Same events appearred multiple times for the same email in Message Hostory
Hi all,
My email server running on Exchange 2003 Std SP2, operating system is Win 2003 server Std SP1.
I got a complaint from one user, she had receiving multiple copies (till 30-Oct-07 5:09PM already received 21 copies of this email) of the same email since yesterday (29-Oct-07). The email actually was received by my email server on 29-Oct-07 1:06pm.
I went to check the Message History in Exchange System Manager console. The log for that particular email seems very awkward..
From: diana_yip@tomorrownow.com Sent: 29-Oct-07 1:06pm
To: angela@bmssin.com.sg; angie_nge@bmssin.com.sg
29-Oct-07 1:11pm SMTP: Message Submitted to Advance Queuing
29-Oct-07 1:11pm SMTP: Started Message Submission to Advanced Queue
29-Oct-07 1:11pm SMTP: Message Submitted to Categorizer
29-Oct-07 1:11pm SMTP: Message Categorized and Queued for Routing
29-Oct-07 1:11pm SMTP: Message Queued for local Delivery
29-Oct-07 1:11pm SMTP: Message Delivered Locally to multiple recipients
29-Oct-07 1:11pm SMTP: SMTP Store Driver: Message Delivered Locally to Store to angela@bmssin.com.sg
29-Oct-07 1:11pm SMTP: SMTP Store Driver: Message Delivered Locally to Store to angie_nge@bmssin.com.sg
29-Oct-07 2:18pm SMTP: Message Submitted to Advance Queuing
29-Oct-07 2:18pm SMTP: Started Message Submission to Advanced Queue
29-Oct-07 2:18pm SMTP: Message Submitted to Categorizer
29-Oct-07 2:18pm SMTP: Message Categorized and Queued for Routing
29-Oct-07 2:18pm SMTP: Message Queued for local Delivery
29-Oct-07 2:18pm SMTP: Message Delivered Locally to multiple recipients
29-Oct-07 2:18pm SMTP: SMTP Store Driver: Message Delivered Locally to Store to angela@bmssin.com.sg
29-Oct-07 2:18pm SMTP: SMTP Store Driver: Message Delivered Locally to Store to angie_nge@bmssin.com.sg
29-Oct-07 3:41pm SMTP: Message Submitted to Advance Queuing
29-Oct-07 3:41pm SMTP: Started Message Submission to Advanced Queue
29-Oct-07 3:41pm SMTP: Message Submitted to Categorizer
29-Oct-07 3:41pm SMTP: Message Categorized and Queued for Routing
29-Oct-07 3:41pm SMTP: Message Queued for local Delivery
29-Oct-07 3:41pm SMTP: Message Delivered Locally to multiple recipients
29-Oct-07 3:41pm SMTP: SMTP Store Driver: Message Delivered Locally to Store to angela@bmssin.com.sg
29-Oct-07 3:41pm SMTP: SMTP Store Driver: Message Delivered Locally to Store to angie_nge@bmssin.com.sg
........
.......
30-Oct-07 4:41pm SMTP: Message Submitted to Advance Queuing
30-Oct-07 4:41pm SMTP: Started Message Submission to Advanced Queue
30-Oct-07 4:41pm SMTP: Message Submitted to Categorizer
30-Oct-07 4:41pm SMTP: Message Categorized and Queued for Routing
30-Oct-07 4:41pm SMTP: Message Queued for local Delivery
30-Oct-07 4:41pm SMTP: Message Delivered Locally to multiple recipients
30-Oct-07 4:41pm SMTP: SMTP Store Driver: Message Delivered Locally to Store to angela@bmssin.com.sg
30-Oct-07 4:41pm SMTP: SMTP Store Driver: Message Delivered Locally to Store to angie_nge@bmssin.com.sg
Anyone here experienced this problem before? Please help, as user felt annoying toreceive this email repeatedly. Many thanks in advance.
October 30th, 2007 5:13am
any chance of restarting your exchange services during a dowtime window? That's an odd one for sure. Nothing in the app log about message loops? Is SMTP logging setto verbose? If so are you seeing anything there?
Free Windows Admin Tool Kit Click here and download it now
October 30th, 2007 1:42pm
The only time I have seen this is when there was a filelevel AV scanning Exchange files.
http://support.microsoft.com/kb/823166/en-us
October 30th, 2007 6:03pm
Reply to knightly
Thanks for your reply & suggestion.
I will schedule to restart my Exchange server tonight to see if this help.
I had checked the app log in the 'Event Viewer', nothing was shown at the timing of that email is loop again to user's mailbox. That email still in the loop and has been repeated for about 50 times or more.
I didn't turn on my SMTP Virtual Server logging. I will turn it on and see if any logs are related to this problem.
Free Windows Admin Tool Kit Click here and download it now
October 30th, 2007 8:20pm
Reply to Lasse Pettersson
Thanks for your reply.
I am using the Symantec Mail Security Exchange to scan the emails.
That email comes with an attachment (in words format).
I tried to forward that email from my external email accout (hotmail) to office mailbox, and i received it only once. So i would say that the AV scanning is not the root cause.
October 31st, 2007 12:23am
if you stop SMTP service,do you have any files in the SMTP queue directory?
You can open these files with notepad and delete them as you like. Then start SMTP service i again.
Free Windows Admin Tool Kit Click here and download it now
October 31st, 2007 2:30am
I had restarted my Exchange Server.
But this doesn't help, that particular email still in the loop..
Users kept complaint about receiving this email.
I use my Symantec Mail Security to filter out (base on the subject)this email before reaching my users' mailbox.
But from the Message History, this email still apperred repeatedly in the log (since 29-Oct-07)even i had filtered out this email.
02-Nov-07 8:21am SMTP: Message Submitted to Advance Queuing
02-Nov-07 8:21am SMTP: Started Message Submission to Advanced Queue
02-Nov-07 8:21am SMTP: Message Submitted to Categorizer
02-Nov-07 9:54am SMTP: Message Submitted to Advance Queuing
02-Nov-07 9:54am SMTP: Started Message Submission to Advanced Queue
02-Nov-07 9:54am SMTP: Message Submitted to Categorizer
02-Nov-07 11:14am SMTP: Message Submitted to Advance Queuing
02-Nov-07 11:14am SMTP: Started Message Submission to Advanced Queue
02-Nov-07 11:14am SMTP: Message Submitted to Categorizer
........
I tried to stop the SMTP Service, and checked there were no file in the SMTP queue.
Anyone have others suggestion?
Many thanks in advance.
November 3rd, 2007 8:09am
Somebody Help !!!
I have the same problem...
sometimes the message go out and sometimes no.....
I trie to send the message internal account to internal account and.... stop
SMTP: Message Submitted to Categorizer
Free Windows Admin Tool Kit Click here and download it now
November 28th, 2007 7:07am
did you ever resolve this issue ?? If so PLEASE share your solution
Thanks
Kash
June 16th, 2008 2:52pm
bump,
any suggestions?
Thanks,
Raf
Free Windows Admin Tool Kit Click here and download it now
July 7th, 2009 12:55pm
I am having the same problem (bump).
September 7th, 2012 6:36pm
I would go ahead and delete the temp table if on 2003, I would perform during non peak time as you may delete active messages in queues in transit. Also take the users out of cached mode, defunct cached modes have been known to send\receive duplicates.
Have You Checked Your SMTP Mailbox Temporary Tables Lately?
http://www.windowsitpro.com/article/smtp/have-you-checked-your-smtp-mailbox-temporary-tables-lately-
Using MFCMAPI To Delete Exchange Temp Table
http://msexchangetips.blogspot.com/2006/08/using-mfcmapi-to-delete-exchange-temp.htmlJames Chong MCITP | EA | EMA; MCSE | M+, S+ Security+, Project+, ITIL msexchangetips.blogspot.com
Free Windows Admin Tool Kit Click here and download it now
September 9th, 2012 8:23pm
If you're seeing corresponding receive events in the smtp logs for each message, I'd suspect the problem is with the sender's mail server or mail client not getting or not interpreting acknowlgement correctly. The email was accepted, but
the sender thinks it failed, and keeps re-trying.[string](0..33|%{[char][int](46+("686552495351636652556262185355647068516270555358646562655775 0645570").substring(($_*2),2))})-replace " "
September 9th, 2012 8:53pm