RE: Exchange slow sending outbound messages

  • From: "Greg Mulholland" <greg@xxxxxxxxxxxxxx>
  • To: "[ExchangeList]" <exchangelist@xxxxxxxxxxxxx>
  • Date: Sat, 12 Jun 2004 10:17:35 +1000

Scott

Ouch, at least you got it, Ive always hated sending NDR's for spam for
that very reason.

Greg 

-----Original Message-----
From: Clarke, Scott [mailto:Scott.Clarke@xxxxxxxxxxxx] 
Sent: Saturday, June 12, 2004 4:40 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Exchange slow sending outbound messages

http://www.MSExchange.org/

Problem appears to be solved!!!  Listen up everyone and learn from my
mistake.  I have GFI MailEssentials installed to block SPAM.  A couple
of months ago I enabled the GFI software to send NDR's when SPAM was
detected (based on a request from mgmt)...big mistake...as you know most
spammers use fake emails...thus my Exchange server was trying to send
NDR's to recipients that do not exist...hense the back log of outbound
queues.  This back log caused our legimate email to be delayed from
times ranging from 5 - 30 minutes.

HOW DID I FIGURE THIS OUT?  Well, I checked my "Bayesian" logs folder
and noticed that a lot of the email caught as spam had the same email
domain name as those that were blocking up my queues.  I have since
removed the option in GFI to send NDR's and everything is working fine.

LESSON LEARNED...enabling NDR's in Anti-Spam software is not always a
good thing!

Thanks everyone for your help, greatly appreciated.

Scott

-----Original Message-----
From: Erelis, Dan (Calgary) [mailto:Dan_Erelis@xxxxxxxxxxxx]
Sent: Friday, June 11, 2004 2:56 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Exchange slow sending outbound messages


http://www.MSExchange.org/

What's your SMTP layout look like? Do you have multiple internal E2K
servers funneling through another SMTP E2K box that routes externally?
Actually that aside you should not see client side IP's connecting to
the SMTP gateway period, unless you have scripts running that use an
engine like blat or something. Is that connection you are seeing from a
client or server IP?
..Dan
-----Original Message-----
From: Clarke, Scott [mailto:Scott.Clarke@xxxxxxxxxxxx]
Sent: June 11, 2004 11:11 AM
To: [ExchangeList]
Subject: [exchangelist] RE: Exchange slow sending outbound messages


http://www.MSExchange.org/

I do not have that ruled out...to be honest that is what I am thinking.
When I check the "Current Sessions" of our Exchange Server SMTP Virtual
Server I see someone there connected for more than 5 minutes...is this
normal.

Also, how can I track down the culprit if the above isn't a threat????

-----Original Message-----
From: Dan [mailto:dan_erelis@xxxxxxxxxxxx]
Sent: Friday, June 11, 2004 3:20 PM
To: [ExchangeList]
Subject: [exchangelist] RE: Exchange slow sending outbound messages


http://www.MSExchange.org/

Have you ruled out Virus activity? if not I suggest turning on SMTP
logging (if not already on) for you SMTP gateway and look for suspect
IPs, IE an ip of a workstation talking to your gateway, this should not
be unless that machine has a need or design to do so. They shouldn't be
hard to find, indicitive of a virus launching its own SMTP engine and
pounding out messages from a legit IP address on your internal subnet.

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 ISA Server
Resource Site: http://www.isaserver.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
scott.clarke@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 ISA Server
Resource Site: http://www.isaserver.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
dan_erelis@xxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist


************************************************************
IMPORTANT NOTICE: This message is intended for the individual or entity
to which it is addressed and may contain information that is privileged,
confidential, and/or exempt from disclosure under applicable law. If you
are not the intended recipient, you are hereby notified that copying,
forwarding or other dissemination or distribution of this message is
prohibited and that taking any action in reliance on the content of this
message is to be avoided. Should you receive this e-mail in error,
please notify the sender immediately via e-mail or call (403) 699-4000
and delete this message from your system. Thank you. 
************************************************************



------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
scott.clarke@xxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=exchangelist
Exchange Newsletters: http://www.msexchange.org/pages/newsletter.asp
Exchange FAQ: http://www.msexchange.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 ISA Server Resource Site: http://www.isaserver.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this MSEXchange.org Discussion List as:
gmulholland@xxxxxxxxxxxxxxx
To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=exchangelist

test



Other related posts: