User get NDRs without sending emails
Hi I am seeing more and more of this problem in our environment (still running 2k3 SP2 Exchange servers): Users receive undeliverable NDRs without writing email. Been googling lately about it and apparently there are only two solutions: totally disable NDRs (we dont want to do that), or get an appliance (a magic one that will fix our problem). We currently use Antigen but only as an antivirus, as our antipsam filtering is done at a higher level where we dont have control. Anybody? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: User get NDRs without sending emails
Worth checking the headers of the email and see if it really is generated by yourselves. If the NDRS are being generated with out a user sending an email, then it sounds more like spam emails. I.e someone has faked a from address (in this case from you domain) and send the email to an address that doesnt exist thus generating an NDR. HTH john From: Al Rose [mailto:arose...@gmail.com] Sent: 11 May 2011 09:16 To: MS-Exchange Admin Issues Subject: User get NDRs without sending emails Hi I am seeing more and more of this problem in our environment (still running 2k3 SP2 Exchange servers): Users receive undeliverable NDRs without writing email. Been googling lately about it and apparently there are only two solutions: totally disable NDRs (we dont want to do that), or get an appliance (a magic one that will fix our problem). We currently use Antigen but only as an antivirus, as our antipsam filtering is done at a higher level where we dont have control. Anybody? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: little help understanding header info
I don't think I said that. (if I did, it was my keyboard's fault)! TC has asserted all along that they enforce NO size limits on email. On Fri, May 6, 2011 at 12:49 PM, Joseph Heaton jhea...@dfg.ca.gov wrote: You say that your TulsaConnect IS enforcing size limits, and you're not. So, besides everything in the header referencing TulsaConnect, I would still be leaning towards at least finding out what their limit is that they're enforcing, and whether or not you can get them to raise that limit. Jeff Brown 2jbr...@gmail.com 5/6/2011 7:49 AM I have been asked a number of times by owners to adjust the email size limit up so pictures of grand-babies will not be blocked or filtered off. Our email is routed through our ISP/Datacenter before being handed off to a Brightmail filter, then forwarded to the appropriate exchange server. The 10.1.9.8 address is the internal address of said filter. I should have called them before I posted this, I know, but I would rather stick a fork in my head... Can anyone tell from this header if it is MY problem, either with an exchange setting I have overlooked or a problem with the filter? TulsaConnect has assured me they are enforcing size limits on email. 10 meg seems to be the limit at this point, although I have opened up everything on our end considerably higher than that. thanks for any help. I'm just asking for help understanding the contents of this bounce please, unless you can determine from the content of the header that this may be an exchange problem... thanks for any help: - The following addresses had permanent fatal errors - xx...@companymail.com (reason: 552 message size exceeds fixed maximum message size) - Transcript of session follows - ... while talking to [67.214.102.28]: MAIL From:x...@yahoo.com SIZE=30433191 552 message size exceeds fixed maximum message size 554 5.0.0 Service unavailable Reporting-MTA: dns; mscan4.tulsaconnect.com Received-From-MTA: DNS; localhost.localdomain Arrival-Date: Fri, 6 May 2011 09:19:39 -0500 Final-Recipient: RFC822; xx...@companymail.com Action: failed Status: 5.3.4 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500 Return-Path: ...@yahoo.com Received: from mscan4.tulsaconnect.com (localhost.localdomain [127.0.0.1]) by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id p46EJdAI004340 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500 Received: from omp1029.access.mail.sp2.yahoo.com ( omp1029.access.mail.sp2.yahoo.com [98.139.44.92]) by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67]) envelope-from xxx...@yahoo.com with SMTP id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 - Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: little help understanding header info
