dear sir; 

we have an exchange server 2010 install on windows 2008R2 in our company with MB Role, CAS Role and Hub Transport Role, that install and working before 3years ago very well,

before one week ago we faced issue the some time we can't receive any emails from outside our domain and when i restart the server everything back to live and exchage working again for all the day and then return can't receive email from outside.

i check our MX record and it is work, check the the sender connector and it is setup and working, check the storage available there are 40GB free space on the DB driver, check the queue it is normal.

so can you support me because we didn't find any solution for this action specially that this issue appear in different time and suddenly.

we use Kaspersky anti-spam on the server and Kaspersky ant-virus to protect our organization. 

I assume you have tried disabling Kaspersky temporarily to see if the issue goes away?

i already made this solution, and not just disable i uninstalled the anti-spam and anti-virus but didn't fixed it

and after that i install the latest version of the anti-spam to find that the server in the normal time receive 75% of mails as spam. 

Figured as much. Just thinking of maybe a spam flood hitting the filter and hosing your hub connector. Next time it happens I would try just restarting the exchange transport service. Is exchange all that is installed on this server? anything showing up in the event logs when issue occurs. ie. other server services, diagnostics, backups

Have you run through the best practices analyzer?

today when the issue appear i restart the exchange services and wait tell it running again but the issue not fixed 

through the best practices the analysis going and give me that the scan complete successfully 

regarding to the event i found this : Warrning : Process w3wp.exe () (PID=5504). Recipient object CN=Administrator,CN=Users,DC=sumafruits,DC=com read from administrator.sumafruits.com failed validation and will be excluded from the result set.  Set event logging level for Validation category to Expert to get additional events about each failure.

warrning: The execution time of agent 'Kaspersky Security antispam filter agent' exceeded 90000 milliseconds while handling event 'OnEndOfData' for message with InternetMessageId: '<01a401d0c640$f0d434f0$d27c9ed0$@infoshield.com.kw>'. This is an unusual amount of time for an agent to process a single event. However, Transport will continue processing this message.

warrning: Process MSExchangeFDS.exe (PID=3220). Errors occurred while synchronizing content from server MAIL for object Default Offline Address Book, remote server is unavailable, giving up after 5 retries. Please check previous error events logged by MSExchangeFDS for more information. 

error: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

warrning: 

The Mailbox Replication service was unable to determine the set of active mailbox databases on a mailbox server.
Mailbox server: MAIL.sumafruits.com
Error: MapiExceptionNetworkError: Unable to make admin interface connection to server. (hr=0x80040115, ec=-2147221227)
Diagnostic context:
    ......
    Lid: 10648   dwParam: 0x6D9      Msg: EEInfo: Generating component: 2
    Lid: 14744   dwParam: 0x6D9      Msg: EEInfo: Status: 1753
    Lid: 9624    dwParam: 0x6D9      Msg: EEInfo: Detection location: 501
    Lid: 13720   dwParam: 0x6D9      Msg: EEInfo: Flags: 0
    Lid: 11672   dwParam: 0x6D9      Msg: EEInfo: NumberOfParameters: 4
    Lid: 8856    dwParam: 0x6D9      Msg: EEInfo: prm[0]: Unicode string: ncacn_ip_tcp
    Lid: 8856    dwParam: 0x6D9      Msg: EEInfo: prm[1]: Unicode string: MAIL.sumafruits.com
    Lid: 12952   dwParam: 0x6D9      Msg: EEInfo: prm[2]: Long val: -1988875570
    Lid: 12952   dwParam: 0x6D9      Msg: EEInfo: prm[3]: Long val: 382312662
    Lid: 24060   StoreEc: 0x80040115
    Lid: 23746  
    Lid: 31938   StoreEc: 0x80040115
    Lid: 19650  
    Lid: 27842   StoreEc: 0x80040115
    Lid: 20866  

error: 

kavscmesrv.exe
Enterprise.Scheduling.TaskException: Exception thrown in task. TaskId = backupAlmostFullWarningPoster, Exception = Enterprise.Common.DatabaseAccess.DatabaseException: An attempt to access the database with the use of the connection string 'Data Source=MAIL\KAS_SUMAFRUITS;Initial Catalog=SecurityForExchange;Connection Timeout=120;Integrated Security=SSPI' encountered an error: Cannot open database "SecurityForExchange" requested by the login. The login failed.
Login failed for user 'NT AUTHORITY\SYSTEM'.. ---> System.Data.SqlClient.SqlException: Cannot open database "SecurityForExchange" requested by the login. The login failed.
Login failed for user 'NT AUTHORITY\SYSTEM'.
   at System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owningObject)
   at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at Enterprise.Common.DatabaseAccess.SqlServerDbConnectionFactory.CreateOpenedConnection()
   --- End of inner exception stack trace ---
   at Enterprise.Common.DatabaseAccess.SqlServerDbConnectionFactory.CreateOpenedConnection()
   at Enterprise.Common.DatabaseAccess.ThreadConnection.CreateOpenedConnection(IDatabaseConnectionFactory connectionFactory)
   at Enterprise.Common.DatabaseAccess.ThreadConnection..ctor(IDatabaseConnectionFactory connectionFactory)
   at Enterprise.Common.DatabaseAccess.SqlServerDbConnectionFactory.CreateDatabaseExecuter()
   at Enterprise.Configuration.Subsets.DeploymentInformation.ConfigurationDrivenSqlConnectionFactory.CreateDatabaseExecuter()
   at Enterprise.Backup.MetadataStore.Internal.DataAccessLayer.SqlServerCode.SqlServerMetadataProvider.CalculateStatistics(StatisticsCalculationParameters statisticsCalculationParameters)
   at Enterprise.Backup.MetadataStore.Internal.DataAccessLayer.TransactionScopeDecorators.TransactionScopeDecoratorForMetadataProvider.<>c__DisplayClass7.<CalculateStatistics>b__6()
   at Enterprise.Common.DatabaseAccess.DatabaseUtilities.ExecuteInTransactionScope[TResult](IsolationLevel isolationLevel, TimeSpan transactionTimeout, Func`1 funcToExecute)
   at Enterprise.Common.DatabaseAccess.DatabaseUtilities.ExecuteInTransactionScope[TResult](IsolationLevel isolationLevel, Func`1 funcToExecute)
   at Enterprise.Backup.MetadataStore.Internal.DataAccessLayer.TransactionScopeDecorators.TransactionScopeDecoratorForMetadataProvider.CalculateStatistics(StatisticsCalculationParameters statisticsCalculationParameters)
   at Enterprise.Backup.Internal.QuarantineBackupMetadataProvider.CalculateStatistics(StatisticsCalculationParameters statisticsCalculationParameters)
   at Enterprise.Backup.StandardMetedataRequests.GetBriefCollectionSummary(IMetadataProvider metadataProvider, MetadataFilteringExpression metadataFilteringExpression)
   at QuarantineBackup.Adapters.AdaptersImplementation.BackupPresentationBase.GetBriefCollectionSummary(MetadataFilteringExpression filteringExpression)
   at BackupServices.BackupFullnessReporter.Execute(TaskStartReason taskStartReason)
   at Enterprise.Scheduling.Managing.TaskDriver.<>c__DisplayClassb.<ExecuteTask>b__9()
   at Enterprise.Scheduling.Managing.TaskDriver.CriticalExceptionSafeHandle(Action code, Action onExceptionOccured, Action finalAction) ---> Enterprise.Common.DatabaseAccess.DatabaseException: An attempt to access the database with the use of the connection string 'Data Source=MAIL\KAS_SUMAFRUITS;Initial Catalog=SecurityForExchange;Connection Timeout=120;Integrated Security=SSPI' encountered an error: Cannot open database "SecurityForExchange" requested by the login. The login failed.
Login failed for user 'NT AUTHORITY\SYSTEM'.. ---> System.Data.SqlClient.SqlException: Cannot open database "SecurityForExchange" requested by the login. The login failed.
Login failed for user 'NT AUTHORITY\SYSTEM'.
   at System.Data.ProviderBase.DbConnectionPool.GetConnection(DbConnection owningObject)
   at System.Data.ProviderBase.DbConnectionFactory.GetConnection(DbConnection owningConnection)
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at System.Data.ProviderBase.DbConnectionClosed.OpenConnection(DbConnection outerConnection, DbConnectionFactory connectionFactory)
   at System.Data.SqlClient.SqlConnection.Open()
   at Enterprise.Common.DatabaseAccess.SqlServerDbConnectionFactory.CreateOpenedConnection()
   --- End of inner exception stack trace ---
   at Enterprise.Common.DatabaseAccess.SqlServerDbConnectionFactory.CreateOpenedConnection()
   at Enterprise.Common.DatabaseAccess.ThreadConnection.CreateOpenedConnection(IDatabaseConnectionFactory connectionFactory)
   at Enterprise.Common.DatabaseAccess.ThreadConnection..ctor(IDatabaseConnectionFactory connectionFactory)
   at Enterprise.Common.DatabaseAccess.SqlServerDbConnectionFactory.CreateDatabaseExecuter()
   at Enterprise.Configuration.Subsets.DeploymentInformation.ConfigurationDrivenSqlConnectionFactory.CreateDatabaseExecuter()
   at Enterprise.Backup.MetadataStore.Internal.DataAccessLayer.SqlServerCode.SqlServerMetadataProvider.CalculateStatistics(StatisticsCalculationParameters statisticsCalculationParameters)
   at Enterprise.Backup.MetadataStore.Internal.DataAccessLayer.TransactionScopeDecorators.TransactionScopeDecoratorForMetadataProvider.<>c__DisplayClass7.<CalculateStatistics>b__6()
   at Enterprise.Common.DatabaseAccess.DatabaseUtilities.ExecuteInTransactionScope[TResult](IsolationLevel isolationLevel, TimeSpan transactionTimeout, Func`1 funcToExecute)
   at Enterprise.Common.DatabaseAccess.DatabaseUtilities.ExecuteInTransactionScope[TResult](IsolationLevel isolationLevel, Func`1 funcToExecute)
   at Enterprise.Backup.MetadataStore.Internal.DataAccessLayer.TransactionScopeDecorators.TransactionScopeDecoratorForMetadataProvider.CalculateStatistics(StatisticsCalculationParameters statisticsCalculationParameters)
   at Enterprise.Backup.Internal.QuarantineBackupMetadataProvider.CalculateStatistics(StatisticsCalculationParameters statisticsCalculationParameters)
   at Enterprise.Backup.StandardMetedataRequests.GetBriefCollectionSummary(IMetadataProvider metadataProvider, MetadataFilteringExpression metadataFilteringExpression)
   at QuarantineBackup.Adapters.AdaptersImplementation.BackupPresentationBase.GetBriefCollectionSummary(MetadataFilteringExpression filteringExpression)
   at BackupServices.BackupFullnessReporter.Execute(TaskStartReason taskStartReason)
   at Enterprise.Scheduling.Managing.TaskDriver.<>c__DisplayClassb.<ExecuteTask>b__9()
   at Enterprise.Scheduling.Managing.TaskDriver.CriticalExceptionSafeHandle(Action code, Action onExceptionOccured, Action finalAction)
   --- End of inner exception stack trace ---
   at Enterprise.Scheduling.Managing.TaskDriver.CriticalExceptionSafeHandle(Action code, Action onExceptionOccured, Action finalAction)
   at Enterprise.Scheduling.Managing.TaskDriver.ExecuteTask(TaskStartReason taskStartReason)
   at Enterprise.Scheduling.Managing.TaskDriver.<>c__DisplayClass7.<RunCore>b__6()
   at Enterprise.Scheduling.Managing.ExecutionContextAwareJobExecuter.<>c__DisplayClass1.<Add>b__0()
   at Enterprise.Common.Threading.SynchronizableJobExecuterDecorator.InvokeJobAction(Action jobAction)
   at Enterprise.Common.Threading.SynchronizableJobExecuterDecorator.<>c__DisplayClass2.<Add>b__0()
   at Enterprise.Common.Threading.ErrorLoggingJobExecuter.LoggingExecute(Action action)

error: 

Process STORE.EXE (PID=3788). Error DNS_ERROR_RCODE_NAME_ERROR (0x8007232b) occurred when DNS was queried for the service location (SRV) resource record used to locate a domain controller for domain sumafruits.com
 The query was for the SRV record for _ldap._tcp.dc._msdcs.sumafruits.com
 Common causes of this error include the following:
 - The DNS SRV records required to locate a domain controller for the domain are not registered in DNS. These records are registered with a DNS server automatically when a domain controller is added to a domain. They are updated by the domain controller at set intervals. This computer is configured to use DNS servers with following IP addresses:
62.215.6.4
192.168.10.2

 - One or more of the following zones do not include delegation to its child zone:
sumafruits.com
com
. (the root zone)
 For information about correcting this problem, Type in the command line:
hh tcpip.chm::/sag_DNS_tro_dcLocator_messageE.htm         

there are some error and warning like that, i don't under stand some of them  

Any update i still face same issue