We are in a Hybrid scenario now and currently all mail comes to our on premise server and then some of the migrated users mailboxes on 365 are then redirected out thru the Hybrid server. The problem I have is I see for our on premise delivery a message hit our gateway and came into our on premise exchange server
RE: Johnson Matthey TS16949 & RC14001 CertificatesSize:30 MBMessage ID:18d28525.0.14632542.00-247.20126853.nbfkord-smmi04.seg.att.comTracking ID:18d28525.0.14632542.00-247.20126853.nbfkord-smmi04.seg.att.comSender IP:18.104.22.168Direction:InboundSpam Score:0.2000000000Timestamp Event
2013-10-11 12:55:29 EDT Recipient Disposition: [250 Backend; Mode: normal; Queued: no; Frontend TLS: yes; SPF: None]
2013-10-11 12:55:29 EDT Message Disposition: [250 [INBOUND] 18d28525.0.14632542.00-247.20126853.nbfkord-smmi04.seg.att.com QueueSafe; Backend TLS: no; Backend IP: 22.214.171.124; Policy Set: Inbound bergquistcompany.com Policy]
but it was never delivered to the O365 user. When I search the portal for his mailbox it doesn't show it. How can I find what happened to it.