inbound mail stops
This may sound a bit strange, but I need some suggestions of where to start looking.
I have SBS 2008 installed which includes Exchange 2007. There is nothing special about the installation. Server is behind a modem and router. System/Network has been stable for
over a year. That being said, tThe past several days I have noticed that my firewall has been turned off, after I have turned it on. (i.e. I went in and manually reset it to default settings, fire wall on, yesterday, and this morning it was off AGAIN). Then
to add insult to injury, no mail has been received and customers are reporting that mail is being returned (reason: 452 4.3.1 Insufficient system resources) Rebooting the server seems to solve the mail issues for a while, but it limits my ability to leave
the computer room.
Mail best practices report a couple of not default settings but nothing that stop all inbound mail.
Are these related and any suggestions where to look to fix it/them?
ThanksTodd Williams
July 13th, 2011 8:20pm
Could be back pressure, check your exch server event logs for event ID's of 1500x
Could be that you have low disk space which is the most typical I have come across when dealing with back pressure.
Sukh
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2011 10:00pm
Thanks for you suggestions.
back pressure? "exch server" event logs? I have examined eventvwr/windows logs/application and dont find anything that looks related. I have examined eventvwr/applications and Services Logs and don't see anything that looks related. Might I be looking in
the wrong place?
low disk space? I wondered of that. C drive has 1GB+ free, D drive has 16GB + free. The mail store is located on the D drive.
BTW, the "alert" for you reply did not come in, so I am kind of just monitoring this thread. And I have done some testing from other mail addresses and have confirmed that mail is not arriving. (Still waiting for error message to tell me that it can
not deliver.)
Yesterday I rebooted the server and a flood of mail arrived shortly after I did that. I could not replicate that experience today.
HELPTodd Williams
July 13th, 2011 10:26pm
Which veriosn of Exch ? Sp version? Rollup?
I believe your low on disk space, 1GB is too low. What is the the total HD size.
Try this, HD size * 0.04 = Free space you should have on the C: drive.Sukh
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2011 10:42pm
About Exchange Server 2007:
Exchange Server 2007
Microsoft Corporation
Version: 08.01.0436.000
Local Disk (c;) local disk total size 73.2 GB, free space 2.49 GB
Data (d:) local disk total size 75.6 GB, fre space 43.6 GB.
data files are:
Name Database File Path Status Copy Status
First Storage Group Disabled
Mailbox Database D:\Program Files\Microsoft\Exchange Server\Mailbox\First Storage Group\Mailbox Database.edb Mounted
Second Storage Group Disabled
Public Folder Database D:\Program Files\Microsoft\Exchange Server\Mailbox\Second Storage Group\Public Folder Database.edb Mounted
If the problem is space, what would jam up the C drive?
TTodd Williams
July 13th, 2011 10:59pm
could be anything, run a search using widows search for large files and see what file there are, sort by size and delete of not needed or find out what is causing them to be created.
As a min, I'd free up about 5GB and see if you have the issue.Sukh
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2011 11:14pm
I will give that a try. I have been running with it below 5 GB for a long time.
I notice that when I run the Best PracticesAnalyzer, one of the things flaged is:
The value for the maximum Extensible Storage Engine (ESE) cache on server INDI has changed. Current maximum cache size is 500 MB.
I followed the links, but all they want to talk about is Exchange 2003, and how to fix it in 2003. Do you know anything about the ESE cache? It seems that maybe it should be 2 BG? I don't know how it was changed or where to go to fix it.
T
Todd Williams
July 13th, 2011 11:19pm
You can probably run it with around 2.92GB but I'd recommend that you have more than this.Sukh
Free Windows Admin Tool Kit Click here and download it now
July 13th, 2011 11:32pm
You didn't say anything about ESE?Todd Williams
July 13th, 2011 11:57pm
ESE Cache -
http://technet.microsoft.com/en-us/library/bb691304(EXCHG.80).aspx - This shouldn;t be set
not recommend setting a maximum size for the database cache. The maximum database cache size should not be lower than the minimum recommended amount of physical RAM. If you must reduce the maximum database cache to below the recommended levels, you should
simultaneouslySukh
Free Windows Admin Tool Kit Click here and download it now
July 14th, 2011 12:05am
Well, I seem to be making progress. I have restarted the server several times today, without effect. But this time I changed the ESE Cache (thank you for the link) and this time I started to get some mail.
So I would like to leave this OPEN until tomorrow to see if everything continues to work.
Thank you for your assistance!Todd Williams
July 14th, 2011 2:16am
Ok, I don't quite know where I am going here.
