Can you explain your environment a bit more? I can see that happening in a shared smtp namespace; the postmaster NDR is typically sent from the domain that was used to send. You need to explain your email topology a bit more.James Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Hello, I need to receive some NDR from another messaging system. I recieve the email properly on the Edge (exch 2007) but see that the recipient is correct (user@company.com) but when the it sent to the CAS the domain changes for an accpeted domain that we do NoT use very often (User@company1.com). Then when it is received on the CAS it is marked as BADMAIL... So I would like to know why the recipients is rewritten? and how could I keep the domain as it is when it is send to the edge? Many Thanks, Graig

Is this other messaging system internal to your company? What is set for the defaultdomain parameter on the receiveconnector that handles these messages?

Please find below the full tracking. We use a Linux Messaging system (mailuser) and when those users hosted on that system send mails to a wrong recipient the server sends to the Edge a NDR with firstname.lastnmane@com-pany.com which is correct. When I refer to the tracking, the edge after receiving the email from the Linux server with the correct recipients: navi.dad@com-pany.com it then sends the mail from the edge to Hubcas BUT changes the domain --> navi.dad@company_NO.com (accepted domain that most of user do not have in their SMTP email addresses - the accepted domain is an Authoritative / Default = False) EventId Source Sender Recipients MessageSubject ------- ------ ------ ---------- -------------- RECEIVE SMTP postmaster@com-pany.com {navi.dad@com-pany.com} Mail delivery failed: returning message to sender SEND SMTP postmaster@com-pany.com {navi.dad@company_NO.com} Mail delivery failed: returning message to sender [PS] C:\>get-messagetrackinglog -Server "EDGE01" -MessageID "<E1tMq-000f-0Z@LUNIXSERV.company.com>" -Start "29/06/2011 13 :45:00" -End "29/06/2011 14:05:00" | fl Timestamp : 29/06/2011 13:55:40 ClientIp : LINUX IP ClientHostname : ServerIp : EDGE01 IP ServerHostname : EDGE01 SourceContext : 08CDC74E2F674728;2011-06-29T11:55:40.626Z;0 ConnectorId : EDGE01\Default internal receive connector EDGE01 Source : SMTP EventId : RECEIVE InternalMessageId : 8915301 MessageId : <E1tMq-000f-0Z@LUNIXSERV.company.com> Recipients : {navi.dad@com-pany.com} RecipientStatus : {} TotalBytes : 6672 RecipientCount : 1 RelatedRecipientAddress : Reference : MessageSubject : Mail delivery failed: returning message to sender Sender : postmaster@com-pany.com ReturnPath : <> MessageInfo : 00A: Timestamp : 29/06/2011 13:55:41 ClientIp : EDGE01 IP ClientHostname : EDGE01 ServerIp : HUBCAS01 IP ServerHostname : HUBCAS01.company.intra SourceContext : 08CDC74E2F674729 ConnectorId : edgesync - inbound to prod Source : SMTP EventId : SEND InternalMessageId : 8915301 MessageId : <E1tMq-000f-0Z@LUNIXSERV.company.com> Recipients : {navi.dad@company_NO.com} RecipientStatus : {250 2.1.5 Recipient OK} TotalBytes : 6672 RecipientCount : 1 RelatedRecipientAddress : Reference : MessageSubject : Mail delivery failed: returning message to sender Sender : postmaster@com-pany.com ReturnPath : <> MessageInfo : 29/06/2011 13:55:40 If you need firther information, please let me know. Many Thanks in advance! Graig

Just to confirm you're not doing inbound address rewriting on your edge? Understanding Address Rewriting http://technet.microsoft.com/en-us/library/aa996806.aspx Get-AddressRewriteEntry http://technet.microsoft.com/en-us/library/aa998582.aspxJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com

Hi Graig, If there is Anti-Spam software on your Edge Server and Hub Server, please disable it to have a try. The mail flow is like this: Outside-----Linux Messaging System------Edge Server-----Hub Sever right? If so, I suggest you test without the Linux Messaging system (let emails send directly to the Edge Server), then check whether this issue will occur or not. Thanks, Evan Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.