Exchange 2003 - issue with mail flow
Hi! I've got Exchange 2003 SP2 ENG (Native Mode) on Windows Server 2003 SP2 ENG x86 with additional DC (AD), DNS, DHCP, WINS role installed + antispam filter GFI MailEssentials. (DC has GC and exchange look global catalog fine, DNS resolution works fine). Exchange hasn't got connector just Default Virtual SMTP Server (without smart host). Telnet from the server to other mail servers works! All work fine but some time ago i saw strange queues with undeliverable mail. Messages stuck in the smtp queue "message routed and queued for remote delivery" with status (of queue) Active. I tried to do "Force connection" and "Freeze\Unfreeze" but it didn't help me. And this happened only with several domain queues - all other mail flowed without any errors... I've saw some strange error in event log: Event Type: Information Event Source: Application Popup Event Category: None Event ID: 26 Date: 1/26/2010 Time: 6:29:34 PM User: N/A Computer: server Description: Application popup: Microsoft Visual C++ Runtime Library : Runtime Error! Program: C:\WINDOWS\system32\inetsrv\inetinfo.exe Now there're only one way to fix this issue, that i've found - restart Default Virtual SMTP Server. But I'm not able to just simple restart it from exchange System Manager because it stop responding... I try to restart smtp service form comp.manager mmc console and it stop responding too. (its status change to "Stopping") I need to kill inetinfo.exe from task manager that i will able to start smtp\exchange services again. After this procedure all mail start to flow without any errors some time. When i'm trying to restart smtp server\service there're some erros in the event log: Event Type: Warning Event Source: W3SVC Event Category: None Event ID: 1013 Date: 2/1/2010 Time: 4:52:51 PM User: N/A Computer: Server Description: A process serving application pool 'ExchangeApplicationPool' exceeded time limits during shut down. The process id was '3092'. Event Type: Error Event Source: W3SVC Event Category: None Event ID: 1030 Date: 2/1/2010 Time: 8:42:01 PM User: N/A Computer: Server Description: Inetinfo terminated unexpectedly and the system was not configured to restart IIS Admin. The World Wide Web Publishing Service has shut down. But may be it's depends on killing inetinfo.exe process!? I've tried to look at logs of the Exchange and smtp service and have found: 1. The standard exchange log (located by default in c:\Program Files\Exchsrvr\Server.log\) comes to an end record with id 1034 (message routed and queued for remote delivery); 2. There're not any record about stuck messages in standart smtp service (located by default in c:\WINDOWS\system32\LogFiles\SMTPSVC1\). Exchange seems doesn't try to send mail... In addition, i've found that sometimes "stuck queue" keep alive even if there are nomessages in queue. For expl http://img534.imageshack.us/img534/960/serverissue.gif - queues of the exchange after reboot, all mail going well but there're one old "stuck queue" (yandex.ru) without any messages (it has kept alive several days already) I've used TCPViewer and there're active connection to this domain (http://img686.imageshack.us/img686/2285/serverissue2.gif) with CLOSE_WAIT status. It seems exchange maintains an active SMPT connection with specific domain even if there are nomessages in queue... I tried to use chkdsk, Diagnostics Logging (MSExchangeTransport), stopping antispam GFI services - without result! MB someone has any ideas what can it be? Thx advance! PS sorry for my english
February 2nd, 2010 7:38pm

Hi,From the error message, that should be Symantec GFI known issue which cause this symptom.Please try to disable GFI or uninstall it, then test this issue.Below article is for your reference:http://service1.symantec.com/SUPPORT/ent-gate.nsf/0/7fdf38b55d675f868825723800032d67?OpenDocumentThanksAllen
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2010 9:09am

I havn't got symantec... :) Only anti-spam from GFI -> GFI MailEssentials... If i don't find any solution i will try to uninstall gfi of course :(
February 5th, 2010 10:39am

It seems like an AV/SPAM issue as mentioned by Allen. Try disabling the service and removing the sink using TransWizdownload from here.http://turbogeeks.com/utilities/files/transwiz201.zipArun Kumar | MCSE - 2K3 + Messaging | ITIL-F V3
Free Windows Admin Tool Kit Click here and download it now
February 5th, 2010 6:41pm

Hi, thx for your answer! Could you pls explain how can i use this utility? (and what does this utility do?)
February 8th, 2010 5:02pm

PS i had chanded exchange mode from mixed to native before error has happen PPS There are more event entries: Event Type: Error Event Source: MSExchangeTransport Event Category: Queuing Engine Event ID: 6102 Date: 2/8/2010 Time: 6:56:32 PM User: N/A Computer: Server Description: ORAR reassignment failed for the message from X400:c=us;a= ;p=Domain;o=Exchange;s=Ivan;g=Ivanov; with Msg ID <54ABCDB45C7C3A43B4AF6BE7AABB2AA890E4E2@server.domain.org>. Error code : 0x8007064a
Free Windows Admin Tool Kit Click here and download it now
February 8th, 2010 7:08pm

Reinstall GFI anti-spam filter - fix my problem ;(
February 15th, 2010 11:07am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics