Re: User get NDRs without sending emails
Turns out it is a Trojan:Exploit:Win32/CVE-2009-3129, at least thats what the antivirus said (the one running on Exchange) the one on the local computer hasnt seen anything... Still dont get how this email could have been sent without the user knowing it. the user is alone in his office so he's saying no chance someone sent the email from his computer. Checked the mailbox rights, there are a couple of security groups for our IT folks that have full mailbox access, but i assume they would not do that :) On Wed, May 11, 2011 at 3:57 PM, Ellis, John P. johnel...@wirral.gov.ukwrote: That changes things slightly then. A couple of thoughts. Someone has jumped onto the user machine and sent the email Does anyone have access to the users email account (maybe via Mailbox rights permissons)? System generated email? An odd rule on the mailbox? Is the email in the sent items folder? Is the name of the spreadsheet the same as one that appears on your network drives? Thanks John -- *From:* Al Rose [mailto:arose...@gmail.com] *Sent:* 11 May 2011 14:10 *To:* MS-Exchange Admin Issues *Subject:* Re: User get NDRs without sending emails I tracked emails in Exchange, an email was sent around 2pm and the user received an NDR 2 hours later. If i look at the original email, there is only one recipient which is a recipient unknown from the user. After further investigation i also was told that the same email message has been received by external users (still unkown from the user who is supposed to have sent this message)and they actually responded to our user saying they received an excel attachment they could not open. So to resume an email is sent from one of our user (even the correct signature is in the email and contains a spreadsheet that cannot be opened). The user has no delegates nor granted the send as right to anyone. Only some helpdesk staff have the send as right to so but i assume my colleagues would not send random emails... On Wed, May 11, 2011 at 10:43 AM, Ellis, John P. johnel...@wirral.gov.ukwrote: Worth checking the headers of the email and see if it really is generated by yourselves. If the NDRS are being generated with out a user sending an email, then it sounds more like spam emails. I.e someone has faked a from address (in this case from you domain) and send the email to an address that doesnt exist thus generating an NDR. HTH john -- *From:* Al Rose [mailto:arose...@gmail.com] *Sent:* 11 May 2011 09:16 *To:* MS-Exchange Admin Issues *Subject:* User get NDRs without sending emails Hi I am seeing more and more of this problem in our environment (still running 2k3 SP2 Exchange servers): Users receive undeliverable NDRs without writing email. Been googling lately about it and apparently there are only two solutions: totally disable NDRs (we dont want to do that), or get an appliance (a magic one that will fix our problem). We currently use Antigen but only as an antivirus, as our antipsam filtering is done at a higher level where we dont have control. Anybody? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: User get NDRs without sending emails
We had something similar a while ago and it was a worm on the users machine. It had both McAfee and Spysweeper and they found nothing . I never did track it down completely. If you run something like MailSweeper set it to quarantine his outgoing. Getting off the black lists took days. The one we had even set up a rule so that the NDRs coming in were deleted, but left them in deleted items folder. Dave Wade From: Al Rose [mailto:arose...@gmail.com] Sent: 13 May 2011 10:51 To: MS-Exchange Admin Issues Subject: Re: User get NDRs without sending emails Turns out it is a Trojan:Exploit:Win32/CVE-2009-3129, at least thats what the antivirus said (the one running on Exchange) the one on the local computer hasnt seen anything... Still dont get how this email could have been sent without the user knowing it. the user is alone in his office so he's saying no chance someone sent the email from his computer. Checked the mailbox rights, there are a couple of security groups for our IT folks that have full mailbox access, but i assume they would not do that :) On Wed, May 11, 2011 at 3:57 PM, Ellis, John P. johnel...@wirral.gov.uk wrote: That changes things slightly then. A couple of thoughts. Someone has jumped onto the user machine and sent the email Does anyone have access to the users email account (maybe via Mailbox rights permissons)? System generated email? An odd rule on the mailbox? Is the email in the sent items folder? Is the name of the spreadsheet the same as one that appears on your network drives? Thanks John From: Al Rose [mailto:arose...@gmail.com] Sent: 11 May 2011 14:10 To: MS-Exchange Admin Issues Subject: Re: User get NDRs without sending emails I tracked emails in Exchange, an email was sent around 2pm and the user received an NDR 2 hours later. If i look at the original email, there is only one recipient which is a recipient unknown from the user. After further investigation i also was told that the same email message has been received by external users (still unkown from the user who is supposed to have sent this message)and they actually responded to our user saying they received an excel attachment they could not open. So to resume an email is sent from one of our user (even the correct signature is in the email and contains a spreadsheet that cannot be opened). The user has no delegates nor granted the send as right to anyone. Only some helpdesk staff have the send as right to so but i assume my colleagues would not send random emails... On Wed, May 11, 2011 at 10:43 AM, Ellis, John P. johnel...@wirral.gov.uk wrote: Worth checking the headers of the email and see if it really is generated by yourselves. If the NDRS are being generated with out a user sending an email, then it sounds more like spam emails. I.e someone has faked a from address (in this case from you domain) and send the email to an address that doesnt exist thus generating an NDR. HTH john From: Al Rose [mailto:arose...@gmail.com] Sent: 11 May 2011 09:16 To: MS-Exchange Admin Issues Subject: User get NDRs without sending emails Hi I am seeing more and more of this problem in our environment (still running 2k3 SP2 Exchange servers): Users receive undeliverable NDRs without writing email. Been googling lately about it and apparently there are only two solutions: totally disable NDRs (we dont want to do that), or get an appliance (a magic one that will fix our problem). We currently use Antigen but only as an antivirus, as our antipsam filtering is done at a higher level where we dont have control. Anybody? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Problems with delivery from Exchange 2003 to 2010
Thats the puzzling thing, I can't see any attempt in the SMTP logs to send anything to the server shown in the Routing Group connector, and I can't see any way to see where it is trying to send the messages too.The retry count is going up so t is trying to send them somewhere Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 11 May 2011 17:53 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 I'd be looking at the protocol logs. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Wednesday, May 11, 2011 12:33 PM To: MS-Exchange Admin Issues Subject: Problems with delivery from Exchange 2003 to 2010 Folks, I seem to be getting stuck again. I have a number of messages queued from my Exchange 2003 First Routing Group to my Exchange 2007/10 Exchange Routing Group (DWB..). I have tried re-creating the routing group connectors but things still seem to get stuck. Any thoughts? Dave Wade Business Services I.C.T. 0161 474 5456 ** This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Business Services via email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Log files missing during reseed
Full backup ran this morning and still getting the same issue (logs were definitely truncated). If I've got any free PSS calls left over from a Technet subscription I'll open a case, this is really infuriating. Unless you don't think we'll be charged :) Richard From: bounce-9334479-8066...@lyris.sunbelt-software.com [mailto:bounce-9334479-8066...@lyris.sunbelt-software.com] On Behalf Of Sobey, Richard A Sent: 13 May 2011 06:33 To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed Can you perform a reseed after an incremental backup or MUST it be a Full? From: bounce-9334284-8066...@lyris.sunbelt-software.com [mailto:bounce-9334284-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 12 May 2011 22:29 To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed This GENERALLY means that the last full back up of the database didn't purge logfiles, for whatever reason. That would be the first thing I check. According to MSFT, this should never happen and they recommend you open a case. In my experience, it's pretty common, and most people don't want to waste the time to open a case. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Thursday, May 12, 2011 3:38 PM To: MS-Exchange Admin Issues Subject: Log files missing during reseed Hi all, I'm trying to add a mailbox database copy to an Exchange 2010 SP1 server. I'm getting an error Required log X is missing from the active copy. Verbatim (but different server names): The required log file 4906 for FLMBXDB2\FTP-MAIL is missing on the active copy. If you removed the log file, please replace it. If the log file is lost, the database copy will need to be reseeded using Update-MailboxDatabaseCopy. All the solutions I've found so far indicate that I'm going to have to dismount the database, delete all unneeded log files, and then start it again. How can this be a solution? Whatever happened to Microsoft's notion of adding high availability after everything's configured, if I still need downtime?! Anyway, is there a more logical solution for this? Or, can someone help me understand why this is necessary? Thanks :) Richard --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Connection, recipient, sender ID and Filtering question
Thanks, that was really buried. From: David [mailto:blazer...@gmail.com] Sent: Thursday, May 12, 2011 4:44 PM To: MS-Exchange Admin Issues Subject: Re: Connection, recipient, sender ID and Filtering question Oh, and have a look at http://support.microsoft.com/kb/823866 On Thu, May 12, 2011 at 10:10 AM, N Parr npar...@mortonind.com wrote: Company I have to support has an SBS2003 server. For the life of me I can't find where in the Virtual Server settings this is. Am I blind or doing something wrong. Trying to figure out why, even though I have exceptions for certain domains in the block list rules, random emails are not being delivered. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist -- David _ [T]he States can best govern our home concerns and the general government our foreign ones. I wish, therefore ... never to see all offices transferred to Washington, where, further withdrawn from the eyes of the people, they may more secretly be bought and sold at market. --Thomas Jefferson, letter to Judge William Johnson, 1823 --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistOutlook.jpg
