Solved

Email Forwarding Gets Lost in Exchange due to msExchGenericForwardingAddress not having its attribute removed

Posted on 2013-12-30
4
1,003 Views
Last Modified: 2014-01-03
I have a server running Windows Server 2008 R2 with Exchange 2010 on a recently upgraded forest of 2008 R2.  (It was a hybrid for a long time before that).

The Way It Was: We had email being forwarded from a local mailbox to an offsite email account (on another organizations exchange server)  .  The box to have it sent to both the forwarded and local mailbox was checked.

What I did: Under the mailflow settings tab, under delivery options: I unchecked the "Forward to" mailbox.  

What Happened: All email was no longer being delivered to either the local or the forwarded mailbox.

Troubleshooting: We determined that when we were forwarding email with messages going to both local and forwarded address, everything worked.  When we removed it, no one received email.  

I went into the attributes and found that the msExchGenericForwardingAddress had the forwarded email address.  I unchecked the email forwarding box,.  Removed this email address and email worked for the local mailbox as per normal.

The Problem: Where did the email go?  I checked the outbound spamfilter and during the time in which forwarding email was unchecked it did not go into the local mailbox, but neither was it forwarded.  I checked the transport rules and it seems to be forwarding correctly, but the email does not reach spamfilter (postini).

Other: Journaling is not active, neither is the email able to be restored from deleted items (as it never reached the mailbox in the first place), so retention policies are pointless.

I am looking to find / restore the emails lost for about 4 hours this morning.

Thank you all!
0
Comment
Question by:Citadelny
  • 2
4 Comments
 
LVL 7

Expert Comment

by:Exchange_Freak
ID: 39747683
Are you using any inbound spam filter like mxlogic or messagelabs where you can look for emails if they are still there?

Badal Joshi
[edited by SouthMod to remove signature]
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39748630
Message Tracking will tell you what Exchange did with the message. It was probably dropped in to a black hole and has been lost.  You can do the same thing with a distribution group that has no members.

Simon.
0
 

Author Comment

by:Citadelny
ID: 39751851
Bidel: The inbound spamfilter (postini) doesn't cache the messages if the exchange server is active.  

Simon: Message track says it was "sent" to that forwarding address.  But the outbound spamfilter doesn't reflect that (hence it wasn't actually sent).  Lost to the void?
0
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39753446
Message Tracking should show the SMTP header of the server receiving the message - which would be your external spam filter.
However it would appear that the message has been lost.

Simon.
0

Featured Post

[Webinar] Disaster Recovery and Cloud Management

Learn from Unigma and CloudBerry industry veterans which providers are best for certain use cases and how to lower cloud costs, how to grow your Managed Services practice in IaaS clouds, and how to utilize public cloud for Disaster Recovery

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Marketers need statistics and metrics like everybody else needs oxygen. In this article we explain how to enable marketing campaign statistics for Microsoft Exchange mail.
Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

895 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

21 Experts available now in Live!

Get 1:1 Help Now