RE: Exchange 2003 - mail stuck in SMTP queue

From: Lee Li [MSFT] (v-leeli_at_online.microsoft.com)
Date: 11/08/04

  • Next message: Brett Ward: "Exchange Archive sink"
    Date: Mon, 08 Nov 2004 02:18:51 GMT
    
    

    Hi Patrik,

    Thanks for your update. I truly understand your concern; however, based on
    my knowledge, NDR message cannot be customized in Exchange Server.
    Actually, the Badmail folder is not the place to store the mails to a
    recipient not in the exchange organization was dropped; it is where
    undeliverable messages that cannot be returned to the sender are stored. I
    will list an example, from which you can see what kind of messages they are
    and why the sender and recipient address are included.

    Here I assume both UserA@anotherDomain.com and UserB@yourDomain.com are
    invalid users in both domains. UserA@anotherDomain.com is the recipient and
    UserB@yourDomain.com is the sender.

    1. Spammer telnet a third party Mail Server by port 25, which allows reply
    by the format as following.

    Telnet <third party Mail Server> 25

    2. Spammer use UserB@yourDomain.com as mail sender to attack domain
    anotherDomain.com by the format as following.

    Mail from: UserB@yourDomain.com

    3. Spammer plan UserA@anotherDomain.com as recipient in domain contoso.com
    by the format as following.

    Rcpt to: UserA@anotherDomain.com

    4. Input mail content and quit this session.

    5. When mail server of domain anotherDomain.com find that
    UserA@anotherDomain.com is invalid user in its domain, it will send a NDR
    report to user UserB@yourDomain.com in domain yourDomain.com.

    6. When NDR message reach your Exchange Server for UserB@yourDomain.com,
    when the system find the UserB@yourDomain.com is also an invalid user in
    your Domain, instead of generating NDR message recursively, the Exchange
    system will store it in C:\Program Files\Exchsrvr\Mailroot\vsi n\badmail
    folder. (Where n is the virtual server number (the default VS is always
    1)). The Bad Mail folder is where undeliverable messages that cannot be
    returned to the sender are stored. So in order to verify both the sender
    and recipients are invalid users, it records both their addresses.

    Hope this helps. I appreciate your understanding and cooperation in this
    point. If there is anything I can do, feel free to let me know. Thanks and
    have a nice day!

    Thanks & Regards,

    Lee Li
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.
    --------------------
    | Content-Class: urn:content-classes:message
    | From: "Update" <technet@update.se>
    | Sender: "Update" <technet@update.se>
    | References: <367701c4c252$c9fbb680$a601280a@phx.gbl>
    <ZpIrCXxwEHA.3436@cpmsftngxa10.phx.gbl>
    | Subject: RE: Exchange 2003 - mail stuck in SMTP queue
    | Date: Fri, 5 Nov 2004 09:44:20 -0800
    | Lines: 86
    | Message-ID: <35e901c4c35f$14583110$a401280a@phx.gbl>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="iso-8859-1"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Thread-Index: AcTDXxRViPprTfPfSJ2mTBU7/L1kaQ==
    | X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4910.0300
    | Newsgroups: microsoft.public.exchange2000.general
    | Path: cpmsftngxa10.phx.gbl
    | Xref: cpmsftngxa10.phx.gbl microsoft.public.exchange2000.general:61525
    | NNTP-Posting-Host: tk2msftngxa12.phx.gbl 10.40.1.164
    | X-Tomcat-NG: microsoft.public.exchange2000.general
    |
    | Dear Lee,
    |
    | Thanks a lot for your reply.
    |
    | I now got rid of the mail in the queue.
    |
    | Regarding the badmail folder, I think mail to a recepient
    | not in the exchange organization was dropped there before
    | SP1. Though I could be wrong.
    | The thing is if I look at .BAD file I can see orginator
    | adress and to what recipient the mail failed. This
    | information is what my customer wants in the NDR when I
    | enter his e-mail adress in "send copy of Non-Delivery
    | Report to". This because in their old mailserver (Advox
    | omnigate) he got a list of misspelled mail and from whom
    | they where sent.
    |
    | I understand that the EX2K3 NDR doesn't contain the
    | orginator adress but is it possible somehow to receive
    | such a report automatically by e-mail?
    |
    | Thankful for any comments and tips on this.
    |
    | Regards,
    | Patrik Gisselsson
    |
    | >-----Original Message-----
    | >Dear Patrik,
    | >
    | >Thank you for posting here.
    | >
    | >Regarding the first question, you could first pause or
    | stop SMTP Virtual
    | >Server, then Exchsrvr\Mailroot\vsi 1\queue to search the
    | mail by its
    | >subject name (you could use Windows search function and
    | search mail by
    | >inputting the mail subject in "A word or p
    | hrase in the file"), and manually
    | >delete it.
    | >
    | >For the second question, I am afraid you may have a
    | little confusion on the
    | >Badmail Folder. Based on my knowledge, the Bad Mail
    | folder is where
    | >undeliverable messages that cannot be returned to the
    | sender are stored.
    | >This kind of messages will never be received by users,
    | so the Badmail
    | >Folder will not contain the NDR you mentioned received
    | by customers. Based
    | >on my knowledge, the NDR received by the user is sent by
    | the domain
    | >administrator and it only indicates as the following.
    | >
    | >Your message did not reach some or all of the intended
    | recipients.
    | >
    | >Subject: Test
    | >Sent: 7/18/2002 2:40 PM
    | >The following recipient(s) could not be reached:
    | >Test Recipient on 7/18/2002 2:41 PM
    | >
    | >If I am off base, feel free to let me know. I look
    | forward to your reply.
    | >If there is anything unclear, feel free to let me know.
    | Thanks and have a
    | >nice day!
    | >
    | >Thanks & Regards,
    | >
    | >Lee Li
    | >Microsoft Online Partner Support
    | >
    | >Get Secure! - www.microsoft.com/security
    | >
    | >=====================================================
    | >When responding to posts, please "Reply to Group" via
    | your newsreader so
    | >that others may learn and benefit from your issue.
    | >=====================================================
    | >This posting is provided "AS IS" with no warranties, and
    | confers no rights.
    | >
    | >.
    | >
    |


  • Next message: Brett Ward: "Exchange Archive sink"
    Loading