Solved

Inbound emails through exchange 2010 very slow

Posted on 2013-01-12
26
1,544 Views
Last Modified: 2013-03-12
background:

I had exchange 2010 installed on a standalone windows 2008 R2 server.
I migrated all mailboxes to a VM running on a windows 2008 R2, using HyperV.

I can send emails super fast. But emails coming in are SUPER slow. sometimes it takes up to 2-3 hours to receive the emails. on random occasions emails are delivered IMMEDIATELY.

I went on exchange connectivity test website and ran the INBOUND test and go tthe error messages attached.

I decommissioned the old exchange successfully, so it's only one exchange server on the network.  

any ideas?
Capture.JPG
0
Comment
Question by:Anthony H.
  • 15
  • 11
26 Comments
 

Author Comment

by:Anthony H.
ID: 38770818
BTW. Port 25 IS opened so that's not the issue.
0
 

Expert Comment

by:IOAServerTeam
ID: 38770835
Can you elaborate on your setup?  Is there a DMZ relay server in the mix?  Maybe an Exchange Edge server or Microsoft Forefront Online Protection for Exchange or anything like that?  Have you been able to read the header and see where the delay was?  Any large gaps in the header?  Maybe you can post a header from a message that was delayed?
0
 

Author Comment

by:Anthony H.
ID: 38771117
it's a clean install on the VM.  Basically what I did was to migrate all the mailboxes to the VM and then I decomissioned the old exchange box.  I modified the port forwarding on the smoothwall (no other changes), and created the new SSL and installed it.  I don't know what it might be causing this. No DMZ. No Forefront/spam or email filtering yet.

here is a header. I sent the email at 3:28pm and it was received at 3:38pm.

Received: from hub028-va-5.exch028.serverdata.net (199.193.200.132) by
 VMExchange.recyclercore.lan (10.10.10.246) with Microsoft SMTP Server (TLS)
 id 14.2.328.9; Sat, 12 Jan 2013 15:38:37 -0800
Received: from MBX028-E1-VA-6.exch028.domain.local ([10.216.101.56]) by
 HUB028-VA-5.exch028.domain.local ([10.216.101.42]) with mapi id
 14.02.0318.001; Sat, 12 Jan 2013 15:36:23 -0800
From: "EHern" <ehern@fstinc.com>
To: "fst@rccauto.com" <fst@rccauto.com>
Subject: sending this at 3:28pm
Thread-Topic: sending this at 3:28pm
Thread-Index: Ac3xHJIxp7rxIXPEQJGTB61msTmYuQ==
Date: Sat, 12 Jan 2013 23:36:22 +0000
Message-ID: <E467E8CC522DEC45BD196F437F01DF7117A3B470@mbx028-e1-va-6.exch028.domain.local>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [99.104.216.81]
Content-Type: multipart/related;
      boundary="_004_E467E8CC522DEC45BD196F437F01DF7117A3B470mbx028e1va6exch_";
      type="multipart/alternative"
MIME-Version: 1.0
Return-Path: ehern@fstinc.com
X-MS-Exchange-Organization-AuthSource: VMExchange.recyclercore.lan
X-MS-Exchange-Organization-AuthAs: Anonymous
0
 

Expert Comment

by:IOAServerTeam
ID: 38771154
I see that your subject line shows 3:28 but the header shows a send time of 3:36:22. It shows that the whole delivery time was 0:02:15 from send to receive.  Is it possible that it sat in your outlook outbox for the 8 minutes prior to sending?
0
 

Author Comment

by:Anthony H.
ID: 38771155
no, it showed that it went out immediately.
0
 

Expert Comment

by:IOAServerTeam
ID: 38771184
There could be a descrepancy in your PC time and the server time, but the header is only showing a 2 minute delivery time from the first second it received the email and the actual delivery time to the target mail system. Being a single server, that would indicate delivery straight to the mailbox.  It is possible that the VM server is taking some time to process it internally, but again, It shows to receive the message ao 3:38:37. If you are seeing it in the inbox at 3:38 as well, we can assume then internal processing is happening very quickly as well. The only option I can see at this point is that outlook is holding it. Can you, from an external PC, telnet to your server and manually create a mail message and see if there is a delay as well?  http://support.microsoft.com/kb/153119
0
 

Expert Comment

by:IOAServerTeam
ID: 38771212
Are you port forwarding  71.83.140.2 to your internal IP on your firewall over port 25?  Have you checked your firewall for errors in the logs?
0
 

Author Comment

by:Anthony H.
ID: 38771223
port forwarding ok.firewall ok.
when i telnet i get a blinking curser on a blank screen. no banner displayed.

