[ExchangeList] Re: Repeating Emails

  • From: "Rich Gallo" <RGallo@xxxxxxxxxxxxxxxxx>
  • To: <exchangelist@xxxxxxxxxxxxx>
  • Date: Tue, 13 Feb 2007 13:48:44 -0500

To answer your question, George… Yes..  All the proper directories have been 
excluded from all virus scanning on the Exchange Server.  As for the spam 
filter, it is it’s own device (Barracuda), so the virus checking on that is set 
up as part of the OS before hand from the get-go :-(

 

In the meantime, I have my logging turned to medium for those services and I am 
monitoring it now to see if anything of interest pops up…

 

   _____  

From: exchangelist-bounce@xxxxxxxxxxxxx 
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Taylor, George
Sent: Tuesday, February 13, 2007 1:25 PM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Repeating Emails

 

Makes me think Jason.  Are the queue directories on both Exchange and the Spam 
Filter excluded from the Filesystem Virus Scanner?

 

George Taylor

Systems Programmer

Regional Health Inc.

 

 

   _____  

From: Jason Sherry [mailto:Jason.Sherry@xxxxxxxxxxxx] 
Sent: Tuesday, February 13, 2007 10:35 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Repeating Emails

You said your MX records point to “your spam filter”, is this another server or 
an appliance?

 

What does the message header look like once the user receives the message?  Is 
the routing path correct?

 

I would guess that your spam filter is messing up and re-transmitting the 
messages for some odd reason.

 

From the screenshot below it looks like messages are re-transmitted every ~30 
mins.  Are all the messages repeated about every 30mins?

 

Any odd event logs?  Might want to turn logging to Medium on 
MSExchangeTransport\SMTP Protocol, Categorizer, Routing Engine/Service, 

 

Do you have SMTP protocol logging enabled?  If so check to see where the 
messages are coming from each time.  If they are coming from your spam filter 
check the logs on it to see if it is receiving the message multiple times.  If 
it is receiving the messages multiple times it might be sending a transmit 
error or some type to the sending server which is in turn causing the sending 
server to retransmit the message.  If it is only receiving it once but then 
resending the messages multiple times to your Exchange server I would contact 
the vendor of your spam filter.  Check your SMTP protocol log on the Exchange 
server  to see if it is generating any error

 

General SMTP Troubleshooting info: HYPERLINK 
"http://technet.microsoft.com/en-us/library/aa996805.aspx"http://technet.microsoft.com/en-us/library/aa996805.aspx

MSExchange.org troubleshooting article: HYPERLINK 
"http://www.msexchange.org/tutorials/Exchange-Server-2003-Mailflow-Part1.html"http://www.msexchange.org/tutorials/Exchange-Server-2003-Mailflow-Part1.html

 

 

Jason Sherry 
Messaging Architect, MCSE: M, Microsoft MVP

 

From: exchangelist-bounce@xxxxxxxxxxxxx 
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Rich Gallo
Sent: Tuesday, February 13, 2007 10:04 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Repeating Emails

 

Some very good thoughts, but nothing I have found seems to point in that 
direction :-( Here is an example of what I am dealing with in regards to one of 
these messages.  This is a screen shot from Message Tracking center for ONE of 
these messages (this isn’t even the entire result…it keeps going until I 
blocked the sender early this morning) See how the same message keeps getting 
delivered over and over and over again???:

 

 

 

   _____  

From: exchangelist-bounce@xxxxxxxxxxxxx 
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Taylor, George
Sent: Tuesday, February 13, 2007 11:38 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Repeating Emails

 

It kinda sounds like a scripting or group membership issue at the sending side. 
 Could the other end be sending to multiple groups with the user in each one of 
those groups?  Sending directly to the user and then again to a group the user 
is a member of.  Someone fat fingered a script on the sending machine?  The 
sender is Outlook with multiple rules that trigger on the same criteria? Just a 
few thoughts.

 

George Taylor

Systems Programmer

Regional Health Inc.

 

 

   _____  

From: Rich Gallo [mailto:RGallo@xxxxxxxxxxxxxxxxx] 
Sent: Tuesday, February 13, 2007 8:31 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Repeating Emails

I should have said this in my previous email…  The only common thread with 
these messages are that they are messages that are automatically generated.  
For example, a hotel reservation, or a confirmation that something has been 
received, such as a resume submission…  Other than that, these messages are 
fairly innocuous.

 

   _____  

From: exchangelist-bounce@xxxxxxxxxxxxx 
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Sarbjit Singh Gill
Sent: Tuesday, February 13, 2007 10:10 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Repeating Emails

 

Is there something common in the users who receive multiple copies this emails. 
For example, they have certain embedded data in the email (like a picture) or 
maybe they all had a certain kind of attachment of a certain size

 

/Gill

 

 

From: exchangelist-bounce@xxxxxxxxxxxxx 
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Rich Gallo
Sent: Tuesday, February 13, 2007 10:56 PM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Repeating Emails

 

Hey All,

 

I wanted to know if anyone has ever come across this problem.  Been scouring 
the net like crazy and not coming up with anything solid.

 

Every now and again, I have users telling me they are receiving MANY copies of 
the same message form the same sender (known senders in all cases).  Looking at 
things from my end, server side, it’s as if Exchange is “rejecting” the email, 
requesting another copy form the sending server, and still delivering each 
instance of the copy to the recipient on my end.  The cycle doesn’t end until I 
block the sender in he spam filter to stop the message in its tracks before it 
hits my Exchange server again.  I don’t know what to do here..pulling my hair 
out… ANY HELP at all is GREATLY appreciated!!

 

Rich Gallo

Network Administrator

Lloyd Staffing  

 

PS, it’s Exchange 2003 SP2 running on Windows Server 2003 Standard, SP1….

 

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.37/682 - Release Date: 2/12/2007 1:23 
PM

 

--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.37/682 - Release Date: 2/12/2007 1:23 
PM

 

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.37/682 - Release Date: 2/12/2007 1:23 
PM

***Note: The information contained in this message, including any attachments, 
may be privileged, confidential, and protected from disclosure. If the reader 
of this message is not the intended recipient, or an employee or agent 
responsible for delivering this message to the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify the Sender immediately by a "reply to sender only" 
message and destroy all electronic or paper copies of the communication, 
including any attachments.

 

--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.37/682 - Release Date: 2/12/2007 1:23 
PM

 

--
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.37/682 - Release Date: 2/12/2007 1:23 
PM

***Note: The information contained in this message, including any attachments, 
may be privileged, confidential, and protected from disclosure. If the reader 
of this message is not the intended recipient, or an employee or agent 
responsible for delivering this message to the intended recipient, you are 
hereby notified that any dissemination, distribution or copying of this 
communication is strictly prohibited. If you have received this communication 
in error, please notify the Sender immediately by a "reply to sender only" 
message and destroy all electronic or paper copies of the communication, 
including any attachments.


--
No virus found in this incoming message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.37/682 - Release Date: 2/12/2007 1:23 
PM



-- 
No virus found in this outgoing message.
Checked by AVG Free Edition.
Version: 7.5.441 / Virus Database: 268.17.37/682 - Release Date: 2/12/2007 1:23 
PM
 

JPEG image

Other related posts: