Re: Message deferrals from EHS

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



Yes, this is for inbound messages. I assume outbound is working correctly -
I have not had any complaints (whereas I have had numerous complaints about
inbound).

The deferral messages are a bit of a unique tool, as they let me see the
messages on the sending server. Normally I would not know what was happening
on the sending server, if we did not use EHS.

The Astaro is a Linux-based appliance, and it is not new - we have been
using it for a couple of years. There has not been any major changes on it
recently.

"Michael Dragone" wrote:

Just to be clear, this is for inbound messages coming from EHS to you,
correct? And outbound messages bound for EHS are working fine?

Perhaps something with the Astaro appliance? I'm not familiar with them - is
it newly added to your configuration or have you recently change the
setup/software on it?

"Glen Martin" <Silmarillion@xxxxxxxxxxxxxxxx> wrote in message
news:D5CF0BC0-B039-431C-AA22-F7561318DA36@xxxxxxxxxxxxxxxx
We use the Microsoft Exchange Hosted Filtering Service for all of our
inbound
and outbound e-mail. Lately, we have had a large spike in e-mails with
large
attachments that are not coming through in a timely fashion. It seemed to
get worse after we applied SP2 for server 2003, but there were deferrals
before that point, so it is hard to say if that is conclusive. We use CA
etrust AV connector for Exchange V7.0, which I have disabled (did not seem
to
make much difference), then uninstalled (as per a forum post which said
that
as AV sinks are tightly integrated with Exchange, disabling alone might
not
resolve the problem). There seemed to be some improvement after
uninstalling
the AV connector, but that is hard to say. I am basing it off the number
of
messages in deferral at any given time.

If I run a deferral report in the EHS admin centre, these are the types of
messages I am seeing:

2/27/2008 11:00:00 AM conversation with <external IP>[x.x.x.x] timed out
while sending message body

2/27/2008 11:07:00 AM conversation with <external IP>[x.x.x.x] timed out
while sending end of data -- message may be sent more than once.

The problem only seems to occur with messages with large attachments
(above
1.5 MB). EHS tech support has not been much help, as they say the problem
is
on our end.

Also, if I look at "current sessions" under the SMTP virtual server, there
are usually several (up to ten at a time) sessions in there from the EHS
servers (SMTP is closed to all other IPs) with connected times sometimes
over
600 seconds (I think EHS times out after approx. 10 minutes).

Researching this problem has not turned up much. The "path MTU discovery"
issue comes up frequently, but that would be a problem for outbound
e-mail,
not inbound.

I am not enough of a network guru to analyze this with packet traces. Any
suggestions?

We are using Exchange 2003 SP2, with an Astaro firewall appliance. Our
internet connection is a fixed wireless, 1.5 MB symettrical.

.



Relevant Pages

  • how to turn firewall down
    ... Enable 3 Allow outbound destination unreachable ... Enable 9 Allow inbound router request ... 23 TCP Enable Telnet Server ...
    (comp.os.linux.networking)
  • WTF?? ISA 04 semantics inbound or outbound
    ... Does anyone else see the semantic differences between inbound and outbound ... For instance I have a server generated rule that is called SBS RWW inbound ... Same thing goes with SBS ftp server access rule. ...
    (microsoft.public.windows.server.sbs)
  • Re: Message deferrals from EHS
    ... Just to be clear, this is for inbound messages coming from EHS to you, correct? ... And outbound messages bound for EHS are working fine? ... the AV connector, but that is hard to say. ...
    (microsoft.public.exchange.connectivity)
  • Re: Setting up Mail
    ... catdrnan wrote: ... inbound and outbound addresses, but I don't use their email service. ... server has failed. ...
    (microsoft.public.windows.vista.mail)
  • Re: Problems with Port 3101
    ... We have a Blackberry Enterprise Server that needs to ... Inbound responses do *not* count as inbound initiated traffic. ... Outbound responses do *not* count as outbound initiated traffic. ... We need to let traffic in and out on port 3101 TCP on an ISA2004 and seem ...
    (microsoft.public.isa)