Has anyone come accross this. This is a new server installation. My site runs SBS2003r2 with exchange sp2. Clients can send e-mail without an issue when there is no attachment. This indicates that the message flow is without issues. Even messages with small attachments (200KB) can get through. If they send a message with an attachment of about 500KB or more the following steps occur. 1)The user sends the message with an attachment & I can see it in the queue. 2)The message leaves the queue with the "active" status. 3)The message tracking log shows that the message has been transferred to the ISP's mail server. 4)The message reappears in the queue (after about 4 minutes)with the queue status now changed to "retry" 5)The description of the queue now reads "connection dropped by remote host" 6)Exchange again tries to send the message with the same results until the retry time frame is reached & a NDR is generated stating that the mesage could not be delivered in time. The event log only shows that the connection was dropped by the remote host despite turning on all transport logging to maximum. I use the same ISP for other sites that run the same hardware/software combination with no issues. I have tried removing all antivirus & antispam software & have reinstalled Exchange sp2. The fact that mail without attachments or with small attachments gets through makes this a curly one. Any suggestions would be appreciated.

Hi, Please post the SMTP Protocol log here for further check. 1. Open ESM, locate the SMTP Virtual Server which used to send email to your ISP server 2. Enable Logging (NCSA Common Log File Format) for the Virtual Server 3. Please send a test email with attachment over 500k to your ISP 4. When the message reappears in the queue and queue status is changed to retry mode, please gather the related log file and post here. Please allow let me know your outbound mailflow. Mike

Thanks Mike. Here is some further information. My ISP checked th connection to their server & said that the connection was disconnected after about a minute with no explanation. They are thinking perhaps there is packet fragmentation occuring. Additionaly I am able to FTP a 1MB file up to an FTP server. OWA does not allow for the larger files to be sent. POP accounts also fail when attempting to send larger files. Here is the log file yua asked for. I have placed spaced either side of the relavent section. The ISP receiving mail serveris smtp1.mail.adnap.net.au. Just realizes that this is in W3C format. I will post another entry with the NCSA format shortly. #Fields: date time c-ip cs-username s-ip s-port 2008-06-17 22:01:36 82.101.183.14 [82.101.183.14] 192.168.16.2 02008-06-17 22:01:37 82.101.183.14 [82.101.183.14] 192.168.16.2 02008-06-17 22:01:42 82.101.183.14 [82.101.183.14] 192.168.16.2 02008-06-17 22:01:42 82.101.183.14 [82.101.183.14] 192.168.16.2 02008-06-17 22:01:50 82.101.183.14 [82.101.183.14] 192.168.16.2 02008-06-17 22:01:57 78.25.38.21 78.25.38.21 192.168.16.2 02008-06-17 22:01:57 78.25.38.21 78.25.38.21 192.168.16.2 02008-06-17 22:02:02 78.25.38.21 78.25.38.21 192.168.16.2 02008-06-17 22:02:02 78.25.38.21 78.25.38.21 192.168.16.2 02008-06-17 22:02:07 78.25.38.21 78.25.38.21 192.168.16.2 02008-06-17 22:02:48 216.185.91.130 mail.cswan.com 192.168.16.2 02008-06-17 22:02:48 216.185.91.130 