• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 154
  • Last Modified:

Exchange 2010 - Delay in email received

I'm experiencing delays from email coming from a specific domain.  I don't believe the issue lies with our server, but sense the delay is from two different domains, I wondered whether there was something in our server that was causing this delay. Below is some of the header information for the delayed emails:


Email 1:
Received: from mout.perfora.net (74.208.4.194) by mail.ndapc.com
 (192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Sun, 2 Oct 2016
 16:05:02 -0400
Received: from ACCOUNTINGD ([50.194.177.237]) by mrelay.perfora.net
 (mreueus002) with ESMTPA (Nemesis) id 0Lyk9B-1atNOy3RyR-0164fq; Fri, 30 Sep
 2016 20:29:59 +0200

X-Mailer: Microsoft Outlook 15.0
Thread-Index: AQJqvjSho+4cY93Ge3gFg/Wwc7dhmgJrPM00n024eSA=
Content-Language: en-us

X-Provags-ID: V03:K0:fdKutpUo4RhL9KXGvArE8OHqEvZ3O5X0d39Vo8jDw7dIzoJ92AC
 IdZi8x6dpZpW/H2rNZOqyQZpO/0QZUC0V8BFHZmVdGHDTJT2uoRgGaJn4WOjyCPdNPIygdY
 XBy1+bsVrvb5D+G9CiM9gvEKZmr90t3QM2IsZFMwnr2LHUjxmJ2PxV4W0zkTzHRIYX7CMEc
 5NGIWw7OemXgbVUnoU8WA==
X-UI-Out-Filterresults: notjunk:1;V01:K0:TiTPIGTN8fs=:9E5QPyq/oIe0VRP5PrFdbS
 kirdMEdNwRrJP/oMWVUBwCwmK/X18v7x2cz0AP6w3K7ErUhTZAPR/LGoyq+2MBGAKkRazZkEl
 mdh07qibnZVnlNTzFhFSqU8/oD0PIgKSimov+EimjPPS+UEhKODXPhtgVJEDns+n67nYIDPRe
 9TVAhdTE6WThn+CBx/tn81WqAFJ+s8a6StWLD9OU0kuIH1V3gdjaHiUscOgUz/UpoEdqEqyYn
 ukd8vLg6DLGKT5nNhyETMjealkQTeDRx1SncPBVBUjBTitCMyctAhqj4iTjPZ89F7bVjGwMVe
 O20LGoss0BFHidkJoOhYMZwzkpmr1ks7j2Lgn2bBZFOqQbTw2KI7q/k/DExWwQeDHVFjFOoGj
 cMUS7EkxiwSNlqBdYLNU9JJ9nPlOHXWqszicP0y5wxirhFVeVlbEiqv/e4TQiExxNhlgMD5sC
 4IagaXgDYOFYQDzAJ1jwYs5+B/bR9P5oy4R3fjw6Jc1uYU0+uBb8dhb2WJPikFyIX0nun4zGk
 G495e1NrsoIZ5+l3LE7NePLJrt2oLw/W0zBvkI7vVY7rAsOcgpObmoTDSjIGjKFpXg1nbOdwv
 XeM4guyvPQMLRT1A4K04Lxx1ETk5LSwqBramEk5lBE2JYOx9SIBVuQmil2pffMMHlAuTwEo21
 B08Trn9dPv4nqluXN+uBVJlE5mRdl2d8UFKiURxBlv/7UkE0aGaf+sMv7wNa7DC5cjZVowQA2
 9sTF2OwE92QNO1lj

X-MS-Exchange-Organization-AuthSource:
X-MS-Exchange-Organization-AuthAs: Anonymous
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization-PRD: stoaintl.com
X-MS-Exchange-Organization-SenderIdResult: None
Received-SPF: None (    does not designate
 permitted sender hosts)
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: mout.perfora.net
X-GFI-SMTP-RemoteIP: 74.208.4.194
X-MS-Exchange-Organization-Antispam-Report: SenderOnRecipientSafeSendersList
X-MS-Exchange-Organization-SCL: -1



Email 2:

Received: from s12p02o141.mxlogic.net (208.65.145.64) by mail.ndapc.com
 (192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Fri, 30 Sep 2016
 16:58:44 -0400
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com)      by
 s12p02o141.mxlogic.net(mxl_mta-8.5.0-1466)      with ESMTP id
 c13dee75.7fc6ce1fc700.23146.00-544.64094.s12p02o141.mxlogic.net
 (envelope-from <jorleman@ubproperties.com>);      Fri, 30 Sep 2016 15:03:24 -0600
 (MDT)
X-MXL-Hash: 57eed31c1c75c2dd-17bdaaf2ec4e339f3ce39332458fb6b9527c55c4
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com)      by
 s12p02o141.mxlogic.net(mxl_mta-8.5.0-1466) over TLS secured channel      with
 ESMTP id 5be4de75.0.35925.00-333.100478.s12p02o141.mxlogic.net (envelope-from
 <    >);      Thu, 29 Sep 2016 11:26:13 -0600 (MDT)
X-MXL-Hash: 57ed4eb551d94569-cc519633019a756e7aa785422196a6fd9d088813
Received: from UB03.ubprop.com ([fe80::e575:47e0:63f0:f08f]) by
 UB03.ubprop.com ([fe80::e575:47e0:63f0:f08f%13]) with mapi id 14.02.0328.009;
 Thu, 29 Sep 2016 13:26:12 -0400

