Quantcast
Channel: Exchange Server 2013 - Mail Flow and Secure Messaging forum
Viewing all 3660 articles
Browse latest View live

External Emails are not coming through. sometimes it comes and sometime it doesn't.

$
0
0

Hello Guys,

Please help we are in big trouble. there is problem with External Email which suddenly Stopped to come in. we have old ex 2010 Server and i have created 2 new exchange 2013 Server.everything was working fine with old exchange server.

i wanted to remove the OLd Exchnage 2010 Server thats why i have created Some coustom Frontend connector on the Exchange 2013 for A Nagios Machine to send the Email notification to the service emails.

and even the nagios machine is in the Domain. but just all of sudden the external Emails stopped to come in. Please help me here this is really very Urgent and i am not sure how can i solve this Problem and what is causing this Issue here ,

I also have Sophos SMTP Gateway, for the there is Hub Transport Receive connector on the Old Exchnage server.

New exchnage 2013 Server has by default created Receive connectors. Please help

How can i trouble shoot this please help me.


Delist IP Address

$
0
0

This is Exchnage 2016 deployment. For some reason out IP has been in banned sending IP lists.

We've tried the O365 Anti-Spam IP Delist Portal.  We first tried this around 5 hours ago.  At which point we were told that in about 30 minutes the IP address would be delisted.  However,  the problem continued,  so we've tried again (and again etc).  Now when we try to delist we get a message saying "The request to delist IP address XXX has been denied and we have escalated your request to Microsoft support.  However, there's no information on turnaround time or how to contact the correct Support team.

This issue is huge for us - we are unable to contact numerous clients and candidates until it's resolved.

We aren't currently Office 365 customers (though we are considering this as a solution). we are right now using Microsoft Exchnage 2016. Is there any other way we can expedite unblocking our IP address.


432 4.3.2 STOREDRV.Storage; mailbox server mapi session limit exceeded; STOREDRV.Deliver.Exception:TooManyObjectsOpenedException.MapiExceptionSessionLimit;Failed

$
0
0

Wondering if anyone can point me in the correct direction for dealing with a really annoying issue. The last few weeks we have had mail flowing really well and now the following issue has popped up yet again. I have no idea why after everything has been working well. No changes have been implemented anywhere so I'm stumped as to why this has started happening.

The problem is on some of the queues with the following message:

432 4.3.2 STOREDRV.Storage; mailbox server mapi session limit exceeded; STOREDRV.Deliver.Exception:TooManyObjectsOpenedException.MapiExceptionSessionLimit;Failed

Google has not been my friend when looking at this and what happens is that the relevant queues this hits builds and builds and then it re-tries, deals with a shit load of mail and then it starts to build again.

SPF Record

$
0
0

Hi,

We have planned to create SPF record in of our domain abc.com

Abc.com MX record is

Mail1.abc.com resolves to 203.6.164.5

Mail2.abc.com resolves to 203.6.164.6

We have trusted domain xyz.com we need to allow all mails from xyz.com to abc.com

Xyz.com MX record is

Mail6.xyz.com resolves to 143.8.156.5

Could you please help us which is correct one to create TXT record for SPF

abc.com.  IN TXT "v=spf1 mx ip4:203.6.164.0/28 include: Mail6.xyz.com -all"

abc.com.  IN TXT "v=spf1 mx ip4:203.6.164.0/28 include: 143.8.156.5. -all"

abc.com.  IN TXT "v=spf1 mx a ip4: 203.6.164.5 a: 203.6.164.6 include: 143.8.156.5 -all"


Thanks & Regards, Kumar N

Delay Delivery

$
0
0

Hi,

Need some help on one specific request that my management team has. For all the sales department they want to set a rule in Outlook or from Server side, where if any email they receive and if it is unread for more than 15mins then it should be forwarded to his manager and if he also keeps the mail unread then it should be forwarded to his manager (up to 2 levels). Is this functionality can be achieved without any third party <g class="gr_ gr_781 gr-alert gr_gramm gr_run_anim Style multiReplace" data-gr-id="781" id="781">utility ?</g>

If it requires third party utility then what tool I should be looking.

Thanks,

Vijesh


Thanks, Vijesh Rajan

List Parent Distribution Groups that Nested Distribution Groups Might be Members Of

$
0
0

Hi,

We have a series of typical regular universal distribution groups. We also have a large number of dynamic distribution groups. The dynamic distribution groups have been placed / nested in the universal distribution groups

We need to be able to determine which static groups a dynamic group is a member of

We're not looking to list the members of a group, or to recursively list members of a group and the members of a group nested within each group. Instead, we want to be able to determine, for example, which universal distribution groups the dynamic distribution group "MyDynGroup" belongs to

We have tried:

$groups = Get-DistributionGroup

$groups | where-object { ( Get-DistributionGroupMember $_ | where-object { $_.Name -eq “MyDynGroup”}) }

we have also tried commands along the line of:

Get-DistributionGroup |  Get-DistributionGroupMember | where { $_.Name -eq "MyDynGroup"} | select name

No joy unfortunately

Any help would be greatly appreciated

Thanks

Recipients from two exchange receive email at different time

$
0
0

Hi all, 

my company has two exchange and they are linked together.

An external email sent to A (exchange 1) and CC to B (exchange 2). B got it right away while  A as the main recipient got it after 16 mins.

I used header analysis tool and this is what i got.

Any suggest that let them receive email at about the same time?

Cheers


Exchange Server 2013 and ms-Exch-SMTP-Accept-Authoritative-Domain-Sender

$
0
0

Hello, Team!

I think I’ve found a serious issue in last CU releases. This is the case:

1 Multirole server Exchange 2013 SP1 (and older) , one creceive connector from internet to this server, no edge, nothing.

I care about preventing spoofing my company’s email addresses, and remove remove the ms-Exch-SMTP-Accept-Authoritative-Domain-Sender transport permission from anonymous senders.

To do this, we usually simple run powershell command

Remove-ADPermission <ReceiveConnector Name> –user “NT AUTHORITY\Anonymous Logon” –ExtendedRights ms-Exch-SMTP-Accept-Authoritative-Domain-Sender

This command works on Exchange SP1, the client (telnet session, f.e.) which try spoof address of company will be refused. (see screenshot below)

But in Exchange 2013 CU5, CU6 and even CU7 release this revoke permissions DOESN’T WORKS without any errors, softly. I've try Powershell and ADSI but unsuccessfully.

Then we take off permission on connector above, we keep 3 default permissions:

Accept-any-sender

Accept-Routing-Headers

Submit-Message to Server

It is wonderful works only on server SP1, but not on servers with older versions, which have right settings.

The saddest thing is I have information about Office 365 this behavior reproduced too. And I also think what in your lab you could take 15 minutes and play this simply thing....

I found only that information on connector side is diffenent on SP1 and CU5,6,7.

This is normal connection on SP1, when somebody try spoofed address. We can see a 250 AUTH Response on server side, and server refuse fake connection, all right.

And on CU5 and newest versions we doesnt see this code. Maybe auth mechanism miss something?

Any suggestions? On MS connect site a didn't found exchange bugs topic :)





Hotmail Emails not coming in

$
0
0

For the past few weeks we have experienced e-mail problems with Hotmail domain senders.

Only the Hotmail accounts are not coming in, all other domains work just fine.  We can also send anywhere as well.

I have not made any changes to our Exchange2013 server or spam services, everthing is working as it was before.

Please help, I have the SMTP logs and the emails generated from Hotmail addresses never even left the Microsoft servers.
Almost as if my domain is listed as internal for Microsoft.

Thank you!

Force TLS 1.2 on a send connector

$
0
0

Hello,

I am configuring Exchange with a third party cloud email smart host for message hygiene. In reading the report on the traffic between the Exchange 2013 servers and and the smart host in the cloud, I noticed that the connection says it is using TLS 1.0. I was wondering if I can force the connection to use TLS 1.2, but without using the registry hacks to disable TLS 1.0 and TLS 1.1 all together. The remote smart host supports and is configured for TLS 1.2. The Exchange servers are running CU13, so they should be OK as TLS 1.2 support was introduced in CU8. Thanks!


Exchange 2013 Database Growth

$
0
0

Hi 

We have 2 Exchange mailbox, and 2 CAS

I need to increase the exchange mailbox disks storage 

So I will  need to get exactly how the exchange mailbox databases size increased last year or last 2 year 

then I can know how much size should be increased 


Mahmoud

Internet Send connector

$
0
0

My question is about how Exchange 2013 manages the Servers added to a internet send connector.

Does it work as a Load Balancer, or only active, passive mode? failover kind of deal....(using the secondary only if the primary stops responding)

for example if i have an application sending 2000 emails per hour, is Exchange smart enough to use both available servers to do the Sending, or does it only send through one (default).

If mails starts queuing up would it start using both?

Regards,

MS


Outlook not open encrypted email

$
0
0
Good afternoon. There is Exchange 2013 + Outlook 2010,2016. The user creates the certificate for enciphering of letters (on the basis of a template from corporate CA), adjusts it in Outlook. In case of receipt of the encoded letter the user can't open it, gives an error message that the certificate isn't found.

Transport Rule

$
0
0

Is it possible to create a transport rule that will reject an email to a certain internal address (our helpdesk app) that has any other address in the to: or cc: fields? My users will submit a helpdesk request via email and either cc multiple people or include them in the to: field. They continuously hit reply all and when our helpdesk email address is included we end up getting multiple replies back to a ticket after everyone replies all with their 2 cents worth. I created a rule that works great when the helpdesk address is in the CC filed. I need it to work basically if there is any other address in the email aside from helpdesk

Block ALL attachments

$
0
0

I am looking at trying to create a transport rule to block ANY and ALL attachments in the Exchange 2013 environment.

Test 1 was creating a rule using "Any attachment is greater than or equal to..." 0kb and found that this will block any email that is sent whether it actually has an attachment or not.

Test 2 was creating a rule using "Any attachment's file name matches...".  While using RegEx, for example [a-z0-9], I have been able to block emails with attachments.  The issue with this is if the body of the email has a large amount of information the email will be blocked even if the email does not contain any attachments.

Anyone out there have any experience with blocking all attachments in their environment?

-Coupe


Invalid HELO name (See RFC5321 4.1.1.1)

$
0
0

Dears, 

i have issue sending mails to some domain, i checked the send connector and found this only,

my send connector is set

-----------------------------

ehlo mails.trimarforwarding.com

Received: 
250-mx1.tmdhosting.com Hello mails.trimarforwarding.com [196.202.18.10]
250-SIZE 10485760
250-8BITMIME
250-PRDR
250 HELP


Sent: 
mail from: <test@trimarforwarding.com>

Received: 
250 OK

Sent: 
rcpt to: <n.rousan@jerasalogistics.com>

Received: 
550 Access denied - Invalid HELO name (See RFC5321 4.1.1.1)

---------------------------------------------------------------------

my send connector setting is as below:


AddressSpaces                : {SMTP:*;1}
AuthenticationCredential     :
Comment                      :
ConnectedDomains             : {}
ConnectionInactivityTimeOut  : 00:10:00
DNSRoutingEnabled            : True
DomainSecureEnabled          : False
Enabled                      : True
ErrorPolicies                : Default
ForceHELO                    : False
Fqdn                         : mails.trimarforwarding.com
HomeMTA                      : Microsoft MTA
HomeMtaServerId              : TFEXMB01
Identity                     : send
IgnoreSTARTTLS               : False
IsScopedConnector            : False
IsSmtpConnector              : True
LinkedReceiveConnector       :
MaxMessageSize               : 10 MB (10,485,760 bytes)
Name                         : send
Port                         : 25
ProtocolLoggingLevel         : Verbose
RequireOorg                  : False
RequireTLS                   : False
SmartHostAuthMechanism       : None
SmartHosts                   : {}
SmartHostsString             :
SmtpMaxMessagesPerConnection : 20
SourceIPAddress              : 0.0.0.0
SourceRoutingGroup           : Exchange Routing Group (DWBGZMFD01QNBJR)
SourceTransportServers       : {TFEXMB01}
TlsAuthLevel                 :
TlsDomain                    :
UseExternalDNSServersEnabled : False

any help i don't know what is the issue the fqdn is the same as ptr record. 

Getting a warning when attempt to setup mail flow>forwarding in the O365 portal.

$
0
0
I am trying to set mail forwarding in the O365 portal but I got the attached warning.  I am not sure if another administrator has already setup forwarding.  

I see the ForwardingsmtpAddress  in powershell after issue the commad Get-Mailbox <mailbox>| fl name,forwardingSMTPAddress.  The strange thing is mailflow>forwarding in the portal is showing blank

Does anyone know why the portal is showing blank?  And also how it was setup?  

Thanks. 

Outlook

$
0
0

  In the last few days, when trying to access my office 365 account thru my office for mac Outlook, i am getting the error message  "Sorry, we're having server problems, so we can't add office 365 Sharepoint right now. Please try again later."  what is the fix for this???

Thanks!!!!

Exchange 2013 Edge Server ADAM Service not running

$
0
0

Dear Partner,

We have Exchange 2013 with Two Edge Server one Edge server working fine another one Edge Servers we got ADAM Service not running we trying manually but still have issue below errors,     

System logs:

Error 7023

The Microsoft Exchange ADAM service terminated with the following error:

%%3221225473

Error 7001

The Microsoft Exchange Transport Log Search service depends on the Microsoft Exchange ADAM service which failed to start because of the following error:

%%3221225473

Application logs,

Error  465  ESENT  svchost (6896) Instance: Corruption was detected during soft recovery in logfile C:\ProgramData\Microsoft\Windows\AppRepository\edb.log. The failing checksum record is located at position END. Data not matching the log-file fill pattern first appeared in sector 100 (0x00000064). This logfile has been damaged and is unusable.

Error 454  ESENT  svchost (6896) Instance: Database recovery/restore failed with unexpected error -501.

Error 477 svchost (6896) Instance: The log range read from the file "C:\ProgramData\Microsoft\Windows\AppRepository\edb.log" at offset 409600 (0x0000000000064000) for 4096 (0x00001000) bytes failed verification due to a range checksum mismatch.  The expected checksum was 18446744073709551615 (0xffffffffffffffff) and the actual checksum was 99 (0x63). The read operation will fail with error -501 (0xfffffe0b).  If this condition persists then please restore the logfile from a previous backup.

I applied below command,

esentutl /p adamntds.dit.

on path
Exchange Edge AD LDS database (on my system it was C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\data\Adam)

https://social.technet.microsoft.com/Forums/sharepoint/en-US/118b174b-c0d7-436c-ad0f-2133b69d222a/microsoft-exchange-adam-service-does-not-start?forum=exchangesvrgenerallegacy

Still having issue.

Regards,





ex2013 - accepted domains - deleted but still relaying

$
0
0

Hi guys.

one domain has been moved to Office 365. This domain was on exchange 2013 premises before.

We have deleted that domain on accepted domains list on on premises exchange 2013.

We kept users mailbox onpremises until we conclude everything Works fine.

We have removed mail allias (the domain that was moved to Office 365) on this users mailbox.

Internal mail flow still Works internally.

Mx records on internal and external dns points to Office 365.

If we sent an email from internal exchange user to this domain it still gets delivered internally.

What else to check?


bostjanc

Viewing all 3660 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>