Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

Incoming Mail with attachment  Delivery Delays - Exchange 2013

Posted on 2014-03-07
3
Medium Priority
?
1,505 Views
Last Modified: 2014-03-18
Hi Guys,
We are having a incoming mail delivery delays.
Environment (YYYYY.org.au):
Exchange 2013 CU3 with separate CAS and MBX roles
Windows 2012
Puremessage spam filtering on MBX server role
Allowed maximum attachment size to send/receive  - 35 MB

Scenario:

1.      Email works internally
2.      Receiving and sending emails with out attachments is instantaneous to and from external parties.
3.      Receiving emails with attachments from external senders  (Ex: gmail) over 3 MB get delayed.  Sometimes by 10-20 hours
4.      Sending emails from the organization to external senders (Ex: gmail) with attachments over 3 MB is instantaneous.

So the problem we are facing is receiving emails with attachments from external senders.  “Some” of these get delivered after long delays but many go missing.

Following is an email header analysis of a delayed message.

Hop      Delay      from      by      with      time (UTC)
1      *      000s-ex-mbx-qs3.AAA.edu.au      000s-ex-hub-np2.AAA.edu.au      mapi      3/6/2014 12:24:12 AM

2      *      000S-EX-HUB-NP2.AAA.edu.au 172.22.174.21      000s-ex-tmg-np2.AAA.edu.au 172.22.174.5      Microsoft SMTP Server (TLS)      3/6/2014 12:23:58 AM

3      57 seconds      000s-ex-tmg-np2.AAA.edu.au 128.250.6.61      CH1EHSMHS001.bigfish.com 10.43.70.1      Microsoft SMTP Server (TLS)      3/6/2014 12:24:55 AM

4      41 seconds      CH1EHSMHS001.bigfish.com 10.43.68.231      mail13-ch1.bigfish.com      ESMTP      3/6/2014 12:25:36 AM

5      3 seconds      mail13-ch1 127.0.0.1      mail13-ch1             3/6/2014 12:25:39 AM

6      3 seconds      mail13-ch1 127.0.0.1      mail13-ch1-R.bigfish.com      ESMTP      3/6/2014 12:25:42 AM

7      0 seconds      mail13-ch1-R.bigfish.com 10.43.68.246      CH1EHSOBE005.bigfish.com 10.43.70.55      Microsoft SMTP Server      3/6/2014 12:25:42 AM

8      20 hour      ch1outboundpool.messaging.microsoft.com 216.32.181.182      CAS01.YYYYY.org.au 10.0.100.103      Microsoft SMTP Server (TLS)      3/6/2014 7:57:17 PM

9      2 minutes      CAS01.YYYYY.org.au 10.0.100.211      MBX01.YYYYY.org.au 10.0.100.125      Microsoft SMTP Server (TLS)      3/6/2014 7:59:40 PM

10      *      MBX01.YYYYY.org.au 10.0.100.125


If you notice , Hop number 8 took 20 hours to complete.


Test results form MX toolbox


Test                                      Result      
SMTP Transaction Time            5.881 seconds       
SMTP Reverse Banner Check      OK – YYY.YYY.YYY.YYY resolves to mail.YYYYY.org.au
SMTP Reverse DNS Mismatch      OK - Reverse DNS matches SMTP Banner      
SMTP TLS                                OK - Supports TLS.      
SMTP Connection Time            1.092 seconds - Good on Connection time      
SMTP Open Relay                  OK - Not an open relay.


Does anyone has any idea about the possible cause of this receive delay.
Any suggestion would be greatly appreciated.
0
Comment
Question by:o-team
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 63

Expert Comment

by:Simon Butler (Sembee)
ID: 39914503
"Puremessage spam filtering on MBX server role"

Primary target for anything like this is always third party filtering services.
Remove it, reboot the server, test again. Disabling the product is NOT enough, you have to remove it to confirm it isn't the cause.

Simon.
0
 

Accepted Solution

by:
o-team earned 0 total points
ID: 39928148
Thank you Simon,
But Puremessage was not the one that caused it.
We found out that incoming SMTP  traffic "Inspection" on Cisco zone based firewall was causing this time out.

Kind Regards
Tiraj
0
 

Author Closing Comment

by:o-team
ID: 39936357
Please state a reason for selecting your own comment as the solution.

Because no one else provide the solution.
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New style of hardware planning for Microsoft Exchange server.
How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
how to add IIS SMTP to handle application/Scanner relays into office 365.
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

661 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question