- The SMTP log wasn't enabled to see the logs. We have Exchange 2003 which is connected to Exchange 2007 on the same domain. We are migrating all the mailboxes from Exchange 2003 to 2007 and the 'Routing Group Connector' is connecting from 2003 to 2007 using SmartHost
report - So is it only mail being sent from mailboxes that are still on Exchange 2003 that are having this issue?
report - this was the same message that I got in exchange 2003 last time. this was because the email cannot go out as the DNS was removed from the server and was looping inside the server.
report - This is most probably a dns issue or a firewall issue(depends on if any rules changes), What you can do is test with a simple telnet from your Source to Destinations exchange server and vice versa, because for some reason the mail is not leaving the queue, What can also happen is that when you got a corrupted mail in the queue is messes up the queue, what AV are you using for mail scanning Mcafee Groupshield etc?Maybe its not running and in the process not removing the corrupted item/items, Hope this helps, Regards
report
Dec 20, 2015 The transfer of the message between mailbox and hub transport server is the responsibility of the Store driver. Store driver is a very important component of Exchange 2010 Hub Transport role. It picks the message from mailbox server and puts it in the Mail Submission Queue on the Hub Transport server.
I then added a second Exchange Server (NEWSRVR.corp.mydomain.com - 192.168.1.67) running Exchange Server 2003 SP2. As you can see from its IP address, It is on the same LAN segment as OLDSRVR. It is in the same First Administrative Group, and in the same First Routing Group, where OLDSRVR appears as the Master, and NEWSRVR appears as Member.
I created a TestUser with a mailbox on NEWSRVR. TestUser can send to any mailbox on OLDSRVR, and can send to external Internet recipients. But TestUser can't receive anything. If I send an internal email from a mailbox on OLDSRVR to TestUser, it goes to the NEWSRVR.corp.mydomain.com queue. I have enabled message tracking, and sent a message from OldUser (mailbox on OLDSRVR) to TestUser (mailbox on NEWSRVR). The message history shows:
12:27/2010 9:53 AM SMTP Store Driver: Message Submitted from Store
12:27/2010 9:53 AM SMTP: Message Submitted to Advanced Queuing
12:27/2010 9:53 AM SMTP: Started Message Submission to Advanced Queue
12:27/2010 9:53 AM SMTP: Message Submitted to Categorizer
12:27/2010 9:53 AM SMTP: Message Categorized and Queued for Routing
12:27/2010 9:53 AM SMTP: Message Routed and Queued for Remote Delivery
I also tried a Telnet connection to NEWSRVR, and sent a message from OldUser to NewUser. In the Message History, I got:
12:27/2010 10:00 AM SMTP: Message Submitted to Advanced Queuing
12:27/2010 10:00 AM SMTP: Started Message Submission to Advanced Queue
12:27/2010 10:00 AM SMTP: Message Submitted to Categorizer
12:27/2010 10:00 AM SMTP: Message Categorized and Queued for Routing
12:27/2010 10:00 AM SMTP: Message Routed and Queued for Remote Delivery
12:27/2010 10:07 AM SMTP: Started Outbound Transfer of Message
12:27/2010 10:07 AM Message transferred to emailsecurity.corp.mydomain.com through SMTP
12:27/2010 10:07 AM SMTP: Message Submitted to Advanced Queuing
12:27/2010 10:07 AM SMTP: Started Message Submission to Advanced Queue
12:27/2010 10:07 AM SMTP: Message Submitted to Categorizer
12:27/2010 10:07 AM SMTP: Message Categorized and Queued for Routing
![Exchange Exchange](/uploads/1/2/6/5/126509133/271476578.png)
12:27/2010 10:07 AM SMTP: Message Routed and Queued for Remote Delivery
![Delayed Delayed](http://techgenix.com/ezoimgfmt/cdn.techgenix.com/media/upls/image003.jpg?ezimgfmt=rs:382x573/rscb1)
12:27/2010 10:29 AM Message transferred to emailsecurity.corp.mydomain.com through SMTP
12:27/2010 10:29 AM SMTP: Message Submitted to Advanced Queuing
12:27/2010 10:39 AM SMTP: Started Message Submission to Advanced Queue
12:27/2010 10:39 AM SMTP: Message Submitted to Categorizer
12:27/2010 10:39 AM SMTP: Message Categorized and Queued for Routing
12:27/2010 10:39 AM SMTP: Message Routed and Queued for Remote Delivery
12:27/2010 10:51 AM SMTP: Started Outbound Transfer of Message
... etc. This pattern repeats about every 10 - 12 minutes.
On the Sonicwall emailsecurity appliance, I can see messages from olduser to newuser. They are shown as 'outbound - arrived into gateway from 192.168.1.191' (OLDSRVR), and 'delivered - accepted by 192.168.1.191:25).
So -- it looks like the culprit is the Categorizer on OldSrvr. It seems to think that NewSrvr is an external system, and routes messages out the SMTP default virtual server to the smarthost (emailsecurity appliance). The emailsecurity appliance gets the email, sees that it is addressed to [email protected], and promptly sends it back to OldSrver, where it gets routed back out again.
Is my analysis correct? If so, how do I fix the Categorizer?
Also -- when I send an email from [email protected] to [email protected], the Sonicwall rejects it as a Directory Harvest Attack (DHA). WTF?