Exchange 2010 - Bounce backs from unknown accounts

Hi There,
I am running exchange 2010 and i had a " Catch all " mailbox setup so any email sent to *@domain.com would get caught in this mailbox using a policy even if the account did not exist. I went to remove the " catch all " mailbox
as it was no longer needed but if someone external was to email " [email protected] " or spelt a users name wrong the external user will not receive a bounce back telling them that the address is invalid.
Any ideas?
Regards,
Jack 

Check out the Set-RemoteDomain -NDREnabled parameter.
http://technet.microsoft.com/en-us/library/aa997857(v=exchg.141).aspx
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

Similar Messages

  • Unexplained bounce backs from Ironport

    We have a C10 device and last week we receved instanct bounce backs from the Ironport when trying to send to several different external email addresses at different domains.
    The bounce backs were being generated by our internal Ironport itself instead of the destination email server so it is as if the email never left our company.
    After serval days and no configuration changes on the Ironport I sent several test emails to these external domains. They are being recevied okay without any problems. Can any one explain what is going on here and how the problem recitifed itself?
    Thanks for your help!

    What may be happening:
    It could be that your mailserver(e.g. Exchange) handed the mail off to the Ironport appliance, who took responsibility for the message. Then, after any last outbound scanning and appending disclaimers, the Ironport appliance did a MX lookup to deliver the message and then upon trying to deliver the message to the appropriate destination, the Ironport MTA received a SMTP 5## error code.
    Upon receiving the SMTP 5## error code, the Ironport appliance will consider this undeliverable to the destination and then turnaround and bounce it back to the original sender, which may be what you're observing.
    Where to go from here:
    It would be useful if you still have those bounce messages that were generated by the Ironport appliance. You can look up the original sender and intended recipient or subject line through the mail logs and find the corresponding timeframe when the Ironport MTA tried to establish a connection to the destination host. This will show up as an ICID event where the Ironport tried to connect to the destination host. I'm surprised that the bounce message didn't provide some info on the cause of the bounce.
    References:
    1. findevent is a good tool on the command line that you can use to search for messages.
    How can I determine the disposition of a message using the mail logs?
    http://tinyurl.com/jb7z4

  • Spoofer email Bounce backs create invalid account on server

    Every now and then one of those bottom feeding spoofers starts spoofing our domain name with a random account name to send out scads of spam - and of course the inevitable slew of bounce backs from the unfortunate "spamees" then flood our server. Fortunately I do use the excellent Frontline spam defense which helps tremendously.
    What I am finding really odd is that these spoofers sometimes use a username of the variety "<[email protected]>" and for whatever reason this actually creates(?!) an account name in our email directory on the server?! (Acl privileges are l,r,s (any))
    I have analyzed the traffic and there is absolutely no outbound mail going from our server with this username from our server (i.e. our server has definitely not been cracked)- I further verify this by checking the IP address of initial sender from some of the bouncebacks which have ALL info of the email transaction and it is definitely the work of a spoofer.
    The "account" is relatively easy to delete with Siradmin - create an acl for the administrator with all privileges and then delete the account. There is nothing in it.
    However I am just wondering if A) This odd "feature" (read bug!) is something that is known, and B) How can I possibly stop this strange behavior from happening again.
    Any help or advise would be most appreciated.
    Regards,
    Rohin
    p.s. a bit of my log is listed below FYI
    Mar 15 14:03:14 dns postfix/smtp[4976]: E7D2423F87E: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=15, status=sent (250 2.6.0 Ok, id=02844-07, from MTA: 250 Ok: queued as AA9E423F8AA)
    Mar 15 14:03:14 dns postfix/pipe[4985]: AA9E423F8AA: to=<[email protected]>, relay=cyrus, delay=1, status=bounced (data format error. Command output: jirfinesseembroideriesxyf: Mailbox does not exist )
    Mar 15 15:08:06 dns postfix/pipe[5331]: 5225323DC99: to=<[email protected]>, relay=cyrus, delay=35729, status=deferred (temporary failure)
    Mar 15 16:14:46 dns postfix/pipe[5681]: 5225323DC99: to=<[email protected]>, relay=cyrus, delay=39729, status=deferred (temporary failure)

    Could verify this.
    Mails to non existent shared folders create this shared folders like you mentioned above:
    (imapd.conf: "postuser: test")
    Apr 20 16:43:44 mc postfix/pipe[44755]: AFE26165AB4: to=<[email protected]>, relay=cyrus, delay=0.07, delays=0/0.01/0/0.06, dsn=5.6.0, status=bounced (data format error. Command output: test+xxx.test2: Permission denied )
    this creates the shared folder "Shared Folders/xxx.test2"
    If the part in front of the + is not defined in imapd.conf and no user with this name is present it gets rejected:
    Apr 20 16:47:19 mc postfix/pipe[44878]: 9F148165AEB: to=<[email protected]>, relay=cyrus, delay=0.08, delays=0/0.01/0/0.06, dsn=5.6.0, status=bounced (data format error. Command output: test2+xxx.test2: Mailbox does not exist )

