New Exchange Server 2003 Mail Won't Go Out-Possible Spam Stuck In Queue
On a new Exchange Server 2003, not yet in production, on a test domain, email goes out but does not come in.It is running on a new Dell physical server running Windows 2003. I can send mail from my gmail and cox web-mail to my email address on the Exchange server, but mail will not go out.Email to the cox.net address just sits in the queue. Email to the gmail address doesn't seem to stay in the queue but does not go through.Reverse dns pointer is set up with Sprint, my ISP.I also just noticed some outgoing mail (4 emails from 2 days ago) stuck in the Queue form JeffL@interhelmet.com , a domain McAfee lists as a spam site, from "postmaster".Have I been hacked?I usually run ScanMail for Exchange by Trend but have not installed it yet because the server is not in production yet. I do have Trend OfficeScan installed and I have never had any viruses on it.Our domain and WAN have no public access from the outside except this Exchange server. We are on Sprint MPLS with NAT to the Exchange server.Any ideas? How could they be sending mail out from my "postmaster"?
March 13th, 2010 4:45am

First, can you send a message out "manually" from the server.Open a command prompt.type telnet gmail-smtp-in.l.google.com 25type "helo yourdomain.com"type "mail from: you@yourdomain.com"type "rcpt to: yourgmail@gmail.com"type "data"type "Subject: Testing"type "<cr>" (a blank line)type "this is a test"type "<cr>.<cr>" (blank line, period, blank line)type "quit"hope for a 2xx response from the gmail mail server.if you can do that, then your ISP is allowing outbound mail and dns is working and the problem is likely with Exchange.if you can't, then the problem is not with Exchange.
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2010 5:39am

Also, make sure SMTP logging is enabled on the SMTP Virtual Server and see if you can see outbound connection attempts to show your server is trying to deliver mail.
March 13th, 2010 5:40am

I keep getting this response:5.5.1 MAIL first. 11si3590498yxe.35?Thanks for your help!
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2010 5:49am

Hi Mike,Did you try SMTP command sugested by Andy to send message to cox.com and also check whether you get error "IP is not allowed" If yes then you need to whit list your IP .What is method you are using for internet mail.. is it smart host or via DNS query.Anil
March 13th, 2010 8:20pm

Also, make sure SMTP logging is enabled on the SMTP Virtual Server and see if you can see outbound connection attempts to show your server is trying to deliver mail. I just started logging on the SMTP server.I got this message from the email I sent last night from the Outlook web interface to my cox.net account.This is an automatically generated Delivery Status Notification.THIS IS A WARNING MESSAGE ONLY.YOU DO NOT NEED TO RESEND YOUR MESSAGE.Delivery to the following recipients has been delayed.myname@cox.netThis is what the log says after sending a few emails.....#Software: Microsoft Internet Information Services 6.0#Version: 1.0#Date: 2010-03-13 19:01:28#Fields: time c-ip cs-method cs-uri-stem sc-status 19:01:28 209.200.6.236 HELO - 25019:01:28 209.200.6.236 MAIL - 25019:01:28 209.200.6.236 RCPT - 25019:01:28 209.200.6.236 DATA - 25019:01:29 209.200.6.235 - - 019:01:29 209.200.6.235 EHLO - 019:01:29 209.200.6.235 - - 019:01:29 209.200.6.235 MAIL - 019:01:29 209.200.6.235 - - 019:01:29 209.200.6.235 RCPT - 019:01:29 209.200.6.235 - - 019:01:29 209.200.6.235 DATA - 019:01:29 209.200.6.235 - - 019:01:29 209.200.6.235 - - 019:01:29 209.200.6.235 QUIT - 019:01:29 209.200.6.236 QUIT - 24019:01:29 209.200.6.235 - - 019:01:29 68.6.19.3 - - 019:01:59 209.85.217.6 - - 019:01:59 209.85.217.6 EHLO - 019:01:59 209.85.217.6 - - 019:01:59 209.85.217.6 MAIL - 019:01:59 209.85.217.6 - - 019:01:59 209.85.217.6 RCPT - 019:01:59 209.85.217.6 - - 019:01:59 209.85.217.6 DATA - 019:01:59 209.85.217.6 - - 019:02:00 209.85.217.6 - - 019:02:00 209.85.217.6 QUIT - 019:02:00 209.85.217.6 - - 0 ??
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2010 10:05pm

First, can you send a message out "manually" from the server.Open a command prompt.type telnet gmail-smtp-in.l.google.com 25type "helo yourdomain.com"type "mail from: you@yourdomain.com"type "rcpt to: yourgmail@gmail.com"type "data"type "Subject: Testing"type "<cr>" (a blank line)type "this is a test"type "<cr>.<cr>" (blank line, period, blank line)type "quit"hope for a 2xx response from the gmail mail server.if you can do that, then your ISP is allowing outbound mail and dns is working and the problem is likely with Exchange.if you can't, then the problem is not with Exchange. This is what I got, following the above directions, in the text below, in the actual one I had my actual domain name.... 220 mx.google.com ESMTP 25si5209954gxk.7 helo mydomain.com 250 mx.google.com at your service mail from: administrator@mydomain.com555 5.5.2 Syntax error. 25si5209954gxk.7 mail from: administrator@mydomain.com555 5.5.2 Syntax error. 25si5209954gxk.7 rcpt to: myemail@gmail.com 503 5.5.1 MAIL first. 25si5209954gxk.7 data 502 5.5.1 Unrecognized command. 25si5209954gxk.7 subject: Testing 502 5.5.1 Unrecognized command. 25si5209954gxk.7 502 5.5.1 Unrecognized command. 25si5209954gxk.7 this is a test 502 5.5.1 Unrecognized command. 25si5209954gxk.7 quit 221 2.0.0 closing connection 25si5209954gxk.7 Connection to host lost. Thanks, Andy for your help.
March 13th, 2010 10:29pm

Hi Mike,Did you try SMTP command sugested by Andy to send message to cox.com and also check whether you get error "IP is not allowed" If yes then you need to whit list your IP .What is method you are using for internet mail.. is it smart host or via DNS query. Anil I did not get any "IP not allowed" error. Also, I checked on a couple of the spam checking sites and my domain is not listed or blocked.Do you have some sites I could check it on for blacklisting?I don't know what you mean by "Intenet mail". I am just opening the Outlook web access on the Exchange server http://myserver/exchange and sending the outgoing mail from there. The "cox.net" outgoing mail hangs in the queue, the "gmail.com" goes right through the queue but does not go to my gmail account mail box.Thanks for your input, Anil!The Exchange server is also a DNS server, and it has no problem resolving addresses.
Free Windows Admin Tool Kit Click here and download it now
March 13th, 2010 10:38pm

Dang I hate that default log setting. Sigh.You need to enable more fields in the logging to really see what's going back and forth. http://www.cmsconnect.com/ESIShared/Doc/File/ESI-Set-SMTP-Logging.htm#SETTINGEXTENDEDPROPERTIESIt looks like it's rejecting you, but I can't be sure.
March 14th, 2010 5:49am

Dang I hate that default log setting. Sigh.You need to enable more fields in the logging to really see what's going back and forth. http://www.cmsconnect.com/ESIShared/Doc/File/ESI-Set-SMTP-Logging.htm#SETTINGEXTENDEDPROPERTIESIt looks like it's rejecting you, but I can't be sure. Thanks, I'll try that.....
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2010 6:00am

Dang I hate that default log setting. Sigh.You need to enable more fields in the logging to really see what's going back and forth. http://www.cmsconnect.com/ESIShared/Doc/File/ESI-Set-SMTP-Logging.htm#SETTINGEXTENDEDPROPERTIESIt looks like it's rejecting you, but I can't be sure. I changed the log settings as per the above link......I don't know what to look for.Also, I just sent an email (from Outlook web access on the Exchange server) to an outside vendor working here tonight and he got the email from me, but it did not arrive at my cox.net email or gmail account. Also internal email on the Exchange server works fine.?How do I delete the stuck spam mail from the queue?thanks!
March 14th, 2010 7:06am

After increasing logging on the server, the application event log came up with this event after sending another email to my cox.net address. Source: MSExchangeTransport Category: SMTP Protocol Event ID: 7004 This is an SMTP protocol error log for virtual server ID1, connection #1. The remote host "138.210.159.170", responded to the SMTP command "xech50" with "504 Need to authenticate first". The full command sent was "XEXCH50 1920 2 ". This will probably cause the connection to fail. FYI.... That ip address (138.210.159.170) resolves to "nothing.attdns.com"
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2010 8:28am

What recipient policies do you have and what are their settings?-- Ed Crowley MVP"There are seldom good technological solutions to behavioral problems.". "MikeC-99" wrote in message news:d5080278-3fde-4375-82e5-4874f702aec4... After increasing logging on the server, the application event log came up with this event after sending another email to my cox.net address. Source: MSExchangeTransport Category: SMTP Protocol Event ID: 7004 This is an SMTP protocol error log for virtual server ID1, connection #1. The remote host "138.210.159.170", responded to the SMTP command "xech50" with "504 Need to authenticate first". The full command sent was "XEXCH50 1920 2 ". This will probably cause the connection to fail. FYI.... That ip address (138.210.159.170) resolves to "nothing.attdns.com" Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
March 14th, 2010 9:05am

Does your cable company allow you to send SMTP mail through them? A lot of ISPs do not allow that in order to stop spamming from unwitting users. If they don't you might be able to configure an SMTP Connector for address space "*" (without the quotes) and smart host set to the Cox SMTP server.-- Ed Crowley MVP"There are seldom good technological solutions to behavioral problems.". "MikeC-99" wrote in message news:2255f228-7b70-4fbb-935f-c052562a37bb...On a new Exchange Server 2003, not yet in production, on a test domain, email goes out but does not come in.It is running on a new Dell physical server running Windows 2003. I can send mail from my gmail and cox web-mail to my email address on the Exchange server, but mail will not go out.Email to the cox.net address just sits in the queue. Email to the gmail address doesn't seem to stay in the queue but does not go through.Reverse dns pointer is set up with Sprint, my ISP.I also just noticed some outgoing mail (4 emails from 2 days ago) stuck in the Queue form JeffL@interhelmet.com , a domain McAfee lists as a spam site, from "postmaster".Have I been hacked?I usually run ScanMail for Exchange by Trend but have not installed it yet because the server is not in production yet. I do have Trend OfficeScan installed and I have never had any viruses on it.Our domain and WAN have no public access from the outside except this Exchange server. We are on Sprint MPLS with NAT to the Exchange server.Any ideas? How could they be sending mail out from my "postmaster"? Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Free Windows Admin Tool Kit Click here and download it now
March 14th, 2010 9:07am

Hi, What’s the Additional Queue information when you click the stuck queue in EMS? As above said would you please let us know how mail routing between your server with internet? How to troubleshoot the "504 need to authenticate first" SMTP protocol error: http://support.microsoft.com/kb/843106 Additional, Some exchange folders must be excluded by anti-virus software. http://technet.microsoft.com/en-us/library/aa997602(EXCHG.80).aspx I’m looking forward to your reply. Thanks, Richard.
March 16th, 2010 4:35am

Hi, Have you any updates? Thanks, Richard.
Free Windows Admin Tool Kit Click here and download it now
March 26th, 2010 9:49am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics