First off, thanks to everyone for their input! It was the Watchguard that was limiting it.. I really appreciated everyone's thoughts!..
Dw -----Original Message----- From: James Wells [mailto:[EMAIL PROTECTED] Sent: Saturday, March 15, 2008 9:11 PM To: Exchange Discussions Subject: Re: Missing Emails It's been years since I was Watchguard certified, but I believe attachment size is now under Antivirus/Content Engine, and not in the SMTP settings.... --James On 3/15/08 6:02 PM, "David Wessell" <[EMAIL PROTECTED]> wrote: > Hi James, > > It's a x750e.. I'm checking with them, and am waiting on a return email. > I'll let you know what I can find.. Thanks for everyones input so far. > > Dw > > > -----Original Message----- > From: Wells, James Arthur [mailto:[EMAIL PROTECTED] > Sent: Saturday, March 15, 2008 6:03 PM > To: Exchange Discussions > Subject: RE: Missing Emails > > Watchguard provides RBL, regex-based keyword scoring, etc - like > plenty of other edge devices (and like any other mail proxy, it's also an MTA). > It can also do plenty of attachment filtering - my bet is that the > size limit is in the Watchguard proxy. What model Firebox is this? > > > --James > > -----Original Message----- > From: "Chris Scharff" <[EMAIL PROTECTED]> > To: "Exchange Discussions" <[email protected]> > Sent: 3/15/08 2:17 PM > Subject: RE: Missing Emails > > Check your MTU size on your router(s) and if that isn't it disable the > watchguard filtering... I can't imagine what it is doing to help make > your mail more secure > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > David Wessell Posted At: Saturday, March 15, 2008 1:57 PM Posted To: > swynk > Conversation: Missing Emails > Subject: RE: Missing Emails > > To all those who have answered my email.. > > Jame Knoch: > > I sure did.. It's set at 10240. > > Albert: > > It appears to be across the board. I've have check the specific users > that I've sent test emails to (Obviously I haven't sent them to > everyone), and they are set in AD to use the default. > > Chris: > > This intriugues me.. I only have one mail server, and it's the > Exchange server.. I do have SMTP proxy enabled on my Watchguard, this > allows it to scan for spam before forwarding the email onto the Exchange server. > I'm going to check again and see if there is any way it could be > limiting it. But I've been through it with the vendor already, and > they say now. > > P.S. I've seen reference to being able to set a message size limit on > the mailbox store itself, but I can't find where to do it. Are the > references that I've seen incorrect? > > Thanks > David > > -----Original Message----- > From: Knoch Jr., James W [mailto:[EMAIL PROTECTED] > Sent: Friday, March 14, 2008 4:47 PM > To: Exchange Discussions > Subject: RE: Missing Emails > > Did you check under Organization -> Global Settings -> Message > Delivery properties -> Defaults tab? > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > David Wessell > Sent: Friday, March 14, 2008 1:34 PM > To: Exchange Discussions > Subject: RE: Missing Emails > > Dean && Everyone Else, > > Thanks for letting me know about blat, I absolutely love it, and wish > I had known about it before.. > > Sending the email inside the network is fine. Here's my ouput when > sending from outside my network: > > <<<getline<<< 220 mail.highersourceaviation.com ESMTP Service ready >>>> putline>>> EHLO media-center > <<<getline<<< 250-Requested mail action okay, completed <<<getline<<< > 250-SIZE 3000000 <<<getline<<< 250-ETRN <<<getline<<< 250-8BITMIME > <<<getline<<< 250-AUTH GSSAPI NTLM LOGIN <<<getline<<< 250-AUTH=LOGIN > <<<getline<<< 250 OK Message is too big to send. Please try a smaller > message. >>>> putline>>> QUIT > <<<getline<<< 221 Service closing transmission channel > > So it looks like the msg size is set at around 3MB. But I can't find > where!!! > > Global Settings is at 4096 > No System Policies > Individual Mailbox (Max msg size) is set to default And the virtual > SMTP is set to 4096. > > What setting could I be missing? I've googled for hours, and can't > find another reference to a message size.. > > > -----Original Message----- > From: Dean Cunningham [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 13, 2008 4:18 PM > To: Exchange Discussions > Subject: RE: Missing Emails > > Stop AVG on your exchange server and retest > > Download blat www.blat.net and send the attachments via that to the > exchange server via SMTP. This