Hello all…
We have a single exchange 2013 server here in our school district – migrated a couple months or so ago. What we are having an issue with now are in-house app servers and network scanners periodically dropping connections to our Exchange server (or vice-versa). I’ve include the pertinent receive log entries below. Not sure what’s causing it. Would we need to use a different receive connector without any tarpit or delay values possibly? I also read that DNS resolution could cause this, but we are getting hellos, and data seems to be sending before the communication error…so this would tell me our DNS resolution has been established seeing how both servers can “find” each other. Using MS DNS\AD here obviously.
Not sure what to do at this point other than add all affected smtp capable scanners\servers to another receive connector that does not have any tarpit\delays configured. Currently the Default Frontend connector is being used to receive smtp for the app servers\scanners
Any help with this is greatly appreciated!
Thanks….Dennis
Payroll Messaging Server2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,0,172.16.240.11:25,172.16.240.14:2445,+,,
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,1,172.16.240.11:25,172.16.240.14:2445,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,2,172.16.240.11:25,172.16.240.14:2445,>,"220 EXCHANGE.ourdomain.com Microsoft ESMTP MAIL Service ready at Wed, 18 Dec 2013 18:01:09 -0500",
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,3,172.16.240.11:25,172.16.240.14:2445,<,HELO JetTracEMAIL,
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,4,172.16.240.11:25,172.16.240.14:2445,>,250 EXCHANGE.ourdomain.com Hello [172.16.240.14],
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,5,172.16.240.11:25,172.16.240.14:2445,<,MAIL FROM:<nakanod@ourdomain.com>,
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,6,172.16.240.11:25,172.16.240.14:2445,*,08D0C770B79C737A;2013-12-18T23:01:09.626Z;1,receiving message
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,7,172.16.240.11:25,172.16.240.14:2445,>,250 2.1.0 Sender OK,
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,8,172.16.240.11:25,172.16.240.14:2445,<,RCPT TO:<minattis@ourdomain.com>,
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,9,172.16.240.11:25,172.16.240.14:2445,>,250 2.1.5 Recipient OK,
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,10,172.16.240.11:25,172.16.240.14:2445,<,DATA,
2013-12-18T23:01:09.626Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,11,172.16.240.11:25,172.16.240.14:2445,>,354 Start mail input; end with <CRLF>.<CRLF>,
2013-12-18T23:01:09.657Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,12,172.16.240.11:25,172.16.240.14:2445,*,,Proxy destination(s) obtained from OnProxyInboundMessage event
2013-12-18T23:01:09.657Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,13,172.16.240.11:25,172.16.240.14:2445,*,,"Message or connection acked with status Retry and response 441 4.4.1 Error encountered while communicating with primary target IP address:""421 4.4.2 Connection dropped due to ConnectionAborted."" Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts. The last endpoint attempted was 172.16.240.11:2525"
2013-12-18T23:01:09.860Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,14,172.16.240.11:25,172.16.240.14:2445,>,451 4.7.0 Temporary server error. Please try again later. PRX5 ,
2013-12-18T23:01:09.860Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,15,172.16.240.11:25,172.16.240.14:2445,<,QUIT,
2013-12-18T23:01:09.860Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,16,172.16.240.11:25,172.16.240.14:2445,>,221 2.0.0 Service closing transmission channel,
2013-12-18T23:01:09.860Z,EXCHANGE\Default Frontend EXCHANGE,08D0C770B79C737A,17,172.16.240.11:25,172.16.240.14:2445,-,,Local
Xerox Copier\Scanner
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,4,172.16.240.11:25,172.16.240.68:41614,>,250-EXCHANGE.ourdomain.com Hello [172.16.240.68],
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,5,172.16.240.11:25,172.16.240.68:41614,>,250-SIZE 37748736,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,6,172.16.240.11:25,172.16.240.68:41614,>,250-PIPELINING,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,7,172.16.240.11:25,172.16.240.68:41614,>,250-DSN,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,8,172.16.240.11:25,172.16.240.68:41614,>,250-ENHANCEDSTATUSCODES,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,9,172.16.240.11:25,172.16.240.68:41614,>,250-STARTTLS,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,10,172.16.240.11:25,172.16.240.68:41614,>,250-X-ANONYMOUSTLS,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,11,172.16.240.11:25,172.16.240.68:41614,>,250-AUTH NTLM,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,12,172.16.240.11:25,172.16.240.68:41614,>,250-X-EXPS GSSAPI NTLM,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,13,172.16.240.11:25,172.16.240.68:41614,>,250-8BITMIME,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,14,172.16.240.11:25,172.16.240.68:41614,>,250-BINARYMIME,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,15,172.16.240.11:25,172.16.240.68:41614,>,250-CHUNKING,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,16,172.16.240.11:25,172.16.240.68:41614,>,250 XRDST,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,17,172.16.240.11:25,172.16.240.68:41614,<,MAIL FROM: <xerox@ourdomain.com>,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,18,172.16.240.11:25,172.16.240.68:41614,*,08D0CBD88CF66B8A;2013-12-24T14:05:49.932Z;1,receiving message
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,19,172.16.240.11:25,172.16.240.68:41614,>,250 2.1.0 Sender OK,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,20,172.16.240.11:25,172.16.240.68:41614,<,RCPT TO: <RutigliS@ourdomain.com> ORCPT=rfc822;RutigliS@ourdomain.com,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,21,172.16.240.11:25,172.16.240.68:41614,>,250 2.1.5 Recipient OK,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,22,172.16.240.11:25,172.16.240.68:41614,<,DATA,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,23,172.16.240.11:25,172.16.240.68:41614,>,354 Start mail input; end with <CRLF>.<CRLF>,
2013-12-24T14:05:49.948Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,24,172.16.240.11:25,172.16.240.68:41614,*,,Proxy destination(s) obtained from OnProxyInboundMessage event
2013-12-24T14:05:49.963Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,25,172.16.240.11:25,172.16.240.68:41614,*,,"Message or connection acked with status Retry and response 441 4.4.1 Error encountered while communicating with primary target IP address:""421 4.4.2 Connection dropped due to ConnectionAborted."" Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts. The last endpoint attempted was 172.16.240.11:2525"
2013-12-24T14:05:50.026Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,26,172.16.240.11:25,172.16.240.68:41614,>,451 4.7.0 Temporary server error. Please try again later. PRX5 ,
2013-12-24T14:05:50.026Z,EXCHANGE\Default Frontend EXCHANGE,08D0CBD88CF66B8A,27,172.16.240.11:25,172.16.240.68:41614,-,,Remote(SocketError)