• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Mail Flow - NDR and Delayed Messages

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2007] >> Message Routing >> Mail Flow - NDR and Delayed Messages Page: [1]
Login
Message << Older Topic   Newer Topic >>
Mail Flow - NDR and Delayed Messages - 17.Jan.2009 11:27:22 PM   
maxhumor

 

Posts: 8
Joined: 21.Dec.2008
Status: offline
Well, this issue is happening quite regularly. I have 2 problems with my exchange server.
  1. NDR - Many users are getting NDR's and the message never gets delivered. The mailbox exist and sometimes, the email does deliver. Here is what NDR says;
This message has not yet been delivered. Microsoft Exchange will continue to try delivering the message on your behalf.

Delivery of this message will be attempted until 1/17/2009 7:06:36 AM (GMT-06:00) Central Time (US & Canada). Microsoft Exchange will notify you if the message can't be delivered by that time.


2. Mails cannot be delivered to a few domains even though these are legit domains and email can be sent via Yahoo or Hotmail account. This is impacting critical business email communications. A sample of error is ;

Diagnostic information for administrators:

Generating server: my.local.server

gc-noc@glbx.net
mx1.mail.tcpd.net #550 <gc-noc@glbx.net>: Mailbox does not exist ##

Original message headers:

Received: from my.local.server ([fe80::cd78:ca6b:960a:e69]) by
my.local.server ([fe80::cd78:ca6b:960a:e69%11]) with mapi; Tue, 23 Dec
2008 16:22:58 -0600


Exchange server is setup with CAL, HUB and Mailbox role. There is no edge server and anti spam is enabled on the Hub Transport.

Any help is greatly appreciated.
Post #: 1
RE: Mail Flow - NDR and Delayed Messages - 18.Jan.2009 2:06:09 AM   
tmacdaddy

 

Posts: 98
Joined: 3.May2007
From: Washington DC. Georgetown
Status: offline
Hear are the first 3 itmes that instantly came to mind.

Do you have a PTR record in your DNS

When you right click over the returned email and go to options, do you see the recipients email server even being reached?

Have you checked to see if you have been Blacklisted by SpamHaus or Barracuda or Spamcop

http://www.dnsqueries.com/en/check_banned_ip.php

Come back with those...

(in reply to maxhumor)
Post #: 2
RE: Mail Flow - NDR and Delayed Messages - 18.Jan.2009 2:10:34 AM   
tmacdaddy

 

Posts: 98
Joined: 3.May2007
From: Washington DC. Georgetown
Status: offline
http://www.messagingtalk.org/blog/ndr-chart-of-codes-and-its-description

Look up NDR's here. Also are you using Exchange 2003 or 2007?

If 2007, utilize the Mail Flow tool... it is pretty good for Microsoft once you figure out how to interpret the results

(in reply to tmacdaddy)
Post #: 3
RE: Mail Flow - NDR and Delayed Messages - 19.Jan.2009 9:15:24 PM   
maxhumor

 

Posts: 8
Joined: 21.Dec.2008
Status: offline
Thankyou for the quick response.

I am using Exchange 2007, SP1. Our servers did get listed into spamhaus CBL 3 weeks ago and I took care of it right away. However, I checked many sites, some listed under the links you provided and none have my server blacklisted. My users still can't send emails to a few domains.
I wonder if there is some whitelist concept in Exchange 2007 or some option where I can define the domain name/ip address so mail can be sent to these external domains ?

(in reply to tmacdaddy)
Post #: 4
RE: Mail Flow - NDR and Delayed Messages - 19.Jan.2009 10:03:10 PM   
tmacdaddy

 

Posts: 98
Joined: 3.May2007
From: Washington DC. Georgetown
Status: offline
2007 using a scoring type scenario also. In other words, you develop a reputation and Exchange keeps track of your offenses. (on recips end) After a period of time, it will try you again, but if you are determined to be a threat, it may block you for a long time. When you looked at the headers of the returned emails I am seeing your local server as the one indicating that you have sent to a non exisitant recip.  I would try the mail flow trouble shooting tool in the EMC.  You might also consider a adding site connector

(in reply to maxhumor)
Post #: 5
RE: Mail Flow - NDR and Delayed Messages - 23.Jan.2009 7:50:40 PM   
maxhumor

 

Posts: 8
Joined: 21.Dec.2008
Status: offline
So I ran tracing on my send connector and tested an email address from domain that can send us emails but not receiving from us. It appears from the following log that the exchange servers is routing to some dummy/mismatch receiver's IP. Following is the SMTPSendConnector log ;

=====================================
2009-01-23T23:46:53.426Z,*,08CB4BB4FB3BB516,20,172.20.10.15:34809,208.65.145.3:25,>,MAIL FROM:<myaddress@mydomain.com> SIZE=5645,
2009-01-23T23:46:53.426Z,*,08CB4BB4FB3BB516,21,172.20.10.15:34809,208.65.145.3:25,>,RCPT TO:<RecepientAddress@sensata.com>,
2009-01-23T23:46:53.475Z,*,08CB4BB4FB3BB516,22,172.20.10.15:34809,208.65.145.3:25,<,250 Sender Ok,
2009-01-23T23:46:53.716Z,*,08CB4BB4FB3BB516,23,172.20.10.15:34809,208.65.145.3:25,<,250 RecepientAddress@sensata.com ok (RCPTMode: normal/deferred),
2009-01-23T23:46:53.716Z,*,08CB4BB4FB3BB516,24,172.20.10.15:34809,208.65.145.3:25,>,DATA,
2009-01-23T23:46:53.766Z,*,08CB4BB4FB3BB516,25,172.20.10.15:34809,208.65.145.3:25,<,354 Start mail input; end with <CRLF>.<CRLF>,
2009-01-23T23:46:54.005Z,*,08CB4BB4FB3BB516,26,172.20.10.15:34809,208.65.145.3:25,<,250 OK qs:8d65a794.3168041872.62676.00-007.p01c12m025.mxlogic.net (Mode: normal),
2009-01-23T23:46:54.006Z,*,08CB4BB4FB3BB516,27,172.20.10.15:34809,208.65.145.3:25,>,QUIT,
2009-01-23T23:46:54.053Z,*,08CB4BB4FB3BB516,28,172.20.10.15:34809,208.65.145.3:25,<,221 p01c12m025.mxlogic.net Service closing transmission channel [62676.00],
2009-01-23T23:46:54.053Z,*,08CB4BB4FB3BB516,29,172.20.10.15:34809,208.65.145.3:25,-,,Local
2009-01-23T23:47:13.017Z,*,08CB4BB4FB3BB519,0,,161.135.24.34:25,*,,attempting to connect
2009-01-23T23:47:13.663Z,*,08CB4BB4FB3BB51A,0,,134.175.165.170:25,*,,attempting to connect
2009-01-23T23:47:13.663Z,*,08CB4BB4FB3BB51B,0,,134.175.165.170:25,*,,attempting to connect
2009-01-23T23:47:13.738Z,*,08CB4BB4FB3BB51C,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.770Z,*,08CB4BB4FB3BB51D,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.771Z,*,08CB4BB4FB3BB51E,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.771Z,*,08CB4BB4FB3BB520,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.772Z,*,08CB4BB4FB3BB521,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.773Z,*,08CB4BB4FB3BB51F,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.774Z,*,08CB4BB4FB3BB522,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.786Z,*,08CB4BB4FB3BB523,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.816Z,*,08CB4BB4FB3BB524,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.817Z,*,08CB4BB4FB3BB527,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.818Z,*,08CB4BB4FB3BB525,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:13.818Z,*,08CB4BB4FB3BB526,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:14.163Z,*,08CB4BB4FB3BB519,1,,161.135.24.34:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 161.135.24.34:25"
2009-01-23T23:47:14.888Z,*,08CB4BB4FB3BB51B,1,,134.175.165.170:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 134.175.165.170:25"
2009-01-23T23:47:14.894Z,*,08CB4BB4FB3BB51A,1,,134.175.165.170:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 134.175.165.170:25"
2009-01-23T23:47:14.989Z,*,08CB4BB4FB3BB51C,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.014Z,*,08CB4BB4FB3BB520,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.015Z,*,08CB4BB4FB3BB522,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.015Z,*,08CB4BB4FB3BB51D,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.016Z,*,08CB4BB4FB3BB521,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.017Z,*,08CB4BB4FB3BB51F,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.041Z,*,08CB4BB4FB3BB51E,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.049Z,*,08CB4BB4FB3BB523,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.087Z,*,08CB4BB4FB3BB527,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.088Z,*,08CB4BB4FB3BB524,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.088Z,*,08CB4BB4FB3BB525,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:15.089Z,*,08CB4BB4FB3BB526,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:16.686Z,*,08CB4BB4FB3BB528,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:16.702Z,*,08CB4BB4FB3BB52A,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:16.703Z,*,08CB4BB4FB3BB529,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:17.956Z,*,08CB4BB4FB3BB528,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:17.996Z,*,08CB4BB4FB3BB52A,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:17.997Z,*,08CB4BB4FB3BB529,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:18.511Z,*,08CB4BB4FB3BB52B,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:19.795Z,*,08CB4BB4FB3BB52B,1,,98.126.163.3:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 98.126.163.3:25"
2009-01-23T23:47:22.241Z,*,08CB4BB4FB3BB52C,0,,192.76.84.39:25,*,,attempting to connect
2009-01-23T23:47:23.430Z,*,08CB4BB4FB3BB52C,1,,192.76.84.39:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 192.76.84.39:25"
2009-01-23T23:47:23.431Z,*,08CB4BB4FB3BB52C,0,,192.76.84.40:25,*,,attempting to connect
2009-01-23T23:47:24.637Z,*,08CB4BB4FB3BB52C,1,,192.76.84.40:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 192.76.84.40:25"
2009-01-23T23:47:24.637Z,*,08CB4BB4FB3BB52C,0,,192.76.84.38:25,*,,attempting to connect
2009-01-23T23:47:25.705Z,*,08CB4BB4FB3BB52E,0,,98.126.163.3:25,*,,attempting to connect
2009-01-23T23:47:25.868Z,*,08CB4BB4FB3BB52C,1,,192.76.84.38:25,*,,"Failed to connect. Error Code: 10061, Error Message: No connection could be made because the target machine actively refused it 192.76.84.38:25"
2009-01-23T23:47:25.868Z,*,08CB4BB4FB3BB52C,0,,192.76.82.131:25,*,,attempting to connect
2009-01-23T23:47:26.395Z,*,08CB4BB4FB3BB52F,0,,216.239.59.27:25,*,,attempting to connect
==================================

I suspect something is wrong with the way my DNS is setup.
I have even added my ISP's DNS servers to the FORWARDERS. Not sure what else to look at. Any pointers will be appreciated.

(in reply to tmacdaddy)
Post #: 6
RE: Mail Flow - NDR and Delayed Messages - 23.Jan.2009 8:42:41 PM   
tmacdaddy

 

Posts: 98
Joined: 3.May2007
From: Washington DC. Georgetown
Status: offline
Do you have a PTR record in your DNS? Your ISp actually needs to do that. But MANY places will not accept mail if they cannot confirm a valid domain name.

(in reply to maxhumor)
Post #: 7
RE: Mail Flow - NDR and Delayed Messages - 25.Jan.2009 1:57:48 AM   
maxhumor

 

Posts: 8
Joined: 21.Dec.2008
Status: offline
my PTR/Reverse DNS record is setup properly as well as my SPF. All other DNS related stuff appears good as per www.checkdns.net. I have another suspect here.
------------------------
helo mail.mydomain.com
250 server.myLocalExchangeServer.local Hello [1.1.1.1]
ehlo mail.mydomain.com
250-server.myLocalExchangeServer.local Hello [1.1.1.1]
-------------------------
When i do a Helo/Ehlo, my exchange server return my internal Exchange Server name. Shouldn't it be printing my Public Mail Server name ?

< Message edited by maxhumor -- 25.Jan.2009 1:58:58 AM >

(in reply to tmacdaddy)
Post #: 8
RE: Mail Flow - NDR and Delayed Messages - 4.Mar.2009 7:45:40 AM   
maxhumor

 

Posts: 8
Joined: 21.Dec.2008
Status: offline
This issue is resolved.
Our domain was caught in the spam filtering of the recepient email system. They have removed it from there and mail flow is working now. 

(in reply to maxhumor)
Post #: 9

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2007] >> Message Routing >> Mail Flow - NDR and Delayed Messages Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter