Hello We have an Exchnage 2003 with SP2 connect to the internet via publishing at an ISA 2004 server. Antigen software is also installed. A sudden problem started about a week ago. Mail queue started buildingup on certain destinations such as hotmail, yahoo, and other private destinations. The mail seems to be exiting after a while, especially overnight when no more users are sending mail except the spam. However I noticed that large messages ver 1MB generally are remining in the queue with the retry status. I checked and removed all the size restrictions that I am aware off in the system manager. Mesages belong to different users. CPU usage is low Thank you for your help and feedback. Nicolas

Hi, Are you getting some error in event viewer ? If yes than post them here please. Regards. Shafaquat Ali.M.C.I.T.P Exchange 2007/2010, M.C.I.T.P Windows Server 2008, M.C.T.S OCS Server 2007 R2, Phone: +923008210320

Can you increase diagnostic logging for transport to high and force the queue and then check the eventviewer to see for any alerts?Thiyagu | MCTS/MCITP - Exchange 2007 | MCSE 2003[Messaging] | http://www.myExchangeWorld.com. This posting is provided "AS IS" with no warranties, and confers no rights.

Hello Ali; Thank you for your reply. There are some errors that have been occurring before the problem started and I did not see their relevance. * The following warning keeps appearing every second in the application event: Source: StatisticsManagerClient - Event ID: 100 The description for Event ID ( 100 ) in Source ( StatisticsManagerClient ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: Sat Aug 07 06:00:00 2010 7856 WARN Error hr=0x80070422 The service cannot be started, either because it is disabled or because it has no enabled devices associated with it. * The following error appeared only yesterday repeatedly in the application event also: Source: MSExchangeAL - Event ID 8026 LDAP Bind was unsuccessful on directory cis-mail.CISMAIL.COM.LB for distinguished name ''. Directory returned error:[0x34] Unavailable.

Hi, Is it mail in queue is only with yahoo and hotmail.com. Do have vallid PTR record for your sender domain. Also i will suggest you to take on reboot of server where you see this queue. Did you tried to stop and start queue and then check effect. Please share Event Log details and share with us for more help.Anil

Hi, For event ID 100 you need to run this hotfix which is given at Microsoft Site. http://support.microsoft.com/kb/923869/en-us And for event ID 8026 kindly read this article I hope this will help you. http://support.microsoft.com/kb/272552 Regards. Shafaquat Ali.M.C.I.T.P Exchange 2007/2010, M.C.I.T.P Windows Server 2008, M.C.T.S OCS Server 2007 R2, Phone: +923008210320

Hi Anil; Thank you for your reply. It is happening with several destinations. I noticed that when there is a large mail in the queue of over 1MB or even smaller, the delays starts, and the queues for the particular destination starts to buildup. The server has been rebooted several times. The situation remained. I tried freezing some queue destination while leaving others. It did not help. Yesterday I cleaned some of the large files stuck in the queue, and those destination queues are empty this morning. But others that still have large files remain stuck. I am wondering if it is a parameter somewhere, that I may have changed by mistake. I could not retrace my steps backward where I may have done so. Nicolas

If possible, try disabling antigen Go to the installation directory antutil /disable See how it works. Good luck. Shaba

Quote: “when there is a large mail in the queue of over 1MB or even smaller, the delays starts” Does the mail flow fail permanently for these external domains? Or, just when the sent messages reached to certain size? Have the mail flow worked ever before when sending the message to these external domains? Which queue does the message exactly stuck? When the test message stuck in the queue, please view the additional information on this queue via ESM (Reference) Have you increased the diagnostic logging level on the transport components as suggested by Thiyagu? (Reference) Please also use the protocol logging to monitor the SMTP communication (Reference)James Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com

I disabled the Antigen and the services related, so far no changes. Messages remain stuck in the queues. Whenver I try to set the diagnostics logging, the system freezes, and I have to logoff from the task manager via Crl-Alt-Del. Delay appear to be occuring at some destinations and does not appear to be at all destinations. Size is something I noticed, because smaller messages clear the queue by the next day and large messages remain. testing show that smaller messages are arriving with delays of about 2 hours. Size may not be the reason, but it was something I noticed. The mail flow was normal to all destinations until a week ago. Queues that are beeing noticed to stuck are mainly hotmail, yahoo.com, and .fr and other company private destinations. Another notice in the queue screen that the stuck queues are always in communication. That is the icon of the folder is always open, as if communicating with destination Nicolas

In order to eliminate the size factor, I deleted all messages in the hotmail queue, and left 2 small messages I started the SMTP logging. What should I be looking in particular Nicolas

SMTP conversion between your exchange server and the remote serverJames Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com

How's the issue currently?James Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com

Plse run Best practice analyser and Windows update. -bpara

I have managed to go on the registry and change parameters the diagnostics from 0 to 1 then 3. I started receiving some messages in the Application Event Viewer. Those messages are information and not errors, and they do not reflect the retries of the messages in the queue. Some events: Category: Transfer Out Of Gateway Event ID: 2004, There are no messages ready to transfer out (send) for gateway Event ID: 2088, The wakeup send thread on database "First Storage Group\Mailbox Store ()" will retry submitting the message in 5000 msec. Event ID: 2015, 0 messages are waiting to be transferred out to the Microsoft Exchange MTA (sent) from gateway

Please max the diagnostic logging level, and then reproduce the issue HOWTO increase the Logging Levels in Exchange 2003,2007 and 2010James Luo TechNet Subscriber Support (http://technet.microsoft.com/en-us/subscriptions/ms788697.aspx) If you have any feedback on our support, please contact tngfb@microsoft.com

Thank you all for your support. The problem was a malfunction from the ISP. Their HDSL uplink was very slow. The issue was overlooked when checking with ISP and directing the problem back to the server. After further testing and troubleshooting we were able to pinpoint it.