Cannot send email over Exchange 2013 Relay connector

Hello,

I have setup External Relay connector on the Exchange 2013 server, but cannot send anonymous messages.

External Relay connector configuration:

Role: Front End Transport
Type: Custom
Security: Anonymous Users
Scoping - Remote Network Settings: "servers, printers IP" which send anonymous messages
Scoping - Network adapter bindings: all available IPv4, 25 port.

Permissions for Relay Connector was set:

Get-ReceiveConnector -Id EX1\Relay-Connector | Add-ADPermission -User "NT AUTHORITY\ANONYMOUS LOGON" -ExtendedRights "Ms-Exch-SMTP-Accept-Any-Recipient"

Information from SMTP log:

2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,124,172.16.100.3:2525,172.16.100.3:48646,<,XPROXYFROM SID=08D2608379087E4A IP=192.168.2.10 PORT=3349 DOMAIN=dc2 SEQNUM=1 PERMS=1077 AUTHSRC=Anonymous,
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,125,172.16.100.3:2525,172.16.100.3:48646,>,250 XProxyFrom accepted,
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,126,172.16.100.3:2525,172.16.100.3:48646,<,MAIL FROM:<ServerLogs@internal.domain> SIZE=0 AUTH=<>,
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,127,172.16.100.3:2525,172.16.100.3:48646,*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,128,172.16.100.3:2525,172.16.100.3:48646,*,08D264DFE8DEA0BF;2015-05-25T10:52:27.466Z;6,receiving message
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,129,172.16.100.3:2525,172.16.100.3:48646,<,RCPT TO:<user@external.domain>,
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,130,172.16.100.3:2525,172.16.100.3:48646,>,250 2.1.0 Sender OK,
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,131,172.16.100.3:2525,172.16.100.3:48646,>,250 2.1.5 Recipient OK,
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,132,172.16.100.3:2525,172.16.100.3:48646,<,DATA,
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,133,172.16.100.3:2525,172.16.100.3:48646,>,354 Start mail input; end with <CRLF>.<CRLF>,
2015-05-25T10:55:01.929Z,EX1\Default EX1,08D264DFE8DEA0BF,134,172.16.100.3:2525,172.16.100.3:48646,*,,receiving message with InternetMessageId <156f07a15cf04657bc07983e9b722fec@EX1.internal.domain>
2015-05-25T10:55:02.133Z,EX1\Default EX1,08D264DFE8DEA0BF,135,172.16.100.3:2525,172.16.100.3:48646,>,"250 2.6.0 <156f07a15cf04657bc07983e9b722fec@EX1.internal.domain> [InternalId=721554505867, Hostname=EX1.internal.domain] Queued mail for delivery",
2015-05-25T10:55:28.178Z,EX1\Default EX1,08D264DFE8DEA0CA,0,172.16.100.3:2525,172.16.100.3:48951,+,,
2015-05-25T10:55:28.178Z,EX1\Default EX1,08D264DFE8DEA0CA,1,172.16.100.3:2525,172.16.100.3:48951,*,None,Set Session Permissions

