Capture.JPG
0
Anthony H.
Asked:
Anthony H.
  • 15
  • 11
1 Solution
 
Anthony H.Author Commented:
BTW. Port 25 IS opened so that's not the issue.
0
 
IOAServerTeamCommented:
Can you elaborate on your setup?  Is there a DMZ relay server in the mix?  Maybe an Exchange Edge server or Microsoft Forefront Online Protection for Exchange or anything like that?  Have you been able to read the header and see where the delay was?  Any large gaps in the header?  Maybe you can post a header from a message that was delayed?
0
 
Anthony H.Author Commented:
it's a clean install on the VM.  Basically what I did was to migrate all the mailboxes to the VM and then I decomissioned the old exchange box.  I modified the port forwarding on the smoothwall (no other changes), and created the new SSL and installed it.  I don't know what it might be causing this. No DMZ. No Forefront/spam or email filtering yet.

here is a header. I sent the email at 3:28pm and it was received at 3:38pm.

Received: from hub028-va-5.exch028.serverdata.net (199.193.200.132) by
 VMExchange.recyclercore.lan (10.10.10.246) with Microsoft SMTP Server (TLS)
 id 14.2.328.9; Sat, 12 Jan 2013 15:38:37 -0800
Received: from MBX028-E1-VA-6.exch028.domain.local ([10.216.101.56]) by
 HUB028-VA-5.exch028.domain.local ([10.216.101.42]) with mapi id
 14.02.0318.001; Sat, 12 Jan 2013 15:36:23 -0800
From: "EHern" <ehern@fstinc.com>
To: "fst@rccauto.com" <fst@rccauto.com>
Subject: sending this at 3:28pm
Thread-Topic: sending this at 3:28pm
Thread-Index: Ac3xHJIxp7rxIXPEQJGTB61msTmYuQ==
Date: Sat, 12 Jan 2013 23:36:22 +0000
Message-ID: <E467E8CC522DEC45BD196F437F01DF7117A3B470@mbx028-e1-va-6.exch028.domain.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [99.104.216.81]
Content-Type: multipart/related;
      boundary="_004_E467E8CC522DEC45BD196F437F01DF7117A3B470mbx028e1va6exch_";
      type="multipart/alternative"
MIME-Version: 1.0
Return-Path: ehern@fstinc.com
X-MS-Exchange-Organization-AuthSource: VMExchange.recyclercore.lan
X-MS-Exchange-Organization-AuthAs: Anonymous
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
IOAServerTeamCommented:
I see that your subject line shows 3:28 but the header shows a send time of 3:36:22. It shows that the whole delivery time was 0:02:15 from send to receive.  Is it possible that it sat in your outlook outbox for the 8 minutes prior to sending?
0
 
Anthony H.Author Commented:
no, it showed that it went out immediately.
0
 
IOAServerTeamCommented:
There could be a descrepancy in your PC time and the server time, but the header is only showing a 2 minute delivery time from the first second it received the email and the actual delivery time to the target mail system. Being a single server, that would indicate delivery straight to the mailbox.  It is possible that the VM server is taking some time to process it internally, but again, It shows to receive the message ao 3:38:37. If you are seeing it in the inbox at 3:38 as well, we can assume then internal processing is happening very quickly as well. The only option I can see at this point is that outlook is holding it. Can you, from an external PC, telnet to your server and manually create a mail message and see if there is a delay as well?  http://support.microsoft.com/kb/153119
0
 
IOAServerTeamCommented:
Are you port forwarding  71.83.140.2 to your internal IP on your firewall over port 25?  Have you checked your firewall for errors in the logs?
0
 
Anthony H.Author Commented:
port forwarding ok.firewall ok.
when i telnet i get a blinking curser on a blank screen. no banner displayed.

