Exchange Server 2010 Queue is a mess...

I just obtained a new client today and the first issue they want me to work on is to determine why they can't receive external e-mail, but can send to external and send and receive to internal.  I setup a test account on their server and then sent the test account 4 e-mail from my server and sure enough they didn't go through.  I looked at the queues on my server and received the following error:  452 4.3.1 insufficient system resources (see screenshot below)

So then I opened the queue on their server and it is a mess; a ton of e-mails attempting to be delivered (see screenshot below).

I ran their domain through DNSstuff.com, and everything reports back ok:  no open relay, spf records, etc.  They are listed a few RBLs, but these are the extortion ones. (see screenshot).

I am at a loss as to what this could be.  Any help would be greatly appreciated.
myserver.JPG
ex2010queue.JPG
dnsstuff-report.JPG
LVL 1
YortAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

joinaunionCommented:
Can you run the exchange test here https://www.testexchangeconnectivity.com/

Is autodiscover on?
0
YortAuthor Commented:
joinaunion - what test should I run (there are several listed)?  Yes, autodiscover is on.
0
joinaunionCommented:
On the exchange tab you can run,      
Microsoft Exchange ActiveSync Connectivity Tests
Microsoft Exchange Web Services Connectivity Tests

Run each test post back results.
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

Nick RhodeIT DirectorCommented:
Is there MX record pointing correctly to the business address?  Do they have a static address for the business?  Do they have the ports open and forwarding to the exchange server on the router?
You can use MXtoolbox to check if the external MX or DNS records are resolving properly to the business:  http://mxtoolbox.com/
0
Simon Butler (Sembee)ConsultantCommented:
How much disk space is on the drive that Exchange is installed on?
That is the primary reason for the failure you are seeing.

Simon.
0
YortAuthor Commented:
Everyone...thank you all very much for your responses.  I will try to respond to everyone's suggestions.

First, the MX records, DNS, etc. are all setup correctly.  I confirmed all of this two times.   When I run the tests at https://www.testexchangeconnectivity.com/ everything comes back fine (I would post the results but they contain a lot of information I would rather not disclose and I don't have the time at the moment to scrub them).  The available disk space is 289GB.

My client's firewall is configured to only allow e-mail communication via port 25 from the explicit IP address of the internal Exchange server.  DNSstuff reveals that the Exchange server is not an open relay.  The next thing I looked at what possible password breaches...low and behold I think this is the issue.  After speaking with several employees and the management team, it turns out a lot of their passwords were something like:  password1234 (so a huge no-no).  I am now almost certain someone was connecting to the Exchange server using valid credentials via a hacked password to send spam.  We immediately setup a much more restrictive password policy and I implemented it last night.  After confirmation of all passwords being reset, I will reactivate the Exchange server and see what happens.
0
joinaunionCommented:
I don't think this is a password issue. Give this a read. I know it's exchange 2007,but it will get you in the direction.
Free Hard Disk drive space for the Message Queue Database
http://www.msexchange.org/articles-tutorials/exchange-server-2007/management-administration/understanding-back-pressure-feature-exchange-server-2007.html
Or
http://exchangeserverpro.com/exchange-server-2007-event-id-15002-and-431-insufficient-system-resources-errors/
0
YortAuthor Commented:
joinaunion:  Again, thank you for your reply.  Our server is actually Exchange 2010.  The server doesn't meet any of the criteria for a back pressure issue.  Ample disk space, memory, etc.  The interesting thing is that within minutes of turning back on Microsoft Exchange Transport the queues begin to fill again with the same garbage as in my prior screenshot.  After a bit more reading, I am taking the following two actions:

  1.  Complete virus scan of the server, and
  2.  Activation of the Antispam feature, specifically configuring Recipient Filtering.

I will post back once the scan is complete and antispam is active.
0
YortAuthor Commented:
The issue turned out to be an improperly configured Receive Connector.  Once I isolated the bad connector, I corrected the settings and the spam stopped immediately.

Thank you to everyone for your assistance.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
YortAuthor Commented:
After further digging I found an improperly configured Receive Connector and fixed it.

Thank you to everyone for your comments and suggestions.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.