eliminates an internal client problem > and the vagaries of watchgard/the net. > > It's part of the old adage - isolate and eliminate > > > Send the same email from your local computer to other users on exchange. > If it works with some and not others or they all fail, then it is > likely you have some form of problem with exchange and watchguard and > the net are not culprits. > > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > David Wessell > Sent: Friday, 14 March 2008 08:12 > To: Exchange Discussions > Subject: RE: Missing Emails > > I've unfortunately not been able to make any headway with the router. > I can't find any log that shows it dropping a connection, or doing > anything other then xfering the message onto the server. Does anyone > have any troubleshooting ideas to dig out more information? > > I've downloaded the attachments to my local computer, and sent an > email to an internal recepient with them attached. I get this response back: > > Username on 3/13/2008 3:01 PM > You do not have permission to send to this recipient. For > assistance, contact your system administrator. > MSEXCH:MSExchangeIS:/DC=local/DC=hsa:FAX(u)FILE(u)SERVER > > If I turn around and resend the message without the attachment, I get > the same response. If I resend the message and remove the attachments, > and change the subject line, it goes through.. > > Those emails that are not getting to the recepient, do not show up in > the Message Tracking Center. It does show an entry where the NDR was > delivered, but not an entry for the sending of the email itself... > > <stumped> > > > > > -----Original Message----- > From: David Wessell [mailto:[EMAIL PROTECTED] > Sent: Monday, March 10, 2008 10:20 AM > To: Exchange Discussions > Subject: RE: Missing Emails > > Gotcha :) > > Here's what I found: > > 2008-03-10 14:10:02 209.85.198.190 rv-out-0910.google.com SMTPSVC1 > FAX_FILE_SERVER 192.168.1.113 0 EHLO - +rv-out-0910.google.com 250 0 > 323 > 27 0 SMTP - - - - > 2008-03-10 14:10:02 209.85.198.190 rv-out-0910.google.com SMTPSVC1 > FAX_FILE_SERVER 192.168.1.113 0 MAIL - +FROM:+<[EMAIL PROTECTED]> 250 > 0 > 43 31 0 SMTP - - - - > 2008-03-10 14:10:02 209.85.198.190 rv-out-0910.google.com SMTPSVC1 > FAX_FILE_SERVER 192.168.1.113 0 RCPT - > +TO:+<[EMAIL PROTECTED]> 250 0 43 41 0 SMTP - - - - > 2008-03-10 14:10:39 209.85.198.190 rv-out-0910.google.com SMTPSVC1 > FAX_FILE_SERVER 192.168.1.113 0 QUIT - rv-out-0910.google.com 240 > 37187 > 46 4 36781 SMTP - - - - > > And I'm beginning to get email notifications back, that look like: > > This is an automatically generated Delivery Status Notification > > THIS IS A WARNING MESSAGE ONLY. > > YOU DO NOT NEED TO RESEND YOUR MESSAGE. > > Delivery to the following recipient has been delayed: > > [EMAIL PROTECTED] > > Message will be retried for 2 more day(s) > > Technical details of temporary failure: > TEMP_FAILURE: Connection was dropped by remote host (SENT_MESSAGE) > > So I'm going to go and prod some more at the router, and see if I can > find it dropping a connection.. > > Thanks > David > > > > -----Original Message----- > From: Knoch Jr., James W [mailto:[EMAIL PROTECTED] > Sent: Friday, March 07, 2008 7:17 PM > To: Exchange Discussions > Subject: RE: Missing Emails > > I was referring to the SMTP Virtual Server, but I guess I just > couldn't fit it into my haiku.... ;) Turn on diagnostics logging > under the Properties. Go to Advanced and check all the boxes. It > will be written to C:\WINDOWS\SYSTEM32\LogFiles\SMTPSVC1 by default. > It should show you the whole handshake. > > Not sure I got that across in my last message heh. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > David Wessell > Sent: Friday, March 07, 2008 3:45 PM > To: Exchange Discussions > Subject: RE: Missing Emails > > Hunt Continues > For The Darned Missing Emails > Enlightenment, gone. > > Looking through all of the logs generated, I still can't find anything > related.. Almost as if it wasn't received (Didn't I hear Ed say > something about that :) ) > > I did a search of the logs based on my email address (It was sent to > me several times). The only thing thing I saw was: > > [EMAIL PROTECTED] failed an operation on folder > /O=HSA/OU=FIRST ADMINISTRATIVE > GROUP/CN=RECIPIENTS/CN=EX:_O=HSA_OU=FIRST > ADMINISEECC8FE241844145BAA43B998CAB0230000007 on database "First > Storage Group\Public Folder Store (FAX_FILE_SERVER)" because the user > did not have the following access rights: > > 'Delete' 