Exchange 2003 keeps re-sending smtp message
Normally I can pretty much solve IT problems through my own research. However, I must admit that I am absolutely stumped by this one. I have a user who forwarded themselves an e-mail, which is relayed from a linux server. Now this user keeps receiving the e-mail every 1 - 2 seconds. Thinking it was an Outlook problem I went through some preliminary steps by re-creating her pst file, removing her account and adding it back in, working offline for a while then back on, and even restarted the client and Exchange server. Nothing clears this problem up. Other clients are receiving e-mail through the same smtp server fine. I discovered that stopping the smtp service fixes the problems, but that of course keeps everyone else from getting their messages through this server as well. I don't think the problem is from the relay server because if I remove that servers IP address from the list of approved relay servers she still continues to receive the message. I don't see any sign of the e-mail in the queue on the Exchange server and the message is not in her outbox either. Anyone have any idea at all what is causing this and how to stop it?!?! I was hoping it would have cleared over the weekend, but her mailbox is not up to 62,000 message since Friday evening.
March 15th, 2010 7:21am
I think this mail some how got stuck on the temp tables of the store and is pushing the email again and agin to the mail box. Use MFCMAPI (http://support.microsoft.com/kb/906557) and try to clear the temp tables and see if that resolves the issue.Also be very careful while using this tool as you will be directly opening the store.
Raj
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2010 8:19am
Hi, PLease enable diagnostic logging in exchange server for the transport for all the counters to maximum and check the event viewer. This will help in diagnosing the problem. Mahendra
March 15th, 2010 8:22am
I think this mail some how got stuck on the temp tables of the store and is pushing the email again and agin to the mail box. Use MFCMAPI (http://support.microsoft.com/kb/906557) and try to clear the temp tables and see if that resolves the issue.Also be very careful while using this tool as you will be directly opening the store.
Raj
I was SO hoping this would fix the problem, but no luck. There were two temp folders. Deleted them both per method 1. Then per method 2 tried looking in each temp folder to deleted the message manually. Both folders are empty. I also forgot to mention in my original post that this is a different message being generated each time, not the same one over and over. I confirmed this by verifying a different message ID in the header.
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2010 8:59am
Hi,PLease enable diagnostic logging in exchange server for the transport for all the counters to maximum and check the event viewer. This will help in diagnosing the problem.Mahendra
Done, but so far not a thing has been logged. I tepted to go back to looking at Outlook as being the problem, but it just doesn't make since with if stopping the smtp service resolves it. Also, if I close Outlook and shut down the client machine, then log on via OWA to this account on a different machine, the messages continue to accumulate. Queue viewer and queue folder are completely empty.
March 15th, 2010 9:12am
Below is the header information from one of the e-mails.Microsoft Mail Internet Headers Version 2.0thread-index: AcrEE/5Cj733ji01TOGUjoKFDYnHzA==Received: from lnxserver.ihlic1.int ([17x.1x.15x.x]) by SERVERNAME with Microsoft SMTPSVC(6.0.3790.3959); Mon, 15 Mar 2010 03:49:08 -0400Content-Type: multipart/mixed; boundary="===============2090667449=="MIME-Version: 1.0Subject: Zachary L. Day 840754From: <USER1@ihlic.com>Content-Transfer-Encoding: 7bitTo: <USER1@ihlic.com>Return-Path: <USER1@ihlic.com>Message-ID: <SERVERNAMEwVn20lbhsKd0000006c@SERVERNAME>X-OriginalArrivalTime: 15 Mar 2010 07:49:08.0218 (UTC) FILETIME=[FE3AF5A0:01CAC413]Content-Class: urn:content-classes:messageImportance: normalPriority: normalX-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4325Date: 15 Mar 2010 03:49:08 -0400
--===============2090667449==Content-Type: text/plain; charset="us-ascii"MIME-Version: 1.0Content-Transfer-Encoding: 7bit
--===============2090667449==Content-Type: text/plain; charset="us-ascii"Content-Disposition: attachmentMIME-Version: 1.0Content-Transfer-Encoding: 7bit
--===============2090667449==Content-Type: image/pdf; name="Image-0.pdf"MIME-Version: 1.0Content-Transfer-Encoding: base64Content-Disposition: attachment; filename="Image-0.pdf"
--===============2090667449==--
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2010 10:54am
Hi,
Please use Message Tracking to check the detail of the emails according to the different message ID.
Have you set any Delivery Options of this user in ADUC| User account| Exchange General?
Please check the forward options both in this user and Linux server.
I’m looking forward to your reply.
Thanks,
Richard.
March 15th, 2010 12:53pm
Try forcing all content to that recipient to plain text temporarily and see if it stops the retries. I've seen similar symptoms on mixed content email that caused the receiving server to get the email, and deliver it, but not send the final OK, and the sending server would try to re-send it.
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2010 1:57pm
I really appreciate everyone's help on this. The problem seems to be fixed now. Seems that a developer was doing something on the relay server and didn't inform anyone. Still a little confused why it was still able to relay since I explicitly removed that server's IP address from the approved list, but I think that might be something set in the still allow if authenticated setting. Thanks again.
March 15th, 2010 6:02pm
On Mon, 15 Mar 2010 05:59:52 +0000, jmfrost wrote:>I think this mail some how got stuck on the temp tables of the store and is pushing the email again and agin to the mail box. Use MFCMAPI (http://support.microsoft.com/kb/906557) and try to clear the temp tables and see if that resolves the issue.Also be very careful while using this tool as you will be directly opening the store. >RajI was SO hoping this would fix the problem, but no luck. There were two temp folders. Deleted them both per method 1. Then per method 2 tried looking in each temp folder to deleted the message manually. Both folders are empty. I also forgot to mention in my original post that this is a different message being generated each time, not the same one over and over. I confirmed this by verifying a different message ID in the header. That sure sounds like the classic description of anauto-forward/auto-rely message loop!Remove the forwarding rule from the Outlook profile.If removing the rule from Outlook doesn't stop the loop (it may take afew minutes), then stop the SMTP service will stop the loop. Then findthe message in the delivery queue on either the Exchange of Linuxmachine and kill it. Since you'll probably need the SMTP servicerunning to find the message you might have better luck stopping theMTA on the Linux machine.---Rich MatheisenMCSE+I, Exchange MVP---
Rich Matheisen
MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
March 15th, 2010 6:48pm
Have you any updates?
Thanks,
Richard.
March 26th, 2010 9:48am
Sorry. For some reason I'm not getting my notifications on a response. The problem has been resolved. It was something one of our devolpers did on the Linux box that caused the problem. Thanks for everyone's input.
Free Windows Admin Tool Kit Click here and download it now
April 8th, 2010 5:01pm