I wouldn't think it would make any difference in the scenario you described. JPG files are already compressed. If you try to zip a jpg, it actually gets bigger. From: Jeff Brown [mailto:2jbr...@gmail.com] Sent: Wednesday, May 11, 2011 8:03 AM To: MS-Exchange Admin Issues Subject: Re: little help understanding header info Wow, is it really possible that the uncompressed size of the attachment is what counts in the over-all size limit That changes things DRAMATICALLY!!! On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.commailto:cameron.orl...@gmail.com wrote: Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would it? I had the same sort of thing drive me crazy until I found out that an 8mb .xlsx file (well within our limits) actually translated to a 57mb expanded file (try using winzip to unzip the file to see it's *true* size). On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob rob_campb...@centraltechnology.netmailto:rob_campb...@centraltechnology.net wrote: From those headers it appears that Exchange was willing to send an email that size, but the server at tulsaconnect.comhttp://tulsaconnect.com/ [67.214.102.28] wouldn't accept it. From: Jeff Brown [mailto:2jbr...@gmail.commailto:2jbr...@gmail.com] Sent: Friday, May 06, 2011 9:49 AM To: MS-Exchange Admin Issues Subject: little help understanding header info I have been asked a number of times by owners to adjust the email size limit up so pictures of grand-babies will not be blocked or filtered off. Our email is routed through our ISP/Datacenter before being handed off to a Brightmail filter, then forwarded to the appropriate exchange server. The 10.1.9.8 address is the internal address of said filter. I should have called them before I posted this, I know, but I would rather stick a fork in my head... Can anyone tell from this header if it is MY problem, either with an exchange setting I have overlooked or a problem with the filter? TulsaConnect has assured me they are enforcing size limits on email. 10 meg seems to be the limit at this point, although I have opened up everything on our end considerably higher than that. thanks for any help. I'm just asking for help understanding the contents of this bounce please, unless you can determine from the content of the header that this may be an exchange problem... thanks for any help: - The following addresses had permanent fatal errors - xx...@companymail.commailto:xx...@companymail.com (reason: 552 message size exceeds fixed maximum message size) - Transcript of session follows - ... while talking to [67.214.102.28]: MAIL From:x...@yahoo.commailto:x...@yahoo.com SIZE=30433191 552 message size exceeds fixed maximum message size 554 5.0.0 Service unavailable Reporting-MTA: dns; mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ Received-From-MTA: DNS; localhost.localdomain Arrival-Date: Fri, 6 May 2011 09:19:39 -0500 Final-Recipient: RFC822; xx...@companymail.commailto:xx...@companymail.com Action: failed Status: 5.3.4 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500 Return-Path: ...@yahoo.commailto:...@yahoo.com Received: from mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ (localhost.localdomain [127.0.0.1]) by mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ (8.13.8/8.13.8) with ESMTP id p46EJdAI004340 for xxx...@companymail.commailto:xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500 Received: from omp1029.access.mail.sp2.yahoo.comhttp://omp1029.access.mail.sp2.yahoo.com/ (omp1029.access.mail.sp2.yahoo.comhttp://omp1029.access.mail.sp2.yahoo.com/ [98.139.44.92]) by mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ (mscan4.tulsaconnect.comhttp://mscan4.tulsaconnect.com/ [67.214.101.67]) envelope-from xxx...@yahoo.commailto:xxx...@yahoo.com with SMTP id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 - Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.comhttp://yahoo.com/; s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.comhttp://yahoo.com/; --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: User get NDRs without sending emails
Yes, I agree with John...most likely backscatter... On Wed, May 11, 2011 at 3:43 AM, Ellis, John P. johnel...@wirral.gov.ukwrote: Worth checking the headers of the email and see if it really is generated by yourselves. If the NDRS are being generated with out a user sending an email, then it sounds more like spam emails. I.e someone has faked a from address (in this case from you domain) and send the email to an address that doesnt exist thus generating an NDR. HTH john -- *From:* Al Rose [mailto:arose...@gmail.com] *Sent:* 11 May 2011 09:16 *To:* MS-Exchange Admin Issues *Subject:* User get NDRs without sending emails Hi I am seeing more and more of this problem in our environment (still running 2k3 SP2 Exchange servers): Users receive undeliverable NDRs without writing email. Been googling lately about it and apparently there are only two solutions: totally disable NDRs (we dont want to do that), or get an appliance (a magic one that will fix our problem). We currently use Antigen but only as an antivirus, as our antipsam filtering is done at a higher level where we dont have control. Anybody? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: little help understanding header info
