Solved

Mail.que exchange 2010 edge server growing abnormally

Posted on 2013-11-08
14
3,199 Views
Last Modified: 2013-11-14
Mail.que is increasing abnormally in exchange 2010 edge server, i found the following archicle

http://msexchangeguru.com/2011/06/02/mail-que/

I have the same issue with my Exchange 2010. Mail.que file is very big (about 70 GB) on all of my transport servers. I have checked PipelineTracingEnabled option, it’s set false. And there is no MaxDumpsterSizePerStorageGroup option for Exchange 2010.

What is else can cause growing of queue database file?What steps should I need to do to resolve the issue, can you please advise.
0
Comment
Question by:ipsec600
  • 8
  • 6
14 Comments
 
LVL 41

Accepted Solution

by:
Amit earned 500 total points
ID: 39633642
Check the Queues and look what kind of traffic is coming to your server. Could be a spam or server generated mails.

Or just stop exchange services

Rename the mail.que file or more to another path and start service again. That will generate a new file and check if still you see same issue.
0
 

Author Comment

by:ipsec600
ID: 39633684
I have checked the queques and traffic is very normal. Now i am planning to follow your suggestion renaming the mail.que file path . Can you please give me any rerference link to rename the mail,que for exchane 2010 edge server please. I am planning to create the folder in the same drive will it be Ok, and after wards delete the mail.que old file. Appreciate if you please suggest any best referecen link to rename the mail.que folder.
0
 
LVL 41

Expert Comment

by:Amit
ID: 39633715
0
 

Author Comment

by:ipsec600
ID: 39633793
Hi amitkulshrestha, thank you for your quick reply, just for quick understanding,

1. If I create new mail queue folder stopping the exchange transport service, existing emails will be deleted right, is there any way to recover, or I will pasuse the transport service and wait till the queue will be empty and then create a new queue folder.

2. Very few emails are in mail queue but mail.que folder size is huge(70) in all the edge server. To resolve the issue I would like to create new queue folder in the same drive. Is it OK.

3. I would like to follow the below article to create new mail queue folder, http://technet.microsoft.com/en-us/library/bb125177(v=exchg.150).aspx
is that ok
appreciate your advise.
0
 
LVL 41

Expert Comment

by:Amit
ID: 39633806
I normally move it to different folder and then start the service. This way, i have old backup as well. In case, i need it we can use it again. 99% i don't  use it again as it is already corrupt. I will suggest you to check OS level AV exclusion, You should exclude all Exchange related binaries, db's and logs from AV scanning.
0
 

Author Comment

by:ipsec600
ID: 39634015
Hi amitkulshrestha, thanks for your reply, once again,

1.Is it possible to know why it is causing the problem, meaning that mail.que is increasing abnormally, what I can do to investigate.

2.Is the transaction log (mail.queue) file needs to be truncated regularly implementing any backup procure so that it will not reproduce the issue. Can you please advise how to truncated mail.queue transaction log file regularly otherwise it will grow gradually right.
0
 
LVL 41

Expert Comment

by:Amit
ID: 39634063
That's why i asked you to open queue viewer and check what emails are queued.
0
How to improve team productivity

Quip adds documents, spreadsheets, and tasklists to your Slack experience
- Elevate ideas to Quip docs
- Share Quip docs in Slack
- Get notified of changes to your docs
- Available on iOS/Android/Desktop/Web
- Online/Offline

 

Author Comment

by:ipsec600
ID: 39634183
Thanks once again, and sorry for being repetative.  I have checked, mail queue is very minimum like 10 to 15 emails are queue in each edge server but still mail.queue size is huge (73GB) now and growing. I am not understanding why mail.que is large & growing, whereas mail queue is very normal. Where to investigate to find out the root cause please.
0
 

Author Comment

by:ipsec600
ID: 39635856
Hi, Mostlikely i have found the root cause which is causing the issue, i have seen that edge mail queue is normal, but in HUB server shadow redundacy queue is showing for edge server is only 2, and when i click details of the shadow redundancy queue(2) found that nearly 200000 emails are from a single users,  I tried to delete the shadown redundacy queue, but cound not, and even tried to clean usind the following powershell script

http://johanveldhuis.nl/en/shadow-redundancy-queues-opschonen/ and failed to do so.

Can you please advise how to delete shadow redundancy queue.

When I click any email from shadow queue fund the following details:
Identity: servername\Shadow\105081\13943910
Subject: email subject!
Internet Message ID: <DED473A2023D564A9A104712F553ADBC1B008D80@servername>
From Address: shadow@internaldomain.com
Status: Ready
Size (KB): 249
Message Source Name: SMTP:Default  servername
Source IP: 10.127.224.238
SCL: -1
Date Received: 05/11/2013 4:32:45 PM
Expiration Time: 07/11/2013 4:32:45 PM
Last Error:
Queue ID: servername\Shadow\105081
Recipients:  user@domain.com;1;2;250 2.1.5 Recipient OK;0;CN=EdgeSync - Site- BL to Internet,CN=Connections,CN=Exchange Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=Groups,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=doamin,DC=ms shadow@domain.com;1;2;250 2.1.5 Recipient OK;0;

So far mail.que is gradually increasing in EDGE server and Shadow redundancy queue is 4(but when I click details found nearly 200000 emails from single user). Can you please advise what could be done please.
0
 
LVL 41

Expert Comment

by:Amit
ID: 39635942
Shadow redundancy queue can be ignored, if queue count is not huge. In you case it is huge, you need to check Antivirus. I suggest you to disable AV and restart service on your hub and edge again. Last option is to disable Shadow redundancy and then clear the queue.
0
 

Author Comment

by:ipsec600
ID: 39637051
Hi, I did the followings but still the issue is occuring,

1. Since edge server mail.que folder is abnormally growing and ultimately casued the space issue in the drive for that pause & stop the transport service of edge and deleted queue, and created new queue. I tried both creating queue location(same drive and different drive) but mail.que is still growing.

2. I disabled AV and restarted service on hub and edge but and while tried to clean shadow message returning with the below error

Error
Action Remove without sending NDR could not be performed on object “Email subject”
Error:      
The object with identity servername\shadow\6\32 was not found.

3. I did not try to disable shadow redundancy (Set-TransportConfig -ShadowRedundancyEnabled $false) cause not sure if I disable the option then whether shadow queue will be available or not or is there any impact in the existing trasport/mailbox/edge server or not.

4. If I click in shadow redundancy message those I am not able to clean, found that followings:

Identity: servername\Shadow\6\228
Subject: email subject!
Internet Message ID: <DED473A2023D564A9A1042F553ADBC1B008D80@server0002>
From Address: User01@internaldomain.com
Status: Ready
Size (KB): 130
Message Source Name: SMTP:Default internal receive connector edge servername
Source IP: 10.117.223.298
SCL: -1      
Date Received: 11/9/2013 8:31:42 PM
Expiration Time: 11/11/2013 8:31:42 PM
Last Error:
Queue ID: servername\Shadow\6
Recipients:  user2@domain2.com;1;2;250 2.1.5 Recipient OK;0;CN=EdgeSync - Inbound to Site-site1,CN=Connections,CN=Exchange Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=First Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,CN={F7D3D225-C88C-40EC-BD90-6DB6CE97EFDC} user3@domain3.com;1;2;250 2.1.5 Recipient OK;0;CN=EdgeSync - Inbound to Site-site1,CN=Connections,CN=Exchange Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups

Note: Recently we have migrated the domain2.com as an accepted domain in our internaldomain.com though found every recipient is working perfectly from domain2.com to internaldomain.com, and internaldomain.com to domain2.com just this type of two emails are in the loop and in shadow redundancy queue.

is there anything I can do to delete those shadow messages or i will follow the last option to disable shadow redundany, can you please advise.
0
 
LVL 41

Expert Comment

by:Amit
ID: 39637341
Disable shadow redundancy to isolate the issue. However, I would suggest you to open up a MS case and check what they suggest.
0
 

Author Comment

by:ipsec600
ID: 39648251
Hi amitkulshrestha, thanks for your continuous assistance even during weekend, it helps me a lot to take a look into the issue in different angle. As mentioned earlier, we have migrated domain2.com as an accepted domain, and two emails from internaldomain.com to domain2.com are in the shadow redundancy queue, and ultimately was in the email loop and for those two email HUB server was not able to receive ACK from Edge server and causing mail.que folder to grow in EDGE server , after investigation, it was noticed that that two contact address exist with the name contact01@domain2.com and contact02@domain2.com, after deleting those contact address mail.que folder become stable in EDGE server. Surely new learning for me cause I tried several ways to clean the shadow redundancy queue but could not. Good that it is working perfectly now thanks once again.
0
 

Author Comment

by:ipsec600
ID: 39650177
I've requested that this question be closed as follows:

Accepted answer: 0 points for ipsec600's comment #a39648251
Assisted answer: 500 points for amitkulshrestha's comment #a39633642

for the following reason:

Two contact address exist with the name contact01@domain2.com and contact02@domain2.com, after deleting those contact address mail.que folder become stable in EDGE server.
0

Featured Post

Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

Join & Write a Comment

Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now