E-Mail Delivery Issue Exchange 2010

Seemingly out of nowhere (although I know that is never the case) we are having issues with the delivery of e-mail from specific email servers - GMAIL (and people who use Google Apps for Email) and maybe Office365 senders.  They can send email with no attachments and seemingly attachments up to about 100k or so with no problem.  Any attachments that are bigger than that end up with the failure listed below.  Here's the thing... if I send the SAME e-mail with the SAME attachments from a non-GMAIL or non-Office365 server it flows in without any problem at all.  It seems to only hold up emails from GMAIL/Office365...

Help?!?!

Delivery has failed to these recipients or groups:
 
MyUser (username@mydomain.org)
The server has tried to deliver this message, without success, and has stopped trying. Please try sending this message again. If the problem continues, contact your helpdesk.
 
 
 
 
 
 
 
Diagnostic information for administrators:
 
Generating server: CO1PR06MB080.namprd06.prod.outlook.com
Receiving server: na01-internal.map.protection.outlook.com (207.46.163.247)
Total retry attempts: 256
 
username@mydomain.org
8/21/2013 8:03:12 PM - Remote Server at na01-internal.map.protection.outlook.com (207.46.163.247) returned '550 4.4.7 QUEUE.Expired; message expired'
8/21/2013 7:47:35 PM - Remote Server at na01-internal.map.protection.outlook.com (207.46.163.247) returned '451 4.4.0 SMTPSEND.SuspiciousRemoteServerError; remote server disconnected abruptly; retry will be delayed'
 
Original message headers:
 
Received: from CO1PR06MB079.namprd06.prod.outlook.com (10.242.164.22) by
 CO1PR06MB080.namprd06.prod.outlook.com (10.242.164.26) with Microsoft SMTP
 Server (TLS) id 15.0.745.25; Mon, 19 Aug 2013 20:06:32 +0000
Received: from CO1PR06MB079.namprd06.prod.outlook.com ([169.254.9.98]) by
 CO1PR06MB079.namprd06.prod.outlook.com ([169.254.9.98]) with mapi id
 15.00.0745.000; Mon, 19 Aug 2013 20:06:31 +0000
From: Another Dude <Someone@somewhere.com>
To: "JOtherUser (someone@something.com)" <someone@something.com>
CC: "Username" <username@mydomain.org>
Subject: FW: Redlines
Thread-Topic: Redlines
Thread-Index: Ac6dAeFReQtXlgwbTWy7jl15ygScigACjHkwAAFgqXAAAXfQYA==
Date: Mon, 19 Aug 2013 20:06:31 +0000
Message-ID: <8bc413f15ef443fcbd11cf1b7d7f48e9@CO1PR06MB079.namprd06.prod.outlook.com>
References: <899a5d03a602499bbea3303347c6b12c@BN1PR06MB007.namprd06.prod.outlook.com>
 <e9165dd3dafe46be923a72f3f28401a5@CO1PR06MB079.namprd06.prod.outlook.com>
 <b3a96d4d04754a31a5c29081d02eb84d@BN1PR06MB007.namprd06.prod.outlook.com>
In-Reply-To: <b3a96d4d04754a31a5c29081d02eb84d@BN1PR06MB007.namprd06.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-originating-ip: [23.30.116.161]
x-forefront-prvs: 09435FCA72
x-forefront-antispam-report: SFV:NSPM;SFS:(41574002)(199002)(189002)(48214007)(377454003)(54504004)(164054003)(51856001)(19300405004)(74366001)(65816001)(80022001)(59766001)(77982001)(19580395003)(76796001)(76786001)(76576001)(16236675002)(19580385001)(83322001)(81686001)(33646001)(83072001)(81816001)(63696002)(47976001)(50986001)(46102001)(49866001)(47736001)(79102001)(15202345003)(4396001)(81542001)(74316001)(74876001)(69226001)(221733001)(53806001)(54316002)(54356001)(74706001)(66066001)(56816003)(77096001)(80976001)(56776001)(74662001)(74502001)(76482001)(81342001)(31966008)(47446002)(24736002)(80792004);DIR:OUT;SFP:;SCL:1;SRVR:CO1PR06MB080;H:CO1PR06MB079.namprd06.prod.outlook.com;CLIP:23.30.116.161;RD:InfoNoRecords;A:1;MX:1;LANG:en;
Content-Type: multipart/mixed;
        boundary="_006_8bc413f15ef443fcbd11cf1b7d7f48e9CO1PR06MB079namprd06pro_"
MIME-Version: 1.0
X-OriginatorOrg: domain.com
perktechAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

epohlCommented:
Are you running a Cisco ASA firewall by chance? If so I have seen this issue caused by the SMTP Fixup protocol when using TLS encryption (Office 365 and GMAIL both use it). Try disabling SMTP fixup and see if this resolves your issue.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
perktechAuthor Commented:
No, I am running a Watchguard FireboxX1250e.

Any idea how to disable that on the Watchguard?  I'm unfamiliar with "SMTP Fixup"?
0
epohlCommented:
I don't use watchguard much but I believe it has something similar where it will be an smtp proxy. Are you using this option to scan emails? If so it might be worth disabling it to see if the problem is with the actual firewall or the exchange server itself. Is there anything else that scans emails on your network?

http://www.watchguard.com/help/docs/webui/11/en-us/content/en-us/proxies/smtp/proxy_smtp_about_c.html
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

perktechAuthor Commented:
It looks like the "BDAT/CHUNKING" setting must be similar -- I googled what you suggested and was pointed to that the ESMTP filter.  I unchecked it and it seems to have fixed the issue.

Thanks!
0
perktechAuthor Commented:
Good help with it -- wasn't exactly the answer but it pointed me in the direction of the answer.
0
marrjCommented:
We had a problem with this error that out of the blue popped up.  We have an ASA and I removed the line "inspect esmtp" from the ASA and the problem went away.  Thanks!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.