To answer your question, the offending rejected email is almost always jpegs... grandbaby pics. we have tested using jpegs and a collection of pdf's and other random files compressed together in one attachment. On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.com wrote: Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would it? I had the same sort of thing drive me crazy until I found out that an 8mb .xlsx file (well within our limits) actually translated to a 57mb expanded file (try using winzip to unzip the file to see it's *true* size). On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob rob_campb...@centraltechnology.net wrote: From those headers it appears that Exchange was willing to send an email that size, but the server at tulsaconnect.com [67.214.102.28] wouldn’t accept it. *From:* Jeff Brown [mailto:2jbr...@gmail.com] *Sent:* Friday, May 06, 2011 9:49 AM *To:* MS-Exchange Admin Issues *Subject:* little help understanding header info I have been asked a number of times by owners to adjust the email size limit up so pictures of grand-babies will not be blocked or filtered off. Our email is routed through our ISP/Datacenter before being handed off to a Brightmail filter, then forwarded to the appropriate exchange server. The 10.1.9.8 address is the internal address of said filter. I should have called them before I posted this, I know, but I would rather stick a fork in my head... Can anyone tell from this header if it is MY problem, either with an exchange setting I have overlooked or a problem with the filter? TulsaConnect has assured me they are enforcing size limits on email. 10 meg seems to be the limit at this point, although I have opened up everything on our end considerably higher than that. thanks for any help. I'm just asking for help understanding the contents of this bounce please, unless you can determine from the content of the header that this may be an exchange problem... thanks for any help: - The following addresses had permanent fatal errors - xx...@companymail.com (reason: 552 message size exceeds fixed maximum message size) - Transcript of session follows - ... while talking to [67.214.102.28]: MAIL From:x...@yahoo.com SIZE=30433191 552 message size exceeds fixed maximum message size 554 5.0.0 Service unavailable Reporting-MTA: dns; mscan4.tulsaconnect.com Received-From-MTA: DNS; localhost.localdomain Arrival-Date: Fri, 6 May 2011 09:19:39 -0500 Final-Recipient: RFC822; xx...@companymail.com Action: failed Status: 5.3.4 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500 Return-Path: ...@yahoo.com Received: from mscan4.tulsaconnect.com (localhost.localdomain [127.0.0.1]) by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id p46EJdAI004340 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500 Received: from omp1029.access.mail.sp2.yahoo.com ( omp1029.access.mail.sp2.yahoo.com [98.139.44.92]) by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67]) envelope-from xxx...@yahoo.com with SMTP id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 - Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** Note: The information contained in this message may be privileged and confidential and protected from disclosure. If the reader of this message is not the intended recipient, or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by replying to the message and deleting it from your computer. ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to
RE: User get NDRs without sending emails
That changes things slightly then. A couple of thoughts. Someone has jumped onto the user machine and sent the email Does anyone have access to the users email account (maybe via Mailbox rights permissons)? System generated email? An odd rule on the mailbox? Is the email in the sent items folder? Is the name of the spreadsheet the same as one that appears on your network drives? Thanks John From: Al Rose [mailto:arose...@gmail.com] Sent: 11 May 2011 14:10 To: MS-Exchange Admin Issues Subject: Re: User get NDRs without sending emails I tracked emails in Exchange, an email was sent around 2pm and the user received an NDR 2 hours later. If i look at the original email, there is only one recipient which is a recipient unknown from the user. After further investigation i also was told that the same email message has been received by external users (still unkown from the user who is supposed to have sent this message)and they actually responded to our user saying they received an excel attachment they could not open. So to resume an email is sent from one of our user (even the correct signature is in the email and contains a spreadsheet that cannot be opened). The user has no delegates nor granted the send as right to anyone. Only some helpdesk staff have the send as right to so but i assume my colleagues would not send random emails... On Wed, May 11, 2011 at 10:43 AM, Ellis, John P. johnel...@wirral.gov.uk wrote: Worth checking the headers of the email and see if it really is generated by yourselves. If the NDRS are being generated with out a user sending an email, then it sounds more like spam emails. I.e someone has faked a from address (in this case from you domain) and send the email to an address that doesnt exist thus generating an NDR. HTH john From: Al Rose [mailto:arose...@gmail.com] Sent: 11 May 2011 09:16 To: MS-Exchange Admin Issues Subject: User get NDRs without sending emails Hi I am seeing more and more of this problem in our environment (still running 2k3 SP2 Exchange servers): Users receive undeliverable NDRs without writing email. Been googling lately about it and apparently there are only two solutions: totally disable NDRs (we dont want to do that), or get an appliance (a magic one that will fix our problem). We currently use Antigen but only as an antivirus, as our antipsam filtering is done at a higher level where we dont have control. Anybody? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: little help understanding header info
If they are straight .jpg attachments then I agreebutI have had users drop pictures into word documents and had this issue. I know that Vipre for Exchange actually *does* look at the uncompressed size when determining whether or not to let it through. On Wed, May 11, 2011 at 9:08 AM, Campbell, Rob rob_campb...@centraltechnology.net wrote: I wouldn’t think it would make any difference in the scenario you described. JPG files are already compressed. If you try to zip a jpg, it actually gets bigger. *From:* Jeff Brown [mailto:2jbr...@gmail.com] *Sent:* Wednesday, May 11, 2011 8:03 AM *To:* MS-Exchange Admin Issues *Subject:* Re: little help understanding header info Wow, is it really possible that the uncompressed size of the attachment is what counts in the over-all size limit That changes things DRAMATICALLY!!! On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.com wrote: Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would it? I had the same sort of thing drive me crazy until I found out that an 8mb .xlsx file (well within our limits) actually translated to a 57mb expanded file (try using winzip to unzip the file to see it's *true* size). On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob rob_campb...@centraltechnology.net wrote: From those headers it appears that Exchange was willing to send an email that size, but the server at tulsaconnect.com [67.214.102.28] wouldn’t accept it. *From:* Jeff Brown [mailto:2jbr...@gmail.com] *Sent:* Friday, May 06, 2011 9:49 AM *To:* MS-Exchange Admin Issues *Subject:* little help understanding header info I have been asked a number of times by owners to adjust the email size limit up so pictures of grand-babies will not be blocked or filtered off. Our email is routed through our ISP/Datacenter before being handed off to a Brightmail filter, then forwarded to the appropriate exchange server. The 10.1.9.8 address is the internal address of said filter. I should have called them before I posted this, I know, but I would rather stick a fork in my head... Can anyone tell from this header if it is MY problem, either with an exchange setting I have overlooked or a problem with the filter? TulsaConnect has assured me they are enforcing size limits on email. 10 meg seems to be the limit at this point, although I have opened up everything on our end considerably higher than that. thanks for any help. I'm just asking for help understanding the contents of this bounce please, unless you can determine from the content of the header that this may be an exchange problem... thanks for any help: - The following addresses had permanent fatal errors - xx...@companymail.com (reason: 552 message size exceeds fixed maximum message size) - Transcript of session follows - ... while talking to [67.214.102.28]: MAIL From:x...@yahoo.com SIZE=30433191 552 message size exceeds fixed maximum message size 554 5.0.0 Service unavailable Reporting-MTA: dns; mscan4.tulsaconnect.com Received-From-MTA: DNS; localhost.localdomain Arrival-Date: Fri, 6 May 2011 09:19:39 -0500 Final-Recipient: RFC822; xx...@companymail.com Action: failed Status: 5.3.4 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500 Return-Path: ...@yahoo.com Received: from mscan4.tulsaconnect.com (localhost.localdomain [127.0.0.1]) by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id p46EJdAI004340 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500 Received: from omp1029.access.mail.sp2.yahoo.com ( omp1029.access.mail.sp2.yahoo.com [98.139.44.92]) by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67]) envelope-from xxx...@yahoo.com with SMTP id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 - Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** Note: The information contained in this message may be privileged and confidential and protected from disclosure.
