AlxCastaneda
asked on
Exchange 2010 - Delay in email received
I'm experiencing delays from email coming from a specific domain. I don't believe the issue lies with our server, but sense the delay is from two different domains, I wondered whether there was something in our server that was causing this delay. Below is some of the header information for the delayed emails:
Email 1:
Received: from mout.perfora.net (74.208.4.194) by mail.ndapc.com
(192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Sun, 2 Oct 2016
16:05:02 -0400
Received: from ACCOUNTINGD ([50.194.177.237]) by mrelay.perfora.net
(mreueus002) with ESMTPA (Nemesis) id 0Lyk9B-1atNOy3RyR-0164fq; Fri, 30 Sep
2016 20:29:59 +0200
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AQJqvjSho+4cY93Ge3gFg/Wwc7 dhmgJrPM00 n024eSA=
Content-Language: en-us
X-Provags-ID: V03:K0:fdKutpUo4RhL9KXGvAr E8OHqEvZ3O 5X0d39Vo8j Dw7dIzoJ92 AC
IdZi8x6dpZpW/H2rNZOqyQZpO/ 0QZUC0V8BF HZmVdGHDTJ T2uoRgGaJn 4WOjyCPdNP IygdY
XBy1+bsVrvb5D+G9CiM9gvEKZm r90t3QM2Is ZFMwnr2LHU jxmJ2PxV4W 0zkTzHRIYX 7CMEc
5NGIWw7OemXgbVUnoU8WA==
X-UI-Out-Filterresults: notjunk:1;V01:K0:TiTPIGTN8 fs=:9E5QPy q/oIe0VRP5 PrFdbS
kirdMEdNwRrJP/oMWVUBwCwmK/ X18v7x2cz0 AP6w3K7ErU hTZAPR/LGo yq+2MBGAKk RazZkEl
mdh07qibnZVnlNTzFhFSqU8/oD 0PIgKSimov +EimjPPS+U EhKODXPhtg VJEDns+n67 nYIDPRe
9TVAhdTE6WThn+CBx/tn81WqAF J+s8a6StWL D9OU0kuIH1 V3gdjaHiUs cOgUz/UpoE dqEqyYn
ukd8vLg6DLGKT5nNhyETMjealk QTeDRx1Snc PBVBUjBTit CMyctAhqj4 iTjPZ89F7b VjGwMVe
O20LGoss0BFHidkJoOhYMZwzkp mr1ks7j2Lg n2bBZFOqQb Tw2KI7q/k/ DExWwQeDHV FjFOoGj
cMUS7EkxiwSNlqBdYLNU9JJ9nP lOHXWqszic P0y5wxirhF VeVlbEiqv/ e4TQiExxNh lgMD5sC
4IagaXgDYOFYQDzAJ1jwYs5+B/ bR9P5oy4R3 fjw6Jc1uYU 0+uBb8dhb2 WJPikFyIX0 nun4zGk
G495e1NrsoIZ5+l3LE7NePLJrt 2oLw/W0zBv kI7vVY7rAs OcgpObmoTD SjIGjKFpXg 1nbOdwv
XeM4guyvPQMLRT1A4K04Lxx1ET k5LSwqBram Ek5lBE2JYO x9SIBVuQmi l2pffMMHlA uTwEo21
B08Trn9dPv4nqluXN+uBVJlE5m Rdl2d8UFKi URxBlv/7Uk E0aGaf+sMv 7wNa7DC5cj ZVowQA2
9sTF2OwE92QNO1lj
X-MS-Exchange-Organization -AuthSourc e:
X-MS-Exchange-Organization -AuthAs: Anonymous
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization -PRD: stoaintl.com
X-MS-Exchange-Organization -SenderIdR esult: None
Received-SPF: None ( does not designate
permitted sender hosts)
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: mout.perfora.net
X-GFI-SMTP-RemoteIP: 74.208.4.194
X-MS-Exchange-Organization -Antispam- Report: SenderOnRecipientSafeSende rsList
X-MS-Exchange-Organization -SCL: -1
Email 2:
Received: from s12p02o141.mxlogic.net (208.65.145.64) by mail.ndapc.com
(192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Fri, 30 Sep 2016
16:58:44 -0400
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com) by
s12p02o141.mxlogic.net(mxl _mta-8.5.0 -1466) with ESMTP id
c13dee75.7fc6ce1fc700.2314 6.00-544.6 4094.s12p0 2o141.mxlo gic.net
(envelope-from <jorleman@ubproperties.com >); Fri, 30 Sep 2016 15:03:24 -0600
(MDT)
X-MXL-Hash: 57eed31c1c75c2dd-17bdaaf2e c4e339f3ce 39332458fb 6b9527c55c 4
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com) by
s12p02o141.mxlogic.net(mxl _mta-8.5.0 -1466) over TLS secured channel with
ESMTP id 5be4de75.0.35925.00-333.10 0478.s12p0 2o141.mxlo gic.net (envelope-from
< >); Thu, 29 Sep 2016 11:26:13 -0600 (MDT)
X-MXL-Hash: 57ed4eb551d94569-cc5196330 19a756e7aa 785422196a 6fd9d08881 3
Received: from UB03.ubprop.com ([fe80::e575:47e0:63f0:f08 f]) by
UB03.ubprop.com ([fe80::e575:47e0:63f0:f08 f%13]) with mapi id 14.02.0328.009;
