If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.
Exchange 2010 - Delay in email received
I'm experiencing delays from email coming from a specific domain. I don't believe the issue lies with our server, but sense the delay is from two different domains, I wondered whether there was something in our server that was causing this delay. Below is some of the header information for the delayed emails:
Email 1:
Received: from mout.perfora.net (74.208.4.194) by mail.ndapc.com
(192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Sun, 2 Oct 2016
16:05:02 -0400
Received: from ACCOUNTINGD ([50.194.177.237]) by mrelay.perfora.net
(mreueus002) with ESMTPA (Nemesis) id 0Lyk9B-1atNOy3RyR-0164fq; Fri, 30 Sep
2016 20:29:59 +0200
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AQJqvjSho+4cY93Ge3gFg/Wwc7
Content-Language: en-us
X-Provags-ID: V03:K0:fdKutpUo4RhL9KXGvAr
IdZi8x6dpZpW/H2rNZOqyQZpO/
XBy1+bsVrvb5D+G9CiM9gvEKZm
5NGIWw7OemXgbVUnoU8WA==
X-UI-Out-Filterresults: notjunk:1;V01:K0:TiTPIGTN8
kirdMEdNwRrJP/oMWVUBwCwmK/
mdh07qibnZVnlNTzFhFSqU8/oD
9TVAhdTE6WThn+CBx/tn81WqAF
ukd8vLg6DLGKT5nNhyETMjealk
O20LGoss0BFHidkJoOhYMZwzkp
cMUS7EkxiwSNlqBdYLNU9JJ9nP
4IagaXgDYOFYQDzAJ1jwYs5+B/
G495e1NrsoIZ5+l3LE7NePLJrt
XeM4guyvPQMLRT1A4K04Lxx1ET
B08Trn9dPv4nqluXN+uBVJlE5m
9sTF2OwE92QNO1lj
X-MS-Exchange-Organization
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Received-SPF: None ( does not designate
permitted sender hosts)
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: mout.perfora.net
X-GFI-SMTP-RemoteIP: 74.208.4.194
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Email 2:
Received: from s12p02o141.mxlogic.net (208.65.145.64) by mail.ndapc.com
(192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Fri, 30 Sep 2016
16:58:44 -0400
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com) by
s12p02o141.mxlogic.net(mxl
c13dee75.7fc6ce1fc700.2314
(envelope-from <jorleman@ubproperties.com
(MDT)
X-MXL-Hash: 57eed31c1c75c2dd-17bdaaf2e
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com) by
s12p02o141.mxlogic.net(mxl
ESMTP id 5be4de75.0.35925.00-333.10
< >); Thu, 29 Sep 2016 11:26:13 -0600 (MDT)
X-MXL-Hash: 57ed4eb551d94569-cc5196330
Received: from UB03.ubprop.com ([fe80::e575:47e0:63f0:f08
UB03.ubprop.com ([fe80::e575:47e0:63f0:f08
Thu, 29 Sep 2016 13:26:12 -0400
Thread-Index: AdIaZLmy6LHU7RjLQ2Catj7VIa
Date: Thu, 29 Sep 2016 17:26:12 +0000
Message-ID: <7A21F3C2-D083-4C0C-B323-9
References: <2424137C-0872-4294-ADB1-5
<ED4D8A01-AE4D-4044-A04D-6
In-Reply-To: <DM2PR04MB1851278FD3F37085
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding:
MIME-Version: 1.0
X-AnalysisOut: [v=2.1 cv=ReuWfgZv c=1 sm=1 tr=0 a=VZ+C9M41iubXZmT/EKwz6w==
X-AnalysisOut: [:117 a=VZ+C9M41iubXZmT/EKwz6w==
X-AnalysisOut: [C_Br6kY4A:10 a=GW1xBdLrtEIA:10 a=FJA1PnO1AAAA:8 a=xFkcl9sD]
X-AnalysisOut: [AAAA:8 a=3oc9M9_CAAAA:8 a=Kl3Z8SwrwPVNRRcY8dQA:9 a=yO-S9Wo]
X-AnalysisOut: [B2xLQcHSt:21 a=QZ7x49gEzHQ1JYKH:21 a=CjuIK1q_8ugA:10 a=q7-]
X-AnalysisOut: [djQggoAkA:10 a=cjjtZJ1ZH2wA:10 a=zF-lripLtB8A:10 a=JAKdFTT]
X-AnalysisOut: [65_LX2izJ9qDR:22 a=31gl-k8mzNzjL2ROS0WW:22 a=WQP3B-o2DcFb_]
X-AnalysisOut: [-ao3AbR:22]
X-Spam: [F=0.5987312666; CM=0.500; MH=0.598(2016093018); S=0.200(2015072901)]
X-MAIL-FROM: <jorleman@ubproperties.com
X-SOURCE-IP: [96.56.33.53]
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: s12p02o141.mxlogic.net
X-GFI-SMTP-RemoteIP: 208.65.145.64
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Email 1:
Received: from mout.perfora.net (74.208.4.194) by mail.ndapc.com
(192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Sun, 2 Oct 2016
16:05:02 -0400
Received: from ACCOUNTINGD ([50.194.177.237]) by mrelay.perfora.net
(mreueus002) with ESMTPA (Nemesis) id 0Lyk9B-1atNOy3RyR-0164fq; Fri, 30 Sep
2016 20:29:59 +0200
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AQJqvjSho+4cY93Ge3gFg/Wwc7
Content-Language: en-us
X-Provags-ID: V03:K0:fdKutpUo4RhL9KXGvAr
IdZi8x6dpZpW/H2rNZOqyQZpO/
XBy1+bsVrvb5D+G9CiM9gvEKZm
5NGIWw7OemXgbVUnoU8WA==
X-UI-Out-Filterresults: notjunk:1;V01:K0:TiTPIGTN8
kirdMEdNwRrJP/oMWVUBwCwmK/
mdh07qibnZVnlNTzFhFSqU8/oD
9TVAhdTE6WThn+CBx/tn81WqAF
ukd8vLg6DLGKT5nNhyETMjealk
O20LGoss0BFHidkJoOhYMZwzkp
cMUS7EkxiwSNlqBdYLNU9JJ9nP
4IagaXgDYOFYQDzAJ1jwYs5+B/
G495e1NrsoIZ5+l3LE7NePLJrt
XeM4guyvPQMLRT1A4K04Lxx1ET
B08Trn9dPv4nqluXN+uBVJlE5m
9sTF2OwE92QNO1lj
X-MS-Exchange-Organization
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Received-SPF: None ( does not designate
permitted sender hosts)
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: mout.perfora.net
X-GFI-SMTP-RemoteIP: 74.208.4.194
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Email 2:
Received: from s12p02o141.mxlogic.net (208.65.145.64) by mail.ndapc.com
(192.168.0.51) with Microsoft SMTP Server id 14.1.218.12; Fri, 30 Sep 2016
16:58:44 -0400
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com) by
s12p02o141.mxlogic.net(mxl
c13dee75.7fc6ce1fc700.2314
(envelope-from <jorleman@ubproperties.com
(MDT)
X-MXL-Hash: 57eed31c1c75c2dd-17bdaaf2e
Received: from unknown [96.56.33.53] (EHLO UB03.ubprop.com) by
s12p02o141.mxlogic.net(mxl
ESMTP id 5be4de75.0.35925.00-333.10
< >); Thu, 29 Sep 2016 11:26:13 -0600 (MDT)
X-MXL-Hash: 57ed4eb551d94569-cc5196330
Received: from UB03.ubprop.com ([fe80::e575:47e0:63f0:f08
UB03.ubprop.com ([fe80::e575:47e0:63f0:f08
Thu, 29 Sep 2016 13:26:12 -0400
Thread-Index: AdIaZLmy6LHU7RjLQ2Catj7VIa
Date: Thu, 29 Sep 2016 17:26:12 +0000
Message-ID: <7A21F3C2-D083-4C0C-B323-9
References: <2424137C-0872-4294-ADB1-5
<ED4D8A01-AE4D-4044-A04D-6
In-Reply-To: <DM2PR04MB1851278FD3F37085
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding:
MIME-Version: 1.0
X-AnalysisOut: [v=2.1 cv=ReuWfgZv c=1 sm=1 tr=0 a=VZ+C9M41iubXZmT/EKwz6w==
X-AnalysisOut: [:117 a=VZ+C9M41iubXZmT/EKwz6w==
X-AnalysisOut: [C_Br6kY4A:10 a=GW1xBdLrtEIA:10 a=FJA1PnO1AAAA:8 a=xFkcl9sD]
X-AnalysisOut: [AAAA:8 a=3oc9M9_CAAAA:8 a=Kl3Z8SwrwPVNRRcY8dQA:9 a=yO-S9Wo]
X-AnalysisOut: [B2xLQcHSt:21 a=QZ7x49gEzHQ1JYKH:21 a=CjuIK1q_8ugA:10 a=q7-]
X-AnalysisOut: [djQggoAkA:10 a=cjjtZJ1ZH2wA:10 a=zF-lripLtB8A:10 a=JAKdFTT]
X-AnalysisOut: [65_LX2izJ9qDR:22 a=31gl-k8mzNzjL2ROS0WW:22 a=WQP3B-o2DcFb_]
X-AnalysisOut: [-ao3AbR:22]
X-Spam: [F=0.5987312666; CM=0.500; MH=0.598(2016093018); S=0.200(2015072901)]
X-MAIL-FROM: <jorleman@ubproperties.com
X-SOURCE-IP: [96.56.33.53]
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-MS-Exchange-Organization
X-MS-Exchange-Organization
X-GFI-SMTP-Submission: 1
X-GFI-SMTP-HelloDomain: s12p02o141.mxlogic.net
X-GFI-SMTP-RemoteIP: 208.65.145.64
X-MS-Exchange-Organization
X-MS-Exchange-Organization
Asked:
4-
3
1 Solution
LVL 19
Take the header info you have and run it with a header analyzer from MxToolbox.com or exrca.com. That might suggest to you where the delay might be.
It seems the delay happens between mout.perfora.net and our email server. Is there a way to figure out what is causing this delay?
___
1 ACCOUNTINGD ([50.194.177.237]) mrelay.perfora.net (mreueus001) 10/6/2016 6:22:36 AM
ESMTPA (Nemesis)
2 mout.perfora.net (74.208.4.194) mail.ndapc.com (192.168.0.51) 10/7/2016 4:13:58 AM
1311 minutes 22 seconds
___
1 ACCOUNTINGD ([50.194.177.237]) mrelay.perfora.net (mreueus001) 10/6/2016 6:22:36 AM
ESMTPA (Nemesis)
2 mout.perfora.net (74.208.4.194) mail.ndapc.com (192.168.0.51) 10/7/2016 4:13:58 AM
1311 minutes 22 seconds
Will you post a screenshot of the header analyzer output?
Block out (redact) anything you don't want us to see. I'd like to get a holistic view of the mail flow from sender to recipient.
Block out (redact) anything you don't want us to see. I'd like to get a holistic view of the mail flow from sender to recipient.
That's a brutal delay.
I was assuming there would be more hops before it was delivered. Help me understand this specific mail flow from sender to recipient.
What are ACCOUNTINGSD, mrelay.perfora.net, what is mount.perfora.net, and mail.ndapc.com?
I was assuming there would be more hops before it was delivered. Help me understand this specific mail flow from sender to recipient.
What are ACCOUNTINGSD, mrelay.perfora.net, what is mount.perfora.net, and mail.ndapc.com?
ACCOUNTINGSD is the original computer sending the email
They use an email service know as 1 & 1 as their mail provider. mrelay.perfora.net is this providers server.
mail.ndapc.com is our server. We host our own exchange server.
This is the only domain we are having delay problems with,
They use an email service know as 1 & 1 as their mail provider. mrelay.perfora.net is this providers server.
mail.ndapc.com is our server. We host our own exchange server.
This is the only domain we are having delay problems with,
Question has a verified solution.
Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.
Have a better answer? Share it in a comment.
Join & Write a Comment Already a member? Login.
Featured Post
Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.
One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.
Tackle projects and never again get stuck behind a technical roadblock.
Join Now