I found this on google and it applies to my situation: http://serverfault.com/questions/407145/exchange-2010-inbound-smtp-mail-421-4-4-1-connection-timed-out

when i restart the transport service i DO get the banner. but then it stops working almost right away.
0
 

Author Comment

by:Anthony H.
ID: 38771224
however, the solution is not working for me.
0
 

Expert Comment

by:IOAServerTeam
ID: 38771900
What about internally?  Are you able to telnet consistently from an internal server and get prompted with the banner every time?  Sorry for the type-o's in my email to you via telnet.  Telnet does not allow backspaces and it was too early for me to type error free :-).  Anyway, my results were that the 1st telnet session worked seemingly every time, but the second always failed.  Based on that, I am curious what you are seeing internally.  Also, are you windows firewalls on or off and is there any antivirus running on the server?  Also, is this JUST an Exchange server or does it hold some other role like DC or anything along those lines?
0
 

Author Comment

by:Anthony H.
ID: 38772424
oh interesting. internally it responds every time. I have endpoint installed on it (only antivirus and antispyware, no network threat or intrusion modules).  the firewall is off.
0
 

Author Comment

by:Anthony H.
ID: 38772456
I get the same results outside the network, responds first time then it just blinks the cursor, no banner.  I just uninstalled the AV, no changes.  But email does go through, just major delays.
0
 

Expert Comment

by:IOAServerTeam
ID: 38772602
I would turn off any antivirus software as a test.  I lean towards it being related to your smoothwall firewall since it works every time internally.  This is a Linux based solution right?  Is it running on a seperate server dedicated to this purpose?

Let me know how your testing goes without the antivirus running.
0
 

Author Comment

by:Anthony H.
ID: 38772753
there is no AV on the physical server or the VM, which is what I'm running exchange 2010 on (hyperV). Running on Windows 2008 R2 (both physical server and VM).  The physical server is not running anything - i do have a second VM for testing but that's it.
0
 

Author Comment

by:Anthony H.
ID: 38772758
Yeah. I can telnet the server on port 25 using the local FQDN and responds every time.
0
 

Expert Comment

by:IOAServerTeam
ID: 38772890
That being the case, the only thing I can think of is something on your firewall and the port forwarding or an issue with your ISP.  I would say it is your firewall and not the ISP, but I have never worked with smoothwall.  With everything working proper local, the logical troubleshooting step is to look at what is in the way.  That would be your firewall.
0
 

Author Comment

by:Anthony H.
ID: 38773104
interesting theory. i was thinking it had something to do with the VM. will have to do some more testing.
0
 

Expert Comment

by:IOAServerTeam
ID: 38773108
Do you have the ability to do traffic captures on the firewall while you attempt 2 connections?  The first success and the second failure?  This could tell you more.
0
 

Author Comment

by:Anthony H.
ID: 38777117
I'm baffled by this. I'm not even sure where the traffic is stopping. i wonder where emails stay put for 20-30 minutes.  Emails from yahoo are even taking longer.  There is some sort of server time out somewhere. I wonder if it's how i configured the NIC on the VM. not sure where to go from here.
0
 

Author Comment

by:Anthony H.
ID: 38777118
i can telnet the server and I see the connection attempt on the firewall
0
 

Expert Comment

by:IOAServerTeam
ID: 38778038
You see that attempt even for the second try where it just shows a blank screen with a blinking cursor?  Can you post the log here?
0
 

Expert Comment

by:IOAServerTeam
ID: 38778056
I would assume the messages are sitting on the Exchange server prior to hitting your server since your server is not allowing the connection. You mention a question about how you configured the NIC on the VM. Have you done something odd?  What is the special configuration you have done?  Based on the fact that it works every time local, I still believe it is your firewall.
0
 

Author Comment

by:Anthony H.
ID: 38780653
I didn't setup the VM myself. seems to be working fine. it responds to ping <1ms so it's OK I guess.  Could I setup this? http://www.itsolutionskb.com/2008/11/installing-and-configuring-windows-server-2008-smtp-server/  

to test the VM, Smoothwall, and ISP connectivity?  If I can setup smtp on another box and I get the same results then yeah it's either the smoothwall or ISP. right?
0
 

Expert Comment

by:IOAServerTeam
ID: 38818808
That sounds plausible, but I would not guarantee it.  I do believe it is the Smoothwall, so I would be very interested to learn your findings. Sorry for my delay, I was out sick...
0
 

Accepted Solution

by:
Anthony H. earned 0 total points
ID: 38962740
It was a bad network cable and also changed the VM to a dedicated NIC>
0
 

Author Closing Comment

by:Anthony H.
ID: 38976776
figured out problem
0

Join & Write a Comment

Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
This tutorial will walk an individual through the steps necessary to enable the VMware\Hyper-V licensed feature of Backup Exec 2012. In addition, how to add a VMware server and configure a backup job. The first step is to acquire the necessary licen…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

760 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now