Thu, 29 Sep 2016 13:26:12 -0400
Thread-Index: AdIaZLmy6LHU7RjLQ2Catj7VIa HPqAADUcfy AAAzt/AAAP DS8A==
Date: Thu, 29 Sep 2016 17:26:12 +0000
Message-ID: <7A21F3C2-D083-4C0C-B323-9 F113DE8A44 2@ubproper ties.com>
References: <2424137C-0872-4294-ADB1-5 5D84FDD097 D@ubproper ties.com>
<ED4D8A01-AE4D-4044-A04D-6 6EB00B6229 B@ubproper ties.com>, <DM2PR04MB 1851278FD3 F37085C58B 2278B2CE0@ DM2PR04MB1 851.namprd 04.prod.ou tlook.com>
In-Reply-To: <DM2PR04MB1851278FD3F37085 C58B2278B2 CE0@DM2PR0 4MB1851.na mprd04.pro d.outlook. com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-AnalysisOut: [v=2.1 cv=ReuWfgZv c=1 sm=1 tr=0 a=VZ+C9M41iubXZmT/EKwz6w== ]
X-AnalysisOut: [:117 a=VZ+C9M41iubXZmT/EKwz6w== :17 a=kj9zAlcOel0A:10 a=xqW]
X-AnalysisOut: [C_Br6kY4A:10 a=GW1xBdLrtEIA:10 a=FJA1PnO1AAAA:8 a=xFkcl9sD]
X-AnalysisOut: [AAAA:8 a=3oc9M9_CAAAA:8 a=Kl3Z8SwrwPVNRRcY8dQA:9 a=yO-S9Wo]
X-AnalysisOut: [B2xLQcHSt:21 a=QZ7x49gEzHQ1JYKH:21 a=CjuIK1q_8ugA:10 a=q7-]
X-AnalysisOut: [djQggoAkA:10 a=cjjtZJ1ZH2wA:10 a=zF-lripLtB8A:10 a=JAKdFTT]
X-AnalysisOut: [65_LX2izJ9qDR:22 a=31gl-k8mzNzjL2ROS0WW:22 a=WQP3B-o2DcFb_]
X-AnalysisOut: [-ao3AbR:22]
X-Spam: [F=0.5987312666; CM=0.500; MH=0.598(2016093018); S=0.200(2015072901)]
X-MAIL-FROM: <jorleman@ubproperties.com >
X-SOURCE-IP: [96.56.33.53]
X-MS-Exchange-Organization -AuthAs: Anonymous
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization -PRD: ubproperties.com
X-MS-Exchange-Organization -SenderIdR esult: None
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: s12p02o141.mxlogic.net
X-GFI-SMTP-RemoteIP: 208.65.145.64
X-MS-Exchange-Organization -Antispam- Report: SenderOnRecipientSafeSende rsList
X-MS-Exchange-Organization -SCL: -1
Email 1:
Received: from mout.perfora.net (74.208.4.194) by mail.ndapc.com
(192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Sun, 2 Oct 2016
16:05:02 -0400
Received: from ACCOUNTINGD ([50.194.177.237]) by mrelay.perfora.net
(mreueus002) with ESMTPA (Nemesis) id 0Lyk9B-1atNOy3RyR-0164fq; Fri, 30 Sep
2016 20:29:59 +0200
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AQJqvjSho+4cY93Ge3gFg/Wwc7
Content-Language: en-us
X-Provags-ID: V03:K0:fdKutpUo4RhL9KXGvAr
IdZi8x6dpZpW/H2rNZOqyQZpO/
XBy1+bsVrvb5D+G9CiM9gvEKZm
5NGIWw7OemXgbVUnoU8WA==
X-UI-Out-Filterresults: notjunk:1;V01:K0:TiTPIGTN8
kirdMEdNwRrJP/oMWVUBwCwmK/
mdh07qibnZVnlNTzFhFSqU8/oD
9TVAhdTE6WThn+CBx/tn81WqAF
ukd8vLg6DLGKT5nNhyETMjealk
O20LGoss0BFHidkJoOhYMZwzkp
cMUS7EkxiwSNlqBdYLNU9JJ9nP
4IagaXgDYOFYQDzAJ1jwYs5+B/
G495e1NrsoIZ5+l3LE7NePLJrt
XeM4guyvPQMLRT1A4K04Lxx1ET
B08Trn9dPv4nqluXN+uBVJlE5m
9sTF2OwE92QNO1lj
X-MS-Exchange-Organization
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Received-SPF: None ( does not designate
permitted sender hosts)
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: mout.perfora.net
X-GFI-SMTP-RemoteIP: 74.208.4.194
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Email 2:
Received: from s12p02o141.mxlogic.net (208.65.145.64) by mail.ndapc.com
(192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Fri, 30 Sep 2016
16:58:44 -0400
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com) by
s12p02o141.mxlogic.net(mxl
c13dee75.7fc6ce1fc700.2314
(envelope-from <jorleman@ubproperties.com
(MDT)
X-MXL-Hash: 57eed31c1c75c2dd-17bdaaf2e
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com) by
s12p02o141.mxlogic.net(mxl
ESMTP id 5be4de75.0.35925.00-333.10