or

2015-05-25T11:34:44.366Z,EX1\Default EX1,08D264F5AEFC2646,54,172.16.100.3:2525,172.16.100.3:52949,<,XPROXYFROM SID=08D2608379087ECB IP=192.168.2.10 PORT=3621 DOMAIN=dc2 SEQNUM=1 PERMS=1077 AUTHSRC=Anonymous,
2015-05-25T11:34:44.366Z,EX1\Default EX1,08D264F5AEFC2646,55,172.16.100.3:2525,172.16.100.3:52949,>,250 XProxyFrom accepted,
2015-05-25T11:34:44.366Z,EX1\Default EX1,08D264F5AEFC2646,56,172.16.100.3:2525,172.16.100.3:52949,<,MAIL FROM:<ServerLogs@internal.domain> SIZE=0 AUTH=<>,
2015-05-25T11:34:44.366Z,EX1\Default EX1,08D264F5AEFC2646,57,172.16.100.3:2525,172.16.100.3:52949,*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
2015-05-25T11:34:44.381Z,EX1\Default EX1,08D264F5AEFC2646,58,172.16.100.3:2525,172.16.100.3:52949,*,08D264F5AEFC2646;2015-05-25T11:34:44.303Z;1,receiving message
2015-05-25T11:34:44.381Z,EX1\Default EX1,08D264F5AEFC2646,59,172.16.100.3:2525,172.16.100.3:52949,<,RCPT TO:<user@external.domain>,
2015-05-25T11:34:44.397Z,EX1\Default EX1,08D264F5AEFC2646,60,172.16.100.3:2525,172.16.100.3:52949,>,250 2.1.0 Sender OK,
2015-05-25T11:34:44.397Z,EX1\Default EX1,08D264F5AEFC2646,61,172.16.100.3:2525,172.16.100.3:52949,>,250 2.1.5 Recipient OK,
2015-05-25T11:34:44.397Z,EX1\Default EX1,08D264F5AEFC2646,62,172.16.100.3:2525,172.16.100.3:52949,<,DATA,
2015-05-25T11:34:44.397Z,EX1\Default EX1,08D264F5AEFC2646,63,172.16.100.3:2525,172.16.100.3:52949,>,354 Start mail input; end with <CRLF>.<CRLF>,
2015-05-25T11:34:44.397Z,EX1\Default EX1,08D264F5AEFC2646,64,172.16.100.3:2525,172.16.100.3:52949,*,,receiving message with InternetMessageId <51ee3540ba1a47bc95f924a065c4d2f9@EX1.internal.domain>
2015-05-25T11:34:45.006Z,EX1\Default EX1,08D264F5AEFC2646,65,172.16.100.3:2525,172.16.100.3:52949,>,"250 2.6.0 <51ee3540ba1a47bc95f924a065c4d2f9@EX1.internal.domain> [InternalId=725849473132, Hostname=EX1.internal.domain] Queued mail for delivery",
2015-05-25T11:34:53.069Z,EX1\Default EX1,08D264F5AEFC2646,66,172.16.100.3:2525,172.16.100.3:52949,<,RSET,
2015-05-25T11:34:53.084Z,EX1\Default EX1,08D264F5AEFC2646,67,172.16.100.3:2525,172.16.100.3:52949,>,250 2.0.0 Resetting,

I don't know if it could be related, but there is Exchange 2007 in other AD site, which works properly as Relay server.
Servers now in coexistence period and everything seems to work fine except Relay connector on the Exchange 2013 server.

Can someone help with this problem?


  • Edited by Atakma 19 hours 48 minutes ago new info
May 25th, 2015 7:17am

Hello

but your client send email over Default connector not a relay conector.

plase restart transportagent.

Free Windows Admin Tool Kit Click here and download it now
May 25th, 2015 7:51am

Yes I see this, and TransportAgent was restarted several times.

But I can't understand why Default connector is used?

May 25th, 2015 7:53am

Hello

check again realy conector ip scope

Free Windows Admin Tool Kit Click here and download it now
May 25th, 2015 7:55am

It is correct.

If I remove some IP address from the scope I get "Rely denied" error. There is problem somewhere else, as you can see form SMTP log "message is queued for delivery" and that's it, then RSET command or nothing. 

