The tarpit message is in the Receive connector logs. The 250 OK is the delivery message that the spam filter relay message logs show.
Jay Dale Senior Systems Administrator P:281-574-2414 -----Original Message----- From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Thursday, August 25, 2011 2:46 PM To: MS-Exchange Admin Issues Subject: RE: Disappearing messages +1 Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com -----Original Message----- From: Kennedy, Jim [mailto:kennedy...@elyriaschools.org] Sent: Thursday, August 25, 2011 3:43 PM To: MS-Exchange Admin Issues Subject: RE: Disappearing messages Where do you see '250 OK'? I see a tarpit then a 250 reset. -----Original Message----- From: Jay Dale [mailto:jd...@unetek.com] Sent: Thursday, August 25, 2011 3:38 PM To: MS-Exchange Admin Issues Subject: RE: Disappearing messages Ok, we just sent another test message through ConnectWise. The spam filter logs show it as 250 delivered. It does not show up in Message Tracking per the shell command you included. This shows up in the Receive connector logs: SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions 2011-08-25T18:54:52.634Z, ,>,"220 office.domain.com Microsoft ESMTP MAIL Service ready at Thu, 25 Aug 2011 13:54:51 -0500", 2011-08-25T18:54:52.656Z, ,<,EHLO tex1-mh321.spam filter we use.com, 2011-08-25T18:54:52.657Z, 250-office.domain.com Hello [their outside IP], 2011-08-25T18:54:52.657Z, ,>,250-SIZE, 2011-08-25T18:54:52.657Z, ,>,250-PIPELINING, 2011-08-25T18:54:52.657Z, 250-DSN, 2011-08-25T18:54:52.657Z, 250-ENHANCEDSTATUSCODES, 2011-08-25T18:54:52.657Z, ,>,250-STARTTLS, 2011-08-25T18:54:52.657Z, ,>,250-AUTH NTLM, 2011-08-25T18:54:52.657Z,,>,250-8BITMIME, 2011-08-25T18:54:52.657Z, ,>,250-BINARYMIME, 2011-08-25T18:54:52.657Z, 250 CHUNKING, 2011-08-25T18:54:52.669Z, ,<,MAIL FROM:<our office manager email address>, 2011-08-25T18:54:52.669Z, 08CE136F7A9A207D;2011-08-25T18:54:52.633Z;1,receiving message 2011-08-25T18:54:52.669Z, ,>,250 2.1.0 Sender OK, 2011-08-25T18:54:52.682Z, ,<,RCPT TO:<u...@domain.com>, 2011-08-25T18:54:52.682Z, ,>,250 2.1.5 Recipient OK, 2011-08-25T18:54:54.041Z, RSET, 2011-08-25T18:54:54.041Z, ,*,Tarpit for '0.00:00:05', 2011-08-25T18:54:59.046Z, 250 2.0.0 Resetting, 2011-08-25T18:54:59.046Z, QUIT , 2011-08-25T18:54:59.046Z, 221 2.0.0 Service closing transmission channel, 2011-08-25T18:54:59.046Z, ,-,,Local So the receive connector is actually receiving the message, but I don't see anywhere what it's doing with it. If it isn't in message tracking I'm assuming it's being dropped? Is there a setting someplace that could be doing this? Thanks, Jay Jay Dale Senior Systems Administrator P:281-574-2414 -----Original Message----- From: Steven Alfano [mailto:salf...@mail.rockefeller.edu] Sent: Wednesday, August 24, 2011 2:36 PM To: MS-Exchange Admin Issues Subject: RE: Disappearing messages Just to clarify; on the exchange CAS/Mailbox server for the intended recipient you indicated that " ... the test emails subsequently do not show up in the Exchange message tracking logs at all ... " If you run through the shell example of cmdlet below Get-MessageTrackingLog -Recipients <usern...@domain.com> -Start "8-1-2011 12:00 am" -End "8-23-2011 11:59 pm" -EventId RECEIVE -Server <Name of CAS server> | FL If the message is not found in the message tracking log most likely it was not delivered focusing efforts trying to track the message prior to receipt. If the message is found in the tracking log then concentrate efforts on what may have happened to the message after it was delivered, consider all previous suggestions and do not over look other mobile/handheld devices connected to the mailbox. Hope this helps! Steven Alfano Sr. Systems Administrator The Rockefeller University 1230 York Avenue New York, NY 10065-6399 Voice 212.327.8937 Mobile 646.438.5160 fax 212.327.8712 salf...@rockefeller.edu www.rockefeller.edu -----Original Message----- From: Jay Dale [mailto:jd...@unetek.com] Sent: Wednesday, August 24, 2011 2:08 PM To: MS-Exchange Admin Issues Subject: RE: Disappearing messages No, there are no rules whatsoever. Jay Dale Senior Systems Administrator P:281-574-2414 -----Original Message----- From: Joseph Heaton [mailto:jhea...@dfg.ca.gov] Sent: Wednesday, August 24, 2011 12:56 PM To: MS-Exchange Admin Issues Subject: Re: Disappearing messages Does the end user have some kind of filter on the inbox? Or a rule moving the message to a different folder? >>> Jay Dale <jd...@unetek.com> 08/24/11 10:34 AM >>> Hey all, I have a client using Exchange 2010 on Windows 2008 R2 Enterprise. We send emails to the client with invoices through our ConnectWise system. The user at the location has reported that the last 3 invoices she did not receive. Our office manager then manually forwarded the emails with the attached PDF's and she received those okay. So we started looking into the issue. The office manager does not receive any bouncebacks, ConnectWise did not show any issues on their side, and all of our emails go through GFI/Katharion which is our spam filter service, and the message tracking logs show the emails are being delivered. I pulled up the Receive and Send connector logs on the client's Exchange server and found nothing showing any kind of errors or dropping of messages. In fact the test emails subsequently do not show up in the Exchange message tracking logs at all, but the Receive connector logs show an actual handshake with no errors. The user simply doesn't get them, and they're not in any alternate folder in Outlook or in her Junk Email folder either. We currently do not have any Antispam running on the server itself, and I have disabled Content filtering through the Shell (although I don't even see that it's installed at all. I'm at a loss at where to go from here. Thanks, Jay Jay Dale Senior Systems Administrator Unetek, Inc. Phone: 281.574.2414 Email:jd...@unetek.com<mailto:jd...@unetek.com> Confidentiality Notice: This e-mail, including any attached files, may contain confidential and/or privileged information for the sole use of the intended recipient. If you are not the intended recipient, you are hereby notified that any review, dissemination or copying of this e-mail and attachments, if any, or the information contained herein, is strictly prohibited. If you are not the intended recipient (or authorized to receive information for the intended recipient), please contact the sender by reply e-mail and delete all copies of this message. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