I found this on google and it applies to my situation: http://serverfault.com/questions/407145/exchange-2010-inbound-smtp-mail-421-4-4-1-connection-timed-out

when i restart the transport service i DO get the banner. but then it stops working almost right away.
0
 
Anthony H.Author Commented:
however, the solution is not working for me.
0
 
IOAServerTeamCommented:
What about internally?  Are you able to telnet consistently from an internal server and get prompted with the banner every time?  Sorry for the type-o's in my email to you via telnet.  Telnet does not allow backspaces and it was too early for me to type error free :-).  Anyway, my results were that the 1st telnet session worked seemingly every time, but the second always failed.  Based on that, I am curious what you are seeing internally.  Also, are you windows firewalls on or off and is there any antivirus running on the server?  Also, is this JUST an Exchange server or does it hold some other role like DC or anything along those lines?
0
 
Anthony H.Author Commented:
oh interesting. internally it responds every time. I have endpoint installed on it (only antivirus and antispyware, no network threat or intrusion modules).  the firewall is off.
0
 
Anthony H.Author Commented:
I get the same results outside the network, responds first time then it just blinks the cursor, no banner.  I just uninstalled the AV, no changes.  But email does go through, just major delays.
0
 
IOAServerTeamCommented:
I would turn off any antivirus software as a test.  I lean towards it being related to your smoothwall firewall since it works every time internally.  This is a Linux based solution right?  Is it running on a seperate server dedicated to this purpose?

Let me know how your testing goes without the antivirus running.
0
 
Anthony H.Author Commented:
there is no AV on the physical server or the VM, which is what I'm running exchange 2010 on (hyperV). Running on Windows 2008 R2 (both physical server and VM).  The physical server is not running anything - i do have a second VM for testing but that's it.
0
 
Anthony H.Author Commented:
Yeah. I can telnet the server on port 25 using the local FQDN and responds every time.
0
 
IOAServerTeamCommented:
That being the case, the only thing I can think of is something on your firewall and the port forwarding or an issue with your ISP.  I would say it is your firewall and not the ISP, but I have never worked with smoothwall.  With everything working proper local, the logical troubleshooting step is to look at what is in the way.  That would be your firewall.
0
 
Anthony H.Author Commented:
interesting theory. i was thinking it had something to do with the VM. will have to do some more testing.
0
 
IOAServerTeamCommented:
Do you have the ability to do traffic captures on the firewall while you attempt 2 connections?  The first success and the second failure?  This could tell you more.
0
 
Anthony H.Author Commented:
I'm baffled by this. I'm not even sure where the traffic is stopping. i wonder where emails stay put for 20-30 minutes.  Emails from yahoo are even taking longer.  There is some sort of server time out somewhere. I wonder if it's how i configured the NIC on the VM. not sure where to go from here.
0
 
Anthony H.Author Commented:
i can telnet the server and I see the connection attempt on the firewall
0
 
IOAServerTeamCommented:
You see that attempt even for the second try where it just shows a blank screen with a blinking cursor?  Can you post the log here?
0
 
IOAServerTeamCommented:
I would assume the messages are sitting on the Exchange server prior to hitting your server since your server is not allowing the connection. You mention a question about how you configured the NIC on the VM. Have you done something odd?  What is the special configuration you have done?  Based on the fact that it works every time local, I still believe it is your firewall.
0
 
Anthony H.Author Commented:
I didn't setup the VM myself. seems to be working fine. it responds to ping <1ms so it's OK I guess.  Could I setup this? http://www.itsolutionskb.com/2008/11/installing-and-configuring-windows-server-2008-smtp-server/ 

to test the VM, Smoothwall, and ISP connectivity?  If I can setup smtp on another box and I get the same results then yeah it's either the smoothwall or ISP. right?
0
 
IOAServerTeamCommented:
That sounds plausible, but I would not guarantee it.  I do believe it is the Smoothwall, so I would be very interested to learn your findings. Sorry for my delay, I was out sick...
0
 
Anthony H.Author Commented:
It was a bad network cable and also changed the VM to a dedicated NIC>
0
 
Anthony H.Author Commented:
figured out problem
0

Featured Post

Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

  • 15
  • 11
Tackle projects and never again get stuck behind a technical roadblock.
Join Now