May 25th, 2015 8:02am

Hello

please share output for : Get-ReceiveConnector -ide relay.. |fl

Free Windows Admin Tool Kit Click here and download it now
May 25th, 2015 8:04am
RunspaceId                              : ce3434ff-6e97-48b3-a6ae-0d336a766440
AuthMechanism                           : None
Banner                                  : 
BinaryMimeEnabled                       : True
Bindings                                : {0.0.0.0:25}
ChunkingEnabled                         : True
DefaultDomain                           : 
DeliveryStatusNotificationEnabled       : True
EightBitMimeEnabled                     : True
SmtpUtf8Enabled                         : False
BareLinefeedRejectionEnabled            : False
DomainSecureEnabled                     : False
EnhancedStatusCodesEnabled              : True
LongAddressesEnabled                    : False
OrarEnabled                             : False
SuppressXAnonymousTls                   : False
ProxyEnabled                            : False
AdvertiseClientSettings                 : False
Fqdn                                    : EX1.internal.domain
ServiceDiscoveryFqdn                    : 
TlsCertificateName                      : 
Comment                                 : 
Enabled                                 : True
ConnectionTimeout                       : 00:10:00
ConnectionInactivityTimeout             : 00:05:00
MessageRateLimit                        : Unlimited
MessageRateSource                       : IPAddress
MaxInboundConnection                    : 5000
MaxInboundConnectionPerSource           : 20
MaxInboundConnectionPercentagePerSource : 2
MaxHeaderSize                           : 128 KB (131,072 bytes)
MaxHopCount                             : 60
MaxLocalHopCount                        : 12
MaxLogonFailures                        : 3
MaxMessageSize                          : 35 MB (36,700,160 bytes)
MaxProtocolErrors                       : 5
MaxRecipientsPerMessage                 : 200
PermissionGroups                        : AnonymousUsers, Custom
PipeliningEnabled                       : True
ProtocolLoggingLevel                    : Verbose
RemoteIPRanges                          : {192.168.2.10-192.168.2.25, 192.168.2.2-192.168.2.8, 192.168.2.251, 192.168.2
                                          .35, 192.168.2.19, 192.168.2.250}
RequireEHLODomain                       : False
RequireTLS                              : False
EnableAuthGSSAPI                        : False
ExtendedProtectionPolicy                : None
LiveCredentialEnabled                   : False
TlsDomainCapabilities                   : {}
Server                                  : EX1
TransportRole                           : FrontendTransport
SizeEnabled                             : Enabled
TarpitInterval                          : 00:00:05
MaxAcknowledgementDelay                 : 00:00:30
AdminDisplayName                        : 
ExchangeVersion                         : 0.1 (8.0.535.0)
Name                                    : Relay-FE-EX1
DistinguishedName                       : CN=Relay-FE-EX1,CN=SMTP Receive Connectors,CN=Protocols,CN=EX1,CN=Servers,CN=
                                          Exchange Administrative Group (FYDIBOHF23SPDLT),CN=Administrative Groups,CN=F
                                          irst Organization,CN=Microsoft Exchange,CN=Services,CN=Configuration,DC=internal,DC=domain
Identity                                : EX1\Relay-FE-EX1
Guid                                    : dec99261-abc8-4b2d-a3fe-4735a919bdd6
ObjectCategory                          : internal.domain/Configuration/Schema/ms-Exch-Smtp-Receive-Connector
ObjectClass                             : {top, msExchSmtpReceiveConnector}
WhenChanged                             : 2015-05-25 14:32:15
WhenCreated                             : 2015-05-25 11:35:52
WhenChangedUTC                          : 2015-05-25 11:32:15
WhenCreatedUTC                          : 2015-05-25 08:35:52
OrganizationId                          : 
Id                                      : EX1\Relay-FE-EX1
OriginatingServer                       : DC3.internal.domain
IsValid                                 : True
ObjectState                             : Unchanged

May 25th, 2015 8:07am

Hello

and if add 172.16.100.3 to scope and restart transportagent not work?

Free Windows Admin Tool Kit Click here and download it now
May 25th, 2015 8:16am
Not working ...
May 25th, 2015 8:25am

Hello

please copy that full log when server from 192.168.2.x scoping try send email.

like: 192.168.0.10 --> exchange server 192.168.0.195 --> client server

2015-05-25T12:12:17.902Z,DC\Default Frontend DC,08D2607B5FA9042D,0,192.168.0.10:25,192.168.0.195:62803,+,,
2015-05-25T12:12:17.902Z,DC\Default Frontend DC,08D2607B5FA9042D,1,192.168.0.10:25,192.168.0.195:62803,*,SMTPSubmit AcceptRoutingHeaders,Set Session Permissions
2015-05-25T12:12:17.902Z,DC\Default Frontend DC,08D2607B5FA9042D,2,192.168.0.10:25,192.168.0.195:62803,>,"220 dc.ceg.corp Microsoft ESMTP MAIL Service ready at Mon, 25 May 2015 05:12:17 -0700",
2015-05-25T12:12:19.731Z,DC\Default Frontend DC,08D2607B5FA9042D,3,192.168.0.10:25,192.168.0.195:62803,<,helo,
2015-05-25T12:12:19.731Z,DC\Default Frontend DC,08D2607B5FA9042D,4,192.168.0.10:25,192.168.0.195:62803,>,250 dc.ceg.corp Hello [192.168.0.195],
2015-05-25T12:12:25.951Z,DC\Default Frontend DC,08D2607B5FA9042D,5,192.168.0.10:25,192.168.0.195:62803,<,mail from aaaa@ceg.corp,
2015-05-25T12:12:25.951Z,DC\Default Frontend DC,08D2607B5FA9042D,6,192.168.0.10:25,192.168.0.195:62803,*

and go to one server 192.168.2.x and with telnet send email and share log.

Free Windows Admin Tool Kit Click here and download it now
May 25th, 2015 8:29am
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,110,172.16.100.3:2525,172.16.100.3:58502,<,XPROXYFROM SID=08D264FD50860CE3 IP=192.168.2.10 PORT=4042 DOMAIN=dc2 SEQNUM=1 PERMS=1077 AUTHSRC=Anonymous,
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,111,172.16.100.3:2525,172.16.100.3:58502,>,250 XProxyFrom accepted,
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,112,172.16.100.3:2525,172.16.100.3:58502,<,MAIL FROM:<serverlogs@internal.domain> SIZE=0 AUTH=<>,
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,113,172.16.100.3:2525,172.16.100.3:58502,*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,114,172.16.100.3:2525,172.16.100.3:58502,*,08D264FD043CDCF1;2015-05-25T12:29:34.111Z;5,receiving message
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,115,172.16.100.3:2525,172.16.100.3:58502,<,RCPT TO:<ma@external.domain>,
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,116,172.16.100.3:2525,172.16.100.3:58502,>,250 2.1.0 Sender OK,
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,117,172.16.100.3:2525,172.16.100.3:58502,>,250 2.1.5 Recipient OK,
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,118,172.16.100.3:2525,172.16.100.3:58502,<,DATA,
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,119,172.16.100.3:2525,172.16.100.3:58502,>,354 Start mail input; end with <CRLF>.<CRLF>,
2015-05-25T12:38:25.270Z,EX1\Default EX1,08D264FD043CDCF1,120,172.16.100.3:2525,172.16.100.3:58502,*,,receiving message with InternetMessageId <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>
2015-05-25T12:38:25.442Z,EX1\Default EX1,08D264FD043CDCF1,121,172.16.100.3:2525,172.16.100.3:58502,>,"250 2.6.0 <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain> [InternalId=730144440459, Hostname=EX1.internal.domain] Queued mail for delivery",
2015-05-25T12:38:36.850Z,EX1\Default EX1,08D264FD043CDD19,0,172.16.100.3:2525,172.16.100.3:59468,+,,
2015-05-25T12:38:36.850Z,EX1\Default EX1,08D264FD043CDD19,1,172.16.100.3:2525,172.16.100.3:59468,*,None,Set Session Permissions

May 25th, 2015 8:45am

Hello

plase copy log from:

\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\FrontEnd\ProtocolLog\SmtpReceive

Free Windows Admin Tool Kit Click here and download it now
May 25th, 2015 8:47am

Sorry.

2015-05-25T12:37:57.553Z,EX1\Relay-FE-EX1,08D264FD50860CE3,6,172.16.100.3:25,192.168.2.10:4042,<,mail from:serverlogs@internal.domain,
2015-05-25T12:37:57.553Z,EX1\Relay-FE-EX1,08D264FD50860CE3,7,172.16.100.3:25,192.168.2.10:4042,*,SMTPSubmit SMTPAcceptAnyRecipient SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2015-05-25T12:37:57.553Z,EX1\Relay-FE-EX1,08D264FD50860CE3,8,172.16.100.3:25,192.168.2.10:4042,*,08D264FD50860CE3;2015-05-25T12:37:39.413Z;1,receiving message
2015-05-25T12:37:57.553Z,EX1\Relay-FE-EX1,08D264FD50860CE3,9,172.16.100.3:25,192.168.2.10:4042,>,250 2.1.0 Sender OK,
2015-05-25T12:38:06.801Z,EX1\Relay-FE-EX1,08D264FD50860CE3,10,172.16.100.3:25,192.168.2.10:4042,<,rcpt to:ma@external.domain,
2015-05-25T12:38:06.801Z,EX1\Relay-FE-EX1,08D264FD50860CE3,11,172.16.100.3:25,192.168.2.10:4042,>,250 2.1.5 Recipient OK,
2015-05-25T12:38:11.895Z,EX1\Relay-FE-EX1,08D264FD50860CE3,12,172.16.100.3:25,192.168.2.10:4042,<,data,
2015-05-25T12:38:11.895Z,EX1\Relay-FE-EX1,08D264FD50860CE3,13,172.16.100.3:25,192.168.2.10:4042,>,354 Start mail input; end with <CRLF>.<CRLF>,
2015-05-25T12:38:25.270Z,EX1\Relay-FE-EX1,08D264FD50860CE3,14,172.16.100.3:25,192.168.2.10:4042,*,,Proxy destination(s) obtained from OnProxyInboundMessage event
2015-05-25T12:38:25.442Z,EX1\Relay-FE-EX1,08D264FD50860CE3,15,172.16.100.3:25,192.168.2.10:4042,>,"250 2.6.0 <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain> [InternalId=730144440459, Hostname=EX1.internal.domain] Queued mail for delivery",

May 25th, 2015 8:52am

Hello

it ok

email sent

check mail que

Get-MessageTrackingLog -MessageId 39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain

May 25th, 2015 8:53am
RunspaceId              : ce3434ff-6e97-48b3-a6ae-0d336a766440
Timestamp               : 2015-05-25 15:38:25
ClientIp                : 
ClientHostname          : EX1.internal.domain
ServerIp                : 
ServerHostname          : EX1
SourceContext           : 08D2608391F22CDB;2015-05-25T12:38:25.832Z;ClientSubmitTime:
ConnectorId             : 
Source                  : STOREDRIVER
EventId                 : DELIVER
InternalMessageId       : 730144440460
MessageId               : <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>
Recipients              : {karantinas@internal.domain}
RecipientStatus         : {}
TotalBytes              : 10465
RecipientCount          : 1
RelatedRecipientAddress : 
Reference               : 
MessageSubject          : Nemanoma pristatyti: testmail
Sender                  : MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@internal.domain
ReturnPath              : <>
Directionality          : Originating
TenantId                : 
OriginalClientIp        : 
MessageInfo             : 2015-05-25T12:38:25.457Z;SRV=EX1.internal.domain:TOTAL-DEL=0.187|UTH=0.004|SMRDI=0.023|SMR=0.
                          024|SDDCC=0.017|SDDR=0.011|SDDPM-Conversations Processing Agent=0.070|SDDPM-People I Know Cla
                          ssification Agent=0.001|SDDPM-Mailbox Rules Agent=0.008|SDDPM=0.082|SDDR=0.024|SDDS=0.065|SDD
                          =0.153
MessageLatency          : 00:00:00.5320000
MessageLatencyType      : EndToEnd
EventData               : {[MailboxDatabaseName, DB1], [NDR, 1], [Mailboxes, 02fd5b87-6ff5-4294-848b-9f9773f6135f], [To
                          Entity, Hosted], [E2ELatency, 0.531], [DeliveryPriority, Normal], [OriginalFromAddress, serve
                          rlogs@internal.domain], [AccountForest, internal.domain]}

