Message stock in the queue on Edge Server
My Exchange 2007 server doesn't receive messages from Edge server.
If I telnet my Exchange on port 25 from the Edge server I can send an email. If I telnet my Edge from the Internet it says that I cannot relay emails.
I have the following message in the applications event viewer.
Event Type: Information
Event Source: MSExchangeTransport
Event Category: Storage
Event ID: 17008
Date: 10/8/2010
Time: 11:32:23 PM
User: N/A
Computer: IFC-EDGE4
Description:
The Microsoft Exchange Transport service has started the background scan of the queue database. All messages that have not yet been delivered will be loaded.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: MSExchangeTransport
Event Category: Storage
Event ID: 17010
Date: 10/8/2010
Time: 11:32:24 PM
User: N/A
Computer: IFC-EDGE4
Description:
The background scan of the transport queue database has completed. 22 message(s) were found.
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Event Type: Information
Event Source: MSExchangeTransport
Event Category: Transport Address Book
Event ID: 19001
Date: 10/8/2010
Time: 11:32:24 PM
User: N/A
Computer: IFC-EDGE4
Description:
Recipient cache loaded. Time: 00:00:00.0312500, Recipients: 11, Proxy addresses: 19
For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.
Thank you
October 8th, 2010 11:45pm
On Sat, 9 Oct 2010 03:41:26 +0000, Event ID 17008 and 17010 on Edge
wrote:
>My Exchange 2007 server doesn't receive messages from Edge server.
>
>If I telnet my Exchange on port 25 from the Edge server I can send an email. If I telnet my Edge from the Internet it says that I cannot relay emails.
That's a good thing! You shouldn't be relaying e-mail for anyone.
>I have the following message in the applications event viewer.
None of those is relevant to your Edge server not relaying e-mail to
domains that aren't in your Exchange organization's "Accepted Domains"
list.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
October 9th, 2010 12:17am
I have 3 "Accepted Domains" configured.
IFC.local
ifcsolutions.ca
ifc-solutions.ca
First one is only local domain. The 2 others they are received on the Edge but nor relayed inside even if they are in the list of accepted domains.
October 10th, 2010 2:32pm
On Sun, 10 Oct 2010 18:29:24 +0000, Event ID 17008 and 17010 on Edge
wrote:
>
>
>I have 3 "Accepted Domains" configured.
>
>IFC.local
>
>ifcsolutions.ca
>
>ifc-solutions.ca
>
>First one is only local domain. The 2 others they are received on the Edge but nor relayed inside even if they are in the list of accepted domains.
Not related to your problem, but it's something you should fix -- your
server identifies itself using its internal name. That will casue
probelems with the delivery of e-mail to some sites:
220 IFC-EDGE4.IFC.LOCAL Microsoft ESMTP MAIL Service
The NDR when an e-mail is sent to an address in your domain doesn't
say anything about a problem with relay or unknown recipient addresses
Diagnostic information for administrators:
Generating server: IFC.LOCAL
postmaster@ifcsolutions.ca
IFC-EXCH2.IFC.LOCAL #<IFC-EXCH2.IFC.LOCAL #5.7.1 smtp;550 5.7.1 Client
does not have permissions to submit to this server> #SMTP#
Have you changed any of the default permissions on any connectors?
That error says that the session was authenticated (that's a good
thing), but that "ms-Exch-SMTP-Submit" is missing.
If the text said "EXTERNAL client . . . " it would mean you had the IP
address of the Edge server in an IP block list.
Run this on your HT server, substituting the connector name, and see
if the Edge Transport Servers group is missing.
[PS] C:\>Get-ReceiveConnector "connector-name>" | Get-ADPermission |
where {$_.extendedrights -like "*submit*"}|ft user,extendedrights
-auto
User ExtendedRights
---- --------------
NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-SMTP-Submit}
DOMAIN\Exchange Servers {ms-Exch-SMTP-Submit}
MS Exchange\Hub Transport Servers {ms-Exch-SMTP-Submit}
MS Exchange\Edge Transport Servers {ms-Exch-SMTP-Submit}
MS Exchange\Externally Secured Servers {ms-Exch-SMTP-Submit}
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
October 10th, 2010 11:08pm
Hi,
Yes, It seems to be a problem there.
I ran the command on both Default and Client connectors and I get :
User ExtendedRights
---- --------------
NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-SMTP-Submit}
How can I fix this?
How can this happen?
Thanks
F Coallier
October 11th, 2010 12:05am
On Mon, 11 Oct 2010 04:01:58 +0000, Event ID 17008 and 17010 on Edge
wrote:
>Yes, It seems to be a problem there.
>
>I ran the command on both Default and Client connectors and I get :
>
>User ExtendedRights ---- -------------- NT AUTHORITY\ANONYMOUS LOGON {ms-Exch-SMTP-Submit}
>
>How can I fix this?
Add the permissions to the connectors.
>How can this happen?
It happens if you remove the permissions.
---
Rich Matheisen
MCSE+I, Exchange MVP
--- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
October 11th, 2010 10:40pm
Thank you. Everything works fine now.
FC
October 12th, 2010 9:51am