'Read Property' 'Write Property' 'Create Message' 'View Item' > 'Create Subfolder' 'Write Security Descriptor' 'Write Owner' 'Read > Security Descriptor' 'Contact' > > While I'm not sure what this represents, it doesn't look like a > failure to deliver that email. So I've got a Watchguard Log that says > it was handed off, and Exchange Logs that say they never received it. > I'm going to go and kick and prod the router now.. But will entertain all ideas. > > Thanks > David > > -----Original Message----- > From: Knoch Jr., James W [mailto:[EMAIL PROTECTED] > Sent: Friday, March 07, 2008 4:21 PM > To: Exchange Discussions > Subject: RE: Missing Emails > > Enable logging > On the Virtual Server > Find Answer Within > > Just make sure to turn on most/all of the advanced properties. Then > you should be able to see if Exchange received the attempt or if the > connection failed. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > David Wessell > Sent: Friday, March 07, 2008 10:48 AM > To: Exchange Discussions > Subject: RE: Missing Emails > > Haiku day? > > Shame on Exchange box > Trying to lay blame on watchguard > Sad shiny red box. > > Here is one of my three attemps to send it from the gmail address: > > 2008-03-07 11:07:35 Allow 209.85.198.191 70.159.25.229 smtp/tcp 52087 > 25 0-External 1-Trusted ProxyAllow: SMTP Message is classified as not > spam > (SMTP-proxy-00) dst_ip_nat"192.168.1.113" dst_port_nat"25" > proxy_act"SMTP-Outgoing.1" sender"[EMAIL PROTECTED]" > recipients"[EMAIL PROTECTED]" > > So while it is possible that Watchguard is lying, it is reporting it > as being xfered to the Exchange server. I don't do a mail quarrantine > with Watchguard. Spam is dropped, and reported in the logs as spam. > Emails that are not spam show up in the log as above. > > I'm using AVG on the Exchange server, but it doesn't scan email for > virus. I've got it configured to exempt all Exchange directories from > scanning. Clients use AVG to scan for email, but the clients don't > even report receiving the email. And it doesn't show up in the mailbox > tracker. I am confused. > > > > -----Original Message----- > From: Chris Scharff [mailto:[EMAIL PROTECTED] > Sent: Friday, March 07, 2008 11:29 AM > To: Exchange Discussions > Subject: RE: Missing Emails > > Heretic decried > Watchguard beyond your reproach > Exchange eats your mail > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Ed > Crowley Posted At: Friday, March 07, 2008 10:24 AM Posted To: swynk > Conversation: Missing Emails > Subject: RE: Missing Emails > > Maybe Watchguard is lying to you. > > Ed Crowley MCSE+Internet MVP > Freelance E-Mail Philosopher > Protecting the world from PSTs and Bricked Backups!T > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > David Wessell > Sent: Friday, March 07, 2008 8:18 AM > To: Exchange Discussions > Subject: Missing Emails > > Hi, > > I have a a couple of missing emails, all sent from one external user. > Those emails have images attached to them. Emails without images are > coming through fine. > > The emails with images, I can see where they get past the > firewall/spamguard (Watchguard x750e), but they are never delivered to > the recepient. So far no NDR's have been generated. > > When I use mailbox tracking to search for them, they don't show up. > All of the messages without images do show up. > > I don't have any message size limits imposed on Global Settings or the > Virtual SMTP connector. > > I've attemped to send the images from another email address (gmail) > and they don't make it from there either.. > > Where oh where could they be? > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > st > .com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > st > .com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > ********************************************************************** > Have you clicked on yet? > www.nrc.govt.nz > ********************************************************************** > NORTHLAND REGIONAL COUNCIL > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > [EMAIL PROTECTED] > ********************************************************************** > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] > is > t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. > > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to > [EMAIL PROTECTED] t.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] t.com Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