RunspaceId              : ce3434ff-6e97-48b3-a6ae-0d336a766440
Timestamp               : 2015-05-25 15:38:25
ClientIp                : 
ClientHostname          : 
ServerIp                : 
ServerHostname          : EX1
SourceContext           : No suitable shadow servers
ConnectorId             : 
Source                  : SMTP
EventId                 : HAREDIRECTFAIL
InternalMessageId       : 730144440459
MessageId               : <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>
Recipients              : {ma@external.domain}
RecipientStatus         : {}
TotalBytes              : 1803
RecipientCount          : 1
RelatedRecipientAddress : 
Reference               : 
MessageSubject          : testmail
Sender                  : serverlogs@internal.domain
ReturnPath              : serverlogs@internal.domain
Directionality          : Incoming
TenantId                : 
OriginalClientIp        : 
MessageInfo             : 
MessageLatency          : 
MessageLatencyType      : None
EventData               : {[DeliveryPriority, Normal], [AccountForest, internal.domain]}

RunspaceId              : ce3434ff-6e97-48b3-a6ae-0d336a766440
Timestamp               : 2015-05-25 15:38:25
ClientIp                : 172.16.100.3
ClientHostname          : EX1.internal.domain
ServerIp                : 172.16.100.3
ServerHostname          : EX1
SourceContext           : 08D264FD043CDCF1;2015-05-25T12:29:34.111Z;4
ConnectorId             : EX1\Default EX1
Source                  : SMTP
EventId                 : RECEIVE
InternalMessageId       : 730144440459
MessageId               : <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>
Recipients              : {}
RecipientStatus         : {}
TotalBytes              : 1803
RecipientCount          : 1
RelatedRecipientAddress : 
Reference               : 
MessageSubject          : testmail
Sender                  : serverlogs@internal.domain
ReturnPath              : serverlogs@internal.domain
Directionality          : Incoming
TenantId                : 
OriginalClientIp        : 192.168.2.10
MessageInfo             : 0cA: 
MessageLatency          : 
MessageLatencyType      : None
EventData               : {[FirstForestHop, EX1.internal.domain], [ProxiedClientIPAddress, 192.168.2.10], [ProxiedClien
                          tHostname, dc2], [ProxyHop1, EX1.internal.domain(172.16.100.3)], [DeliveryPriority, Normal], 
                          [AccountForest, internal.domain]}

RunspaceId              : ce3434ff-6e97-48b3-a6ae-0d336a766440
Timestamp               : 2015-05-25 15:38:25
ClientIp                : 
ClientHostname          : 
ServerIp                : 
ServerHostname          : EX1
SourceContext           : Quarantine
ConnectorId             : 
Source                  : DSN
EventId                 : DSN
InternalMessageId       : 730144440460
MessageId               : <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>
Recipients              : {karantinas@internal.domain}
RecipientStatus         : {}
TotalBytes              : 6953
RecipientCount          : 1
RelatedRecipientAddress : 
Reference               : {<39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>}
MessageSubject          : Nemanoma pristatyti: testmail
Sender                  : MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@internal.domain
ReturnPath              : <>
Directionality          : Originating
TenantId                : 
OriginalClientIp        : 
MessageInfo             : 
MessageLatency          : 
MessageLatencyType      : None
EventData               : {[DeliveryPriority, Normal], [OriginalFromAddress, serverlogs@internal.domain], [AccountFores
                          t, internal.domain]}

RunspaceId              : ce3434ff-6e97-48b3-a6ae-0d336a766440
Timestamp               : 2015-05-25 15:38:25
ClientIp                : 
ClientHostname          : EX1
ServerIp                : 
ServerHostname          : 
SourceContext           : 
ConnectorId             : 
Source                  : AGENT
EventId                 : AGENTINFO
InternalMessageId       : 730144440459
MessageId               : <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>
Recipients              : {ma@external.domain}
RecipientStatus         : {}
TotalBytes              : 1938
RecipientCount          : 1
RelatedRecipientAddress : 
Reference               : 
MessageSubject          : testmail
Sender                  : serverlogs@internal.domain
ReturnPath              : serverlogs@internal.domain
Directionality          : Incoming
TenantId                : 
OriginalClientIp        : 192.168.2.10
MessageInfo             : 
MessageLatency          : 
MessageLatencyType      : None
EventData               : {[AMA, SUM|v=0|action=|error=|atch=0], [AMA, EV|engine=M|v=0|sig=1.199.676.0|name=|file=], [C
                          ompCost, |AMA=0], [DeliveryPriority, Normal], [AccountForest, internal.domain]}

