User get NDRs without sending emails

2011-05-11 Thread Al Rose
Hi

I am seeing more and more of this problem in our environment (still running
2k3 SP2 Exchange servers):  Users receive undeliverable NDRs without writing
email.
Been googling lately about it and apparently there are only two solutions:
totally disable NDRs (we dont want to do that), or get an appliance (a magic
one that will fix our problem).

We currently use Antigen but only as an antivirus, as our antipsam filtering
is done at a higher level where we dont have control.

Anybody?

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: User get NDRs without sending emails

2011-05-11 Thread Ellis, John P.
Worth checking the headers of the email and see if it really is
generated by yourselves.
If the NDRS are being generated with out a user sending an email, then
it sounds more like spam emails. I.e someone has faked a from address
(in this case from you domain) and send the email to an address that
doesnt exist thus generating an NDR.
 
HTH

john



From: Al Rose [mailto:arose...@gmail.com] 
Sent: 11 May 2011 09:16
To: MS-Exchange Admin Issues
Subject: User get NDRs without sending emails


Hi  

I am seeing more and more of this problem in our environment (still
running 2k3 SP2 Exchange servers):  Users receive undeliverable NDRs
without writing email.
Been googling lately about it and apparently there are only two
solutions: totally disable NDRs (we dont want to do that), or get an
appliance (a magic one that will fix our problem).

We currently use Antigen but only as an antivirus, as our antipsam
filtering is done at a higher level where we dont have control.

Anybody?

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


**
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.

www.clearswift.com
**



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: little help understanding header info

2011-05-11 Thread Jeff Brown
I don't think I said that. (if I did, it was my keyboard's fault)!  TC has
asserted all along that they enforce NO size limits on email.

On Fri, May 6, 2011 at 12:49 PM, Joseph Heaton jhea...@dfg.ca.gov wrote:

 You say that your TulsaConnect IS enforcing size limits, and you're not.
  So, besides everything in the header referencing TulsaConnect, I would
 still be leaning towards at least finding out what their limit is that
 they're enforcing, and whether or not you can get them to raise that limit.

  Jeff Brown 2jbr...@gmail.com 5/6/2011 7:49 AM 
 I have been asked a number of times by owners to adjust the email size
 limit
 up so pictures of grand-babies will not be blocked or filtered off.  Our
 email is routed through our ISP/Datacenter before being handed off to a
 Brightmail filter, then forwarded to the appropriate exchange server.  The
 10.1.9.8 address is the internal address of said filter.  I should have
 called them before I posted this, I know, but I would rather stick a fork
 in
 my head...

 Can anyone tell from this header if it is MY problem, either with an
 exchange setting I have overlooked or a problem with the filter?
  TulsaConnect has assured me they are enforcing size limits on email.  10
 meg seems to be the limit at this point, although I have opened up
 everything on our end considerably higher than that.

 thanks for any help.  I'm just asking for help understanding the contents
 of
 this bounce please, unless you can determine from the content of the header
 that this may be an exchange problem...

 thanks for any help:

  - The following addresses had permanent fatal errors -
 xx...@companymail.com 
(reason: 552 message size exceeds fixed maximum message size)

  - Transcript of session follows -
 ... while talking to [67.214.102.28]:
  MAIL From:x...@yahoo.com SIZE=30433191
  552 message size exceeds fixed maximum message size
 554 5.0.0 Service unavailable
 Reporting-MTA: dns; mscan4.tulsaconnect.com
 Received-From-MTA: DNS; localhost.localdomain
 Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

 Final-Recipient: RFC822; xx...@companymail.com
 Action: failed
 Status: 5.3.4
 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
 Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
 Return-Path: ...@yahoo.com
 Received: from mscan4.tulsaconnect.com (localhost.localdomain [127.0.0.1])
by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id p46EJdAI004340
for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500
 Received: from omp1029.access.mail.sp2.yahoo.com (
 omp1029.access.mail.sp2.yahoo.com [98.139.44.92])
by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67])
 envelope-from xxx...@yahoo.com with SMTP
id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
 Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -
 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
 s=s1024;
 t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=;

 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;

 b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=
 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.com;

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: little help understanding header info

2011-05-11 Thread Campbell, Rob
I wouldn't think it would make any difference in the scenario you described.  
JPG files are already compressed.   If you try to zip a jpg, it actually gets 
bigger.

From: Jeff Brown [mailto:2jbr...@gmail.com]
Sent: Wednesday, May 11, 2011 8:03 AM
To: MS-Exchange Admin Issues
Subject: Re: little help understanding header info

Wow, is it really possible that the uncompressed size of the attachment is what 
counts in the over-all size limit  That changes things DRAMATICALLY!!!
On Mon, May 9, 2011 at 2:00 PM, Cameron 
cameron.orl...@gmail.commailto:cameron.orl...@gmail.com wrote:
Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would it? I 
had the same sort of thing drive me crazy until I found out that an 8mb .xlsx 
file (well within our limits) actually translated to a 57mb expanded file (try 
using winzip to unzip the file to see it's *true* size).



On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob 
rob_campb...@centraltechnology.netmailto:rob_campb...@centraltechnology.net 
wrote:
From those headers it appears that Exchange was willing to send an email that 
size, but the server at tulsaconnect.comhttp://tulsaconnect.com/ 
[67.214.102.28] wouldn't accept it.

From: Jeff Brown [mailto:2jbr...@gmail.commailto:2jbr...@gmail.com]
Sent: Friday, May 06, 2011 9:49 AM

To: MS-Exchange Admin Issues
Subject: little help understanding header info

I have been asked a number of times by owners to adjust the email size limit up 
so pictures of grand-babies will not be blocked or filtered off.  Our email is 
routed through our ISP/Datacenter before being handed off to a Brightmail 
filter, then forwarded to the appropriate exchange server.  The 10.1.9.8 
address is the internal address of said filter.  I should have called them 
before I posted this, I know, but I would rather stick a fork in my head...

Can anyone tell from this header if it is MY problem, either with an exchange 
setting I have overlooked or a problem with the filter?  TulsaConnect has 
assured me they are enforcing size limits on email.  10 meg seems to be the 
limit at this point, although I have opened up everything on our end 
considerably higher than that.

thanks for any help.  I'm just asking for help understanding the contents of 
this bounce please, unless you can determine from the content of the header 
that this may be an exchange problem...

thanks for any help:

 - The following addresses had permanent fatal errors -

xx...@companymail.commailto:xx...@companymail.com 
(reason: 552 message size exceeds fixed maximum message size)

  - Transcript of session follows -
... while talking to [67.214.102.28]:
 MAIL From:x...@yahoo.commailto:x...@yahoo.com SIZE=30433191
 552 message size exceeds fixed maximum message size
554 5.0.0 Service unavailable
Reporting-MTA: dns; mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/
Received-From-MTA: DNS; localhost.localdomain
Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

Final-Recipient: RFC822; xx...@companymail.commailto:xx...@companymail.com
Action: failed
Status: 5.3.4
Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
Return-Path: ...@yahoo.commailto:...@yahoo.com
Received: from mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ 
(localhost.localdomain [127.0.0.1])
by mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ (8.13.8/8.13.8) 
with ESMTP id p46EJdAI004340
for xxx...@companymail.commailto:xxx...@companymail.com; Fri, 6 May 2011 
09:19:39 -0500
Received: from 
omp1029.access.mail.sp2.yahoo.comhttp://omp1029.access.mail.sp2.yahoo.com/ 
(omp1029.access.mail.sp2.yahoo.comhttp://omp1029.access.mail.sp2.yahoo.com/ 
[98.139.44.92])
by mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ 
(mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ [67.214.101.67]) 
envelope-from xxx...@yahoo.commailto:xxx...@yahoo.com with SMTP
id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; 
d=yahoo.comhttp://yahoo.com/; s=s1024; t=1304691561; 
bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=; 
h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
 
b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=

DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=yahoo.comhttp://yahoo.com/;

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


Re: User get NDRs without sending emails

2011-05-11 Thread Steve Ens
Yes, I agree with John...most likely backscatter...

On Wed, May 11, 2011 at 3:43 AM, Ellis, John P. johnel...@wirral.gov.ukwrote:

  Worth checking the headers of the email and see if it really is generated
 by yourselves.
 If the NDRS are being generated with out a user sending an email, then it
 sounds more like spam emails. I.e someone has faked a from address (in this
 case from you domain) and send the email to an address that doesnt exist
 thus generating an NDR.

 HTH

 john

  --
 *From:* Al Rose [mailto:arose...@gmail.com]
 *Sent:* 11 May 2011 09:16
 *To:* MS-Exchange Admin Issues
 *Subject:* User get NDRs without sending emails

 Hi

 I am seeing more and more of this problem in our environment (still running
 2k3 SP2 Exchange servers):  Users receive undeliverable NDRs without writing
 email.
 Been googling lately about it and apparently there are only two
 solutions: totally disable NDRs (we dont want to do that), or get an
 appliance (a magic one that will fix our problem).

 We currently use Antigen but only as an antivirus, as our antipsam
 filtering is done at a higher level where we dont have control.

 Anybody?

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 **

 This email and any files transmitted with it are confidential and

 intended solely for the use of the individual or entity to whom they

 are addressed. If you have received this email in error please notify

 the system manager.

  This footnote also confirms that this email message has been swept by

 MIMEsweeper for the presence of computer viruses.

  www.clearswift.com

 **

  ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: little help understanding header info

2011-05-11 Thread Jeff Brown
To answer your question, the offending rejected email is almost always
jpegs...   grandbaby pics.  we have tested using jpegs and a collection of
pdf's and other random files compressed together in one attachment.

On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.com wrote:

 Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would it?
 I had the same sort of thing drive me crazy until I found out that an 8mb
 .xlsx file (well within our limits) actually translated to a 57mb expanded
 file (try using winzip to unzip the file to see it's *true* size).



 On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:

  From those headers it appears that Exchange was willing to send an email
 that size, but the server at tulsaconnect.com [67.214.102.28] wouldn’t
 accept it.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, May 06, 2011 9:49 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* little help understanding header info



 I have been asked a number of times by owners to adjust the email size
 limit up so pictures of grand-babies will not be blocked or filtered off.
  Our email is routed through our ISP/Datacenter before being handed off to a
 Brightmail filter, then forwarded to the appropriate exchange server.  The
 10.1.9.8 address is the internal address of said filter.  I should have
 called them before I posted this, I know, but I would rather stick a fork in
 my head...



 Can anyone tell from this header if it is MY problem, either with an
 exchange setting I have overlooked or a problem with the filter?
  TulsaConnect has assured me they are enforcing size limits on email.  10
 meg seems to be the limit at this point, although I have opened up
 everything on our end considerably higher than that.



 thanks for any help.  I'm just asking for help understanding the contents
 of this bounce please, unless you can determine from the content of the
 header that this may be an exchange problem...



 thanks for any help:



  - The following addresses had permanent fatal errors -

 xx...@companymail.com 
 (reason: 552 message size exceeds fixed maximum message size)

   - Transcript of session follows -
 ... while talking to [67.214.102.28]:
  MAIL From:x...@yahoo.com SIZE=30433191
  552 message size exceeds fixed maximum message size
 554 5.0.0 Service unavailable
 Reporting-MTA: dns; mscan4.tulsaconnect.com
 Received-From-MTA: DNS; localhost.localdomain
 Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

 Final-Recipient: RFC822; xx...@companymail.com
 Action: failed
 Status: 5.3.4
 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
 Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
 Return-Path: ...@yahoo.com
 Received: from mscan4.tulsaconnect.com (localhost.localdomain
 [127.0.0.1])
 by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id
 p46EJdAI004340
 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500
 Received: from omp1029.access.mail.sp2.yahoo.com (
 omp1029.access.mail.sp2.yahoo.com [98.139.44.92])
 by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67])
 envelope-from xxx...@yahoo.com with SMTP
 id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
 Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -
 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
 s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=;
 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
 b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=

 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
   s=s1024; d=yahoo.com;

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 **
 Note:
 The information contained in this message may be privileged and confidential 
 and
 protected from disclosure.  If the reader of this message is not the intended
 recipient, or an employee or agent responsible for delivering this message to
 the intended recipient, you are hereby notified that any dissemination,
 distribution or copying of this communication is strictly prohibited. If you
 have received this communication in error, please notify us immediately by
 replying to the message and deleting it from your computer.
 **

 ---

 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to 

RE: User get NDRs without sending emails

2011-05-11 Thread Ellis, John P.
That changes things slightly then.
A couple of thoughts.
Someone has jumped onto the user machine and sent the email
Does anyone have access to the users email account (maybe via Mailbox
rights permissons)?
System generated email?
An odd rule on the mailbox?
 
 
Is the email in the sent items folder?
Is the name of the spreadsheet the same as one that appears on your
network drives?
 
 
Thanks

John



From: Al Rose [mailto:arose...@gmail.com] 
Sent: 11 May 2011 14:10
To: MS-Exchange Admin Issues
Subject: Re: User get NDRs without sending emails


I tracked emails in Exchange, an email was sent around 2pm and the user
received an NDR 2 hours later. If i look at the original email, there is
only one recipient which is a recipient unknown from the user. 

After further investigation i also was told that the same email message
has been received by external users (still unkown from the user who is
supposed to have sent this message)and they actually responded to our
user saying they received an excel attachment they could not open.

So to resume an email is sent from one of our user (even the correct
signature is in the email and contains a spreadsheet that cannot be
opened).

The user has no delegates nor granted the send as right to anyone. Only
some helpdesk staff have the send as right to so but i assume my
colleagues would not send random emails...


On Wed, May 11, 2011 at 10:43 AM, Ellis, John P.
johnel...@wirral.gov.uk wrote:


Worth checking the headers of the email and see if it really is
generated by yourselves.
If the NDRS are being generated with out a user sending an
email, then it sounds more like spam emails. I.e someone has faked a
from address (in this case from you domain) and send the email to an
address that doesnt exist thus generating an NDR.
 
HTH

john



From: Al Rose [mailto:arose...@gmail.com] 
Sent: 11 May 2011 09:16
To: MS-Exchange Admin Issues
Subject: User get NDRs without sending emails


Hi  

I am seeing more and more of this problem in our environment
(still running 2k3 SP2 Exchange servers):  Users receive undeliverable
NDRs without writing email.
Been googling lately about it and apparently there are only
two solutions: totally disable NDRs (we dont want to do that), or get an
appliance (a magic one that will fix our problem).

We currently use Antigen but only as an antivirus, as our
antipsam filtering is done at a higher level where we dont have control.

Anybody?

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


** 

This email and any files transmitted with it are confidential
and 

intended solely for the use of the individual or entity to whom
they 

are addressed. If you have received this email in error please
notify 

the system manager. 



This footnote also confirms that this email message has been
swept by 

MIMEsweeper for the presence of computer viruses. 



www.clearswift.com 


** 



---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: little help understanding header info

2011-05-11 Thread Cameron
If they are straight .jpg attachments then I agreebutI have had
users drop pictures into word documents and had this issue. I know that
Vipre for Exchange actually *does* look at the uncompressed size when
determining whether or not to let it through.

On Wed, May 11, 2011 at 9:08 AM, Campbell, Rob 
rob_campb...@centraltechnology.net wrote:

  I wouldn’t think it would make any difference in the scenario you
 described.  JPG files are already compressed.   If you try to zip a jpg, it
 actually gets bigger.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, May 11, 2011 8:03 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: little help understanding header info



 Wow, is it really possible that the uncompressed size of the attachment is
 what counts in the over-all size limit  That changes things
 DRAMATICALLY!!!

 On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.com wrote:

 Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would it?
 I had the same sort of thing drive me crazy until I found out that an 8mb
 .xlsx file (well within our limits) actually translated to a 57mb expanded
 file (try using winzip to unzip the file to see it's *true* size).





 On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:

 From those headers it appears that Exchange was willing to send an email
 that size, but the server at tulsaconnect.com [67.214.102.28] wouldn’t
 accept it.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, May 06, 2011 9:49 AM


 *To:* MS-Exchange Admin Issues
 *Subject:* little help understanding header info



 I have been asked a number of times by owners to adjust the email size
 limit up so pictures of grand-babies will not be blocked or filtered off.
  Our email is routed through our ISP/Datacenter before being handed off to a
 Brightmail filter, then forwarded to the appropriate exchange server.  The
 10.1.9.8 address is the internal address of said filter.  I should have
 called them before I posted this, I know, but I would rather stick a fork in
 my head...



 Can anyone tell from this header if it is MY problem, either with an
 exchange setting I have overlooked or a problem with the filter?
  TulsaConnect has assured me they are enforcing size limits on email.  10
 meg seems to be the limit at this point, although I have opened up
 everything on our end considerably higher than that.



 thanks for any help.  I'm just asking for help understanding the contents
 of this bounce please, unless you can determine from the content of the
 header that this may be an exchange problem...



 thanks for any help:



  - The following addresses had permanent fatal errors -


 xx...@companymail.com 
 (reason: 552 message size exceeds fixed maximum message size)

