Solved

Exchange queue viewer

Posted on 2013-11-27
19
1,055 Views
Last Modified: 2013-12-03
I am looking at the Exchange 2010 Queue Viewer tool

under From address column, I see just this sign "<>", instead of real email address.

can someone tell me why it does not show real address?

Thanksqueue
0
Comment
Question by:jskfan
  • 11
  • 8
19 Comments
 
LVL 35

Assisted Solution

by:Mahesh
Mahesh earned 500 total points
ID: 39681810
Most likely those are NDRs for users who dont exist in your org.
To fix out this issue, you have to enable Recipient Filter.
What do you use for anti-spam on the SMTP gateways? Does it support recipient filtering? If not, and you are not using Edge, then you can enable on the 2010 Hub Transports

Mahesh
0
 

Author Comment

by:jskfan
ID: 39682410
Anti-Spam is hosted on Microsoft TMG online, I mean we do not have in house TMG.
Regarding Edge server, we do not have Edge server, we have 2 servers Hub/CAS in the same box.
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39682907
To fix out this issue, you need to check Recipient Filter settings on TMG
http://technet.microsoft.com/en-us/gg467329.aspx

Mahesh
0
 

Author Comment

by:jskfan
ID: 39684537
As I said we do not have Edge Transport server, we have Hub Transport…
I know that the anti-spam tan can be installed with this script:
.\install-AntispamAgents.ps1

I do not know if I install it on our Hub servers if it causes and harm
0
 

Author Comment

by:jskfan
ID: 39684538
Seeing that we have Accepted domains in our Exchange, I am not sure if enabling recipient filtering will make some of our users unable to receive emails ?
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39684620
U don't have any firewall \ device between internet and HUB servers ?

Please check ur mail flow 1st to identify ?

Mahesh
0
 

Author Comment

by:jskfan
ID: 39685722
When an email is sent to our email server, it goes to the TMG hosted online, then it will come to our Network, I am sure like any other companies, there got to be a firewall and I am sure email related ports got to be open.

If I understand what you previously said about the sign "<>", you recommended to "Check recipient filtering", I believe though this should have been done at the TMG level.

I am concerned a little bit about the signs "<>"…in the queue viewer.
in our Exchange HUB servers , we do not have the anti-spam tab installed yet.
So I do not want to just go and install the anti spam tab and apply recipient filtering, that might cause damage..
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39685983
Recipient filtering feature is not available on TMG natively
It uses Edge transport role functionality
Check below article
http://technet.microsoft.com/en-us/library/ee338733.aspx

This issue may occur if the spamer keeps sending to your domain with non-existed recipient with undeliverable sender.
Please recheck, you must be having some device in front of Exchange Hub servers where you might be able to configure recipient filtering
http://community.spiceworks.com/topic/236376-exchange-2010-queue-veiwer-shows-emails-in-queue-that-don-t-have-a-from-address

The Recipient Filter agent is an anti-spam agent that is enabled on Edge Transport servers. You can use the Recipient Filter to block incoming messages for specific recipients in your organization. You can also block incoming messages to recipients that do not exist in Active Directory.
http://technet.microsoft.com/en-us/library/aa995993(v=exchg.141).aspx

Mahesh
0
 

Author Comment

by:jskfan
ID: 39687135
We have Linux box that is SMTP server…, but I do not think this will do recipient filtering…
we have Hub servers, but I am not sure if apply Recipient filtering at the HUB servers if   this will work without causing damage
0
IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

 
LVL 35

Expert Comment

by:Mahesh
ID: 39687145
Unless and until you setup some sort of recipient filtering, your problem will not be resolved probably

Mahesh
0
 

Author Comment

by:jskfan
ID: 39687188
If I understand your statement ,exchange forefront online , does not provide recipient Filtering, so I need to recommend to the company I work for, the set up of an Exchange Edge Server…
Correct ?
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39687209
Yes, you are right

Basically you don't know what exactly deployed in cloud since TMG required Edge for recipient filtering,
I suggest you to 1st identify with your ISP \ vendor where your MX is hosted and find out the setup, they might having some system that can be configured for you.

Mahesh
0
 

Author Comment

by:jskfan
ID: 39690412
MaheshPM:

I just tested a fictitious name, but it did not go to the queue.

I sent an email from Hotmail to XYZ@mydomain.com, and it did not end in the queue.
it got bounced back.
XYZ is an inexistent username in the company.
0
 

Author Comment

by:jskfan
ID: 39690413
Which means to me there is recipient filtering...
0
 
LVL 35

Assisted Solution

by:Mahesh
Mahesh earned 500 total points
ID: 39690690
You are not getting point

In your case, you are using hotmail ID to send mail which is validated sender and you are trying to send mail in ur exchange org with non existent recipient, but obvious you will get NDR as exchange is unable to find recipient in org and hence it simply reply back to sender with NDR.
You got NDR at hotmail because your hotmail id has valid, routable email address.
With this, you cannot deside that recipient filtering is enabled.

In reality, spammer is managed to use some fake email ID as sender which cannot be validated and reachable as sender and sending emails to non existent ids in your exchange org for which exchange is unable to reply back with NDR
if you look at the image you uploaded, it clearly says that exchnage is unable to find "from address" (Sender) to which NDR needs to be sent.

Read my earlier comment

Mahesh
0
 

Author Comment

by:jskfan
ID: 39691001
I pasted the info here :

Identity: MyHubserver\2590231\42349474
Subject: Undeliverable: Campaign Manager  - campaign_status_update [SUCCESS]
Internet Message ID: <b679f5f3-f723-40b2-acff-c3f7daa8a94d@MyDomain.corp>
From Address: <>
Status: Ready
Size (KB): 6
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 12/1/2013 12:22:40 AM
Expiration Time: 12/3/2013 12:22:40 AM
Last Error: 400 4.4.7 Message delayed
Queue ID: MyHubserver\2590231
Recipients:  sitebuild@tabastionprod001.bo1.MyDomain.sea;2;2;400 4.4.7 Message delayed;0;CN=HQ Public Internet,CN=Connections,CN=Exchange Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=MyDomain Corp,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=MyDomain,DC=corp
0
 

Author Comment

by:jskfan
ID: 39691479
I guess they go away after the expiration day.
Date Received: 12/1/2013 12:22:40 AM
Expiration Time: 12/3/2013 12:22:40 AM

I checked a bunch of the messages in the queues, and they are not expired...
I guess they will get deleted when the time expires..
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39692079
Yes, you are right.Upon expiration message should get removed from Exchange server.

The message expiration timeout interval specifies the maximum length of time that an Edge Transport server or a Hub Transport server tries to deliver a failed message. If the message can't be successfully delivered before the expiration timeout interval has passed, an NDR that contains the original message or the message headers is delivered to the sender.

In your case the sender is not available to send NDR

It may be possible that those are currupted message queue and may not be get deleted after time interval expiration.

You can manually remove messages from any queue, except the Submission queue, with or without an NDR with EMC or EMS
http://technet.microsoft.com/en-us/library/bb123535(v=exchg.141).aspx

http://searchexchange.techtarget.com/tutorial/How-to-use-SMTP-queues-to-troubleshoot-mail-flow
http://technet.microsoft.com/en-us/library/jj891103(v=exchg.150).aspx

Mahesh
0
 

Author Closing Comment

by:jskfan
ID: 39693326
Thank you
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Not sure what the best email signature size is? Are you worried about email signature image size? Follow this best practice guide.
If you don't know how to downgrade, my instructions below should be helpful.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now