RunspaceId              : ce3434ff-6e97-48b3-a6ae-0d336a766440
Timestamp               : 2015-05-25 15:38:25
ClientIp                : 
ClientHostname          : EX1
ServerIp                : 
ServerHostname          : 
SourceContext           : 
ConnectorId             : 
Source                  : AGENT
EventId                 : AGENTINFO
InternalMessageId       : 730144440460
MessageId               : <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>
Recipients              : {karantinas@internal.domain}
RecipientStatus         : {}
TotalBytes              : 7005
RecipientCount          : 1
RelatedRecipientAddress : 
Reference               : 
MessageSubject          : Nemanoma pristatyti: testmail
Sender                  : MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@internal.domain
ReturnPath              : <>
Directionality          : Originating
TenantId                : 
OriginalClientIp        : 
MessageInfo             : 
MessageLatency          : 
MessageLatencyType      : None
EventData               : {[AMA, SUM|v=0|action=|error=|atch=2], [AMA, EV|engine=M|v=0|sig=1.199.676.0|name=|file=], [C
                          ompCost, |AMA=0|ETR=0], [DeliveryPriority, Normal], [OriginalFromAddress, serverlogs@hidrosta
                          tyba.lt], [AccountForest, internal.domain]}

RunspaceId              : ce3434ff-6e97-48b3-a6ae-0d336a766440
Timestamp               : 2015-05-25 15:38:25
ClientIp                : 172.16.100.3
ClientHostname          : EX1
ServerIp                : 172.16.100.3
ServerHostname          : EX1.internal.domain
SourceContext           : ;250 2.0.0 OK;ClientSubmitTime:
ConnectorId             : Intra-Organization SMTP Send Connector
Source                  : SMTP
EventId                 : SEND
InternalMessageId       : 730144440460
MessageId               : <39f392c7fd824ee5b8e6fe83a40a9ede@EX1.internal.domain>
Recipients              : {karantinas@internal.domain}
RecipientStatus         : {250 2.1.5 Recipient OK}
TotalBytes              : 10465
RecipientCount          : 1
RelatedRecipientAddress : 
Reference               : 
MessageSubject          : Nemanoma pristatyti: testmail
Sender                  : MicrosoftExchange329e71ec88ae4615bbc36ab6ce41109e@internal.domain
ReturnPath              : <>
Directionality          : Originating
TenantId                : 
OriginalClientIp        : 
MessageInfo             : 2015-05-25T12:38:25.457Z;LSRV=EX1.internal.domain:TOTAL-HUB=0.531|DSN=0.002|CATSM-Malware Age
                          nt=0.227|CATSM=0.228|CRSL=0.008|CATRS-Index Routing Agent=0.075|CATRS=0.076|CATRT=0.001|CAT=0
                          .317|SMSC=0.026|SMSMBXD=0.156|SMS=0.179
MessageLatency          : 00:00:00.5320000
MessageLatencyType      : LocalServer
EventData               : {[E2ELatency, 0.531], [Microsoft.Exchange.Transport.MailRecipient.RequiredTlsAuthLevel, Oppor
                          tunistic], [DeliveryPriority, Normal], [OriginalFromAddress, serverlogs@internal.domain], [Ac
                          countForest, internal.domain]}

May 25th, 2015 9:02am

I found the problem with your help Sneff_Gabor. There was Transport rule applied which blocks "from external to external" communication. This is our customer servers, so in the beginning I have decided to leave this rule if everything works fine ...

Thank you.

  • Marked as answer by Atakma 17 hours 29 minutes ago
Free Windows Admin Tool Kit Click here and download it now
May 25th, 2015 9:41am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics