Router and/or firewall.
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Wessell
Posted At: Monday, March 10, 2008 9:20 AM
Posted To: swynk
Conversation: Missing Emails
Subject: RE: Missing Emails
Gotcha :)
Here's what I found:
2008-03-10 14:10:02 209.85.198.190 rv-out-0910.google.com SMTPSVC1
FAX_FILE_SERVER 192.168.1.113 0 EHLO - +rv-out-0910.google.com 250 0 323
27 0 SMTP - - - -
2008-03-10 14:10:02 209.85.198.190 rv-out-0910.google.com SMTPSVC1
FAX_FILE_SERVER 192.168.1.113 0 MAIL - +FROM:+<[EMAIL PROTECTED]> 250 0
43 31 0 SMTP - - - -
2008-03-10 14:10:02 209.85.198.190 rv-out-0910.google.com SMTPSVC1
FAX_FILE_SERVER 192.168.1.113 0 RCPT -
+TO:+<[EMAIL PROTECTED]> 250 0 43 41 0 SMTP - - - -
2008-03-10 14:10:39 209.85.198.190 rv-out-0910.google.com SMTPSVC1
FAX_FILE_SERVER 192.168.1.113 0 QUIT - rv-out-0910.google.com 240 37187
46 4 36781 SMTP - - - -
And I'm beginning to get email notifications back, that look like:
This is an automatically generated Delivery Status Notification
THIS IS A WARNING MESSAGE ONLY.
YOU DO NOT NEED TO RESEND YOUR MESSAGE.
Delivery to the following recipient has been delayed:
[EMAIL PROTECTED]
Message will be retried for 2 more day(s)
Technical details of temporary failure:
TEMP_FAILURE: Connection was dropped by remote host (SENT_MESSAGE)
So I'm going to go and prod some more at the router, and see if I can
find it dropping a connection..
Thanks
David
-----Original Message-----
From: Knoch Jr., James W [mailto:[EMAIL PROTECTED]
Sent: Friday, March 07, 2008 7:17 PM
To: Exchange Discussions
Subject: RE: Missing Emails
I was referring to the SMTP Virtual Server, but I guess I just couldn't
fit it into my haiku.... ;) Turn on diagnostics logging under the
Properties. Go to Advanced and check all the boxes. It will be written
to C:\WINDOWS\SYSTEM32\LogFiles\SMTPSVC1 by default. It should show you
the whole handshake.
Not sure I got that across in my last message heh.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David
Wessell
Sent: Friday, March 07, 2008 3:45 PM
To: Exchange Discussions
Subject: RE: Missing Emails
Hunt Continues
For The Darned Missing Emails
Enlightenment, gone.
Looking through all of the logs generated, I still can't find anything
related.. Almost as if it wasn't received (Didn't I hear Ed say
something about that :) )
I did a search of the logs based on my email address (It was sent to me
several times). The only thing thing I saw was:
[EMAIL PROTECTED] failed an operation on folder
/O=HSA/OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=EX:_O=HSA_OU=FIRST
ADMINISEECC8FE241844145BAA43B998CAB0230000007 on database "First Storage
Group\Public Folder Store (FAX_FILE_SERVER)" because the user did not
have the following access rights:
'Delete' 'Read Property' 'Write Property' 'Create Message' 'View Item'
'Create Subfolder' 'Write Security Descriptor' 'Write Owner' 'Read
Security Descriptor' 'Contact'
While I'm not sure what this represents, it doesn't look like a failure
to deliver that email. So I've got a Watchguard Log that says it was
handed off, and Exchange Logs that say they never received it. I'm going
to go and kick and prod the router now.. But will entertain all ideas.
Thanks
David
-----Original Message-----
From: Knoch Jr., James W [mailto:[EMAIL PROTECTED]
Sent: Friday, March 07, 2008 4:21 PM
To: Exchange Discussions
Subject: RE: Missing Emails
Enable logging
On the Virtual Server
Find Answer Within
Just make sure to turn on most/all of the advanced properties. Then you
should be able to see if Exchange received the attempt or if the
connection failed.
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David
Wessell
Sent: Friday, March 07, 2008 10:48 AM
To: Exchange Discussions
Subject: RE: Missing Emails
Haiku day?
Shame on Exchange box
Trying to lay blame on watchguard
Sad shiny red box.
Here is one of my three attemps to send it from the gmail address:
2008-03-07 11:07:35 Allow 209.85.198.191 70.159.25.229 smtp/tcp 52087 25
0-External 1-Trusted ProxyAllow: SMTP Message is classified as not spam
(SMTP-proxy-00) dst_ip_nat"192.168.1.113" dst_port_nat"25"
proxy_act"SMTP-Outgoing.1" sender"[EMAIL PROTECTED]"
recipients"[EMAIL PROTECTED]"
So while it is possible that Watchguard is lying, it is reporting it as
being xfered to the Exchange server. I don't do a mail quarrantine with
Watchguard. Spam is dropped, and reported in the logs as spam. Emails
that are not spam show up in the log as above.
I'm using AVG on the Exchange server, but it doesn't scan email for
virus. I've got it configured to exempt all Exchange directories from
scanning. Clients use AVG to scan for email, but the clients don't even
report receiving the email. And it doesn't show up in the mailbox
tracker. I am confused.
-----Original Message-----
From: Chris Scharff [mailto:[EMAIL PROTECTED]
Sent: Friday, March 07, 2008 11:29 AM
To: Exchange Discussions
Subject: RE: Missing Emails
Heretic decried
Watchguard beyond your reproach
Exchange eats your mail
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ed
Crowley Posted At: Friday, March 07, 2008 10:24 AM Posted To: swynk
Conversation: Missing Emails
Subject: RE: Missing Emails
Maybe Watchguard is lying to you.
Ed Crowley MCSE+Internet MVP
Freelance E-Mail Philosopher
Protecting the world from PSTs and Bricked Backups!T
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David
Wessell
Sent: Friday, March 07, 2008 8:18 AM
To: Exchange Discussions
Subject: Missing Emails
Hi,
I have a a couple of missing emails, all sent from one external user.
Those emails have images attached to them. Emails without images are
coming through fine.
The emails with images, I can see where they get past the
firewall/spamguard (Watchguard x750e), but they are never delivered to
the recepient. So far no NDR's have been generated.
When I use mailbox tracking to search for them, they don't show up. All
of the messages without images do show up.
I don't have any message size limits imposed on Global Settings or the
Virtual SMTP connector.
I've attemped to send the images from another email address (gmail) and
they don't make it from there either..
Where oh where could they be?
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
.com
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
t.com
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
t.com
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
com
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
t.com
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
com
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to
[EMAIL PROTECTED]
t.com
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
_________________________________________________________________
List posting FAQ: http://www.swinc.com/resource/exch_faq.htm
Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange
To subscribe: http://e-newsletters.internet.com/discussionlists.html/
To unsubscribe send a blank email to [EMAIL PROTECTED]
Exchange List admin: [EMAIL PROTECTED]
To unsubscribe via postal mail, please contact us at:
Jupitermedia Corp.
Attn: Discussion List Management
475 Park Avenue South
New York, NY 10016
Please include the email address which you have been contacted with.
