Hello All, I have an ongoing issue and would like some help in getting it resolved. We're a single Exchange 2007 server (running on Win Srv 2003 R2) environment. The issue is that I have a single user that has an issue where there is a single external client that will email her. Sometimes she will get the mail and sometimes not; however, if she sends the external person an email and that external person replies then our server always gets it. I've hit the tracking logs and don't see that any of the 'missing' mails from this external person. The person that admins our firewall with a TrendMicro Antivirus/Spam filter module states that he's not seeing anything either. The external person's company says it's not on their side, I don't believe it is our side either. Can anyone come up with some ideas on how I might be able to at least find out where the issue might be?

On Thu, 30 Aug 2012 12:49:24 +0000, ScarBod wrote: > > >Hello All, > >I have an ongoing issue and would like some help in getting it resolved. > >We're a single Exchange 2007 server (running on Win Srv 2003 R2) environment. > >The issue is that I have a single user that has an issue where there is a single external client that will email her. Sometimes she will get the mail and sometimes not; however, if she sends the external person an email and that external person replies then our server always gets it. > >I've hit the tracking logs and don't see that any of the 'missing' mails from this external person. What about your SMTP protocol log files? >The person that admins our firewall with a TrendMicro Antivirus/Spam filter module states that he's not seeing anything either. Time to ask for proof that the message was sent. >The external person's company says it's not on their side, I don't believe it is our side either. Can anyone come up with some ideas on how I might be able to at least find out where the issue might be? After a quick look at our log files, I usually start with "show me your log file" to the other admin. If they can't prove they sent it and our servers accepted it, then we never got it . . . so problem over. If they have a log file that demonstrates out server accepted the message then I'll dig through our SMTP log files and then message tracking logs and agent logs (because at least now I've got their IP address, a date and time, and the sender and recipient addresses to work with). But trying to find a message that someone DIDN'T receive without proof that it was ever sent is often a wild goose chase. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

On Thu, 30 Aug 2012 12:49:24 +0000, ScarBod wrote: > > >Hello All, > >I have an ongoing issue and would like some help in getting it resolved. > >We're a single Exchange 2007 server (running on Win Srv 2003 R2) environment. > >The issue is that I have a single user that has an issue where there is a single external client that will email her. Sometimes she will get the mail and sometimes not; however, if she sends the external person an email and that external person replies then our server always gets it. > >I've hit the tracking logs and don't see that any of the 'missing' mails from this external person. What about your SMTP protocol log files? >The person that admins our firewall with a TrendMicro Antivirus/Spam filter module states that he's not seeing anything either. Time to ask for proof that the message was sent. >The external person's company says it's not on their side, I don't believe it is our side either. Can anyone come up with some ideas on how I might be able to at least find out where the issue might be? After a quick look at our log files, I usually start with "show me your log file" to the other admin. If they can't prove they sent it and our servers accepted it, then we never got it . . . so problem over. If they have a log file that demonstrates out server accepted the message then I'll dig through our SMTP log files and then message tracking logs and agent logs (because at least now I've got their IP address, a date and time, and the sender and recipient addresses to work with). But trying to find a message that someone DIDN'T receive without proof that it was ever sent is often a wild goose chase. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP

Hmm, didn't even think about the SMTP logs.. I don't go into those all that much, explains why I didn't think about them. I'll check them out tomorrow. Thanks Rich

hi, >>>Sometimes she will get the mail and sometimes not; First: If she can't send message to your user, does she receive NDR? If you have, please post here. >>>The external person's company says it's not on their side, Second: Ask the company using message tracking log to trace the message that can't send to your user. What's the result og message tracking log. Make sure that the message has been sent out from his company successful. Also you can use smtp log, every message send out or receive from internet will be recorded into smtp log. >>> I don't believe it is our side either. Third: you should first check your smtp log. If you can find the message which can't be send to your user successful in smtp log, it seems that the message has been delivered to your ORG. If you can, i recommend that your disable your anti-spam software and test againg. Finally: check the junk mail folder,delete item folder, may be the message is resideing in these folders. hope can help you thanks, CastinLu TechNet Community Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

hi, Any update? thanks, CastinLu TechNet Community Support Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com

Sorry for late replies She went on vacation last week, and I this week. Anyway, no NDRs have been received (should have mentioned that earlier) I haven't been able to get the other company to check their Message Tracking (or SMTP) logs as of yet. If I remember correctly, the other company is actually having Google doing their email. On our side, everything...tracking logs and SMTP logs are stating the same as the user over here... The messages my end user states are received are the only ones I can find in the logs. We have a TrendMicro device doing the Antivirus/SPAM stuff and I have the SPAM filters disabled on our Exchange Server. The person that admins the TrendMicro device states he doesn't see anything eiter.

On Fri, 7 Sep 2012 16:25:13 +0000, ScarBod wrote: > > >Sorry for late replies > >She went on vacation last week, and I this week. > >Anyway, no NDRs have been received (should have mentioned that earlier) > >I haven't been able to get the other company to check their Message Tracking (or SMTP) logs as of yet. If I remember correctly, the other company is actually having Google doing their email. > >On our side, everything...tracking logs and SMTP logs are stating the same as the user over here... The messages my end user states are received are the only ones I can find in the logs. > >We have a TrendMicro device doing the Antivirus/SPAM stuff and I have the SPAM filters disabled on our Exchange Server. The person that admins the TrendMicro device states he doesn't see anything eiter. Then it's incumbent upon the other system to prove that they received a 2xx status to all MAIL FROM, RCPT TO commands, and <end-of-message> after a DATA/BDAT command from your server's IP address. If they can do that then you should be able to find the corresponding SMTP conversation in your spam filter's SMTP protocol logs. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP