Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

Exchange queue viewer

Posted on 2013-11-27
19
Medium Priority
?
1,110 Views
Last Modified: 2013-12-03
I am looking at the Exchange 2010 Queue Viewer tool

under From address column, I see just this sign "<>", instead of real email address.

can someone tell me why it does not show real address?

Thanksqueue
0
Comment
Question by:jskfan
  • 11
  • 8
19 Comments
 
LVL 39

Assisted Solution

by:Mahesh
Mahesh earned 2000 total points
ID: 39681810
Most likely those are NDRs for users who dont exist in your org.
To fix out this issue, you have to enable Recipient Filter.
What do you use for anti-spam on the SMTP gateways? Does it support recipient filtering? If not, and you are not using Edge, then you can enable on the 2010 Hub Transports

Mahesh
0
 

Author Comment

by:jskfan
ID: 39682410
Anti-Spam is hosted on Microsoft TMG online, I mean we do not have in house TMG.
Regarding Edge server, we do not have Edge server, we have 2 servers Hub/CAS in the same box.
0
 
LVL 39

Expert Comment

by:Mahesh
ID: 39682907
To fix out this issue, you need to check Recipient Filter settings on TMG
http://technet.microsoft.com/en-us/gg467329.aspx

Mahesh
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Comment

by:jskfan
ID: 39684537
As I said we do not have Edge Transport server, we have Hub Transport…
I know that the anti-spam tan can be installed with this script:
.\install-AntispamAgents.ps1

I do not know if I install it on our Hub servers if it causes and harm
0
 

Author Comment

by:jskfan
ID: 39684538
Seeing that we have Accepted domains in our Exchange, I am not sure if enabling recipient filtering will make some of our users unable to receive emails ?
0
 
LVL 39

Expert Comment

by:Mahesh
ID: 39684620
U don't have any firewall \ device between internet and HUB servers ?

Please check ur mail flow 1st to identify ?

Mahesh
0
 

Author Comment

by:jskfan
ID: 39685722
When an email is sent to our email server, it goes to the TMG hosted online, then it will come to our Network, I am sure like any other companies, there got to be a firewall and I am sure email related ports got to be open.

If I understand what you previously said about the sign "<>", you recommended to "Check recipient filtering", I believe though this should have been done at the TMG level.

I am concerned a little bit about the signs "<>"…in the queue viewer.
in our Exchange HUB servers , we do not have the anti-spam tab installed yet.
So I do not want to just go and install the anti spam tab and apply recipient filtering, that might cause damage..
0
 
LVL 39

Expert Comment

by:Mahesh
ID: 39685983
Recipient filtering feature is not available on TMG natively
It uses Edge transport role functionality
Check below article
http://technet.microsoft.com/en-us/library/ee338733.aspx

This issue may occur if the spamer keeps sending to your domain with non-existed recipient with undeliverable sender.
Please recheck, you must be having some device in front of Exchange Hub servers where you might be able to configure recipient filtering
http://community.spiceworks.com/topic/236376-exchange-2010-queue-veiwer-shows-emails-in-queue-that-don-t-have-a-from-address

The Recipient Filter agent is an anti-spam agent that is enabled on Edge Transport servers. You can use the Recipient Filter to block incoming messages for specific recipients in your organization. You can also block incoming messages to recipients that do not exist in Active Directory.
http://technet.microsoft.com/en-us/library/aa995993(v=exchg.141).aspx

Mahesh
0
 

Author Comment

by:jskfan
ID: 39687135
We have Linux box that is SMTP server…, but I do not think this will do recipient filtering…
we have Hub servers, but I am not sure if apply Recipient filtering at the HUB servers if   this will work without causing damage
0
 
LVL 39

Expert Comment

by:Mahesh
ID: 39687145
Unless and until you setup some sort of recipient filtering, your problem will not be resolved probably

Mahesh
0
 

Author Comment

by:jskfan
ID: 39687188
If I understand your statement ,exchange forefront online , does not provide recipient Filtering, so I need to recommend to the company I work for, the set up of an Exchange Edge Server…
Correct ?
0
 
LVL 39

Expert Comment

by:Mahesh
ID: 39687209
Yes, you are right

Basically you don't know what exactly deployed in cloud since TMG required Edge for recipient filtering,
I suggest you to 1st identify with your ISP \ vendor where your MX is hosted and find out the setup, they might having some system that can be configured for you.