Re: little help understanding header info
I wonder if my Brightmail filter is guilty of this behavior, but it LOOKS like it's actually exchange, not Brightmail that is refusing the message. On Wed, May 11, 2011 at 9:15 AM, Cameron cameron.orl...@gmail.com wrote: If they are straight .jpg attachments then I agreebutI have had users drop pictures into word documents and had this issue. I know that Vipre for Exchange actually *does* look at the uncompressed size when determining whether or not to let it through. On Wed, May 11, 2011 at 9:08 AM, Campbell, Rob rob_campb...@centraltechnology.net wrote: I wouldn’t think it would make any difference in the scenario you described. JPG files are already compressed. If you try to zip a jpg, it actually gets bigger. *From:* Jeff Brown [mailto:2jbr...@gmail.com] *Sent:* Wednesday, May 11, 2011 8:03 AM *To:* MS-Exchange Admin Issues *Subject:* Re: little help understanding header info Wow, is it really possible that the uncompressed size of the attachment is what counts in the over-all size limit That changes things DRAMATICALLY!!! On Mon, May 9, 2011 at 2:00 PM, Cameron cameron.orl...@gmail.com wrote: Wouldn't happen to be some sort of a .docx/.xlsx/etc type of file would it? I had the same sort of thing drive me crazy until I found out that an 8mb .xlsx file (well within our limits) actually translated to a 57mb expanded file (try using winzip to unzip the file to see it's *true* size). On Fri, May 6, 2011 at 10:56 AM, Campbell, Rob rob_campb...@centraltechnology.net wrote: From those headers it appears that Exchange was willing to send an email that size, but the server at tulsaconnect.com [67.214.102.28] wouldn’t accept it. *From:* Jeff Brown [mailto:2jbr...@gmail.com] *Sent:* Friday, May 06, 2011 9:49 AM *To:* MS-Exchange Admin Issues *Subject:* little help understanding header info I have been asked a number of times by owners to adjust the email size limit up so pictures of grand-babies will not be blocked or filtered off. Our email is routed through our ISP/Datacenter before being handed off to a Brightmail filter, then forwarded to the appropriate exchange server. The 10.1.9.8 address is the internal address of said filter. I should have called them before I posted this, I know, but I would rather stick a fork in my head... Can anyone tell from this header if it is MY problem, either with an exchange setting I have overlooked or a problem with the filter? TulsaConnect has assured me they are enforcing size limits on email. 10 meg seems to be the limit at this point, although I have opened up everything on our end considerably higher than that. thanks for any help. I'm just asking for help understanding the contents of this bounce please, unless you can determine from the content of the header that this may be an exchange problem... thanks for any help: - The following addresses had permanent fatal errors - xx...@companymail.com (reason: 552 message size exceeds fixed maximum message size) - Transcript of session follows - ... while talking to [67.214.102.28]: MAIL From:x...@yahoo.com SIZE=30433191 552 message size exceeds fixed maximum message size 554 5.0.0 Service unavailable Reporting-MTA: dns; mscan4.tulsaconnect.com Received-From-MTA: DNS; localhost.localdomain Arrival-Date: Fri, 6 May 2011 09:19:39 -0500 Final-Recipient: RFC822; xx...@companymail.com Action: failed Status: 5.3.4 Diagnostic-Code: SMTP; 552 message size exceeds fixed maximum message size Last-Attempt-Date: Fri, 6 May 2011 09:21:19 -0500 Return-Path: ...@yahoo.com Received: from mscan4.tulsaconnect.com (localhost.localdomain [127.0.0.1]) by mscan4.tulsaconnect.com (8.13.8/8.13.8) with ESMTP id p46EJdAI004340 for xxx...@companymail.com; Fri, 6 May 2011 09:19:39 -0500 Received: from omp1029.access.mail.sp2.yahoo.com ( omp1029.access.mail.sp2.yahoo.com [98.139.44.92]) by mscan4.tulsaconnect.com (mscan4.tulsaconnect.com [67.214.101.67]) envelope-from xxx...@yahoo.com with SMTP id n459Jd1776718739ZQ ret-id none; Fri, 06 May 2011 09:19:39 -0500 Received: (qmail 96059 invoked by uid 1000); 6 May 2011 14:19:38 - Received: (qmail 74424 invoked by uid 60001); 6 May 2011 14:19:32 - DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1304691561; bh=pn4FE+SR65YTvA5pXDzmFkRoVIIF7uaA7DxpPitMJ10=; h=Message-ID:X-YMail-OSG:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=ri21sjwBmDXi5wwM5pxe0cW+CDbqYGUoouCXCp41ddc86JiGHLRP5/dwFZvTkrzestPC0F/y5ZT95TRn1OEvbqgQxmeiYaHMlbGR4gMiVI59ejEmkpAAUbmNUtURCLE5cHNexwRUvOogoMG8IJbHQV3+his6o1WUsTr3lHoXtyk= DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=s1024; d=yahoo.com; --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe
RE: Problems with delivery from Exchange 2003 to 2010
I'd be looking at the protocol logs. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Wednesday, May 11, 2011 12:33 PM To: MS-Exchange Admin Issues Subject: Problems with delivery from Exchange 2003 to 2010 Folks, I seem to be getting stuck again. I have a number of messages queued from my Exchange 2003 First Routing Group to my Exchange 2007/10 Exchange Routing Group (DWB..). I have tried re-creating the routing group connectors but things still seem to get stuck. Any thoughts? Dave Wade Business Services I.C.T. 0161 474 5456 ** This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Business Services via email.qu...@stockport.gov.ukmailto:email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Postini
Typically the server is set up to only talk to Postini in and out. Dns all pointed to postini. Very poor to no cust service. I used to have the setup doc around but I can't seem to find it. Bet you could download it from them.. M From: KevinM [mailto:kev...@wlkmmas.org] Sent: Wednesday, May 11, 2011 8:39 AM To: MS-Exchange Admin Issues Subject: Postini I have never worked with Postini and I am prepping for a customer consolidation where Postini is involved - My question - Can I do per user email routing with Postini? Example b...@bob.com is routed to mail.bob.com f...@bob.com is routed to mail.fredco.com sa...@bob.com is routed to coolserver.bob.com --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Question on moving public folders vs replication
How, pray tell, would you move them? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com] Sent: Wednesday, May 11, 2011 4:44 PM To: MS-Exchange Admin Issues Subject: Question on moving public folders vs replication In my planning for decommissioning the first Exchange 2003 server have come to what to do with Public Folders. Should I move the Public Folders to the replacement server or just replicate them. Is one way better then the other? -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: Question on moving public folders vs replication
Using ESM , click on Public folder instances all tasks change server. Would this be wrong? On Wed, May 11, 2011 at 3:46 PM, Michael B. Smith mich...@smithcons.comwrote: How, pray tell, would you “move them”? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com *From:* Todd Lemmiksoo [mailto:tlemmik...@gmail.com] *Sent:* Wednesday, May 11, 2011 4:44 PM *To:* MS-Exchange Admin Issues *Subject:* Question on moving public folders vs replication In my planning for decommissioning the first Exchange 2003 server have come to what to do with Public Folders. Should I move the Public Folders to the replacement server or just replicate them. Is one way better then the other? -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Question on moving public folders vs replication
Oh. My experience is that that doesn't work very well. It depends on replication, by the way. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com] Sent: Wednesday, May 11, 2011 4:55 PM To: MS-Exchange Admin Issues Subject: Re: Question on moving public folders vs replication Using ESM , click on Public folder instances all tasks change server. Would this be wrong? On Wed, May 11, 2011 at 3:46 PM, Michael B. Smith mich...@smithcons.commailto:mich...@smithcons.com wrote: How, pray tell, would you move them? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Todd Lemmiksoo [mailto:tlemmik...@gmail.commailto:tlemmik...@gmail.com] Sent: Wednesday, May 11, 2011 4:44 PM To: MS-Exchange Admin Issues Subject: Question on moving public folders vs replication In my planning for decommissioning the first Exchange 2003 server have come to what to do with Public Folders. Should I move the Public Folders to the replacement server or just replicate them. Is one way better then the other? -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Question on moving public folders vs replication
Hello Todd, I would do the move via 2010 using these powershell commands and make sure you read all the comments as well. Good luck. http://blogs.technet.com/b/agobbi/archive/2010/08/04/how-to-move-public-folder-from-exchange-2003-to-exchagne-2010.aspx -Ben [cid:image001.jpg@01CC1003.EC1D9610] Technology Exchange Server Consultinghttp://www.reefsolutions.com/ Office: 646.470.9051 Mobile: 646.319.9051 -- Founder / President New York Exchange User Grouphttp://www.nyexug.com/ 1st and Only Microsoft Exchange Server Group in NYC -- From: Todd Lemmiksoo [mailto:tlemmik...@gmail.com] Sent: Wednesday, May 11, 2011 4:55 PM To: MS-Exchange Admin Issues Subject: Re: Question on moving public folders vs replication Using ESM , click on Public folder instances all tasks change server. Would this be wrong? On Wed, May 11, 2011 at 3:46 PM, Michael B. Smith mich...@smithcons.commailto:mich...@smithcons.com wrote: How, pray tell, would you “move them”? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Todd Lemmiksoo [mailto:tlemmik...@gmail.commailto:tlemmik...@gmail.com] Sent: Wednesday, May 11, 2011 4:44 PM To: MS-Exchange Admin Issues Subject: Question on moving public folders vs replication In my planning for decommissioning the first Exchange 2003 server have come to what to do with Public Folders. Should I move the Public Folders to the replacement server or just replicate them. Is one way better then the other? -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- T. Todd Lemmiksoo --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistinline: image001.jpg
White Paper: Counting the Hidden Costs of Google apps
I'm sure many people consider me to be a Microsoft shill, but I do support a number of clients who are using Google Apps. This MSFT white paper is (of course) very Microsoft oriented, but I think it describes many of the challenges I've experienced with my Google Apps clients. http://sharepoint.microsoft.com/businessproductivity/en-us/Why-Microsoft/resources/Pages/WhitePaper.aspx?Title=Counting+the+Hidden+Costs+of+Google+AppsResourceType=White+Paper Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: RE: Postini
Postini servers passes the 220 request back to configured company internal servers. They take your exchange server answers and pass it same way to asking server. Everything else you should be able do it from Postini CP and your mail servers internally Best Ocd On May 11, 2011 1:55 PM, Matt Moore mattmoore...@hotmail.com wrote: Typically the server is set up to only talk to Postini in and out. Dns all pointed to postini. Very poor to no cust service. I used to have the setup doc around but I can’t seem to find it. Bet you could download it from them…. M From: KevinM [mailto:kev...@wlkmmas.org] Sent: Wednesday, May 11, 2011 8:39 AM To: MS-Exchange Admin Issues Subject: Postini I have never worked with Postini and I am prepping for a customer consolidation where Postini is involved – My question – Can I do per user email routing with Postini? Example b...@bob.com is routed to mail.bob.com f...@bob.com is routed to mail.fredco.com sa...@bob.com is routed to coolserver.bob.com --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist