Hello Everyone, My issue is that exchange is sending multiple copies of the exact same e-mail to individual users. We are currently running as domain level security with the exchange server as a member server. basic machine: Windows 2K3 with SP2 (Updates current to june 9th), Exchange 2K3 Version: 6.5.6944.0 (updates current to june 9th)The messages i keep receiving when i check a message the user has received duplicates of : Segment of tracking log follows:6/28/07 9:01 PM SMTP: Message Submitted to Advanced Queuing6/28/07 9:01 PM SMTP : Started Message Submission to Advanced queue 6/28/07 9:01 PM SMTP : Message submitted to Categorizer 6/28/07 9:01 PM SMTP : Message Categorized and Queued for Routing6/28/07 9:01 PM SMTP : Message Queued for Local Delivery6/28/07 9:01 PM SMTP : Message delivered Locally to (User E-mail address) 6/28/07 9:01 PM SMTP store Driver : Message delivered Locally to store to (User E-mail address) 6/28/07 11:07 PM SMTP: Message Submitted to Advanced Queuing6/28/07 11:07 PM SMTP : Started Message Submission to Advanced queue 6/28/07 11:07 PM SMTP : Message submitted to Categorizer 6/28/07 11:07 PM SMTP : Message Categorized and Queued for Routing6/28/07 11:07 PM SMTP : Message Queued for Local Delivery6/28/07 11:07 PM SMTP : Message delivered Locally to (User E-mail address) 6/28/07 11:07 PM SMTP store Driver : Message delivered Locally to store to (User E-mail address) Etc and repeat....Not every user receives a duplicate or a few duplicates of every message. For the most part it has been random who/when/if/ and how many duplicates to an e-mail a person will receive. Also, the duration between duplicate objects has been anywhere between instance (same minute) to as far as 4 hours later. and yes, i've went to they're desktop the messages are identical in every aspect.As of so far, i have not seen any duplicates appear when the e-mail is internally routed and doesn't have to get routed outside the server. It has only happened to those that are inbound. we are running with 'Microsoft Exchange Server' for connection, NO POP3 support. I've checked and each person has only 1 account, no CC's or BCC's are visible. Server is currently running norton corporate edition 10.x (fully updated). I've tried turning the AV off for 12 hours, duplicates were still arriving with it off. I've went to each desktop that's had multiple e-mails and deleted they're local profiles. issue occured with outlook 2k3 (they're normal client) and outlook express. the desktops and notebooks are win 2k and xp (both with updates current to june).The exchange server also hosts BES (blackberry software) that was updated a day or two before this issue began. a large # of our corporate officers use it, so i'd rather not simply shut the server down for 24 hours as a test measure. Anyone have any thoughts on this?ThanksCelestacia Anaheria

Do you have a Cisco PIX firewall in front of the Exchange server? If so, you may need to disable the MailGuard feature. This is known to cause duplicate messages when enabled. To disable MailGuard, connect to the firewall and run the no fixup protocol smtp 25 command.

Thank you for the response, Due to some unforseen issues we had some time ago, we have an e-mail proxy that bypasses any cisco equipment, it's routed through astaro firewall as a e-mail proxy. the config on the proxy hasn't been changed, (according to logs), 8 months, any other ideas, i'm more then welcome to listen to,Thanks

Any resolution on this? This is happening to a client of mine as well. Random messages from an internal user are being sent in duplicate or triplicate to external users. Reviewing the message tracking, smtp is receiving multiple copies of the message (messge ID's are contiguous, ...e8 ...e9 ...ea ..etc). We have a single exchange 2003 sp2, all updates current as of June 24th. Thanks in advance for help.

EricC wrote: Any resolution on this? This is happening to a client of mine as well. Random messages from an internal user are being sent in duplicate or triplicate to external users. Reviewing the message tracking, smtp is receiving multiple copies of the message (messge ID's are contiguous, ...e8 ...e9 ...ea ..etc). We have a single exchange 2003 sp2, all updates current as of June 24th. Thanks in advance for help. If you are not using any anti spam software/hardware I recomand you to freeze unwanted/suspicious spam smtp connectors which are usually in "Que" . Open "System Manager" > "Administrative Groups" > "<Your Routing group>" > Select "<Your Server>" > Click on "Queues" and freez suspicious connections. This is the first and very important action you should take before anything. You can increase "SPAM confidance" level in IMF . Take maximum advantage of "SP2" of Exchange 2003. Disable outbound mails. Regards, Amey Abhyankar.

Alas, i'm still having the issue as well, any other ideas?

Hello, I had a similar situation awhile back. I'm not sure if this is the solution to your problem but it may be related. Here's what was happening: To send "MESSAGE A", external SMTP server connects to my SMTP server and I reply with my banner XYZ.abc.com Hello (IP). External SMTP begins to send"Message A"to my smtp server. Meanwhile, in the background, their firewall has a policy of checking reverse lookup IP's on SMTP transactions. If the reverse-lookup fails, the session will be cut off within 30 seconds. By the time the 30 seconds is up, the email has actually been received by my server but the final hand shake indicating the email has been sent and received by my mailserver is NOT received by their mailserver (as the firewall cuts off communication) and the message is deemed unsent by their server. Even though"message a"has been received, the sending SMTP server did understand thetransaction as completed and the process starts again - resulting in duplicate messages being sent to my system. The resolution for me was to make suretherewas a correctReverse DNS PTR record for the NATTED IP of the SMTP server so the lookup their firewalldid was successful and there wasno pre-mature cut off. I also had to make sure the SMTP banner was correct. I hope this helps. MG2

Bump

Do you have puremessage installed on server ?I've had a similar problem which was sorted out by upgrading to version 3.0.2

We have had a similar issue several times, but it was related to the blackberry service that started up wrong.It never happened until we had blackberry enterprise server loaded.