RE: Log files missing during reseed
I asked again and was told, flat out, by an escalation engineer that this should not happen. So...you should be safe to open a case and request a non-dec. Ensure that the problem description is not just to get you back up and running but also resolve this so it doesn't happen in the future. The second recommendation for resolution from an Exchange MVP is the below. I've also done it when just the backup didn't work: Now we installed a second server, formed a DAG of these two server. Problem: Initial Seeding started, copied the database and then stops with an error. Error: The required log file 5337 for dbname is missing on the active copy. If you removed the log file, please replace it. If the log file is lost, the database copy will need to be reseeded using Update-MailboxDatabaseCopy. I checked the source and the log is NOT there. I took the Database offline to check the last Backup with ESEUTIL Previous Full Backup: Log Gen: 5339-5340 (0x14db-0x14dc) - OSSnapshot Mark: (0x14DD,8,16) Mark: 02/17/2011 04:00:36 And that's, what I see in the source directory, all logs from 5339 and higher as expected. So why needs Exchange an older log ?. I fixed that by: 1. Dismounting the database 2. Checking, that it was clean shutdown 3. Removing all logs 4. Start the database 5. Store starts with a new log 001-generation 6. Reseeding was fine then. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Friday, May 13, 2011 6:35 AM To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed Full backup ran this morning and still getting the same issue (logs were definitely truncated). If I've got any free PSS calls left over from a Technet subscription I'll open a case, this is really infuriating. Unless you don't think we'll be charged :) Richard From: bounce-9334479-8066...@lyris.sunbelt-software.com [mailto:bounce-9334479-8066...@lyris.sunbelt-software.com] On Behalf Of Sobey, Richard A Sent: 13 May 2011 06:33 To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed Can you perform a reseed after an incremental backup or MUST it be a Full? From: bounce-9334284-8066...@lyris.sunbelt-software.com [mailto:bounce-9334284-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 12 May 2011 22:29 To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed This GENERALLY means that the last full back up of the database didn't purge logfiles, for whatever reason. That would be the first thing I check. According to MSFT, this should never happen and they recommend you open a case. In my experience, it's pretty common, and most people don't want to waste the time to open a case. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Thursday, May 12, 2011 3:38 PM To: MS-Exchange Admin Issues Subject: Log files missing during reseed Hi all, I'm trying to add a mailbox database copy to an Exchange 2010 SP1 server. I'm getting an error Required log X is missing from the active copy. Verbatim (but different server names): The required log file 4906 for FLMBXDB2\FTP-MAIL is missing on the active copy. If you removed the log file, please replace it. If the log file is lost, the database copy will need to be reseeded using Update-MailboxDatabaseCopy. All the solutions I've found so far indicate that I'm going to have to dismount the database, delete all unneeded log files, and then start it again. How can this be a solution? Whatever happened to Microsoft's notion of adding high availability after everything's configured, if I still need downtime?! Anyway, is there a more logical solution for this? Or, can someone help me understand why this is necessary? Thanks :) Richard --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here:
RE: Log files missing during reseed
Thanks MBS. I'll think I'll do just that. This is a problem that's happened in the past when I was experimenting so it'd be good to see if fixed. Appreciate all the advice. Richard From: bounce-9334700-8066...@lyris.sunbelt-software.com [mailto:bounce-9334700-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 13 May 2011 13:45 To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed I asked again and was told, flat out, by an escalation engineer that this should not happen. So...you should be safe to open a case and request a non-dec. Ensure that the problem description is not just to get you back up and running but also resolve this so it doesn't happen in the future. The second recommendation for resolution from an Exchange MVP is the below. I've also done it when just the backup didn't work: Now we installed a second server, formed a DAG of these two server. Problem: Initial Seeding started, copied the database and then stops with an error. Error: The required log file 5337 for dbname is missing on the active copy. If you removed the log file, please replace it. If the log file is lost, the database copy will need to be reseeded using Update-MailboxDatabaseCopy. I checked the source and the log is NOT there. I took the Database offline to check the last Backup with ESEUTIL Previous Full Backup: Log Gen: 5339-5340 (0x14db-0x14dc) - OSSnapshot Mark: (0x14DD,8,16) Mark: 02/17/2011 04:00:36 And that's, what I see in the source directory, all logs from 5339 and higher as expected. So why needs Exchange an older log ?. I fixed that by: 1. Dismounting the database 2. Checking, that it was clean shutdown 3. Removing all logs 4. Start the database 5. Store starts with a new log 001-generation 6. Reseeding was fine then. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Friday, May 13, 2011 6:35 AM To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed Full backup ran this morning and still getting the same issue (logs were definitely truncated). If I've got any free PSS calls left over from a Technet subscription I'll open a case, this is really infuriating. Unless you don't think we'll be charged :) Richard From: bounce-9334479-8066...@lyris.sunbelt-software.com [mailto:bounce-9334479-8066...@lyris.sunbelt-software.com] On Behalf Of Sobey, Richard A Sent: 13 May 2011 06:33 To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed Can you perform a reseed after an incremental backup or MUST it be a Full? From: bounce-9334284-8066...@lyris.sunbelt-software.com [mailto:bounce-9334284-8066...@lyris.sunbelt-software.com] On Behalf Of Michael B. Smith Sent: 12 May 2011 22:29 To: MS-Exchange Admin Issues Subject: RE: Log files missing during reseed This GENERALLY means that the last full back up of the database didn't purge logfiles, for whatever reason. That would be the first thing I check. According to MSFT, this should never happen and they recommend you open a case. In my experience, it's pretty common, and most people don't want to waste the time to open a case. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Sobey, Richard A [mailto:r.so...@imperial.ac.uk] Sent: Thursday, May 12, 2011 3:38 PM To: MS-Exchange Admin Issues Subject: Log files missing during reseed Hi all, I'm trying to add a mailbox database copy to an Exchange 2010 SP1 server. I'm getting an error Required log X is missing from the active copy. Verbatim (but different server names): The required log file 4906 for FLMBXDB2\FTP-MAIL is missing on the active copy. If you removed the log file, please replace it. If the log file is lost, the database copy will need to be reseeded using Update-MailboxDatabaseCopy. All the solutions I've found so far indicate that I'm going to have to dismount the database, delete all unneeded log files, and then start it again. How can this be a solution? Whatever happened to Microsoft's notion of adding high availability after everything's configured, if I still need downtime?! Anyway, is there a more logical solution for this? Or, can someone help me understand why this is necessary? Thanks :) Richard --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to
RE: Postini
Not to keep the bash train rolling, but. We migrated a daughter company at my last gig to Postini, consisting of ~200 users. Once we found out they either lied or left out important info regarding services supported/not supported, we cancelled the migration of our parent company (4000+ users). Don Guyer Windows Systems Engineer RIM Operations Engineering Distributed - A Team, Tier 2 Enterprise Technology Group Fiserv don.gu...@fiserv.com Office: 1-800-523-7282 x 1673 Fax: 610-233-0404 www.fiserv.com http://www.fiserv.com/ From: Nicholas Turner [mailto:ntur...@caci.co.uk] Sent: Thursday, May 12, 2011 4:47 AM To: MS-Exchange Admin Issues Subject: RE: Postini Postini used to have pretty good customer service, at least in Europe... US management and then finally Google killed off the team though which was a real shame. From: Matt Moore [mailto:mattmoore...@hotmail.com] Sent: 11 May 2011 18:56 To: MS-Exchange Admin Issues Subject: RE: Postini Typically the server is set up to only talk to Postini in and out. Dns all pointed to postini. Very poor to no cust service. I used to have the setup doc around but I can't seem to find it. Bet you could download it from them M From: KevinM [mailto:kev...@wlkmmas.org] Sent: Wednesday, May 11, 2011 8:39 AM To: MS-Exchange Admin Issues Subject: Postini I have never worked with Postini and I am prepping for a customer consolidation where Postini is involved - My question - Can I do per user email routing with Postini? Example b...@bob.com is routed to mail.bob.com f...@bob.com is routed to mail.fredco.com sa...@bob.com is routed to coolserver.bob.com --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist This electronic message contains information from CACI International Inc or subsidiary companies, which may be confidential, proprietary, privileged or otherwise protected from disclosure. The information is intended to be used solely by the recipient(s) named above. If you are not an intended recipient, be aware that any review, disclosure, copying, distribution or use of this transmission or its contents is prohibited. If you have received this transmission in error, please notify us immediately at postmas...@caci.co.uk Viruses: Although we have taken steps to ensure that this e-mail and attachments are free from any virus, we advise that in keeping with good computing practice the recipient should ensure they are actually virus free. CACI Limited. Registered in England Wales. Registration No. 1649776. CACI House, Avonmore Road, London, W14 8TS. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: User get NDRs without sending emails
malwarebytes, vipre live and ubcd4win are your friends. On Fri, May 13, 2011 at 02:50, Al Rose arose...@gmail.com wrote: Turns out it is a Trojan:Exploit:Win32/CVE-2009-3129, at least thats what the antivirus said (the one running on Exchange) the one on the local computer hasnt seen anything... Still dont get how this email could have been sent without the user knowing it. the user is alone in his office so he's saying no chance someone sent the email from his computer. Checked the mailbox rights, there are a couple of security groups for our IT folks that have full mailbox access, but i assume they would not do that :) On Wed, May 11, 2011 at 3:57 PM, Ellis, John P. johnel...@wirral.gov.uk wrote: That changes things slightly then. A couple of thoughts. Someone has jumped onto the user machine and sent the email Does anyone have access to the users email account (maybe via Mailbox rights permissons)? System generated email? An odd rule on the mailbox? Is the email in the sent items folder? Is the name of the spreadsheet the same as one that appears on your network drives? Thanks John From: Al Rose [mailto:arose...@gmail.com] Sent: 11 May 2011 14:10 To: MS-Exchange Admin Issues Subject: Re: User get NDRs without sending emails I tracked emails in Exchange, an email was sent around 2pm and the user received an NDR 2 hours later. If i look at the original email, there is only one recipient which is a recipient unknown from the user. After further investigation i also was told that the same email message has been received by external users (still unkown from the user who is supposed to have sent this message)and they actually responded to our user saying they received an excel attachment they could not open. So to resume an email is sent from one of our user (even the correct signature is in the email and contains a spreadsheet that cannot be opened). The user has no delegates nor granted the send as right to anyone. Only some helpdesk staff have the send as right to so but i assume my colleagues would not send random emails... On Wed, May 11, 2011 at 10:43 AM, Ellis, John P. johnel...@wirral.gov.uk wrote: Worth checking the headers of the email and see if it really is generated by yourselves. If the NDRS are being generated with out a user sending an email, then it sounds more like spam emails. I.e someone has faked a from address (in this case from you domain) and send the email to an address that doesnt exist thus generating an NDR. HTH john From: Al Rose [mailto:arose...@gmail.com] Sent: 11 May 2011 09:16 To: MS-Exchange Admin Issues Subject: User get NDRs without sending emails Hi I am seeing more and more of this problem in our environment (still running 2k3 SP2 Exchange servers): Users receive undeliverable NDRs without writing email. Been googling lately about it and apparently there are only two solutions: totally disable NDRs (we dont want to do that), or get an appliance (a magic one that will fix our problem). We currently use Antigen but only as an antivirus, as our antipsam filtering is done at a higher level where we dont have control. Anybody? --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote also confirms that this email message has been swept by MIMEsweeper for the presence of computer viruses. www.clearswift.com ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Problems with delivery from Exchange 2003 to 2010
On the exchange 2010 side, do you see any connection attempts in the connection log? On the 2003 side, do you have a smarthost specified? If so, where (virtual server or smtp connector)? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Friday, May 13, 2011 6:05 AM To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 Thats the puzzling thing, I can't see any attempt in the SMTP logs to send anything to the server shown in the Routing Group connector, and I can't see any way to see where it is trying to send the messages too.The retry count is going up so t is trying to send them somewhere Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 11 May 2011 17:53 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 I'd be looking at the protocol logs. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Wednesday, May 11, 2011 12:33 PM To: MS-Exchange Admin Issues Subject: Problems with delivery from Exchange 2003 to 2010 Folks, I seem to be getting stuck again. I have a number of messages queued from my Exchange 2003 First Routing Group to my Exchange 2007/10 Exchange Routing Group (DWB..). I have tried re-creating the routing group connectors but things still seem to get stuck. Any thoughts? Dave Wade Business Services I.C.T. 0161 474 5456 ** This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Business Services via email.qu...@stockport.gov.ukmailto:email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Update Rollup 3-v2 for Ex2k7 SP 3
Just for my information - like what? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, May 12, 2011 10:34 AM To: MS-Exchange Admin Issues Subject: RE: Update Rollup 3-v2 for Ex2k7 SP 3 Yes, and now problems on my win7x64 manglement wkst... jlc From: Stefan Jafs [mailto:stefan.j...@gmail.com] Sent: Thursday, May 12, 2011 8:15 AM To: MS-Exchange Admin Issues Subject: Update Rollup 3-v2 for Ex2k7 SP 3 KB890830 This just showed up in WSUS, Anyone installed it yet? Any problems? -- Stefan Jafs --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Calendar sharing thru outlook errors out, webmail works fine
I had to move some things around in my exchange setup, I was having issues with free/busy info and OOF, this is fixed now. Now I am diagnosing speed issues, and calandar sharing thru outlook which is slow and not working. Can find anything on web relating to this issue. Anyone have ideas? Chris Drobny LMS Intellibound, Inc. Network/Systems Administrator cdro...@lmsintellibound.com Office 770.724.0562 Cell 404.769.1823 --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Problems with delivery from Exchange 2003 to 2010
On checking there is a smart host on 2003 on the Virtual Server. On 2010 I don't seem to have any receive logs at all. I presume I need to remove the Smart host? Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 13 May 2011 15:39 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 On the exchange 2010 side, do you see any connection attempts in the connection log? On the 2003 side, do you have a smarthost specified? If so, where (virtual server or smtp connector)? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Friday, May 13, 2011 6:05 AM To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 Thats the puzzling thing, I can't see any attempt in the SMTP logs to send anything to the server shown in the Routing Group connector, and I can't see any way to see where it is trying to send the messages too.The retry count is going up so t is trying to send them somewhere Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 11 May 2011 17:53 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 I'd be looking at the protocol logs. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Wednesday, May 11, 2011 12:33 PM To: MS-Exchange Admin Issues Subject: Problems with delivery from Exchange 2003 to 2010 Folks, I seem to be getting stuck again. I have a number of messages queued from my Exchange 2003 First Routing Group to my Exchange 2007/10 Exchange Routing Group (DWB..). I have tried re-creating the routing group connectors but things still seem to get stuck. Any thoughts? Dave Wade Business Services I.C.T. 0161 474 5456 ** This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Business Services via email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Problems with delivery from Exchange 2003 to 2010
Smart host should exist in an smtp connector on the 2003 side, not the virtual server. If there isn't an smtp connector, you need to create one. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Friday, May 13, 2011 11:34 AM To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 On checking there is a smart host on 2003 on the Virtual Server. On 2010 I don't seem to have any receive logs at all. I presume I need to remove the Smart host? Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 13 May 2011 15:39 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 On the exchange 2010 side, do you see any connection attempts in the connection log? On the 2003 side, do you have a smarthost specified? If so, where (virtual server or smtp connector)? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Friday, May 13, 2011 6:05 AM To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 Thats the puzzling thing, I can't see any attempt in the SMTP logs to send anything to the server shown in the Routing Group connector, and I can't see any way to see where it is trying to send the messages too.The retry count is going up so t is trying to send them somewhere Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 11 May 2011 17:53 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 I'd be looking at the protocol logs. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Wednesday, May 11, 2011 12:33 PM To: MS-Exchange Admin Issues Subject: Problems with delivery from Exchange 2003 to 2010 Folks, I seem to be getting stuck again. I have a number of messages queued from my Exchange 2003 First Routing Group to my Exchange 2007/10 Exchange Routing Group (DWB..). I have tried re-creating the routing group connectors but things still seem to get stuck. Any thoughts? Dave Wade Business Services I.C.T. 0161 474 5456 ** This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Business Services via email.qu...@stockport.gov.ukmailto:email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Update Rollup 3-v2 for Ex2k7 SP 3
Sh!t, I meant no problems... I didn't even notice that, sorry guys (That was careless). jlc From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: Friday, May 13, 2011 9:10 AM To: MS-Exchange Admin Issues Subject: RE: Update Rollup 3-v2 for Ex2k7 SP 3 Just for my information - like what? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Joseph L. Casale [mailto:jcas...@activenetwerx.com] Sent: Thursday, May 12, 2011 10:34 AM To: MS-Exchange Admin Issues Subject: RE: Update Rollup 3-v2 for Ex2k7 SP 3 Yes, and now problems on my win7x64 manglement wkst... jlc From: Stefan Jafs [mailto:stefan.j...@gmail.com] Sent: Thursday, May 12, 2011 8:15 AM To: MS-Exchange Admin Issues Subject: Update Rollup 3-v2 for Ex2k7 SP 3 KB890830 This just showed up in WSUS, Anyone installed it yet? Any problems? -- Stefan Jafs --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.commailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Problems with delivery from Exchange 2003 to 2010
Yes there is an SMTP connector with a scope of *, I'll try dropping the smart host from SMTP Virtual Server. Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 13 May 2011 16:46 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 Smart host should exist in an smtp connector on the 2003 side, not the virtual server. If there isn't an smtp connector, you need to create one. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Friday, May 13, 2011 11:34 AM To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 On checking there is a smart host on 2003 on the Virtual Server. On 2010 I don't seem to have any receive logs at all. I presume I need to remove the Smart host? Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 13 May 2011 15:39 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 On the exchange 2010 side, do you see any connection attempts in the connection log? On the 2003 side, do you have a smarthost specified? If so, where (virtual server or smtp connector)? Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Friday, May 13, 2011 6:05 AM To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 Thats the puzzling thing, I can't see any attempt in the SMTP logs to send anything to the server shown in the Routing Group connector, and I can't see any way to see where it is trying to send the messages too.The retry count is going up so t is trying to send them somewhere Dave Wade From: Michael B. Smith [mailto:mich...@smithcons.com] Sent: 11 May 2011 17:53 To: MS-Exchange Admin Issues Subject: RE: Problems with delivery from Exchange 2003 to 2010 I'd be looking at the protocol logs. Regards, Michael B. Smith Consultant and Exchange MVP http://TheEssentialExchange.com From: Dave Wade [mailto:dave.w...@stockport.gov.uk] Sent: Wednesday, May 11, 2011 12:33 PM To: MS-Exchange Admin Issues Subject: Problems with delivery from Exchange 2003 to 2010 Folks, I seem to be getting stuck again. I have a number of messages queued from my Exchange 2003 First Routing Group to my Exchange 2007/10 Exchange Routing Group (DWB..). I have tried re-creating the routing group connectors but things still seem to get stuck. Any thoughts? Dave Wade Business Services I.C.T. 0161 474 5456 ** This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Business Services via email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk
RE: exchange restore in DR test environment
Did you make sure you captured DCs with the FSMO roles you need. Not sure what changes to AD installing a server with the /DR switch needs to make, but if its altering the configuration container and you don't have the infrastructure master role configured then things will most likely cause issues. When I did this recently I also ran into issues with Certificates as I didn't clone a server with certificate services on Dave Wade From: Jason Benway [mailto:benw...@jsjcorp.com] Sent: 13 May 2011 17:30 To: MS-Exchange Admin Issues Subject: exchange restore in DR test environment We are trying to restore exchange 2003 in a closed DR test environment. We have backups of a DC from each domain in our forest. I've restored them to vms into a closed off ESX box. They all have the same IP they have in the production environment. Our production exchange 2003 server is a cluster server. WE are trying to install a new exchange 2003 using the DR switch and having all sorts of issues. Right now I think the issue is AD related, because the different DC's don't seem to be playing nice. From the exchange side to get the /DR switch to work what are some of the things we should check for? Jason Benway System/Storage Engineer www.jsjcorp.com http://www.jsjcorp.com JSJ Corporation 700 Robbins Road Grand Haven, MI 49417 This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist ** This email, and any files transmitted with it, is confidential and intended solely for the use of the individual or entity to whom they are addressed. As a public body, the Council may be required to disclose this email, or any response to it, under the Freedom of Information Act 2000, unless the information in it is covered by one of the exemptions in the Act. If you receive this email in error please notify Stockport ICT, Business Services via email.qu...@stockport.gov.uk and then permanently remove it from your system. Thank you. http://www.stockport.gov.uk ** --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelistimage001.jpg
Mail flow question
Company A - Exchange 2003 with Barracuda Company B - Exchange 2003 SBS relying on connection filter black lists. A owns B and has VPN connection between. A would like to change B's MX to point to A's Barracuda for better spam/virus filtering, then have Barracuda deliver mail directly to B's server over VPN. This has already been tested to work. Need to verify if setting up an SMTP connector on A's server to point to B's server for internal mail delivery is required. I'm thinking it would be because I could see issues with A's server trying to deliver email to B's and having to loop out to it's own IP and come back through the Barracuda. Outbound from B would still go out their IP and it shouldn't be a big deal for mail flow back to A to go through the net like normal. I've googled for some examples of this but all I can find are examples of setting up a trust relationship between domains and I don't want to do that. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: Mail flow question
How about: just setup each companies internal DNS zone with each other and let it route mail by MX record? Since they are part of the same company and connected by VPN anyway, you might have some other benefits as well linking DNS. Bill N Parr wrote: Company A - Exchange 2003 with Barracuda Company B - Exchange 2003 SBS relying on connection filter black lists. A owns B and has VPN connection between. A would like to change B's MX to point to A's Barracuda for better spam/virus filtering, then have Barracuda deliver mail directly to B's server over VPN. This has already been tested to work. Need to verify if setting up an SMTP connector on A's server to point to B's server for internal mail delivery is required. I'm thinking it would be because I could see issues with A's server trying to deliver email to B's and having to loop out to it's own IP and come back through the Barracuda. Outbound from B would still go out their IP and it shouldn't be a big deal for mail flow back to A to go through the net like normal. I've googled for some examples of this but all I can find are examples of setting up a trust relationship between domains and I don't want to do that. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com mailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
RE: Mail flow question
I guess that would work, I really don't want full DNS resolution between us because I don't trust their computers to be 100% clean. The VPN Tunnel exists between us but B is limited as to the resources it can see on A. I suppose I could just do it one way so Company A's mail to B will route directly over the VPN and B would come back over the net. Is it simple as adding the record to A's Forward lookup zone with the modified MX and deleting the existing record from cached? -Original Message- From: Bill Humphries [mailto:nt...@hedgedigger.com] Sent: Friday, May 13, 2011 2:03 PM To: MS-Exchange Admin Issues Subject: Re: Mail flow question How about: just setup each companies internal DNS zone with each other and let it route mail by MX record? Since they are part of the same company and connected by VPN anyway, you might have some other benefits as well linking DNS. Bill N Parr wrote: Company A - Exchange 2003 with Barracuda Company B - Exchange 2003 SBS relying on connection filter black lists. A owns B and has VPN connection between. A would like to change B's MX to point to A's Barracuda for better spam/virus filtering, then have Barracuda deliver mail directly to B's server over VPN. This has already been tested to work. Need to verify if setting up an SMTP connector on A's server to point to B's server for internal mail delivery is required. I'm thinking it would be because I could see issues with A's server trying to deliver email to B's and having to loop out to it's own IP and come back through the Barracuda. Outbound from B would still go out their IP and it shouldn't be a big deal for mail flow back to A to go through the net like normal. I've googled for some examples of this but all I can find are examples of setting up a trust relationship between domains and I don't want to do that. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com mailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
Re: Mail flow question
Ignore what I said if you don't want to share other resources. I don't think you need to do anything really...just make sure you have an internal A record in your DNS for whatever the MX record is and the mail shouldn't ever loop out to the internet. Bill N Parr wrote: I guess that would work, I really don't want full DNS resolution between us because I don't trust their computers to be 100% clean. The VPN Tunnel exists between us but B is limited as to the resources it can see on A. I suppose I could just do it one way so Company A's mail to B will route directly over the VPN and B would come back over the net. Is it simple as adding the record to A's Forward lookup zone with the modified MX and deleting the existing record from cached? -Original Message- From: Bill Humphries [mailto:nt...@hedgedigger.com] Sent: Friday, May 13, 2011 2:03 PM To: MS-Exchange Admin Issues Subject: Re: Mail flow question How about: just setup each companies internal DNS zone with each other and let it route mail by MX record? Since they are part of the same company and connected by VPN anyway, you might have some other benefits as well linking DNS. Bill N Parr wrote: Company A - Exchange 2003 with Barracuda Company B - Exchange 2003 SBS relying on connection filter black lists. A owns B and has VPN connection between. A would like to change B's MX to point to A's Barracuda for better spam/virus filtering, then have Barracuda deliver mail directly to B's server over VPN. This has already been tested to work. Need to verify if setting up an SMTP connector on A's server to point to B's server for internal mail delivery is required. I'm thinking it would be because I could see issues with A's server trying to deliver email to B's and having to loop out to it's own IP and come back through the Barracuda. Outbound from B would still go out their IP and it shouldn't be a big deal for mail flow back to A to go through the net like normal. I've googled for some examples of this but all I can find are examples of setting up a trust relationship between domains and I don't want to do that. --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com mailto:listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe exchangelist
