Exchange Server Forums

Weird email problem

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [Microsoft Exchange 2003] >> Exchange 2003 SBS >> Weird email problem

Page: [1]

Message

<< Older Topic Newer Topic >>

Limited time MSExchange.org offer! -- 1.Sep.2008 1:00:00 PM

TechGenix and SolarWinds have partnered to provide free copies of SolarWinds Exchange Monitor to all visitors who join the MSExchange.org Forums. SolarWinds Exchange Monitor is a handy desktop dashboard that continuously monitors Microsoft Exchange to deliver real-time insight into Exchange services, mail queue sizes, and host server health. Learn more about Exchange Monitor and the free offer!

Weird email problem - 25.Oct.2007 9:00:08 AM

rscott23

Posts: 2
Joined: 25.Oct.2007
Status: offline

I've recently installed SBS 2003 at a client site and ever since the install, I've been plagued by a random and weird email issue.

Users will get random 5.1.0 NDR's, what I mean by random is that out of 10 emails only 1-2 or will bounce back. At first I attributed it to user error, and figured they had just typed email addresses wrong. But it was happening to everyone and also to internal email addresses. I also have some internal emails being delayed up to 5 days that didn't show up in the que. OWA users have also had problems.

At first I thought it might have been an Outlook nickname caching issue, as it seemed to only happen when users would use that feature to send emails. But it also happens when they reply to emails. This happens to both internal email addresses and outside addresses. Sometimes the bounce backs will happen immediately, sometimes they will take a couple hours to come back.

I had a user, who happens to send the most email in the company, try a test for me yesterday. She manually typed in every email address she sent for one whole day. Even replies, she would type them in manually. Not one NDR the entire day. Now this is the same person who would get 10-12 in any given day.

I'm stumped at the moment and was hoping it might be something someone here has come across, it obviously has something to do with the Exchange install that I most likely overlooked/messed up.

Any ideas would be appreciated and welcome. Thank you in advance.

< Message edited by rscott23 -- 25.Oct.2007 9:02:13 AM >

Post #: 1

Featured Links*

RE: Weird email problem - 25.Oct.2007 4:24:40 PM

a.grogan

Posts: 1887
Joined: 12.Apr.2005
From: London
Status: offline

Hiya mate, this could be for many reasons, could you do the following;

In the ESM navigate to Admin Group ->Your Server - then right click on <your server> and select properties. From the dialog box that appears choose the diagnostics Logging tab and then turn the MSExchangeTransport options up to either minimum or medium - this will produce events in the Application Event log that might help out.

Cheers

A

_____________________________

Andy Grogan
MSExchange.org Forums Moderator
For my general ramblings about Exchange please visit my blog:
W: http://telnetport25.wordpress.com/
M: manifoldmaster@gmail.com

(in reply to rscott23)

Post #: 2

RE: Weird email problem - 25.Oct.2007 8:28:47 PM

rscott23

Posts: 2
Joined: 25.Oct.2007
Status: offline

Hey there, thanks so much for the reply. I've already enabled maxium logging for SMTP and NDR diags. Here are a couple errors from tonight. User/domain/ip removed.

These errors occur everyday, and are all SMTP related. Of course the users DO exist on the remote domains, as if you resend the emails after receiving the NDR's they go through the second or sometimes the third time.

The last SMTP error was for a internal AD user's email.  It's a very weird problem and I hope someone can help me out.

Thanks again.

Event Type: Warning
Event Source: MSExchangeTransport
Event Category: NDR
Event ID: 3022
Date:  10/25/2007
Time:  7:37:09 PM
User:  N/A
Computer: SERVER
Description:
A non-delivery report with a status code of 5.5.0 was generated for recipient rfc822;user@domain.com (Message-ID <C1186D626372EE4B920E14D81517BD240313DE@domain.domain.com>).
Cause: This message indicates a generic protocol error (SMTP error). For example, the remote SMTP responds to an issued EHLO with a 500 level error and the sending system will QUIT the connection and report this with NDR indicating the remote SMTP server can�t handle the protocol.
Solution: View the SMTP log or run a netmon trace to see why the remote SMTP server rejects the protocol request.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7004
Date:  10/25/2007
Time:  7:37:09 PM
User:  N/A
Computer: SERVER
Description:
This is an SMTP protocol error log for virtual server ID 1, connection #47. The remote host "x.x.x.x", responded to the SMTP command "rcpt" with "550 <user@domain.com>: Recipient address rejected: No such user (user@domain.com) ". The full command sent was "RCPT TO:<user@domain.com> ". This will probably cause the connection to fail.
For more information, click http://www.microsoft.com/contentredirect.asp.

Event Type: Error
Event Source: MSExchangeTransport
Event Category: NDR
Event ID: 3009
Date:  10/25/2007
Time:  3:02:16 PM
User:  N/A
Computer: SERVER
Description:
A non-delivery report with a status code of 5.1.0 was generated for recipient rfc822;user@domain.com (Message-ID <9D5BFB9F37845F48811E0BF04382B9920894E2@server.domain.com>).
Cause: This is categorizer failure caused by a bad address.
For more information, click http://www.microsoft.com/contentredirect.asp.
Solution: Either the recipient address is incorrectly formatted or the categorizer was not able to properly resolve the recipient. Checking the recipient address and re-sending the message is the first step to resolving this error.

Event Type: Error
Event Source: MSExchangeTransport
Event Category: SMTP Protocol
Event ID: 7004
Date:  10/25/2007
Time:  3:25:48 PM
User:  N/A
Computer: SERVER
Description:
This is an SMTP protocol error log for virtual server ID 1, connection #44. The remote host "x.x.x.x", responded to the SMTP command "xexch50" with "504 Need to authenticate first ". The full command sent was "XEXCH50 2216 2 ". This will probably cause the connection to fail.
For more information, click http://www.microsoft.com/contentredirect.asp.

Event Type: Error
Event Source: MSExchangeTransport
Event Category: NDR
Event ID: 3009
Date:  10/25/2007
Time:  11:30:51 AM
User:  N/A
Computer: SERVER
Description:
A non-delivery report with a status code of 5.1.0 was generated for recipient rfc822;user@domain.com (Message-ID <9D5BFB9F37845F48811E0BF04382B992089493@server.domain.com>).
Cause: This is categorizer failure caused by a bad address.
For more information, click http://www.microsoft.com/contentredirect.asp.
Solution: Either the recipient address is incorrectly formatted or the categorizer was not able to properly resolve the recipient. Checking the recipient address and re-sending the message is the first step to resolving this error.

Event Type: Error
Event Source: MSExchangeTransport
Event Category: NDR
Event ID: 3009
Date:  10/25/2007
Time:  10:40:52 AM
User:  N/A
Computer: SERVER
Description:
A non-delivery report with a status code of 5.1.0 was generated for recipient x-ex;/O=DOMAIN/OU=FIRST ADMINISTRATIVE GROUP/CN=RECIPIENTS/CN=User (Message-ID <9D5BFB9F37845F48811E0BF04382B992089471@server.domain.com>).
Cause: This is categorizer failure caused by a bad address.
For more information, click http://www.microsoft.com/contentredirect.asp.
Solution: Either the recipient address is incorrectly formatted or the categorizer was not able to properly resolve the recipient. Checking the recipient address and re-sending the message is the first step to resolving this error.

< Message edited by rscott23 -- 25.Oct.2007 8:33:40 PM >

(in reply to a.grogan)

Post #: 3

RE: Weird email problem - 26.Oct.2007 12:18:38 PM

a.grogan

Posts: 1887
Joined: 12.Apr.2005
From: London
Status: offline

Hiya mate, do you have any information from the SMTP log that I could view?

Cheers

A

_____________________________

Andy Grogan
MSExchange.org Forums Moderator
For my general ramblings about Exchange please visit my blog:
W: http://telnetport25.wordpress.com/
M: manifoldmaster@gmail.com

(in reply to rscott23)

Post #: 4