Mahesh
0
 

Author Comment

by:jskfan
ID: 39690412
MaheshPM:

I just tested a fictitious name, but it did not go to the queue.

I sent an email from Hotmail to XYZ@mydomain.com, and it did not end in the queue.
it got bounced back.
XYZ is an inexistent username in the company.
0
 

Author Comment

by:jskfan
ID: 39690413
Which means to me there is recipient filtering...
0
 
LVL 39

Assisted Solution

by:Mahesh
Mahesh earned 2000 total points
ID: 39690690
You are not getting point

In your case, you are using hotmail ID to send mail which is validated sender and you are trying to send mail in ur exchange org with non existent recipient, but obvious you will get NDR as exchange is unable to find recipient in org and hence it simply reply back to sender with NDR.
You got NDR at hotmail because your hotmail id has valid, routable email address.
With this, you cannot deside that recipient filtering is enabled.

In reality, spammer is managed to use some fake email ID as sender which cannot be validated and reachable as sender and sending emails to non existent ids in your exchange org for which exchange is unable to reply back with NDR
if you look at the image you uploaded, it clearly says that exchnage is unable to find "from address" (Sender) to which NDR needs to be sent.

Read my earlier comment

Mahesh
0
 

Author Comment

by:jskfan
ID: 39691001
I pasted the info here :

Identity: MyHubserver\2590231\42349474
Subject: Undeliverable: Campaign Manager  - campaign_status_update [SUCCESS]
Internet Message ID: <b679f5f3-f723-40b2-acff-c3f7daa8a94d@MyDomain.corp>
From Address: <>
Status: Ready
Size (KB): 6
Message Source Name: DSN
Source IP: 255.255.255.255
SCL: -1
Date Received: 12/1/2013 12:22:40 AM
Expiration Time: 12/3/2013 12:22:40 AM
Last Error: 400 4.4.7 Message delayed
Queue ID: MyHubserver\2590231
Recipients:  sitebuild@tabastionprod001.bo1.MyDomain.sea;2;2;400 4.4.7 Message delayed;0;CN=HQ Public Internet,CN=Connections,CN=Exchange Routing Group (DWBGZMFD01QNBJR),CN=Routing Groups,CN=Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=MyDomain Corp,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=MyDomain,DC=corp
0
 

Author Comment

by:jskfan
ID: 39691479
I guess they go away after the expiration day.
Date Received: 12/1/2013 12:22:40 AM
Expiration Time: 12/3/2013 12:22:40 AM

I checked a bunch of the messages in the queues, and they are not expired...
I guess they will get deleted when the time expires..
0
 
LVL 39

Accepted Solution

by:
Mahesh earned 2000 total points
ID: 39692079
Yes, you are right.Upon expiration message should get removed from Exchange server.

The message expiration timeout interval specifies the maximum length of time that an Edge Transport server or a Hub Transport server tries to deliver a failed message. If the message can't be successfully delivered before the expiration timeout interval has passed, an NDR that contains the original message or the message headers is delivered to the sender.

In your case the sender is not available to send NDR

It may be possible that those are currupted message queue and may not be get deleted after time interval expiration.

You can manually remove messages from any queue, except the Submission queue, with or without an NDR with EMC or EMS
http://technet.microsoft.com/en-us/library/bb123535(v=exchg.141).aspx

http://searchexchange.techtarget.com/tutorial/How-to-use-SMTP-queues-to-troubleshoot-mail-flow
http://technet.microsoft.com/en-us/library/jj891103(v=exchg.150).aspx

Mahesh
0
 

Author Closing Comment

by:jskfan
ID: 39693326
Thank you
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I came across an unsolved Outlook issue and here is my solution.
In this article, I will demonstrate that how to do a PST migration from Exchange Server to Office 365. This method allows importing one single PST, or multiple PST's at once.
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…
Suggested Courses
Course of the Month10 days, 10 hours left to enroll

572 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question