  • Okay i had to install Itunes onto my new OS because window's Vista messed up on me and i can't get any of my old purchases back from my account such as music and movies any ideas on how to get them back (i do not have the folder that contains old items)

    Okay i had to install Itunes onto my new OS because window's Vista messed up on me and i can't get any of my old purchases back from my account such as music and movies any ideas on how to get them back (i do not have the folder that contains old items from the last itunes or anything from that OS because it had a virus and i just wanted windows 7)

    Downloading past purchases from the App Store, iBookstore, and iTunes Store
    Hope this helps,
    JD

  • HT203167 my computer crashed and lost my itunes, now i have a new computer...is there any way to get my music back from my account

    my computer crashed and lost my itunes, now i have a new computer...is there any way to get my music back from my account

    It has always been very basic to always maintain a backup copy of your computer for just such an occasion.
    Use your backup copy to put everything back.
    If for some reason you have failed to backup, not good, then you can redownload some purchases in some countries.
    Downloading past purchases from the App Store, iBookstore, and iTunes Store

  • How to get Exchange 2010 Product Keys from an existing installed servers

    hi All,
    we are facing some kind of critical issues. we had 3 MB servers . the two servers are in DAG all our productions DB's running in DAG. the DAG servers are crashed due to hardware issues. one server is acting as archival server. all servers are running exchange
    2010 sp3. 
    now we are trying to rebuild new servers to restore DB's. the new servers is prompting the product key to be entered. unfortunately we don't have product keys of exchange 2010. since we are gold partner we have partner network portal. when i tried to get
    the product key from portal am able to see only 2013 keys. we called up Microsoft and explained but no use. they said we have to use exchange 2013. but we cant simply go ahead and migrate. 
    but the only option is we have exchange 2010 installed servers they all act as CAS/HUB server with the same licence. please let me know how do i retrieve exchange 2010 product keys from an existing servers. Please advise me its very critical.
    can we get the product keys through some kind of scripts?
    Thanks, Venkatesh. &quot;Hardwork Never Fails&quot;

    Hi,
    For this issue, I recommend you contact Microsoft customer service to consult this question. Thanks for your understanding.
    Best regards,
    Belinda
    Belinda Ma
    TechNet Community Support

  • Mails getting bounce back from only one account,why?

    Hi Every one,
    I have a strange problem, I'm using postfix mail server and LDAP directory service.
    From last few day I'm facing strange problem. Like I have 15 user account configured for accessing emails.
    In that, only one user gets bounce back messages. I found the issue but not sure how to fix it.
    Issue:
    If I stop the (LDAP) directory and mail service and restart my Leopard server and services. I can send emails through. But after few days or a week later i have to face the same issue.
    Help Please
    Thanks,
    Gulab Pasha

    If you right-click on an accont's inbox and select "Synchronize {name}", that should perform the "get new mail" function as part of the general synchronization.

  • Can't access yahoo account. continues to bounce back from mail box asking password?

    I can not access my Yahoo account.  When I log in and go to mail box I get bounced back to "Verify Password".  Need held.

    A number of posters are reporting this problem. It could be a problem with the Yahoo server. If deleting and setting up thevaccount again is not the solution then give it a few hours.

  • Exchange Server bounce back when external Client's email the business.

    Hi, 
    One of our clients are having a small issue and I have been unable to pin this down. The businesses Broadband line was changed over to Fibre a week ago and since then, some of their clients are having an issue emailing our client.
    When client's email the business they are receiving the below error. Not all clients are having an issue sending & there is no logical pattern to it.
    'The server has tried to deliver this message, without success, and has stopped trying. Please try sending this message again. If the problem continues, contact your helpdesk'
    My colleague switched the line over and updated all the relevant records where the domain is hosted. One thing we have noticed is that everyone in the business is receiving a stupid amount of spam emails now.
    Any suggestions or help is appreciated.
    Thanks,
    Alex
    EDIT: The client is running exchange 2010.

    Hi,
    Although correctly updating MX Records resolved a few issues with emails, not everything is fixed.
    3 Clients still have issues emailing us and receive the following bounce back:
    Delivery has failed to these recipients or groups:
    [email protected]
    The server has tried to deliver this message, without success, and has stopped trying. Please try sending this message again. If the problem continues, contact your helpdesk.
    Diagnostic information for administrators:
    Generating server: EARTH.fccparagon.local
    [email protected]
    #550 4.4.7 QUEUE.Expired; message expired ##
    Original message headers:
    Received: from P000014 (192.168.110.14) by EARTH.fccparagon.local
     (192.168.110.20) with Microsoft SMTP Server id 14.0.722.0; Fri, 10 Oct 2014
     14:38:14 +0100
    Date: Fri, 10 Oct 2014 14:38:14 +0100
    From: "[email protected]" <[email protected]>
    To: <[email protected]>
    Message-ID: <[email protected].20>
    Subject: Smart Rental Protection Payment Application PIN374121/01
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary="----=_Part_77516_238539778.1412948294165"
    X-Mailer: ColdFusion 9 Application Server
    Return-Path: [email protected]
    X-EXCLAIMER-MD-CONFIG: f2e42f62-f17e-4c46-b896-06fbe0c96e5c
    Regards, Alex

  • Can't Restore Exchange 2010 Mailbox DB from HP Data Protector backup

    I'm trying to implement Exchange 2010, but I won't feel comfortable moving many users to it until I've successfully restored a mail database from tape backup.  So far, this hasn't worked out so well.  I'm using HP Data Protector for my backup solution.
    Here's what I've done:
    1.  In DP's "Restore" GUI, navigated down to the MS Volume Shadow Copy Writers entry, then selected both "Files" and "Logs" from the DB's entry under Microsoft Information Store.  I'm not restoring any of the other Writers.  So that I don't have to take down Exchange, I'm restoring them to a temporary restore location.
    2. After the restore completes, I go to the temporary restore location on the server and run eseutil /mh on the database, which returns a "Dirty Shutdown" db status.
    3.  Since I have the log files, I attempt to repair using eseutil /r E01 in the log files' path.  This generates "Operation terminated with error -1216 (JET_errAttachedDatabaseMismatch, An outstanding database attachment has been detected at the start or end of recovery, but database is missing or does not match attachment info) after 10.608 seconds."
    Can anyone suggest what I'm doing wrong with this recovery?  If my steps are incorrect I'd love to know, as HP's documentation for restoring Exchange 2010 is very young and not terribly useful.  My ultimate goal is to be able to restore a database from DP's tapes and bring it back online on the Exchange 2010 server.
    Thanks! 
    Thanks!

    Hi Ben,
    We backup our primary database (Ex Writer) and always with full backup (DB+LOGS). When we restore we restore to alternate location, then manualy copy db file and everything from restored log directory to one folder (for example: d:\restore_DB1). At this
    stage DB is in dirty shutdown state. Then we run (in folder where we copied db file and log files) 
    Eseutil.exe /R E00 /D
    it takes a couple of seconds (160GB file) and the db is in clean shutdown state. Then we do:
    New-MailboxDatabase -Name “Restored DB” -Server MBOX1 -EDBFilePath “D:\Restore_DB1\DB1.edb”
    -Logfolderpath “D:\Restore_DB1” -Recovery
    and
    Mount-Database “Restored DB”
    now we can restore single mailbox or even single item from mailbox with:
    1: whole mailbox with overite the destination
    Restore-Mailbox –Identity “USERNAME” –RecoveryDatabase “Restored DB”
    2. whole mailbox to alternate location (new folder in another mailbox)
    Restore-Mailbox –Identity “EXISTING MAILBOX TO RESOTRE TO” –RecoveryDatabase “Restored DB” –RecoveryMailbox “MAILBOX DO BE RESTORED
    FROM BACKUP” –TargetFolder “NEW FOLDER IN EXISTING MAILBOX”
    3. the same as 2 but single item with MEETING in email subject
    Restore-Mailbox –Identity “EXISTING MAILBOX TO RESOTRE TO” –RecoveryDatabase “Restored DB” –RecoveryMailbox “MAILBOX DO BE RESTORED
    FROM BACKUP” -SubjectKeywords "MEETING" –TargetFolder “NEW FOLDER IN EXISTING MAILBOX”
    Best Regards,
    Alex

  • Exchange 2010 email access from iPhone 4

    Hi,
    We have Exchange 2010 in our network and we are publishing OWA & Outlook Anywhere using TMG 2010 with GoDaddy Public Certificate.
    Everything works well.
    I can access the OWA & Outlook Anywhere from Non Domain machines without any issues but when it comes to iPhone it just doesn't work.
    I followed the procedure to configure iPhone from this link and selected the manual configuration option but i get the 
    http://maketecheasier.com/connect-exchange-account-from-iphone/2011/02/14
    I get Server‘
    field added to the previous fields in the settings.
    Is there any configuration required on TMG for iPhone email access?
    Please suggest.
    Regards,
    Maqsood
    Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified

    Hi,
    We have Exchange 2010 in our network and we are publishing OWA & Outlook Anywhere using TMG 2010 with GoDaddy Public Certificate.
    Everything works well.
    I can access the OWA & Outlook Anywhere from Non Domain machines without any issues but when it comes to iPhone it just doesn't work.
    I followed the procedure to configure iPhone from this link and selected the manual configuration option but i get the 
    http://maketecheasier.com/connect-exchange-account-from-iphone/2011/02/14
    I get Server‘
    field added to the previous fields in the settings.
    Is there any configuration required on TMG for iPhone email access?
    Please suggest.
    Regards,
    Maqsood
    Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified
    Please can you give some info about the Godday certificate you bought.

