Is it possible to have Exchange send via different IP addresses for different users, or domains?
We send email from our Exchange servers on behalf of several different clients. Several clients want their own IP address so the other clients don't send out spam and get black listed.
I can't find any documentation on if this is possible, or how you would manage it?
Simon Holman
Expeed Technology
Australian Web Hosting
Hello,
In our company we have Exchange server 2013. One of our partner says that when they try to send us messages they get stuck in their smtp server.
Can we check on our side if were any attempt of SMTP connection from them ?
could you suggest me any tools to work with this issue..
Thanks in advance,
We are having Exchange 2013 and all emails are comin & going fine except 1 domain.
From this domain, we can receive the emails but when we send email to them we receive below notification.
Diagnostic information for administrators:<o:p></o:p>
Generating server:FQDN of my mail server
Receiving server: FQDN of far end server (IP address of far end server)
Recipeint email address
Remote Server at FQDN and IP of far end returned '400 4.4.7 Message delayed'
24-08-2016 07:07:58 - Remote Server at FQDN and IP of far end returned
'441 4.4.1 Error encountered while communicating with primary target IP address: "421 4.4.2 Connection dropped due to TimedOut." Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed
to all alternate hosts. The last endpoint attempted was IP of far end:25'
All emails to other domains goes well.
Thanks, Rishi Pandit.
We have an Exchange 2013 / Hybrid O365 deployment, with most of our mailboxes now on Exchange Online.
For a long time, our company has been using Distribution Lists that people outside the organization email to. This has led to a lot of emails being generated internally, to the mailboxes of the users on the DL.
We want to convert the DLs to Shared Mailboxes to reduce the amount of internal email generated.
Obviously we will need to create a mailbox and give the users permissions to it.
What is the best practice steps for converting a DL to a shared mailbox with minimal downtime?
Hi Team,
We are have Exchange 2013 with Cumulative update 14 in our environment. We have migrated few user to office365 by setting up Hybrid Environment. Now on-premises users are able to receive email from cloud user. But, on-premises users are unable to send mails to cloud users. we have added target address for that cloud user, still not receiving email.
Thanks in advance.
Hey Guys;
There is a exchange 2010 and 2013 server on my environment under the same domain.
i lost exchange 2010 server also no recovery option but i have a DB from 2010.
Can i mount it on 2013 server ? how ? thank you.
I have recently installed Exchange Server 2016 and all incoming emails started going to Junk folder after installing Kaspersky Security 9.0 for Microsoft Exchange Servers
Any hint whether this can be controlled from Exchange settings or Kaspersky?
I have a single 2013 Exchange server setup. I had a request to prevent internal users from being prompted to send read receipts on emails that originated from outside our organization. After researching, I created a rule in Exchange that strips 'Disposition-Notification-To' from the message header if the email is received from outside the organization.
I tested and confirmed with this rule in place, internal users are not prompted to send a read receive to an email they received from outside our organization.
However, what I just learned is this rule also prevents the outbound deliver of Out of Office replies. So, if an internal user sets Out of Office in Outlook and receives an email from outside the organization, the sender never receives the Out of Office reply. I can disable the Exchange rule and now Out of Office emails work correct.
I compared the message header line by line with the rule enabled and with the rule disabled and there is not a single instance of 'Disposition-Notification-To' on emails that do not request a read receipt, so why is the Exchange rule blocking outbound Out of Office reply messages?
Any help would be greatly appreciated.
Thanks,
We recently transitioned from Exchange 2010 to 2013 and recreated all of our Receive Connectors with the same configuration. Since switching some of our bulk email applications, we have noticed that throughput has decreased dramatically. Where it took a few minutes to send 1,700 emails, it now takes almost an hour. Are there any new throttling options in Exchange 2013 that are not set on the Receive Connector?
These are the settings on the connector:
BinaryMimeEnabled : TrueOur company is Company1, SMTP address is @Dominio1.com
We need that other company "Company2" (SMTP Address @Dominio2.com) can send mails as Company1. For example..
User User2Company@dominio2.com sends mail tousuario10@hotmail.com, but
usuario10@hotmail.com must see Direccion1@Dominio1.com as remitent.
Important is that we (Company1) can manage these remitents and only allow some of them
Is it possible??
Hey everyone. Noticed a warning in my logs:
This warning is not the first one i have gotten like this. After some googling and then testing to verify, I determined that this occurs when trying to Accept a meeting invite that was sent by someone external to my company (say I am domain1.com, if someone @domain2.com sends me an invite, I will receive the invite but they will never see that I accepted it, although it WILL appear on my calendar as expected).
After some reading, it would appear that this is expected behavior:
http://msexchangeguru.com/2011/06/08/meeting-response/
But I would like to confirm that
EDIT: I was actually able to accept a meeting from my test gmail account and my gmail account received the acceptance. There was no warning for this this time. So it would seem that this is only happening some of the time which has me scratching my head. Another user had the warning generated for them but then my spam filter reports it as having made it through the filter and out to the world. Then finally i found one case where it didn't seem that the meeting accept actually went through as there was no record for it on the spam filter. Any thoughts on this?
Please advise. Thanks guys!
I have a simple web service and in the web service I have written a simple method as illustrated in the code below.
[PrincipalPermission(SecurityAction.Demand, Role = @"KIANCOORP\SomethingElse Users U")]
public string HelloWorld()
{
var msg = "Hello {0} from internal.".FormatWith(IdentityName);
_log.Info(msg);
return msg;
}I have hosted the web service in an app pool that is set to a Domain User KIANCOORP\webapppooluser, and I have added this user into the group of "KIANCOORP\SomethingElse Users U" (via active directory).
Now when I use an internet browser to browse to the web service I get the following prompt, so I try to log in with the same user that I have used to set as the app pool user for this HelloWorld web service of mine.
Now if I try to log in with the correct credentials, the prompt comes up again
Its like I have to enter the credentials 3 times, I have tested this and everytime I have been prompted with the login dialog box I have to try 3 times and eventually it gets into the following browser screen.
If I go to the IIS logs this is what I will see.
System.ServiceModel Warning: 131076 : <TraceRecord xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord" Severity="Warning"><TraceIdentifier>http://msdn.microsoft.com/en-NZ/library/System.ServiceModel.Diagnostics.TraceHandledException.aspx</TraceIdentifier><Description>Handling an exception.</Description><AppDomain>/LM/W3SVC/3/ROOT-1-131164864670874625</AppDomain><Exception><ExceptionType>System.Security.SecurityException, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType><Message>Request for principal permission failed.</Message><StackTrace> at System.Security.Permissions.PrincipalPermission.ThrowSecurityException() at System.Security.Permissions.PrincipalPermission.Demand() at System.Security.PermissionSet.DemandNonCAS() at KianService.HelloWorld() in C:\vso\SandBox\KianService.cs:line 81 at SyncInvokeHelloWorld(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs)</StackTrace><ExceptionString>System.Security.SecurityException: Request for principal permission failed. at System.Security.Permissions.PrincipalPermission.ThrowSecurityException() at System.Security.Permissions.PrincipalPermission.Demand() at System.Security.PermissionSet.DemandNonCAS() at KianService.HelloWorld() in C:\vso\SandBox\KianService.cs:line 81 at SyncInvokeHelloWorld(Object , Object[] , Object[] ) at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs) The action that failed was: Demand The type of the first permission that failed was: System.Security.Permissions.PrincipalPermission The first permission that failed was:&lt;IPermission class="System.Security.Permissions.PrincipalPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" version="1"&gt;&lt;Identity Authenticated="true" Role="KIANCOORP\SomethingElse Users U"/&gt;&lt;/IPermission&gt; The demand was for: &lt;IPermission class="System.Security.Permissions.PrincipalPermission, mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089" version="1"&gt;&lt;Identity Authenticated="true" Role="KIANCOORP\SomethingElse Users U"/&gt;&lt;/IPermission&gt; The assembly or AppDomain that failed was: mscorlib, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionString></Exception></TraceRecord> System.ServiceModel Error: 131075 : <TraceRecord xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord" Severity="Error"><TraceIdentifier>http://msdn.microsoft.com/en-NZ/library/System.ServiceModel.Diagnostics.ThrowingException.aspx</TraceIdentifier><Description>Throwing an exception.</Description><AppDomain>/LM/W3SVC/3/ROOT-1-131164864670874625</AppDomain><Exception><ExceptionType>System.ServiceModel.FaultException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType><Message>Access is denied.</Message><StackTrace> at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet) at System.ServiceModel.Dispatcher.ChannelHandler.DispatchAndReleasePump(RequestContext request, Boolean cleanThread, OperationContext currentOperationContext) at System.ServiceModel.Dispatcher.ChannelHandler.HandleRequest(RequestContext request, OperationContext currentOperationContext) at System.ServiceModel.Dispatcher.ChannelHandler.AsyncMessagePump(IAsyncResult result) at System.Runtime.Fx.AsyncThunk.UnhandledExceptionFrame(IAsyncResult result) at System.Runtime.AsyncResult.Complete(Boolean completedSynchronously) at System.Runtime.InputQueue`1.AsyncQueueReader.Set(Item item) at System.Runtime.InputQueue`1.EnqueueAndDispatch(Item item, Boolean canDispatchOnThisThread) at System.Runtime.InputQueue`1.EnqueueAndDispatch(T item, Action dequeuedCallback, Boolean canDispatchOnThisThread) at System.ServiceModel.Channels.SingletonChannelAcceptor`3.Enqueue(QueueItemType item, Action dequeuedCallback, Boolean canDispatchOnThisThread) at System.ServiceModel.Channels.HttpChannelListener.HttpContextReceived(HttpRequestContext context, Action callback) at System.ServiceModel.Activation.HostedHttpTransportManager.HttpContextReceived(HostedHttpRequestAsyncResult result) at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.HandleRequest() at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.BeginRequest() at System.ServiceModel.Activation.HostedHttpRequestAsyncResult.OnBeginRequest(Object state) at System.Runtime.IOThreadScheduler.ScheduledOverlapped.IOCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* nativeOverlapped) at System.Runtime.Fx.IOCompletionThunk.UnhandledExceptionFrame(UInt32 error, UInt32 bytesRead, NativeOverlapped* nativeOverlapped) at System.Threading._IOCompletionCallback.PerformIOCompletionCallback(UInt32 errorCode, UInt32 numBytes, NativeOverlapped* pOVERLAP)</StackTrace><ExceptionString>System.ServiceModel.FaultException: Access is denied.</ExceptionString></Exception></TraceRecord> System.ServiceModel Information: 131076 : <TraceRecord xmlns="http://schemas.microsoft.com/2004/10/E2ETraceEvent/TraceRecord" Severity="Information"><TraceIdentifier>http://msdn.microsoft.com/en-NZ/library/System.ServiceModel.Diagnostics.TraceHandledException.aspx</TraceIdentifier><Description>Handling an exception.</Description><AppDomain>/LM/W3SVC/3/ROOT-1-131164864670874625</AppDomain><Exception><ExceptionType>System.ServiceModel.FaultException, System.ServiceModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089</ExceptionType><Message>Access is denied.</Message><StackTrace> at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)</StackTrace><ExceptionString>System.ServiceModel.FaultException: Access is denied. at System.ServiceModel.Dispatcher.SyncMethodInvoker.Invoke(Object instance, Object[] inputs, Object[]&amp; outputs) at System.ServiceModel.Dispatcher.DispatchOperationRuntime.InvokeBegin(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage5(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.ImmutableDispatchRuntime.ProcessMessage31(MessageRpc&amp; rpc) at System.ServiceModel.Dispatcher.MessageRpc.Process(Boolean isOperationContextSet)</ExceptionString></Exception></TraceRecord>I cant find anything helpful online that can help me trouble shoot this error.
Yours Sincerely, Kian, Ting
We have a system that sends transnational email to customers. We also have an SPF record that allows all of our outbound mail servers, and ends with ~all (softfail). We also have proper DKIM and DMARC (with forensic reporting enabled).
The issue is when we send emails to <someuser>@hotmail.com, we get DMARC failure/spam reports fromstaff [at] hotmail.com stating:
This is an email abuse report for an email message received from IP 104.47.125.83 on Sun, 14 Feb 2016 07:02:27 -0800.
The message below did not meet the sending domain's authentication policy.
For more information about this format please see http://www.ietf.org/rfc/rfc5965.txt.
The report included is as follows:
Feedback-Type: auth-failure
User-Agent: XMR/2.2
Version: 1.0
Original-Mail-From: <webmaster@<domain removed>.com>
Arrival-Date: Sun, 14 Feb 2016 07:02:27 -0800
Message-ID: <20160214150202.cf6b8ba0a831@www.<domain removed>.com>
Authentication-Results: hotmail.com; spf=fail (sender IP is 104.47.125.83; identity alignment result is pass and alignment mode is relaxed) smtp.mailfrom=webmaster@<domain removed>.com; dkim=fail (identity alignment result is pass and alignment mode is
relaxed) header.d=<domain removed>.com; x-hmca=fail header.id=webmaster@<domain removed>.com
Source-IP: 104.47.125.83
Auth-Failure: signature
Reported-Domain: <domain removed>.com
DKIM-Domain: <domain removed>.com
DKIM-Identity: @<domain removed>.com
DKIM-Selector: default
My question and issue is, why is Microsoft resending our emails internally, changing the sent-from IP and failing the SPF check?
Going to need someone from MS to address this as it seems to be an internal thing..
Please see: http://answers.microsoft.com/en-us/outlook_com/forum/oemail-osend/email-to-hotmail-and-other-ms-domains-rejected-due/34026f1a-9116-44cf-845e-66e5dcbc264e for more detail.
Hi,
You know that if the CAS and MBX servers are collocated on the same server the SMTP Receive connection for the Transport service will listen on 2525 instead of 25, well, because of a requirement, I separated this roles on two servers, so I needed now, that the "DEFAULT FRONTEND Servername" that listened on 2525 to listen on 25, So I changed it (remember, CAS is not present anymore on this server), but mail is stuck on draft folders and if I see logs:
Error encountered while communicating with primary target IP address: "421 4.2.1 Unable to connect." Attempted
failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts. The last endpoint attempted was 10.2.x.x:2525]}
StoreDriver still wants to send email to 2525 instead of the updated 25 of the receive connector.
I restarted Mail Submission, Information Store, and Transport Services with no luck.
Where is Exchange reading this "old" config?
Many thanks