?
Solved

Exchange Queue filling with retries "Unable to connect"

Posted on 2013-05-24
4
Medium Priority
?
747 Views
Last Modified: 2013-06-02
We've recently been put on two blacklists so I am looking in the Exchange 2010 queue to see if anything fishy. I see over 100 spam email domains with DNSConnectorDelivery in retry states. All the emails seem to have Undeliverable in subject. One such example below:

Identity: mail1\160283\1565892
Subject: Undeliverable: Ends Today! Get Your Free Gift
Internet Message ID: <70147933-36f8-4039-bf82-dc897bb2975c@ourdomain.net>
From Address: <>
Status: Ready
Size (KB): 10
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 5/22/2013 3:21:52 AM
Expiration Time: 5/27/2013 3:21:52 AM
Last Error:
Queue ID: mail1\160283
Recipients:  EvfPsKGA666@aktifofis.com

The Last error is 451 4.4.0 Primary target IP address responded with: "421 Unable to connect." We are not an open relay and we use Postini to filter our inbound email. I have installed AntiSpam on our Hub Transport and enabled Sender and Recipient Filtering to assist.  
The emails show no sender and no source IP so I don't understand how they are ending up in our queue.

Any ideas?
0
Comment
Question by:ecosys
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
4 Comments
 
LVL 44

Expert Comment

by:Amit
ID: 39195540
Check first internal user. Any user or server hit with a virus attack. Virus can also generate these kind of spam emails. If you have application configured to relay using exchange server. Make sure to use IP based relay. Which means, don't open it for anonymous users. Try this first.
0
 

Author Comment

by:ecosys
ID: 39195606
We only allow IP based relay internally. Also port 25 is restricted to only our Postini servers so all email should be filtered by the time it reaches us. I am not sure if there is an easy way to check for a virus but we have many  servers and users.
0
 

Accepted Solution

by:
ecosys earned 0 total points
ID: 39201414
I've resolved this by installed AntiSpam for Hub Transport. Set up Recipient Filtering to block messages sent to recipients that do not exist in directory. I also blocked emails without sender information, although this may not be necessary.
0
 

Author Closing Comment

by:ecosys
ID: 39214066
I resolved.
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New style of hardware planning for Microsoft Exchange server.
I don't pretend to be an expert at this, but I have found a few things that are useful. I hope that sharing them here will help others, so they will not have to face some rather hard choices. Since I felt this to be a topic of enough importance and…
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
The basic steps you have just learned will be implemented in this video. The basic steps are shown to configure an Exchange DAG in a live working Exchange Server Environment and manage the same (Exchange Server 2010 Software is used in a Windows Ser…
Suggested Courses

764 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question