Solved

Email Forwarding Gets Lost in Exchange due to msExchGenericForwardingAddress not having its attribute removed

Posted on 2013-12-30
4
1,031 Views
Last Modified: 2014-01-03
I have a server running Windows Server 2008 R2 with Exchange 2010 on a recently upgraded forest of 2008 R2.  (It was a hybrid for a long time before that).

The Way It Was: We had email being forwarded from a local mailbox to an offsite email account (on another organizations exchange server)  .  The box to have it sent to both the forwarded and local mailbox was checked.

What I did: Under the mailflow settings tab, under delivery options: I unchecked the "Forward to" mailbox.  

What Happened: All email was no longer being delivered to either the local or the forwarded mailbox.

Troubleshooting: We determined that when we were forwarding email with messages going to both local and forwarded address, everything worked.  When we removed it, no one received email.  

I went into the attributes and found that the msExchGenericForwardingAddress had the forwarded email address.  I unchecked the email forwarding box,.  Removed this email address and email worked for the local mailbox as per normal.

The Problem: Where did the email go?  I checked the outbound spamfilter and during the time in which forwarding email was unchecked it did not go into the local mailbox, but neither was it forwarded.  I checked the transport rules and it seems to be forwarding correctly, but the email does not reach spamfilter (postini).

Other: Journaling is not active, neither is the email able to be restored from deleted items (as it never reached the mailbox in the first place), so retention policies are pointless.

I am looking to find / restore the emails lost for about 4 hours this morning.

Thank you all!
0
Comment
Question by:Citadelny
  • 2
4 Comments
 
LVL 7

Expert Comment

by:Exchange_Freak
ID: 39747683
Are you using any inbound spam filter like mxlogic or messagelabs where you can look for emails if they are still there?

Badal Joshi
[edited by SouthMod to remove signature]
0
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39748630
Message Tracking will tell you what Exchange did with the message. It was probably dropped in to a black hole and has been lost.  You can do the same thing with a distribution group that has no members.

Simon.
0
 

Author Comment

by:Citadelny
ID: 39751851
Bidel: The inbound spamfilter (postini) doesn't cache the messages if the exchange server is active.  

Simon: Message track says it was "sent" to that forwarding address.  But the outbound spamfilter doesn't reflect that (hence it wasn't actually sent).  Lost to the void?
0
 
LVL 63

Accepted Solution

by:
Simon Butler (Sembee) earned 500 total points
ID: 39753446
Message Tracking should show the SMTP header of the server receiving the message - which would be your external spam filter.
However it would appear that the message has been lost.

Simon.
0

Featured Post

VMware Disaster Recovery and Data Protection

In this expert guide, you’ll learn about the components of a Modern Data Center. You will use cases for the value-added capabilities of Veeam®, including combining backup and replication for VMware disaster recovery and using replication for data center migration.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Find out what you should include to make the best professional email signature for your organization.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
This tutorial will walk an individual through the steps necessary to install and configure the Windows Server Backup Utility. Directly connect an external storage device such as a USB drive, or CD\DVD burner: If the device is a USB drive, ensure i…
how to add IIS SMTP to handle application/Scanner relays into office 365.

856 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question