A Challenging Problem - Can Anyone Resolve This?
Here's the history: SBS 2003 SP1 recently patched to SP2 about 3 months ago. Ever since then I have been having intermitent INBOUND only email problems that affect a small percentage of the business. EXAMPLE 1 If I email from by Blackberry and I email using the account name@mydomain.com the message is rejected with the following: "The following message to name@mydomain.com was undeliverable. The reason for the problem: 5.3.0 - Other mail system problem 550-5.7.1 Message Rejected". However, if I go to my Outlook or webemail for the same account the message goes through fine. I can also comfirm that the message goes through and hits the Exchange box as I can see the email in the log for today in C:\Windows\System32\LogFiles\SMTPSRVC1. EXAMPLE 2 On the same blackberry if I email from a Gmail account to the same recipient I used in the Example 1 above it goes through fine without a problem. OTHER FACTS TO KNOW 1. I have confirmed with other Blackberry users that some messages are failing as well. 2. I have confirmed with other businesses trying to email inbound that they fail even without using a Blackberry. ENVIRONMENT SETUP 1. I recently put Postini in front of my firewall although this was a stop gap or what I thought would be. Mail flows fine through it as shown in the log files on the Exchange box. Postini is for inbound only. 2. It wasn't until I put SP2 on the box do I THINK is when this started. 3. Current patch level is SBS 2003 SP2. Anyone help is appreciated. This has been going on intermittently for months. 3PT
August 23rd, 2010 11:24am

Is your Blackberry/Outlook/OWA related to this business or is it for another domain entirely? It would help to know what the other NDRs are to rule out issues with your own Blackberry. Also - if you're using Postini, you should probably turn off all filtering in Exchange to make sure that isn't conflicting - and set up your firewall to accept SMTP connections only from your Postini range of IP addresses.Lanwench [MVP - Exchange] ** Do not fold, spindle or mutilate. Fill in the box completely and erase any stray marks. Use only a #2 pencil.
Free Windows Admin Tool Kit Click here and download it now
August 23rd, 2010 9:32pm

Is your Blackberry/Outlook/OWA related to this business or is it for another domain entirely? It would help to know what the other NDRs are to rule out issues with your own Blackberry. Also - if you're using Postini, you should probably turn off all filtering in Exchange to make sure that isn't conflicting - and set up your firewall to accept SMTP connections only from your Postini range of IP addresses.Lanwench [MVP - Exchange] ** Do not fold, spindle or mutilate. Fill in the box completely and erase any stray marks. Use only a #2 pencil.
August 23rd, 2010 9:32pm

No it's my BB from a separate domain and business. That said, other domains on other cell carriers are having the same issue emailing in to the domain. There aren't any other NDR's at this point. It basically is the same one for everyone: "The following message to name@mydomain.com was undeliverable. The reason for the problem: 5.3.0 - Other mail system problem 550-5.7.1 Message Rejected" Last night I watched the BB message go through Postini and in to the \SMTPSVC log files on the Exchange box so I know it's going through at this point. All SP2 IMF filtering is turned off as well.
Free Windows Admin Tool Kit Click here and download it now
August 24th, 2010 12:15am

If you've got message tracking enabled, you can look it up in there. Let's remove the Blackberries from the picture entirely. If you send mail to the recipient domain from the same account you also access on the Blackberry, but via your mail client, do you get the same exact NDR? I'm not familiar with this exact syntax coming from Exchange. Triple check that filtering is disabled on the VSMTP server itself.Lanwench [MVP - Exchange] ** Do not fold, spindle or mutilate. Fill in the box completely and erase any stray marks. Use only a #2 pencil.
August 24th, 2010 7:18am

If you've got message tracking enabled, you can look it up in there. Let's remove the Blackberries from the picture entirely. If you send mail to the recipient domain from the same account you also access on the Blackberry, but via your mail client, do you get the same exact NDR? I'm not familiar with this exact syntax coming from Exchange. Triple check that filtering is disabled on the VSMTP server itself.Lanwench [MVP - Exchange] ** Do not fold, spindle or mutilate. Fill in the box completely and erase any stray marks. Use only a #2 pencil.
Free Windows Admin Tool Kit Click here and download it now
August 24th, 2010 7:18am

If I remove the BB's entirely from the picture, I still have other businesses reporting mail failure rejections when emailing in to the domain and they are not using BB's. Here's another interesting tid bit that does have to do with BB's. I have 2 accounts on my BB. One Gmail account and 1 other business account. If I email from the Gmail account on the BB to the same domain it goes through fine. If i use the other business account on the same BB it fails with the message above. The problem is, this isn't just BB's as other companies not using BB's are getting failures to. I only use this example in that I can 100% guarantee it to fail on my BB every time.
August 25th, 2010 12:46am

when you get the message it doesnt tell you what system is sending that message? The message you posted looks like the NDR to me. Is there more in the NDR? if you are using Outlook or OWA from that business account you send from the BB (not gmail) and you get the same results, does it provide more information? If you can see it in the SMTP logs can you see it in Message tracking? If you can't do you have antivirus running on the server that is monitoring port 25 (SMTP)? that might also be rejecting it.
Free Windows Admin Tool Kit Click here and download it now
August 25th, 2010 1:01am

Hi 3PointTech, Chris gave some good suggestion. Could you please describle more detailed about your scenario? Such as how do your blackberry users configured the blackberry account, and how the client connect the exchange server? Per your description, "The problem is, this isn't just BB's as other companies not using BB's are getting failures to." Do you mean those who not use BB have the issue that send email to your domain? So could you please check the log carefully to confirm the email where to go. Regards! Gavin
August 25th, 2010 10:31am

Gavin/Chris, I think the BB discussion just confuses it. I have non-BB users also getting the same mail failures that I get when I send from my BB but it's NOT for all inbound email. Its like some filtering or relaying denial it seems like. So assume for a minute BB were never mentioned in the discussion, I still get a 10-15% failure on inbound email. The errors I posted above are the same for ALL users in the 10-15% failure. What I Have Done Since Posting: 1. I uninstalled the antivirus running on the server to rule that out entirely. 2. I have turned off all of the IMF filtering which is installed during 2003 SP2 patching. Questions: 1. Which logs do you want to see since there are so many within Exchange? Thanks for all the help as this has been a bit of a nighmare!
Free Windows Admin Tool Kit Click here and download it now
August 25th, 2010 6:35pm

Hi ePointTech, Per your description, the issue seems occur intermittently. Per the NDR error, it seems that some content filter or other filter rule reject the email, may cause content, spam, size reason and so on. I also would verify: 1. Does all the inbound emails from special domain or any sender domain has the same issue, maybe the issue caused by the sender domain, such as they have no PTR record 2. You are using the postini, please confirm you configured filter rule correctly, or make a test bypass it 3. You could check the smtp log firstly, and then check the tracking log, and then check the pipeline tracing log 4. Does your outbound email from Postini, do your add the issue sender into the whist list and make test Regards! Gavin
August 26th, 2010 5:41am

Hi Gavin, As of this post I have removed Postini from the equation to rule out it and antivirus. Here are 3 emails I just sent. This is from the \SMTPSVC1\ folder: Email 1 - Sent from my Consulting Domain on my BB to Recipient Domain and it FAILED Email 2 - Sent from my Consulting Domain on my laptop to Recipient Domain and it was SUCCESSFUL Email 3 - Sent from my personal GMAIL Domain on my same BB to Recipient Domain and it was SUCCESSFUL 8/26/2010 4:01:21 216.9.248.25 smtp11.bis.na.blackberry.com SMTPSVC1 SLSERVER 10.0.0.10 0 EHLO - #NAME? 8/26/2010 4:01:21 216.9.248.25 smtp11.bis.na.blackberry.com SMTPSVC1 SLSERVER 10.0.0.10 0 MAIL - +FROM:<SRS0=8bfhZc=P7=consultingdomain.com=support@srs.bis.na.blackberry.com> 8/26/2010 4:01:21 216.9.248.25 smtp11.bis.na.blackberry.com SMTPSVC1 SLSERVER 10.0.0.10 0 RCPT - +TO:<administrator@therecipientdomain.com> 8/26/2010 4:01:23 216.9.248.25 smtp11.bis.na.blackberry.com SMTPSVC1 SLSERVER 10.0.0.10 0 DATA - +<470100804-1282795277-cardhu_decombobulator_blackberry.rim.net-2030957937-@bda850.bisx.prod.on.blackberry> 8/26/2010 4:01:28 216.9.248.25 smtp11.bis.na.blackberry.com SMTPSVC1 SLSERVER 10.0.0.10 0 QUIT - smtp11.bis.na.blackberry.com 8/26/2010 4:04:08 72.167.82.82 p3plsmtpa01-02.prod.phx3.secureserver.net SMTPSVC1 SLSERVER 10.0.0.10 0 HELO - +p3plsmtpa01-02.prod.phx3.secureserver.net 8/26/2010 4:04:08 72.167.82.82 p3plsmtpa01-02.prod.phx3.secureserver.net SMTPSVC1 SLSERVER 10.0.0.10 0 MAIL - +FROM:<support@consultingdomain.com> 8/26/2010 4:04:08 72.167.82.82 p3plsmtpa01-02.prod.phx3.secureserver.net SMTPSVC1 SLSERVER 10.0.0.10 0 RCPT - +TO:<administrator@therecipientdomain.COM> 8/26/2010 4:04:08 72.167.82.82 p3plsmtpa01-02.prod.phx3.secureserver.net SMTPSVC1 SLSERVER 10.0.0.10 0 DATA - +<4C75E818.5060501@consultingdomain.com> 8/26/2010 4:04:08 72.167.82.82 p3plsmtpa01-02.prod.phx3.secureserver.net SMTPSVC1 SLSERVER 10.0.0.10 0 QUIT - p3plsmtpa01-02.prod.phx3.secureserver.net 8/26/2010 4:05:57 209.85.161.178 mail-gx0-f178.google.com SMTPSVC1 SLSERVER 10.0.0.10 0 EHLO - #NAME? 8/26/2010 4:05:57 209.85.161.178 mail-gx0-f178.google.com SMTPSVC1 SLSERVER 10.0.0.10 0 MAIL - +FROM:<coachjgrant@gmail.com> 8/26/2010 4:05:57 209.85.161.178 mail-gx0-f178.google.com SMTPSVC1 SLSERVER 10.0.0.10 0 RCPT - +TO:<administrator@therecipientdomain.com> 8/26/2010 4:05:57 209.85.161.178 mail-gx0-f178.google.com SMTPSVC1 SLSERVER 10.0.0.10 0 DATA - <334046336-1282795551-cardhu_decombobulator_blackberry.rim.net-1163523829-@bda850.bisx.prod.on.blackberry> 8/26/2010 4:06:28 209.85.161.178 mail-gx0-f178.google.com SMTPSVC1 SLSERVER 10.0.0.10 0 QUIT - mail-gx0-f178.google.com Next, I started tracking the emails in the c:\Program Files\Exchsrvr\MYSERVER.log\ and emails that FAIL do not get in to these log files. All SUCCESSFUL emails are showing up in these log files.
Free Windows Admin Tool Kit Click here and download it now
August 26th, 2010 7:19am

Just to close this issue up, what I found was a Open Relay tool used by the last admin on the SBS 2K3 server that utilized Greylisting. Once I stopped the service, no more mail failures from any of the devices or accounts that were failing 10-15% of the time. Ugh.......
August 30th, 2010 6:38pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics