AV or content filtering, maybe?
----- Original Message -----
From: "Mark Condron" <[EMAIL PROTECTED]>
To: "Exchange Discussions" <[email protected]>
Sent: Friday, November 23, 2007 7:06 AM
Subject: Unexpected outgoing mail delay
All,
MS Windows 2000 SP4. MS Exchange 2003 SP2. MS Outlook XP/2003.
I rebooted an Exchange server at 16:16 21st November and a number of
people contacted me saying that external mail they sent on the 7th
November was either only just delivered or they only just received and
NDR!
I have used message tracking to confirm this. I don't understand why the
mail didn't time out as per my settings or the user was not notified of
the delay. I don't remember seeing any of this mail in a queue either,
where has it been?
My settings -
First retry interval: 10
Second Retry interval: 10
Third retry interval: 10
Subsequent retry interval: 20
Delay notification: 6 hours
Expiration timeout: 3 days
Message tracking for one of the delayed messages -
07/11/2007 14:15 SMTP Store Driver: Message submitted from store
07/11/2007 14:15 SMTP: Message submitted to advance queuing
07/11/2007 14:15 SMTP: Started message submission to advanced queue
07/11/2007 14:15 SMTP: Message submitted to categorizer
07/11/2007 14:15 SMTP: Message categorised and queued for routing
07/11/2007 14:15 SMTP: Message routed and queued for remote delivery
07/11/2007 14:15 SMTP: Started outbound transfer of message
07/11/2007 14:15 SMTP: Message transferred through to SMTP
21/11/2007 16:16 SMTP: Message submitted to advance queuing *this is the
time I rebooted the server*
21/11/2007 16:16 SMTP: Started message submission to advanced queue
21/11/2007 16:16 SMTP: Message submitted to categorizer
21/11/2007 16:16 SMTP: Message categorised and queued for routing
21/11/2007 16:18 SMTP: Message routed and queued for remote delivery
21/11/2007 16:18 SMTP: Started outbound transfer of message
21/11/2007 16:22 SMTP: Message transferred through to SMTP
21/11/2007 16:23 SMTP: Message transferred to hedwig1.cf.ac.uk
This is an excerpt from the SMTP logs 7th November
2007-11-07 14:15:00 207.126.144.53 psmtp.com HELO 0 52 14
2007-11-07 14:15:00 207.126.144.53 psmtp.com MAIL 0 67 54
2007-11-07 14:15:00 207.126.144.53 psmtp.com RCPT 0 0 29
2007-11-07 14:15:00 207.126.144.53 psmtp.com DATA 0 136 8228
2007-11-07 14:15:00 207.126.144.53 psmtp.com QUIT 422 72 4
2007-11-07 14:15:05 207.126.144.44 psmtp.com HELO 0 52 14
2007-11-07 14:15:05 207.126.144.44 psmtp.com MAIL 0 60 47
2007-11-07 14:15:05 207.126.144.44 psmtp.com RCPT 0 0 31
2007-11-07 14:15:05 207.126.144.44 psmtp.com DATA 0 152 2269
2007-11-07 14:15:05 207.126.144.44 psmtp.com QUIT 532 72 4
2007-11-07 14:15:15 192.168.20.11 nt_server2.wcva.org.uk EHLO 0 335 27
2007-11-07 14:15:15 192.168.20.11 nt_server2.wcva.org.uk x-exps 0 22 13
2007-11-07 14:15:15 192.168.20.11 nt_server2.wcva.org.uk x-link2state 0
68 140
2007-11-07 14:15:15 192.168.20.11 nt_server2.wcva.org.uk MAIL 0 52 51
2007-11-07 14:15:15 192.168.20.11 nt_server2.wcva.org.uk RCPT 0 46 43
2007-11-07 14:15:15 192.168.20.11 nt_server2.wcva.org.uk xexch50 0 22 14
2007-11-07 14:15:15 192.168.20.11 nt_server2.wcva.org.uk BDAT 0 103
118620
2007-11-07 14:15:15 192.168.20.11 nt_server2.wcva.org.uk QUIT 1062 72 4
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionResponse - 0 78 0
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionCommand EHLO 0 4 0
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionResponse - 0 78 0
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionCommand MAIL 0 4 0
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionResponse - 0 6 0
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionCommand RCPT 0 4 0
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionResponse - 0 12 0
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionCommand DATA 0 4 0
2007-11-07 14:15:16 212.69.194.88 OutboundConnectionResponse - 0 54 0
2007-11-07 14:15:17 212.69.194.88 OutboundConnectionResponse - 0 26 0
2007-11-07 14:15:17 212.69.194.88 OutboundConnectionCommand QUIT 0 4 0
2007-11-07 14:15:17 212.69.194.88 OutboundConnectionResponse - 0 49 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionResponse - 0 66 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionCommand EHLO 0 4 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionResponse - 0 22 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionCommand MAIL 0 4 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionResponse - 0 6 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionCommand RCPT 0 4 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionResponse - 0 6 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionCommand DATA 0 4 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionResponse - 0 35 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionResponse - 0 28 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionCommand QUIT 0 4 0
2007-11-07 14:15:19 213.188.128.35 OutboundConnectionResponse - 0 7 0
2007-11-07 14:15:20 131.251.0.56 OutboundConnectionResponse - 0 65 0
2007-11-07 14:15:20 131.251.0.56 OutboundConnectionCommand QUIT 0 4 0
2007-11-07 14:15:20 131.251.0.9 OutboundConnectionResponse - 0 68 0
2007-11-07 14:15:20 131.251.0.9 OutboundConnectionCommand EHLO 0 4 0
2007-11-07 14:15:20 131.251.0.9 OutboundConnectionResponse - 0 68 0
2007-11-07 14:15:20 131.251.0.9 OutboundConnectionCommand QUIT 0 4 0
2007-11-07 14:15:20 131.251.0.9 OutboundConnectionResponse - 0 39 0
2007-11-07 14:15:32 207.126.144.49 psmtp.com HELO 0 52 14
2007-11-07 14:15:32 207.126.144.49 psmtp.com MAIL 0 60 47
2007-11-07 14:15:32 207.126.144.49 psmtp.com RCPT 0 0 32
2007-11-07 14:15:35 207.126.144.49 psmtp.com RCPT 0 0 32
2007-11-07 14:15:37 207.126.144.49 psmtp.com QUIT 4860 72 4
2007-11-07 14:15:51 207.126.144.55 psmtp.com HELO 0 52 14
2007-11-07 14:15:51 207.126.144.55 psmtp.com MAIL 0 41 28
2007-11-07 14:15:51 207.126.144.55 psmtp.com RCPT 0 0 29
2007-11-07 14:15:59 207.126.144.44 psmtp.com HELO 0 52 14
2007-11-07 14:15:59 207.126.144.44 psmtp.com MAIL 0 69 56
2007-11-07 14:15:59 207.126.144.44 psmtp.com RCPT 0 0 29
2007-11-07 14:15:59 207.126.144.44 psmtp.com QUIT 453 72 4
I have also checked the event viewer and there is nothing of note in
there.
I would be grateful of any pointers on my finding further information of
what went wrong and also how to avoid this happening in future.
TIA
-Mark
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