Thread-Index: AdIaZLmy6LHU7RjLQ2Catj7VIaHPqAADUcfyAAAzt/AAAPDS8A==
Date: Thu, 29 Sep 2016 17:26:12 +0000
Message-ID: <7A21F3C2-D083-4C0C-B323-9F113DE8A442@ubproperties.com>
References: <2424137C-0872-4294-ADB1-55D84FDD097D@ubproperties.com>
 <ED4D8A01-AE4D-4044-A04D-66EB00B6229B@ubproperties.com>,<DM2PR04MB1851278FD3F37085C58B2278B2CE0@DM2PR04MB1851.namprd04.prod.outlook.com>
In-Reply-To: <DM2PR04MB1851278FD3F37085C58B2278B2CE0@DM2PR04MB1851.namprd04.prod.outlook.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-AnalysisOut: [v=2.1 cv=ReuWfgZv c=1 sm=1 tr=0 a=VZ+C9M41iubXZmT/EKwz6w==]
X-AnalysisOut: [:117 a=VZ+C9M41iubXZmT/EKwz6w==:17 a=kj9zAlcOel0A:10 a=xqW]
X-AnalysisOut: [C_Br6kY4A:10 a=GW1xBdLrtEIA:10 a=FJA1PnO1AAAA:8 a=xFkcl9sD]
X-AnalysisOut: [AAAA:8 a=3oc9M9_CAAAA:8 a=Kl3Z8SwrwPVNRRcY8dQA:9 a=yO-S9Wo]
X-AnalysisOut: [B2xLQcHSt:21 a=QZ7x49gEzHQ1JYKH:21 a=CjuIK1q_8ugA:10 a=q7-]
X-AnalysisOut: [djQggoAkA:10 a=cjjtZJ1ZH2wA:10 a=zF-lripLtB8A:10 a=JAKdFTT]
X-AnalysisOut: [65_LX2izJ9qDR:22 a=31gl-k8mzNzjL2ROS0WW:22 a=WQP3B-o2DcFb_]
X-AnalysisOut: [-ao3AbR:22]
X-Spam: [F=0.5987312666; CM=0.500; MH=0.598(2016093018); S=0.200(2015072901)]
X-MAIL-FROM: <jorleman@ubproperties.com>
X-SOURCE-IP: [96.56.33.53]


X-MS-Exchange-Organization-AuthAs: Anonymous
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization-PRD: ubproperties.com
X-MS-Exchange-Organization-SenderIdResult: None

X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: s12p02o141.mxlogic.net
X-GFI-SMTP-RemoteIP: 208.65.145.64
X-MS-Exchange-Organization-Antispam-Report: SenderOnRecipientSafeSendersList
X-MS-Exchange-Organization-SCL: -1
0
AlxCastaneda
Asked:
AlxCastaneda
  • 4
  • 3
1 Solution
 
Todd NelsonSystems EngineerCommented:
Take the header info you have and run it with a header analyzer from MxToolbox.com or exrca.com.  That might suggest to you where the delay might be.
1
 
AlxCastanedaNetwork AdminAuthor Commented:
It seems the delay happens between mout.perfora.net and our email server. Is there a way to figure out what is causing this delay?


___


1 ACCOUNTINGD ([50.194.177.237]) mrelay.perfora.net (mreueus001) ‎10‎/‎6‎/‎2016‎ ‎6‎:‎22‎:‎36‎ ‎AM
 
ESMTPA (Nemesis)    
2 mout.perfora.net (74.208.4.194) mail.ndapc.com (192.168.0.51) ‎10‎/‎7‎/‎2016‎ ‎4‎:‎13‎:‎58‎ ‎AM

1311 minutes 22 seconds
0
 
Todd NelsonSystems EngineerCommented:
Will you post a screenshot of the header analyzer output?

Block out (redact) anything you don't want us to see.  I'd like to get a holistic view of the mail flow from sender to recipient.
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
AlxCastanedaNetwork AdminAuthor Commented:
Attached are the email headers.  

Header for email 1 of 2Email-Header---2.JPG
0
 
Todd NelsonSystems EngineerCommented:
That's a brutal delay.

I was assuming there would be more hops before it was delivered.  Help me understand this specific mail flow from sender to recipient.

What are ACCOUNTINGSD, mrelay.perfora.net, what is mount.perfora.net, and mail.ndapc.com?
0
 
AlxCastanedaNetwork AdminAuthor Commented:
ACCOUNTINGSD is the original computer sending the email

They use an email service know as 1 & 1  as their mail provider.  mrelay.perfora.net is this providers server.

mail.ndapc.com is our server. We host our own exchange server.

This is the only domain we are having delay problems with,
0
 
Todd NelsonSystems EngineerCommented:
Are the delays predictable and consistent from that specific email domain?  

If so, and no issues with other senders, I would contact that specific email provider.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now