   - Transcript of session follows -
 ... while talking to [67.214.102.28]:
  MAIL From:x...@yahoo.com SIZE=30433191
  552 message size exceeds fixed maximum message size
 554 5.0.0 Service unavailable
 Reporting-MTA: dns; mscan4.tulsaconnect.com
 Received-From-MTA: DNS; localhost.localdomain
 Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

 Final-Recipient: RFC822; xx...@companymail.com
 Action: failed
 Status: 5.3.4
 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
 Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
 Return-Path: ...@yahoo.com
 Received: from mscan4.tulsaconnect.com (localhost.localdomain [127.0.0.1])
 by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id
 p46EJdAI004340
 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500
 Received: from omp1029.access.mail.sp2.yahoo.com (
 omp1029.access.mail.sp2.yahoo.com [98.139.44.92])
 by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67])
 envelope-from xxx...@yahoo.com with SMTP
 id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
 Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -

 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
 s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=;
 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
 b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=


 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
   s=s1024; d=yahoo.com;

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 **

 Note:

 The information contained in this message may be privileged and confidential 
 and

 protected from disclosure.  

Re: little help understanding header info

2011-05-11 Thread Jeff Brown
I wonder if my Brightmail filter is guilty of this behavior, but it LOOKS
like it's actually exchange, not Brightmail that is refusing the message.

On Wed, May 11, 2011 at 9:15 AM, Cameron cameron.orl...@gmail.com wrote:

 If they are straight .jpg attachments then I agreebutI have had
 users drop pictures into word documents and had this issue. I know that
 Vipre for Exchange actually *does* look at the uncompressed size when
 determining whether or not to let it through.

 On Wed, May 11, 2011 at 9:08 AM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:

  I wouldn’t think it would make any difference in the scenario you
 described.  JPG files are already compressed.   If you try to zip a jpg, it
 actually gets bigger.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Wednesday, May 11, 2011 8:03 AM

 *To:* MS-Exchange Admin Issues
 *Subject:* Re: little help understanding header info



 Wow, is it really possible that the uncompressed size of the attachment is
 what counts in the over-all size limit  That changes things
 DRAMATICALLY!!!

 On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.com wrote:

 Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would
 it? I had the same sort of thing drive me crazy until I found out that an
 8mb .xlsx file (well within our limits) actually translated to a 57mb
 expanded file (try using winzip to unzip the file to see it's *true* size).





 On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob 
 rob_campb...@centraltechnology.net wrote:

 From those headers it appears that Exchange was willing to send an email
 that size, but the server at tulsaconnect.com [67.214.102.28] wouldn’t
 accept it.



 *From:* Jeff Brown [mailto:2jbr...@gmail.com]
 *Sent:* Friday, May 06, 2011 9:49 AM


 *To:* MS-Exchange Admin Issues
 *Subject:* little help understanding header info



 I have been asked a number of times by owners to adjust the email size
 limit up so pictures of grand-babies will not be blocked or filtered off.
  Our email is routed through our ISP/Datacenter before being handed off to a
 Brightmail filter, then forwarded to the appropriate exchange server.  The
 10.1.9.8 address is the internal address of said filter.  I should have
 called them before I posted this, I know, but I would rather stick a fork in
 my head...



 Can anyone tell from this header if it is MY problem, either with an
 exchange setting I have overlooked or a problem with the filter?
  TulsaConnect has assured me they are enforcing size limits on email.  10
 meg seems to be the limit at this point, although I have opened up
 everything on our end considerably higher than that.



 thanks for any help.  I'm just asking for help understanding the contents
 of this bounce please, unless you can determine from the content of the
 header that this may be an exchange problem...



 thanks for any help:



  - The following addresses had permanent fatal errors -


 xx...@companymail.com 
 (reason: 552 message size exceeds fixed maximum message size)

   - Transcript of session follows -
 ... while talking to [67.214.102.28]:
  MAIL From:x...@yahoo.com SIZE=30433191
  552 message size exceeds fixed maximum message size
 554 5.0.0 Service unavailable
 Reporting-MTA: dns; mscan4.tulsaconnect.com
 Received-From-MTA: DNS; localhost.localdomain
 Arrival-Date: Fri, 6 May 2011 09:19:39 -0500

