Create well-organized and polished visualizations of your virtual and backup environments when planning VMware vSphere, Microsoft Hyper-V or Veeam deployments. It helps you to gain better visibility and valuable business insights.
COURSE of the MONTH
9 days, 7 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
From field in Exchange 2007 Queue viewer showing up as <>
Posted on 2013-01-24
Hello,
To understand my problem, I must first describe my setup and intentions.
I'm currently trying to setup journaling to a cloud based archive vendor. In order to do this, I must use a mail enabled contact for my journaling rule journaling@journal.contoso
In conjunction with the mail enabled contact, I have a send connector setup to route any mail destined for *@journal.contoso.com to our smarthost, archiving.smarthost.com.
Currently, we are sending journaled mail to the smarthost just fine. The problem is, some of these messages don't display the From Address correctly, they just show up as <>.
Upon further inspection, I determined that this is occurring in our queue viewer, and is not on the smarthosts end.
Here's where it gets weird. Exchange only does this with external email addresses, not internal, and it doesn't do it to all external address either; some of them show up just fine. On the messages missing the from field, I have verified that they are legit messages, not SPAM. I can see no difference between the messages where Exchange strips the From Address, and the ones where Exchange leaves it alone.
Currently, I have two servers running HT & CAS roles, two Edge servers, and a mailbox cluster.
Any ideas at all? It is greatly appreciated.
To understand my problem, I must first describe my setup and intentions.
I'm currently trying to setup journaling to a cloud based archive vendor. In order to do this, I must use a mail enabled contact for my journaling rule journaling@journal.contoso
In conjunction with the mail enabled contact, I have a send connector setup to route any mail destined for *@journal.contoso.com to our smarthost, archiving.smarthost.com.
Currently, we are sending journaled mail to the smarthost just fine. The problem is, some of these messages don't display the From Address correctly, they just show up as <>.
Upon further inspection, I determined that this is occurring in our queue viewer, and is not on the smarthosts end.
Here's where it gets weird. Exchange only does this with external email addresses, not internal, and it doesn't do it to all external address either; some of them show up just fine. On the messages missing the from field, I have verified that they are legit messages, not SPAM. I can see no difference between the messages where Exchange strips the From Address, and the ones where Exchange leaves it alone.
Currently, I have two servers running HT & CAS roles, two Edge servers, and a mailbox cluster.
Any ideas at all? It is greatly appreciated.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
4
2
7 Comments
Active 3 days ago
Are you sure they are not SPAM or maybe NDRs?
http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/c56c093c-898a-4e63-9eea-e73dcbe2d5b4/
http://social.technet.microsoft.com/Forums/lv/exchange2010/thread/e9658321-1cff-46cf-908d-f246cbd4822e
http://serverfault.com/questions/211059/exchange-2010-sends-out-spam
Check out the answer from LeeDerbyshire
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26476148.html
http://social.technet.microsoft.com/Forums/en-US/exchange2010/thread/c56c093c-898a-4e63-9eea-e73dcbe2d5b4/
http://social.technet.microsoft.com/Forums/lv/exchange2010/thread/e9658321-1cff-46cf-908d-f246cbd4822e
http://serverfault.com/questions/211059/exchange-2010-sends-out-spam
Check out the answer from LeeDerbyshire
http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_26476148.html
Active 2 days ago
These are DSN (Delivery Status Notification) messages -mostly NDRs and rejection messages etc...- there is nothing to worry about
I can guarantee with 100% certainty that these are not NDR's, at least not all of them. I've verified the emails are good, from known good senders, and have checked with my users to verify the legitimacy of the mail.
What I've noticed is, when Exchange forwards the message to journaling@journal.contoso
Also, I appreciate the replies, sorry for not mentioning that already.
What I've noticed is, when Exchange forwards the message to journaling@journal.contoso
Also, I appreciate the replies, sorry for not mentioning that already.
Active 2 days ago
I didn't say they are all NDR's i told you these are DSN, if someone is sending an email and it was queued for a period of time for any reason it will also get a DSN.
Also you could see somtimes duplicates. i.e. the same email one with the correct sender showing and the other with just <>
again, if we are not talking about 100's of them, i wouldn't worry about it
Also you could see somtimes duplicates. i.e. the same email one with the correct sender showing and the other with just <>
again, if we are not talking about 100's of them, i wouldn't worry about it
Fair enough, then by your explanation, what is happening seems to be that Exchange is using the DSN from address to send mail out of my send connector for journaling. I know this because my cloud archiving service is getting the <> messages with no duplicates with a good From Address.
For instance, under your theory, for every <> in my cloud archive, I should also be seeing a positive duplicate entry with a good From Address, but I don't. Only the <> messages appear.
So, is it normal for Exchange to use the DSN address to send the journal report?
For instance, under your theory, for every <> in my cloud archive, I should also be seeing a positive duplicate entry with a good From Address, but I don't. Only the <> messages appear.
So, is it normal for Exchange to use the DSN address to send the journal report?
Scratch that, it is normal behavior. Everything sent to the journaling@journal.contoso
So, everything is sent to my cloud archive with a from address of <>, because it's not forwarding or relaying a message, it's actually a new message; the journal report. The postmaster sends the journal report, with the original message attached.
The issue is on my cloud archiving solution's end. They're not resolving all of the From Addresses.
Thanks for the feedback.
So, everything is sent to my cloud archive with a from address of <>, because it's not forwarding or relaying a message, it's actually a new message; the journal report. The postmaster sends the journal report, with the original message attached.
The issue is on my cloud archiving solution's end. They're not resolving all of the From Addresses.
Thanks for the feedback.
Featured Post
Managing Active Directory can get complicated. Often, the native tools for managing AD are just not up to the task. The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In-place Upgrading Dirsync to Azure AD Connect
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it.
The vast majority of email clients display l…
This video shows how to quickly and easily add an email signature for all users on Exchange 2016. The resulting signature is applied on a server level by Exchange Online.
The email signature template has been downloaded from:
www.mail-signatures…
Suggested Courses
Course of the Month9 days, 7 hours left to enroll
762 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.