Hello, and thank you in advance for helping with this issue. I am running MS Exchange 2003. I havea queue with stalled messages in it. No errors, just retries. All stalled messages are for one site. I am able to send mail to this site from other mail servers outside this domain, just not from the one on this specific domain. After calling the company I am sending messages to, Ifind thattheir server is registering errors coming from our IP address. The error they are receiving is as follows: did not issue MAIL/EXPN/VRFY/ETRN When I telnet into their smtp server (the site that is stalling my mail)I receive the following: 220 ww2003.fakename.com Microsoft ESMTP MAIL Service, Version: 5.0.2195.6713 ready at Tue, 10 Apr 2007 15:21:02 -0500 All good, but when I try an "ehlo" command, I get the following: ehlo 250-Requested mail action okay, completed 250-SIZE 2097152 250 8bitmime This response is truncated. However, if I telnet in from a domain where mail IS going through, I get a standard response: ehlo 250-ww2003.fakename.com Hello [x.x.x.x] 250-AUTH GSSAPI NTLM LOGIN 250-AUTH=LOGIN 250-TURN 250-ATRN 250-SIZE 2097152 250-ETRN 250-PIPELINING 250-DSN 250-ENHANCEDSTATUSCODES 250-8bitmime 250-BINARYMIME 250-CHUNKING 250-VRFY 250 OK It is the opinion of theadministrator of the remote smtp serverthat our Exchange has a setting on it that is not right. I have run through my preferences and can't find a thing. Any ideas? Thanks!

This is just the session setup you are posting. 250 status codes indicate that everything is OK. You need to see what happens after the session is established and the actual mail transfer begins. Turn on protocol logging on smtp and check the logs for any smtp error codes. http://www.msexchange.org/tutorials/Logging_the_SMTP_Service.html http://www.xequte.com/support/maillistking/smtperrors.html Cheers, Mark

Mpriem, Thanks for replying. I had logging turned on and I reviewed the logs for smtp error codes. Unfortunately, I am unable to decipher the results. I received the following lines surrounding the particular e-mail activity I am interested in: 4/10/2007 12:26:13 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 EHLO - +SERVER1.Company.org 250 0 323 27 0 SMTP - - - - 4/10/2007 12:26:13 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 MAIL - +FROM:+<recipient@Company2.com> 250 0 51 49 0 SMTP - - - - 4/10/2007 12:26:13 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 RCPT - +TO:+<sender@Company.org> 250 0 0 31 16 SMTP - - - - 4/10/2007 12:26:13 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 BDAT - SERVER2tC7tXjs5F00000157@SERVER.Company.org 250 0 91 6158 47 SMTP - - - - 4/10/2007 12:26:13 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 QUIT - SERVER1.Company.org 240 94 73 4 0 SMTP - - - - 4/10/2007 12:28:00 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 EHLO - +SERVER1.Company.org 250 0 323 27 0 SMTP - - - - 4/10/2007 12:28:00 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 MAIL - +FROM:+<Admin@Company.org> 250 0 44 41 0 SMTP - - - - 4/10/2007 12:28:00 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 RCPT - +TO:+<Admin@Company.org> 550 0 0 30 0 SMTP - - - - 4/10/2007 12:28:00 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 QUIT - SERVER1.Company.org 240 15 24 30 0 SMTP - - - - 4/10/2007 12:28:00 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 EHLO - +SERVER1.Company.org 250 0 323 27 0 SMTP - - - - 4/10/2007 12:28:00 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 MAIL - +FROM:+<> 250 0 27 23 0 SMTP - - - - 4/10/2007 12:28:00 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 RCPT - +TO:+<Admin@Company.org> 550 0 24 30 0 SMTP - - - - 4/10/2007 12:28:00 192.168.1.3 SERVER1.company.org SMTPSVC1 SERVER2 192.168.1.4 0 QUIT - SERVER1.Company.org 240 0 24 30 0 SMTP - - - - SERVER1 = Server where smtp filtering software resides SERVER2=Server where Exchange Resides Company=name of company recipient=name of person we are trying to send mail to sender=name of person who is trying to send mail Company2=name of company where mail is trying to be sent. I do not know if the admin lines are responses notifying failures, or what... there is no access to admin mailbox that I know of. I included them here only to be thorough and to give you some context surrounding the event in question. Thanks.

................................. This is also not the data you want to see. This is a short snipit of a couple of incoming messages. You need to log the smtp traffic between the internet facing relay and the other companies relay server. Given your explanation the exchange server is not the edge server in your mail infrastructure. My guess is that that is the spam filtering server right?? Monitor the traffic there. Cheers, Mark