Solved

Incoming Mail with attachment  Delivery Delays - Exchange 2013

Posted on 2014-03-07
3
1,393 Views
Last Modified: 2014-03-18
Hi Guys,
We are having a incoming mail delivery delays.
Environment (YYYYY.org.au):
Exchange 2013 CU3 with separate CAS and MBX roles
Windows 2012
Puremessage spam filtering on MBX server role
Allowed maximum attachment size to send/receive  - 35 MB

Scenario:

1.      Email works internally
2.      Receiving and sending emails with out attachments is instantaneous to and from external parties.
3.      Receiving emails with attachments from external senders  (Ex: gmail) over 3 MB get delayed.  Sometimes by 10-20 hours
4.      Sending emails from the organization to external senders (Ex: gmail) with attachments over 3 MB is instantaneous.

So the problem we are facing is receiving emails with attachments from external senders.  “Some” of these get delivered after long delays but many go missing.

Following is an email header analysis of a delayed message.

Hop      Delay      from      by      with      time (UTC)
1      *      000s-ex-mbx-qs3.AAA.edu.au      000s-ex-hub-np2.AAA.edu.au      mapi      3/6/2014 12:24:12 AM

2      *      000S-EX-HUB-NP2.AAA.edu.au 172.22.174.21      000s-ex-tmg-np2.AAA.edu.au 172.22.174.5      Microsoft SMTP Server (TLS)      3/6/2014 12:23:58 AM

3      57 seconds      000s-ex-tmg-np2.AAA.edu.au 128.250.6.61      CH1EHSMHS001.bigfish.com 10.43.70.1      Microsoft SMTP Server (TLS)      3/6/2014 12:24:55 AM

4      41 seconds      CH1EHSMHS001.bigfish.com 10.43.68.231      mail13-ch1.bigfish.com      ESMTP      3/6/2014 12:25:36 AM

5      3 seconds      mail13-ch1 127.0.0.1      mail13-ch1             3/6/2014 12:25:39 AM

6      3 seconds      mail13-ch1 127.0.0.1      mail13-ch1-R.bigfish.com      ESMTP      3/6/2014 12:25:42 AM

7      0 seconds      mail13-ch1-R.bigfish.com 10.43.68.246      CH1EHSOBE005.bigfish.com 10.43.70.55      Microsoft SMTP Server      3/6/2014 12:25:42 AM

8      20 hour      ch1outboundpool.messaging.microsoft.com 216.32.181.182      CAS01.YYYYY.org.au 10.0.100.103      Microsoft SMTP Server (TLS)      3/6/2014 7:57:17 PM

9      2 minutes      CAS01.YYYYY.org.au 10.0.100.211      MBX01.YYYYY.org.au 10.0.100.125      Microsoft SMTP Server (TLS)      3/6/2014 7:59:40 PM

10      *      MBX01.YYYYY.org.au 10.0.100.125


If you notice , Hop number 8 took 20 hours to complete.


Test results form MX toolbox


Test                                      Result      
SMTP Transaction Time            5.881 seconds       
SMTP Reverse Banner Check      OK – YYY.YYY.YYY.YYY resolves to mail.YYYYY.org.au
SMTP Reverse DNS Mismatch      OK - Reverse DNS matches SMTP Banner      
SMTP TLS                                OK - Supports TLS.      
SMTP Connection Time            1.092 seconds - Good on Connection time      
SMTP Open Relay                  OK - Not an open relay.


Does anyone has any idea about the possible cause of this receive delay.
Any suggestion would be greatly appreciated.
0
Comment
Question by:o-team
  • 2
3 Comments
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39914503
"Puremessage spam filtering on MBX server role"

Primary target for anything like this is always third party filtering services.
Remove it, reboot the server, test again. Disabling the product is NOT enough, you have to remove it to confirm it isn't the cause.

Simon.
0
 

Accepted Solution

by:
o-team earned 0 total points
ID: 39928148
Thank you Simon,
But Puremessage was not the one that caused it.
We found out that incoming SMTP  traffic "Inspection" on Cisco zone based firewall was causing this time out.

Kind Regards
Tiraj
0
 

Author Closing Comment

by:o-team
ID: 39936357
Please state a reason for selecting your own comment as the solution.

Because no one else provide the solution.
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Lotus Notes – formerly IBM Notes – is an email client application, while IBM Domino (earlier Lotus Domino) is an email server. The client possesses a set of features that are even more advanced as compared to that of Outlook. Likewise, IBM Domino is…
When you’re making plans to join the modern business race, you should analyze various details that may affect your results. Nowadays, millions of businesses are trying to grow into established and appreciated professional enterprises.
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

776 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question