< >); Thu, 29 Sep 2016 11:26:13 -0600 (MDT)
X-MXL-Hash: 57ed4eb551d94569-cc5196330
Received: from UB03.ubprop.com ([fe80::e575:47e0:63f0:f08
UB03.ubprop.com ([fe80::e575:47e0:63f0:f08
Thu, 29 Sep 2016 13:26:12 -0400
Thread-Index: AdIaZLmy6LHU7RjLQ2Catj7VIa
Date: Thu, 29 Sep 2016 17:26:12 +0000
Message-ID: <7A21F3C2-D083-4C0C-B323-9
References: <2424137C-0872-4294-ADB1-5
<ED4D8A01-AE4D-4044-A04D-6
In-Reply-To: <DM2PR04MB1851278FD3F37085
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding:
MIME-Version: 1.0
X-AnalysisOut: [v=2.1 cv=ReuWfgZv c=1 sm=1 tr=0 a=VZ+C9M41iubXZmT/EKwz6w==
X-AnalysisOut: [:117 a=VZ+C9M41iubXZmT/EKwz6w==
X-AnalysisOut: [C_Br6kY4A:10 a=GW1xBdLrtEIA:10 a=FJA1PnO1AAAA:8 a=xFkcl9sD]
X-AnalysisOut: [AAAA:8 a=3oc9M9_CAAAA:8 a=Kl3Z8SwrwPVNRRcY8dQA:9 a=yO-S9Wo]
X-AnalysisOut: [B2xLQcHSt:21 a=QZ7x49gEzHQ1JYKH:21 a=CjuIK1q_8ugA:10 a=q7-]
X-AnalysisOut: [djQggoAkA:10 a=cjjtZJ1ZH2wA:10 a=zF-lripLtB8A:10 a=JAKdFTT]
X-AnalysisOut: [65_LX2izJ9qDR:22 a=31gl-k8mzNzjL2ROS0WW:22 a=WQP3B-o2DcFb_]
X-AnalysisOut: [-ao3AbR:22]
X-Spam: [F=0.5987312666; CM=0.500; MH=0.598(2016093018); S=0.200(2015072901)]
X-MAIL-FROM: <jorleman@ubproperties.com
X-SOURCE-IP: [96.56.33.53]
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: s12p02o141.mxlogic.net
X-GFI-SMTP-RemoteIP: 208.65.145.64
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Take the header info you have and run it with a header analyzer from MxToolbox.com or exrca.com. That might suggest to you where the delay might be.
ASKER
It seems the delay happens between mout.perfora.net and our email server. Is there a way to figure out what is causing this delay?
___
1 ACCOUNTINGD ([50.194.177.237]) mrelay.perfora.net (mreueus001) 10/6/2016 6:22:36 AM
ESMTPA (Nemesis)
2 mout.perfora.net (74.208.4.194) mail.ndapc.com (192.168.0.51) 10/7/2016 4:13:58 AM
1311 minutes 22 seconds
___
1 ACCOUNTINGD ([50.194.177.237]) mrelay.perfora.net (mreueus001) 10/6/2016 6:22:36 AM
ESMTPA (Nemesis)
2 mout.perfora.net (74.208.4.194) mail.ndapc.com (192.168.0.51) 10/7/2016 4:13:58 AM
1311 minutes 22 seconds
Will you post a screenshot of the header analyzer output?
Block out (redact) anything you don't want us to see. I'd like to get a holistic view of the mail flow from sender to recipient.
Block out (redact) anything you don't want us to see. I'd like to get a holistic view of the mail flow from sender to recipient.
ASKER
That's a brutal delay.
I was assuming there would be more hops before it was delivered. Help me understand this specific mail flow from sender to recipient.
What are ACCOUNTINGSD, mrelay.perfora.net, what is mount.perfora.net, and mail.ndapc.com?
I was assuming there would be more hops before it was delivered. Help me understand this specific mail flow from sender to recipient.
What are ACCOUNTINGSD, mrelay.perfora.net, what is mount.perfora.net, and mail.ndapc.com?
ASKER
ACCOUNTINGSD is the original computer sending the email
They use an email service know as 1 & 1 as their mail provider. mrelay.perfora.net is this providers server.
mail.ndapc.com is our server. We host our own exchange server.
This is the only domain we are having delay problems with,
They use an email service know as 1 & 1 as their mail provider. mrelay.perfora.net is this providers server.
mail.ndapc.com is our server. We host our own exchange server.
This is the only domain we are having delay problems with,
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.