Announcement

Collapse
No announcement yet.

Message Queue getting filled up

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Message Queue getting filled up

    Hi Everyone,

    the message queue of my exchange 2003 running on windows 2003 is piling up from the last couple of days. please have a look at the image which i have attached and advice asap.

    it would be really appreciated if u can reply at your earliest.
    Attached Files

  • #2
    Re: Message Queue getting filled up

    i suspect spam..
    Please do show your appreciation to those who assist you by leaving Rep Point https://www.petri.com/forums/core/im.../icon_beer.gif

    Comment


    • #3
      Re: Message Queue getting filled up

      i also suspect spam. please advice how to solve this issue. it has been couple of days i applied IMF with both the threshold values of 7 and a recipient filtering policy to only allow email from authenticated users. Moreover we use trend micro as the AV program.

      Comment


      • #4
        Re: Message Queue getting filled up

        Have you looked at the messages in the queues? The problem may be with the servers ability to resolve DNS or establish outgoing SMTP connections.

        Open up one of the queues, click the find now button and post a screen shot of the window here.

        Comment


        • #5
          Re: Message Queue getting filled up

          Unfortunately I don't open word attachments from unknown sources.
          If there are lots of messages in the queues then you need to resolve why. IMF doesn't deal with everything, particularly if you are under an NDR spam attack or authenticated relaying is being used.

          http://www.amset.info/exchange/spam-cleanup.asp

          Simon.
          --
          Simon Butler
          Exchange MVP

          Blog: http://blog.sembee.co.uk/
          More Exchange Content: http://exchange.sembee.info/
          Exchange Resources List: http://exbpa.com/
          In the UK? Hire me: http://www.sembee.co.uk/

          Sembee is a registered trademark, used here with permission.

          Comment


          • #6
            Re: Message Queue getting filled up

            please have a look. I am attaching two snapshots of the message queues, this time in .jpg format. I have erased a major part of the domain names in the images to avoid unwanted conflicts.

            i opened up nearly 60 percent of the messages from the queue folder in mail root and i happen to come across this information. all the messages display the same information in the header part. the only difference is the recipient or "To" name changes.

            Received: from xyzabc.com ([216.103.40.206] RDNS failed) by exmail.mydomainname.net with Microsoft SMTPSVC(6.0.3790.3959);
            Tue, 15 Dec 2009 21:52:27 +0300
            From: xyzabc<[email protected]>
            To: [email protected]

            Subject: xyzabc 2 Step Survey! Win a $100.00 gift certificate.
            Date: 15 Dec 2009 10:47:51 -0800
            Message-ID: <[email protected]>
            MIME-Version: 1.0
            Content-Type: text/html;
            charset="iso-8859-1"
            Content-Transfer-Encoding: quoted-printable
            Return-Path: [email protected]
            X-OriginalArrivalTime: 15 Dec 2009 18:52:27.0645 (UTC) FILETIME=[BF5C12D0:01CA7DB7]
            X-TM-AS-Product-Ver: SMEX-8.2.0.1103-6.000.1038-17072.006
            X-TM-AS-Result: Yes-58.317600-5.000000-31
            X-TM-AS-User-Approved-Sender: No
            X-TM-AS-User-Blocked-Sender: No

            please let me know if you need some more information.
            Attached Files

            Comment


            • #7
              Re: Message Queue getting filled up

              Your server is being abused, either because it is an open relay or an authenticated relay.
              Refer to my article I have already posted to clean up the server.

              Simon.
              --
              Simon Butler
              Exchange MVP

              Blog: http://blog.sembee.co.uk/
              More Exchange Content: http://exchange.sembee.info/
              Exchange Resources List: http://exbpa.com/
              In the UK? Hire me: http://www.sembee.co.uk/

              Sembee is a registered trademark, used here with permission.

              Comment


              • #8
                Re: Message Queue getting filled up

                I used the Telnet procedure for verifying the open relay issue and I got this message as

                550 5.7.1 Unable to relay for [email protected]****.com

                Also please have a look at the image that i have attached. I have enabled the logging concept to check if an authenticated user is relaying. please let me know if any other thing is to be considered.
                Attached Files

                Comment


                • #9
                  Re: Message Queue getting filled up

                  I assume this issue got solved for me. After checking the Open relay verification concept I disabled the IMF and for the past two days there are only valid messages in message queues. Thanks for your help. I will dig into this to find out the exact reason for this.

                  But now a new issue arises. After I checked for open relay verification i get the following events recorded in event log.

                  Event Id : 7010
                  Source : MS Exchange Transport
                  Description : This is an SMTP protocol log for virtual server ID 1, connection #4. The client at "some xyz ip address" sent a "rcpt" command, and the SMTP server responded with "550 5.7.1 Unable to relay for [email protected] ". The full command sent was "rcpt TO: <[email protected]>". This will probably cause the connection to fail.


                  Event Id : 7010
                  Source : MS Exchange Transport
                  Description : This is an SMTP protocol log for virtual server ID 1, connection #1. The client at "ip address of my internet provider" sent a "helo" command, and the SMTP server responded with "501 5.5.4 Invalid Address ". The full command sent was "helo ̵". This will probably cause the connection to fail.


                  please advice for the above issue.

                  Comment


                  • #10
                    Re: Message Queue getting filled up

                    Those are not errors - they are simply showing you that Exchange is doing its job and rejecting email. The usual cause is that logging it turned up too high.

                    Simon.
                    --
                    Simon Butler
                    Exchange MVP

                    Blog: http://blog.sembee.co.uk/
                    More Exchange Content: http://exchange.sembee.info/
                    Exchange Resources List: http://exbpa.com/
                    In the UK? Hire me: http://www.sembee.co.uk/

                    Sembee is a registered trademark, used here with permission.

                    Comment


                    • #11
                      Re: Message Queue getting filled up

                      thanks for all the information provided. The problem related to this post has been solved.

                      Comment

                      Working...
                      X