mail.cswan.com 192.168.16.2 02008-06-17 22:02:53 216.185.91.130 mail.cswan.com 192.168.16.2 02008-06-17 22:02:53 216.185.91.130 mail.cswan.com 192.168.16.2 02008-06-17 22:02:58 216.185.91.130 mail.cswan.com 192.168.16.2 02008-06-17 22:03:40 81.213.166.201 dsl.static81213166201.ttnet.net.tr 192.168.16.2 02008-06-17 22:03:40 81.213.166.201 dsl.static81213166201.ttnet.net.tr 192.168.16.2 02008-06-17 22:03:46 203.6.132.91 OutboundConnectionResponse - 252008-06-17 22:03:46 203.6.132.91 OutboundConnectionCommand - 252008-06-17 22:03:46 203.6.132.91 OutboundConnectionResponse - 252008-06-17 22:03:46 203.6.132.91 OutboundConnectionCommand - 252008-06-17 22:03:46 81.213.166.201 dsl.static81213166201.ttnet.net.tr 192.168.16.2 02008-06-17 22:03:46 203.6.132.91 OutboundConnectionResponse - 252008-06-17 22:03:46 203.6.132.91 OutboundConnectionCommand - 252008-06-17 22:03:46 203.6.132.91 OutboundConnectionResponse - 252008-06-17 22:03:46 203.6.132.91 OutboundConnectionCommand - 252008-06-17 22:03:46 203.6.132.91 OutboundConnectionResponse - 252008-06-17 22:03:46 81.213.166.201 dsl.static81213166201.ttnet.net.tr 192.168.16.2 02008-06-17 22:04:05 201.141.118.146 [201.141.118.146] 192.168.16.2 02008-06-17 22:04:10 201.141.118.146 [201.141.118.146] 192.168.16.2 02008-06-17 22:04:20 201.141.118.146 [201.141.118.146] 192.168.16.2 02008-06-17 22:04:26 201.141.118.146 [201.141.118.146] 192.168.16.2 02008-06-17 22:04:57 89.77.63.49 chello089077063049.chello.pl 192.168.16.2 02008-06-17 22:04:57 89.77.63.49 chello089077063049.chello.pl 192.168.16.2 02008-06-17 22:05:02 89.77.63.49 chello089077063049.chello.pl 192.168.16.2 02008-06-17 22:05:02 89.77.63.49 chello089077063049.chello.pl 192.168.16.2 02008-06-17 22:05:07 89.77.63.49 chello089077063049.chello.pl 192.168.16.2 0 2008-06-17 22:05:35 203.6.132.75 smtp1.mail.adnap.net.au 192.168.16.2 02008-06-17 22:05:35 203.6.132.75 smtp1.mail.adnap.net.au 192.168.16.2 02008-06-17 22:05:35 203.6.132.75 smtp1.mail.adnap.net.au 192.168.16.2 02008-06-17 22:05:35 203.6.132.75 smtp1.mail.adnap.net.au 192.168.16.2 02008-06-17 22:05:35 203.6.132.75 smtp1.mail.adnap.net.au 192.168.16.2 0 2008-06-17 22:06:44 189.71.102.5 z33 192.168.16.2 02008-06-17 22:06:44 189.71.102.5 z33 192.168.16.2 02008-06-17 22:06:45 189.71.102.5 z33 192.168.16.2 02008-06-17 22:06:47 189.71.102.5 z33 192.168.16.2 02008-06-17 22:06:47 189.71.102.5 z33 192.168.16.2 02008-06-17 22:06:51 189.71.102.5 z33 192.168.16.2 02008-06-17 22:06:51 189.71.102.5 z33 192.168.16.2 02008-06-17 22:06:57 189.71.102.5 z33 192.168.16.2 02008-06-17 22:06:58 189.71.102.5 z33 192.168.16.2 02008-06-17 22:07:21 208.80.166.165 208.80.166.165 192.168.16.2 02008-06-17 22:07:21 208.80.166.165 208.80.166.165 192.168.16.2 02008-06-17 22:07:26 208.80.166.165 208.80.166.165 192.168.16.2 02008-06-17 22:07:26 208.80.166.165 208.80.166.165 192.168.16.2 02008-06-17 22:07:31 208.80.166.165 208.80.166.165 192.168.16.2 02008-06-17 22:07:57 83.31.120.229 cls229.neoplus.adsl.tpnet.pl 192.168.16.2 02008-06-17 22:07:59 83.31.120.229 cls229.neoplus.adsl.tpnet.pl 192.168.16.2 02008-06-17 22:08:04 83.31.120.229 cls229.neoplus.adsl.tpnet.pl 192.168.16.2 02008-06-17 22:08:04 83.31.120.229 cls229.neoplus.adsl.tpnet.pl 192.168.16.2 02008-06-17 22:08:09 83.31.120.229 cls229.neoplus.adsl.tpnet.pl 192.168.16.2 02008-06-17 22:08:14 209.242.50.124 209-242-50-124.rev.dls.net 192.168.16.2 02008-06-17 22:08:14 209.242.50.124 209-242-50-124.rev.dls.net 192.168.16.2 02008-06-17 22:08:20 209.242.50.124 209-242-50-124.rev.dls.net 192.168.16.2 02008-06-17 22:08:20 209.242.50.124 209-242-50-124.rev.dls.net 192.168.16.2 02008-06-17 22:08:25 209.242.50.124 209-242-50-124.rev.dls.net 192.168.16.2 02008-06-17 22:08:45 203.81.209.4 xyz-f139ab42d29 192.168.16.2 02008-06-17 22:08:45 203.81.209.4 xyz-f139ab42d29 192.168.16.2 02008-06-17 22:08:51 203.81.209.4 xyz-f139ab42d29 192.168.16.2 02008-06-17 22:08:52 203.81.209.4 xyz-f139ab42d29 192.168.16.2 02008-06-17 22:09:07 203.81.209.4 xyz-f139ab42d29 192.168.16.2 02008-06-17 22:09:07 203.81.209.4 xyz-f139ab42d29 192.168.16.2 02008-06-17 22:09:13 203.81.209.4 xyz-f139ab42d29 192.168.16.2 02008-06-17 22:09:13 203.6.132.87 OutboundConnectionResponse - 252008-06-17 22:09:13 203.6.132.87 OutboundConnectionCommand - 252008-06-17 22:09:13 203.6.132.87 OutboundConnectionResponse - 252008-06-17 22:09:13 203.6.132.87 OutboundConnectionCommand - 252008-06-17 22:09:13 203.6.132.87 OutboundConnectionResponse - 252008-06-17 22:09:13 203.6.132.87 OutboundConnectionCommand - 252008-06-17 22:09:13 203.6.132.87 OutboundConnectionResponse - 252008-06-17 22:09:13 203.6.132.87 OutboundConnectionCommand - 252008-06-17 22:09:13 203.6.132.87 OutboundConnectionResponse - 252008-06-17 22:09:15 203.81.209.4 xyz-f139ab42d29 192.168.16.2 02008-06-17 22:10:07 84.13.91.153 host-84-13-91-153.opaltelecom.net.91.13.84.in-addr.arpa 192.168.16.2 02008-06-17 22:10:07 84.13.91.153 host-84-13-91-153.opaltelecom.net.91.13.84.in-addr.arpa 192.168.16.2 02008-06-17 22:10:12 84.13.91.153 host-84-13-91-153.opaltelecom.net.91.13.84.in-addr.arpa 192.168.16.2 02008-06-17 22:10:12 84.13.91.153 host-84-13-91-153.opaltelecom.net.91.13.84.in-addr.arpa 192.168.16.2 02008-06-17 22:10:17 84.13.91.153 host-84-13-91-153.opaltelecom.net.91.13.84.in-addr.arpa 192.168.16.2 02008-06-17 22:12:41 75.145.33.161 75-145-33-161-Pennsylvania.hfc.comcastbusiness.net 192.168.16.2 02008-06-17 22:12:41 75.145.33.161 75-145-33-161-Pennsylvania.hfc.comcastbusiness.net 192.168.16.2 02008-06-17 22:12:47 75.145.33.161 75-145-33-161-Pennsylvania.hfc.comcastbusiness.net 192.168.16.2 02008-06-17 22:12:47 75.145.33.161 75-145-33-161-Pennsylvania.hfc.comcastbusiness.net 192.168.16.2 02008-06-17 22:12:52 75.145.33.161 75-145-33-161-Pennsylvania.hfc.comcastbusiness.net 192.168.16.2 0

Here is the log file. The relavent section is a mail sent from rbowers@adelaideadvantage.com.au (not the real e-mail address) to scott@jazzit.com.au (not the real e-mail address) 84.222.19.117 - host [18/Jun/2008:08:00:21 +0930] "EHLO -? host SMTP" 250 31584.222.19.117 - host [18/Jun/2008:08:00:25 +0930] "MAIL -? FROM:<tcavykuo@bombco.com> SMTP" 250 4484.222.19.117 - host [18/Jun/2008:08:00:30 +0930] "RCPT -? TO: <acd3cf4@adelaideadvantage.com.au> SMTP" 550 084.222.19.117 - host [18/Jun/2008:08:00:30 +0930] "DATA - SMTP" 503 084.222.19.117 - host [18/Jun/2008:08:00:36 +0930] "QUIT -?host SMTP" 240 71203.6.132.91 - OutboundConnectionResponse [18/Jun/2008:08:01:11 +0930] "- -?220 dmx1.mail.adnap.net.au ESMTP SMTP" 0 32203.6.132.91 - OutboundConnectionCommand [18/Jun/2008:08:01:11 +0930] "EHLO -?adelaideadvantage.com.au SMTP" 0 4203.6.132.91 - OutboundConnectionResponse [18/Jun/2008:08:01:11 +0930] "- -?250-dmx1.mail.adnap.net.au SMTP" 0 26203.6.132.91 - OutboundConnectionCommand [18/Jun/2008:08:01:11 +0930] "MAIL -?FROM:<RBowers@adelaideadvantage.com.au> SMTP" 0 4203.6.132.91 - OutboundConnectionResponse [18/Jun/2008:08:01:12 +0930] "- -?250 ok SMTP" 0 6203.6.132.91 - OutboundConnectionCommand [18/Jun/2008:08:01:12 +0930] "RCPT -?TO:<scott@jazzit.com.au> SMTP" 0 4203.6.132.91 - OutboundConnectionResponse [18/Jun/2008:08:01:12 +0930] "- -?250 ok SMTP" 0 6203.6.132.91 - OutboundConnectionCommand [18/Jun/2008:08:01:12 +0930] "DATA - SMTP" 0 4203.6.132.91 - OutboundConnectionResponse [18/Jun/2008:08:01:12 +0930] "- -?354 go ahead SMTP" 0 1271.119.247.93 - pool-71-119-247-93.lsanca.dsl-w.verizon.net [18/Jun/2008:08:04:51 +0930] "EHLO -? pool-71-119-247-93.lsanca.dsl-w.verizon.net SMTP" 250 31571.119.247.93 - pool-71-119-247-93.lsanca.dsl-w.verizon.net [18/Jun/2008:08:04:51 +0930] "MAIL -? From:<ngagliardi@galileo.com> SMTP" 250 4771.119.247.93 - pool-71-119-247-93.lsanca.dsl-w.verizon.net [18/Jun/2008:08:04:56 +0930] "RCPT -? To:<houstonahm@adelaideadvantage.com.au> SMTP" 550 071.119.247.93 - pool-71-119-247-93.lsanca.dsl-w.verizon.net [18/Jun/2008:08:04:56 +0930] "DATA - SMTP" 503 071.119.247.93 - pool-71-119-247-93.lsanca.dsl-w.verizon.net [18/Jun/2008:08:05:01 +0930] "QUIT -?pool-71-119-247-93.lsanca.dsl-w.verizon.net SMTP" 240 0201.141.52.247 - [201.141.52.247] [18/Jun/2008:08:05:53 +0930] "EHLO -? [201.141.52.247] SMTP" 250 316201.141.52.247 - [201.141.52.247] [18/Jun/2008:08:05:54 +0930] "MAIL -? FROM:<tello@qcbt.com> SMTP" 250 39201.141.52.247 - [201.141.52.247] [18/Jun/2008:08:05:59 +0930] "RCPT -? TO: <elvingk@adelaideadvantage.com.au> SMTP" 550 0201.141.52.247 - [201.141.52.247] [18/Jun/2008:08:05:59 +0930] "DATA - SMTP" 503 0201.141.52.247 - [201.141.52.247] [18/Jun/2008:08:06:05 +0930] "QUIT -?[201.141.52.247] SMTP" 240 71

Here is a little more 203.6.132.87 - OutboundConnectionResponse [18/Jun/2008:07:56:49 +0930] "- -?220 hurricane.mail.adnap.net.au ESMTP SMTP" 0 37203.6.132.87 - OutboundConnectionCommand [18/Jun/2008:07:56:49 +0930] "EHLO -?adelaideadvantage.com.au SMTP" 0 4203.6.132.87 - OutboundConnectionResponse [18/Jun/2008:07:56:49 +0930] "- -?250-hurricane.mail.adnap.net.au SMTP" 0 31203.6.132.87 - OutboundConnectionCommand [18/Jun/2008:07:56:49 +0930] "MAIL -?FROM:<RBowers@adelaideadvantage.com.au> SMTP" 0 4203.6.132.87 - OutboundConnectionResponse [18/Jun/2008:07:56:49 +0930] "- -?250 ok SMTP" 0 6203.6.132.87 - OutboundConnectionCommand [18/Jun/2008:07:56:49 +0930] "RCPT -?TO:<scott@jazzit.com.au> SMTP" 0 4203.6.132.87 - OutboundConnectionResponse [18/Jun/2008:07:56:49 +0930] "- -?250 ok SMTP" 0 6203.6.132.87 - OutboundConnectionCommand [18/Jun/2008:07:56:49 +0930] "DATA - SMTP" 0 4203.6.132.87 - OutboundConnectionResponse [18/Jun/2008:07:56:49 +0930] "- -?354 go ahead SMTP" 0 12

Hi all, This issue is now resolved. The issue turned out to be the router. It was a Netgear DG834G v3 with the latest firmware. I swapped the router/modem & this rectified the situation immediately.

If I'm not to late, can I just ask, what ADSL modem and firmware are you now using? I have exactly the same issue and on the same OS using a Netgear DG834 v3 with the latest firmware version 4.01.37. I'm currently trying different firware versions on different DG834 v3 modems but so far no joy.