  • Need to update Exchange 2010 to SP1 from base

    I need to update my base install of Exchange 2010 to SP1 and eventually SP2. This sits on a 2008 R2 server. in reading other upgrade articles, there are references to needing hotfixes at the server level - 2008 R2. There are about 5 hot fixes referenced
    to upgrade to SP1 and I would assume there are a few others for the update to SP2.
    Currently the 2008 R2 server is patched via Windows update through February 2014 (including SP1 for the server). Given that, can I assume that the hot fix updates have been incorporated into other updates/patches along the way for the Windows 2008 R2
    server? Or do i still have to install each of those hotfixes manually?
    Also, in one of the patches, it spoke of needing, or using .net framework 2.0 and 3.51. currently my system has 4.5.1 on it. do i need 2.0 and 3.51 for SP1 to be installed and work correctly?
    thanks
    dave

    Hi Dave,
    I recommend you install Exchange 2010 SP3 directly. There is no need to upgrade to Exchange 2010 SP1 and then to SP2.
    Service Packs are cumulative, Exchange 2010 SP3 include all fixes included in previous RUs and service packs. Here is a blog for your reference.
    Released: Exchange Server 2010 SP3
    http://blogs.technet.com/b/exchange/archive/2013/02/12/released-exchange-server-2010-sp3.aspx
    Since Windows updated through February 2014, you don't need to install each of those hotfixes manually.
    Besides, I would like to verify if you download .net framework 4.5.1 from website. There is no need to install it that way. You just need to open Server Manager, add .Net Framework 3.5.1 feature.
    Hope my clarification is helpful.
    Best regards,
    Amy
    Amy Wang
    TechNet Community Support

  • Exchange 2010 no back pressure event in Event Logs

    Recently I had an issue on my Exchange 2010 CAS server.
    I was able to send internal mails and I could send external mail but EOP was not able to send External Inbound mail to my on site servers. A message trace on the Exchange online side yielded no error... Just showed the emails delivery as "Pending".
    No errors on my on-prim mailbox server or CAS servers.
    After a few hours of working on this with the Office 365 team thinking it was on their side we noticed that the CAS server had roughly 3.75 Gigs of free space. I cleared out some logs and mail once again started flowing.
    My question is why didn't I get the back pressure warnings in the event logs. I looked at my config file and I do see that resource monitoring is set to true. So I'm a bit confused... I do remember getting these warnings on Exchange 2007 but I didn't get
    one on 2010 in this case. Would have saved me a lot of time and stress.
    Cheers
    RS

    Hi,
    Do you mean there is no event log for your back pressure in Exchange 2010?
    Please double check whether there is any Event 1500X log for MSExchangeTransport Resource Manager. We can refer to the following article to check the
    Back pressure configuration options in EdgeTransport.exe.config file (The file default location is C:\Program Files\Microsoft\Exchange Server\V14\Bin directory):
    http://technet.microsoft.com/en-us/library/bb201658(v=exchg.141).aspx
    If there is still no logs for back pressure, please set the event log level to High to have a try:
    Set-EventLogLevel -Identity "MSExchangeTransport\ResourceManager" -Level High
    Regards,
    Winnie Liang
    TechNet Community Support

  • Email bounced back from valid addresses

    Hello,
    When I send email using Mail, people with certain email addresses (i.e. "pacbell" or "hotmail") don't receive them. Even though they are valid addresses, they are bounced back to me. I have a ".mac" address; when I send mail to these people through .mac's webmail, the mail goes through fine. Any ideas why?
    Thanks!
    -Vincas

    hi allan,
    this is what i get:
    "A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:"
    (even though the address is valid; this happens with newly composed and replied emails)
    when i send through webmail, they go through fine.
    thanks for any advice!
    -vincas

  • My phone keeps buzzing, it keeps bouncing back from silent mode to ringer mode. It doesn't seem to be a switch issue. Help me! It's extremely annoying!

    When the ringer switch is set to loud, it constantly bounces back and forth between on and off, buzzing and showing me the ringer on, ringer off symbol. Help'

    i have a very similar problem, but my iPod nano is the same way. I've tried restoring and synching but nothing. May I asked what measure and methods you took? thanks in advance!!

Maybe you are looking for