 Final-Recipient: RFC822; xx...@companymail.com
 Action: failed
 Status: 5.3.4
 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size
 Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500
 Return-Path: ...@yahoo.com
 Received: from mscan4.tulsaconnect.com (localhost.localdomain
 [127.0.0.1])
 by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id
 p46EJdAI004340
 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500
 Received: from omp1029.access.mail.sp2.yahoo.com (
 omp1029.access.mail.sp2.yahoo.com [98.139.44.92])
 by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67])
 envelope-from xxx...@yahoo.com with SMTP
 id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500
 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 -
 Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 -

 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com;
 s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=;
 h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type;
 b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk=


 DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
   s=s1024; d=yahoo.com;

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe 

RE: Problems with delivery from Exchange 2003 to 2010

2011-05-11 Thread Michael B. Smith
I'd be looking at the protocol logs.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Dave Wade [mailto:dave.w...@stockport.gov.uk]
Sent: Wednesday, May 11, 2011 12:33 PM
To: MS-Exchange Admin Issues
Subject: Problems with delivery from Exchange 2003 to 2010

Folks,

I seem to be getting stuck again. I have a number of messages queued from my 
Exchange 2003 First Routing Group to my Exchange 2007/10  Exchange Routing 
Group (DWB..). I have tried re-creating the routing group connectors but 
things still seem to get stuck. Any thoughts?

Dave Wade
Business Services I.C.T.
0161 474 5456




**
This email, and any files transmitted with it, is confidential and
intended solely for the use of the individual or entity to whom they
are addressed. As a public body, the Council may be required to disclose this 
email, or any response to it, under the Freedom of Information Act 2000, unless 
the information in it is covered by one of the exemptions in the Act.

If you receive this email in error please notify Stockport ICT, Business 
Services via email.qu...@stockport.gov.ukmailto:email.qu...@stockport.gov.uk 
and then permanently remove it from your system.

Thank you.

http://www.stockport.gov.uk
**

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Postini

2011-05-11 Thread Matt Moore
Typically the server is set up to only talk to Postini in and out.  Dns  all
pointed to postini.   Very poor to no cust service.  I used to have the
setup doc around but I can't seem to find it.  Bet you could download it
from them..

M

 

From: KevinM [mailto:kev...@wlkmmas.org] 
Sent: Wednesday, May 11, 2011 8:39 AM
To: MS-Exchange Admin Issues
Subject: Postini

 

I have never worked with Postini and I am prepping for a customer
consolidation where Postini is involved - 

 

My question - Can I do per user email routing with Postini?

Example

b...@bob.com is routed to mail.bob.com

f...@bob.com is routed to mail.fredco.com

sa...@bob.com is routed to coolserver.bob.com 

---
To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist


---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Question on moving public folders vs replication

2011-05-11 Thread Michael B. Smith
How, pray tell, would you move them?

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com]
Sent: Wednesday, May 11, 2011 4:44 PM
To: MS-Exchange Admin Issues
Subject: Question on moving public folders vs replication

In my planning for decommissioning the first Exchange 2003 server have come to 
what to do with Public Folders. Should I move the Public Folders to the 
replacement server or just replicate them.
Is one way better then the other?

--
T. Todd Lemmiksoo

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

Re: Question on moving public folders vs replication

2011-05-11 Thread Todd Lemmiksoo
Using ESM , click on Public folder instances all tasks change server. Would
this be wrong?

On Wed, May 11, 2011 at 3:46 PM, Michael B. Smith mich...@smithcons.comwrote:

  How, pray tell, would you “move them”?



 Regards,



 Michael B. Smith

 Consultant and Exchange MVP

 http://TheEssentialExchange.com



 *From:* Todd Lemmiksoo [mailto:tlemmik...@gmail.com]
 *Sent:* Wednesday, May 11, 2011 4:44 PM
 *To:* MS-Exchange Admin Issues
 *Subject:* Question on moving public folders vs replication



 In my planning for decommissioning the first Exchange 2003 server have come
 to what to do with Public Folders. Should I move the Public Folders to the
 replacement server or just replicate them.
 Is one way better then the other?

 --
 T. Todd Lemmiksoo

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
 http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist




-- 
T. Todd Lemmiksoo

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Question on moving public folders vs replication

2011-05-11 Thread Michael B. Smith
Oh. My experience is that that doesn't work very well.

It depends on replication, by the way.

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com]
Sent: Wednesday, May 11, 2011 4:55 PM
To: MS-Exchange Admin Issues
Subject: Re: Question on moving public folders vs replication

Using ESM , click on Public folder instances all tasks change server. Would 
this be wrong?
On Wed, May 11, 2011 at 3:46 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
How, pray tell, would you move them?

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Todd Lemmiksoo [mailto:tlemmik...@gmail.commailto:tlemmik...@gmail.com]
Sent: Wednesday, May 11, 2011 4:44 PM
To: MS-Exchange Admin Issues
Subject: Question on moving public folders vs replication

In my planning for decommissioning the first Exchange 2003 server have come to 
what to do with Public Folders. Should I move the Public Folders to the 
replacement server or just replicate them.
Is one way better then the other?

--
T. Todd Lemmiksoo

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



--
T. Todd Lemmiksoo

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

RE: Question on moving public folders vs replication

2011-05-11 Thread Ben Serebin
Hello Todd,

I would do the move via 2010 using these powershell commands 
and make sure you read all the comments as well. Good luck.

http://blogs.technet.com/b/agobbi/archive/2010/08/04/how-to-move-public-folder-from-exchange-2003-to-exchagne-2010.aspx

-Ben

[cid:image001.jpg@01CC1003.EC1D9610]
Technology  Exchange Server Consultinghttp://www.reefsolutions.com/
Office: 646.470.9051
Mobile: 646.319.9051
--
Founder / President
New York Exchange User Grouphttp://www.nyexug.com/
1st and Only Microsoft Exchange Server Group in NYC
--

From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com]
Sent: Wednesday, May 11, 2011 4:55 PM
To: MS-Exchange Admin Issues
Subject: Re: Question on moving public folders vs replication

Using ESM , click on Public folder instances all tasks change server. Would 
this be wrong?
On Wed, May 11, 2011 at 3:46 PM, Michael B. Smith 
mich...@smithcons.commailto:mich...@smithcons.com wrote:
How, pray tell, would you “move them”?

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com

From: Todd Lemmiksoo [mailto:tlemmik...@gmail.commailto:tlemmik...@gmail.com]
Sent: Wednesday, May 11, 2011 4:44 PM
To: MS-Exchange Admin Issues
Subject: Question on moving public folders vs replication

In my planning for decommissioning the first Exchange 2003 server have come to 
what to do with Public Folders. Should I move the Public Folders to the 
replacement server or just replicate them.
Is one way better then the other?

--
T. Todd Lemmiksoo

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



--
T. Todd Lemmiksoo

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to 
listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelistinline: image001.jpg

White Paper: Counting the Hidden Costs of Google apps

2011-05-11 Thread Michael B. Smith
I'm sure many people consider me to be a Microsoft shill, but I do support a 
number of clients who are using Google Apps.

This MSFT white paper is (of course) very Microsoft oriented, but I think it 
describes many of the challenges I've experienced with my Google Apps clients.

http://sharepoint.microsoft.com/businessproductivity/en-us/Why-Microsoft/resources/Pages/WhitePaper.aspx?Title=Counting+the+Hidden+Costs+of+Google+AppsResourceType=White+Paper

Regards,

Michael B. Smith
Consultant and Exchange MVP
http://TheEssentialExchange.com



---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist



Re: RE: Postini

2011-05-11 Thread Oz Casey Dedeal
Postini servers passes the 220 request back to configured company internal
servers. They take your exchange server answers and pass it same way to
asking server.

Everything else you should be able do it from Postini CP and your mail
servers internally
Best
Ocd

On May 11, 2011 1:55 PM, Matt Moore mattmoore...@hotmail.com wrote:

 Typically the server is set up to only talk to Postini in and out.  Dns
all pointed to postini.   Very poor to no cust service.  I used to have the
setup doc around but I can’t seem to find it.  Bet you could download it
from them….

 M



 From: KevinM [mailto:kev...@wlkmmas.org]
 Sent: Wednesday, May 11, 2011 8:39 AM
 To: MS-Exchange Admin Issues
 Subject: Postini



 I have never worked with Postini and I am prepping for a customer
consolidation where Postini is involved –



 My question – Can I do per user email routing with Postini?

 Example

 b...@bob.com is routed to mail.bob.com

 f...@bob.com is routed to mail.fredco.com

 sa...@bob.com is routed to coolserver.bob.com

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

 ---
 To manage subscriptions click here:
http://lyris.sunbelt-software.com/read/my_forums/
 or send an email to listmana...@lyris.sunbeltsoftware.com
 with the body: unsubscribe exchangelist

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to listmana...@lyris.sunbeltsoftware.com
with the body: unsubscribe exchangelist