When I sat down at my workstation this morning, the only mail that I had was RSS stuff. It appeared that the Exchange Server was not passing anything again. So I started to investigate.
I after performing some updates on the server (Windows 2008 and Malware stuff), the server was restarted. Still nothing. Here is where it gets strange: I ran the Best Practices program again. Guess what, 10 (more or less) items showed up in my Outlook mail
box. Now I expected more, but the one test item I sent from my MSN account showed up. So I don't know what to think.
Im not sure if my problem is solves or not, but I will be out of the office for the weekend, so I will just have to keep my fingers crossed that stuff continues to work until monday.
Thanks for your sugestions.Todd Williams
Free Windows Admin Tool Kit Click here and download it now
July 14th, 2011 2:41pm
How is thing going? If there is any progress or question, please feel free to post it here.
Thanks.
Novak Wu
TechNet Subscriber Support
in forum
If you have any feedback on our support, please contact
tngfb@microsoft.com
July 17th, 2011 11:31pm
Thanks for asking.
Inbound mail is sporadic at best. A restart of the system seems to trigger a flood of mail at the client.
There was nothing in the queue before the power cycle. And then today I had something unexpected: 40 pieces of mail showed up, in one dump. And then the mails seems to have stopped again.
I started to think and wonder if there was some sort to denial of service taking place at my gateway. I called the ISP and asked for assistance. Their tech was concerned about
some DNS settings (which didn’t seem to make sense to me) but I let him make the adjustments (they were for reverse DNS listings in his servers), not expecting any real change.
I have gotten what I expected (no apparent change). My ISP asked that I let it sit for 24 hours so the changes could propagate. So I am. But mail is still sporadic.
If anyone has any other thoughts, I would appreciate the input.
With the exception of the adjustments my ISP has made on HIS settings, I have made no changes at Network solutions, with respect to my inbound mail IP addresses in many months.Todd Williams
Free Windows Admin Tool Kit Click here and download it now
July 20th, 2011 2:09am
Hi Todd
So your original issue is still there? By the sounds of it, it seems like that you have/had multiple issues. The 1st post seems to be different to what your experiencing now?
Sukh
July 20th, 2011 4:49am
Hi again....
As I said, mail is now sporadic. One of my correspondents was able to get this message back to me:
The original message was received at Wed, 20 Jul 2011 02:26:27 -0400
from mtaomg-da03.r1000.mx.aol.com [172.29.51.139]
*** ATTENTION ***
Your e-mail is being returned to you because there was a problem with its
delivery.
The address which was undeliverable is listed in the section
labeled: "----- The following addresses had permanent fatal errors -----".
The reason your mail is being returned to you is listed in the section
labeled: "----- Transcript of Session Follows -----".
The line beginning with "<<<" describes the specific reason your e-mail could
not be delivered.
The next line contains a second error message which is a general translation for other e-mail servers.
Please direct further questions regarding this message to the e-mail
administrator or Postmaster at that destination.
--AOL Postmaster
----- The following addresses had permanent fatal errors -----
<TWilliams@basicitsupport.com>
(reason: 452 4.3.1 Insufficient system resources)
----- Transcript of session follows -----
... while talking to mail.wlmsburg.org.:
>>> MAIL From:<bobmorgansmail@aol.com>
SIZE=27513
<<< 452 4.3.1 Insufficient system resources
<TWilliams@basicitsupport.com>...
Deferred: 452 4.3.1 Insufficient system
resources
Message could not be delivered for 3 hours
Message will be deleted from queue
I have looked for 452 4.3.1 and can find nothing relative.
Any suggestions?. This is the same message that my correspondent printed and handed to me a week ago.
You commented “multiple issues”. There may in fact be, but in the course of trying to trouble shoot the problem, I started with the Best Practices Analyzer. While
it did have some “none default” issues, nothing seems to relate to insufficient resource issues.
I'm still at a loss.Todd Williams
Free Windows Admin Tool Kit Click here and download it now
July 21st, 2011 1:01pm
If you go back to the past posts, how much disk space /memory do you have free? What is the total size?
Anything in your event logs? Sukh
July 21st, 2011 2:05pm
I think I have given you this information before:
C; 73.2 gb / 2.9 GB available
d: 75.6 gb / 42.4 GB available.
And no, there is nothing in the event logs. (but then I may not be looking in the right place.) It seems to me that there shold be logs for just Exchange, but I can't seem to find them. Nothing shows up in EVENTVWR.MSC.
YOu had proposed that I need more available space on my C: drive. That is nice, but this is an SBS server, and there is nothing to remove from the C: drive. The temp folders are empyt. The mail folders have been moved to the D: drive. Im not sure I want
to try and relocate the SQL DB files. Update (uninstall files) have been removed. Not much more that can be stripped out.
But the mail is still sporatic.
Still trying to figure it outTodd Williams
Free Windows Admin Tool Kit Click here and download it now
July 26th, 2011 8:26pm
You have 73.2GB, run a search on the c: drive for anything larger than 1MB, there must be temp files, caches, old SP, updates etc... you can remove?
Sukh
July 27th, 2011 8:38am
Sukh,
I’m sorry, I just can’t seem to find anything to remove from the C: drive. Below are some extracts from the large file report.
Size by File Group
File Group
Total size on Disk
Files
System Files
14,273 MB
683
Executable Files
1,731 MB
98
Compressed Files
1,148 MB
25
Backup Files
140 MB
4
Temporary Files
35.0 MB
1
Text Files
32.7 MB
4
Web Page Files
7.29 MB
1
Office Files
6.06 MB
1
All other files
37,817 MB
388
Report statistics
File name
Folder
Owner
Size on Disk
Size
Last accessed
SharePoint_Config_29c26fca-17b8-48c1-9704-b869932abcb6_log.LDF
c:\Windows\SYSMSI\SSEE\MSSQL.2005\MSSQL\Data
NT AUTHORITY\NETWORK SERVICE
14,199 MB
14,199 MB
8/12/2008 9:18:23 PM
pagefile.sys
c:\
BUILTIN\Administrators
8,489 MB
8,489 MB
4/5/2010 1:29:32 PM
SUSDB.mdf
c:\WSUS\SUSDB\UpdateServicesDbFiles
NT AUTHORITY\NETWORK SERVICE
3,782 MB
3,782 MB
8/12/2008 9:33:11 PM
SBSMonitoring.mdf
c:\Program
Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Data
BUILTIN\Administrators
3,710 MB
3,710 MB
10/15/2009 9:27:16 PM
ShareWebDb_log.LDF
c:\Windows\SYSMSI\SSEE\MSSQL.2005\MSSQL\Data
NT AUTHORITY\NETWORK SERVICE
2,809 MB
2,809 MB
10/15/2009 9:19:52 PM
{f1add9b6-b876-11e0-9a62-00265559b9f0}{3808876b-c176-4e48-b7ae-04046e6cc752}
c:\System
Volume Information
BUILTIN\Administrators
738 MB
738 MB
7/27/2011 11:00:17 PM
{f1add9e1-b876-11e0-9a62-00265559b9f0}{3808876b-c176-4e48-b7ae-04046e6cc752}
c:\System
Volume Information
BUILTIN\Administrators
631 MB
631 MB
7/28/2011 7:00:00 AM
MEMORY.DMP
c:\Windows
BUILTIN\Administrators
579 MB
579 MB
11/12/2009 8:23:54 PM
{f1add990-b876-11e0-9a62-00265559b9f0}{3808876b-c176-4e48-b7ae-04046e6cc752}
c:\System
Volume Information
BUILTIN\Administrators
463 MB
463 MB
7/27/2011 5:00:19 PM
{f1add977-b876-11e0-9a62-00265559b9f0}{3808876b-c176-4e48-b7ae-04046e6cc752}
c:\System
Volume Information
I thought if I could find the usual cache of log files (you know the usual collection of a thousand 2MB files), I could strip out the old ones, but the “usual” folders
don’t have much. I have looked in the usual system32/LogFiles and the whole folder has ONLY 34.1 MB of date. (Did I mention this is a SBS2008 64-bit Operating System.)
This seems to be getting away from the issue of why the mail is stopping. And yes, I know you believe the problem is disk space – but I have been running on less that what
I have now, and it has not impacted the mail performance, so I have strong questions about the relationship of the available space on the C: drive and the mail performance. As I said before, the mail store is located on the D: drive.
Still searching for a solution.Todd Williams
Free Windows Admin Tool Kit Click here and download it now
July 28th, 2011 12:43pm
Sukh,
I’m sorry, I just can’t seem to find anything to remove from the C: drive. Below are some extracts from the large file report.
Size by File Group
File Group
Total size on Disk
Files
System Files
14,273 MB
683
Executable Files
1,731 MB
98
Compressed Files
1,148 MB
25
Backup Files
140 MB
4
Temporary Files
35.0 MB
1
Text Files
32.7 MB
4
Web Page Files
7.29 MB
1
Office Files
6.06 MB
1
All other files
37,817 MB
388
Report statistics
File name
Folder
Owner
Size on Disk
Size
Last accessed
SharePoint_Config_29c26fca-17b8-48c1-9704-b869932abcb6_log.LDF
c:\Windows\SYSMSI\SSEE\MSSQL.2005\MSSQL\Data
NT AUTHORITY\NETWORK SERVICE
14,199 MB
14,199 MB
8/12/2008 9:18:23 PM
pagefile.sys
c:\
BUILTIN\Administrators
8,489 MB
8,489 MB
4/5/2010 1:29:32 PM
SUSDB.mdf
c:\WSUS\SUSDB\UpdateServicesDbFiles
NT AUTHORITY\NETWORK SERVICE
3,782 MB
3,782 MB
8/12/2008 9:33:11 PM
SBSMonitoring.mdf
c:\Program
Files (x86)\Microsoft SQL Server\MSSQL.1\MSSQL\Data
BUILTIN\Administrators
3,710 MB
3,710 MB
10/15/2009 9:27:16 PM
ShareWebDb_log.LDF
c:\Windows\SYSMSI\SSEE\MSSQL.2005\MSSQL\Data
NT AUTHORITY\NETWORK SERVICE
2,809 MB
2,809 MB
10/15/2009 9:19:52 PM
{f1add9b6-b876-11e0-9a62-00265559b9f0}{3808876b-c176-4e48-b7ae-04046e6cc752}
c:\System
Volume Information
BUILTIN\Administrators
738 MB
738 MB
7/27/2011 11:00:17 PM
{f1add9e1-b876-11e0-9a62-00265559b9f0}{3808876b-c176-4e48-b7ae-04046e6cc752}
c:\System
Volume Information
BUILTIN\Administrators
631 MB
631 MB
7/28/2011 7:00:00 AM
MEMORY.DMP
c:\Windows
BUILTIN\Administrators
579 MB
579 MB
11/12/2009 8:23:54 PM
{f1add990-b876-11e0-9a62-00265559b9f0}{3808876b-c176-4e48-b7ae-04046e6cc752}
c:\System
Volume Information
BUILTIN\Administrators
463 MB
463 MB
7/27/2011 5:00:19 PM
{f1add977-b876-11e0-9a62-00265559b9f0}{3808876b-c176-4e48-b7ae-04046e6cc752}
c:\System
Volume Information
I thought if I could find the usual cache of log files (you know, the cache in system32/LogFiles that typically contains a thousand 2MB files of old logs), I could strip out the
old ones, but the “usual” folders don’t have much. (Did I tell you that this is a SBS2008 server with a 64-bit Operating System?)
This seems to be getting away from the issue of why the mail is stopping. And yes, I know you believe the problem is disk space – but I have been running on less that what
I have now, and it has not impacted the mail performance, so I have strong questions about the relationship of the available space on the C: drive and the mail performance. As I said before, the mail store is located on the D: drive.
Still searching for a solution.Todd Williams
July 28th, 2011 12:46pm
Who is mail.wlmsburg.org?
Also, remove the memory.dmp,
Also is your C and D drive on the same phsical drive but just partitioned, if yes, can you move the pagefile over.
Sukh
Free Windows Admin Tool Kit Click here and download it now
July 29th, 2011 11:28am
Hi again,
mail.wlmsburg.org is my mail server.
memory.dmp gone.
pagefile moved.
Guess I will just need to see what happens in the next 48 hours. Thanks for the suggestions.
I was once told to wait a time with patients....Todd Williams
July 29th, 2011 1:59pm
Todd, Exchange BackPressure monitored disk space only on the disk, where Transport Queue placed. If you can't cleanup you system drive, try move Queue database to drive D.
http://www.petri.co.il/back-pressure-moving-queue-database-in-exchange-2007.htmMVP Exchange Server from Russia http://okrylov.wordpress.com
Free Windows Admin Tool Kit Click here and download it now
July 29th, 2011 5:17pm
Oleg,
Thank you! I think this is probabily a better answer than moving the pagefile. But, as I reported to Sukh, I have moved the pagefile and now have 13GB of space on my C: drive, so I suspect I will be OK for a while. BUT, if the problem should creep
up again, I will give this a try next.
Still, waiting a time with patients until the system tells me if it is happy.Todd Williams
July 29th, 2011 7:42pm
I would start with the Event Log of the server.
Free Windows Admin Tool Kit Click here and download it now
August 4th, 2011 12:21pm