Exchange 2010 - Bounce backs from unknown accounts
Hi There,
I am running exchange 2010 and i had a " Catch all " mailbox setup so any email sent to *@domain.com would get caught in this mailbox using a policy even if the account did not exist. I went to remove the " catch all " mailbox
as it was no longer needed but if someone external was to email " [email protected] " or spelt a users name wrong the external user will not receive a bounce back telling them that the address is invalid.
Any ideas?
Regards,
Jack
Check out the Set-RemoteDomain -NDREnabled parameter.
http://technet.microsoft.com/en-us/library/aa997857(v=exchg.141).aspx
Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
Similar Messages
-
Unexplained bounce backs from Ironport
We have a C10 device and last week we receved instanct bounce backs from the Ironport when trying to send to several different external email addresses at different domains.
The bounce backs were being generated by our internal Ironport itself instead of the destination email server so it is as if the email never left our company.
After serval days and no configuration changes on the Ironport I sent several test emails to these external domains. They are being recevied okay without any problems. Can any one explain what is going on here and how the problem recitifed itself?
Thanks for your help!What may be happening:
It could be that your mailserver(e.g. Exchange) handed the mail off to the Ironport appliance, who took responsibility for the message. Then, after any last outbound scanning and appending disclaimers, the Ironport appliance did a MX lookup to deliver the message and then upon trying to deliver the message to the appropriate destination, the Ironport MTA received a SMTP 5## error code.
Upon receiving the SMTP 5## error code, the Ironport appliance will consider this undeliverable to the destination and then turnaround and bounce it back to the original sender, which may be what you're observing.
Where to go from here:
It would be useful if you still have those bounce messages that were generated by the Ironport appliance. You can look up the original sender and intended recipient or subject line through the mail logs and find the corresponding timeframe when the Ironport MTA tried to establish a connection to the destination host. This will show up as an ICID event where the Ironport tried to connect to the destination host. I'm surprised that the bounce message didn't provide some info on the cause of the bounce.
References:
1. findevent is a good tool on the command line that you can use to search for messages.
How can I determine the disposition of a message using the mail logs?
http://tinyurl.com/jb7z4 -
Spoofer email Bounce backs create invalid account on server
Every now and then one of those bottom feeding spoofers starts spoofing our domain name with a random account name to send out scads of spam - and of course the inevitable slew of bounce backs from the unfortunate "spamees" then flood our server. Fortunately I do use the excellent Frontline spam defense which helps tremendously.
What I am finding really odd is that these spoofers sometimes use a username of the variety "<[email protected]>" and for whatever reason this actually creates(?!) an account name in our email directory on the server?! (Acl privileges are l,r,s (any))
I have analyzed the traffic and there is absolutely no outbound mail going from our server with this username from our server (i.e. our server has definitely not been cracked)- I further verify this by checking the IP address of initial sender from some of the bouncebacks which have ALL info of the email transaction and it is definitely the work of a spoofer.
The "account" is relatively easy to delete with Siradmin - create an acl for the administrator with all privileges and then delete the account. There is nothing in it.
However I am just wondering if A) This odd "feature" (read bug!) is something that is known, and B) How can I possibly stop this strange behavior from happening again.
Any help or advise would be most appreciated.
Regards,
Rohin
p.s. a bit of my log is listed below FYI
Mar 15 14:03:14 dns postfix/smtp[4976]: E7D2423F87E: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=15, status=sent (250 2.6.0 Ok, id=02844-07, from MTA: 250 Ok: queued as AA9E423F8AA)
Mar 15 14:03:14 dns postfix/pipe[4985]: AA9E423F8AA: to=<[email protected]>, relay=cyrus, delay=1, status=bounced (data format error. Command output: jirfinesseembroideriesxyf: Mailbox does not exist )
Mar 15 15:08:06 dns postfix/pipe[5331]: 5225323DC99: to=<[email protected]>, relay=cyrus, delay=35729, status=deferred (temporary failure)
Mar 15 16:14:46 dns postfix/pipe[5681]: 5225323DC99: to=<[email protected]>, relay=cyrus, delay=39729, status=deferred (temporary failure)Could verify this.
Mails to non existent shared folders create this shared folders like you mentioned above:
(imapd.conf: "postuser: test")
Apr 20 16:43:44 mc postfix/pipe[44755]: AFE26165AB4: to=<[email protected]>, relay=cyrus, delay=0.07, delays=0/0.01/0/0.06, dsn=5.6.0, status=bounced (data format error. Command output: test+xxx.test2: Permission denied )
this creates the shared folder "Shared Folders/xxx.test2"
If the part in front of the + is not defined in imapd.conf and no user with this name is present it gets rejected:
Apr 20 16:47:19 mc postfix/pipe[44878]: 9F148165AEB: to=<[email protected]>, relay=cyrus, delay=0.08, delays=0/0.01/0/0.06, dsn=5.6.0, status=bounced (data format error. Command output: test2+xxx.test2: Mailbox does not exist ) -
Okay i had to install Itunes onto my new OS because window's Vista messed up on me and i can't get any of my old purchases back from my account such as music and movies any ideas on how to get them back (i do not have the folder that contains old items from the last itunes or anything from that OS because it had a virus and i just wanted windows 7)
Downloading past purchases from the App Store, iBookstore, and iTunes Store
Hope this helps,
JD -
my computer crashed and lost my itunes, now i have a new computer...is there any way to get my music back from my account
It has always been very basic to always maintain a backup copy of your computer for just such an occasion.
Use your backup copy to put everything back.
If for some reason you have failed to backup, not good, then you can redownload some purchases in some countries.
Downloading past purchases from the App Store, iBookstore, and iTunes Store -
How to get Exchange 2010 Product Keys from an existing installed servers
hi All,
we are facing some kind of critical issues. we had 3 MB servers . the two servers are in DAG all our productions DB's running in DAG. the DAG servers are crashed due to hardware issues. one server is acting as archival server. all servers are running exchange
2010 sp3.
now we are trying to rebuild new servers to restore DB's. the new servers is prompting the product key to be entered. unfortunately we don't have product keys of exchange 2010. since we are gold partner we have partner network portal. when i tried to get
the product key from portal am able to see only 2013 keys. we called up Microsoft and explained but no use. they said we have to use exchange 2013. but we cant simply go ahead and migrate.
but the only option is we have exchange 2010 installed servers they all act as CAS/HUB server with the same licence. please let me know how do i retrieve exchange 2010 product keys from an existing servers. Please advise me its very critical.
can we get the product keys through some kind of scripts?
Thanks, Venkatesh. "Hardwork Never Fails"Hi,
For this issue, I recommend you contact Microsoft customer service to consult this question. Thanks for your understanding.
Best regards,
Belinda
Belinda Ma
TechNet Community Support -
Mails getting bounce back from only one account,why?
Hi Every one,
I have a strange problem, I'm using postfix mail server and LDAP directory service.
From last few day I'm facing strange problem. Like I have 15 user account configured for accessing emails.
In that, only one user gets bounce back messages. I found the issue but not sure how to fix it.
Issue:
If I stop the (LDAP) directory and mail service and restart my Leopard server and services. I can send emails through. But after few days or a week later i have to face the same issue.
Help Please
Thanks,
Gulab PashaIf you right-click on an accont's inbox and select "Synchronize {name}", that should perform the "get new mail" function as part of the general synchronization.
-
Can't access yahoo account. continues to bounce back from mail box asking password?
I can not access my Yahoo account. When I log in and go to mail box I get bounced back to "Verify Password". Need held.
A number of posters are reporting this problem. It could be a problem with the Yahoo server. If deleting and setting up thevaccount again is not the solution then give it a few hours.
-
Exchange Server bounce back when external Client's email the business.
Hi,
One of our clients are having a small issue and I have been unable to pin this down. The businesses Broadband line was changed over to Fibre a week ago and since then, some of their clients are having an issue emailing our client.
When client's email the business they are receiving the below error. Not all clients are having an issue sending & there is no logical pattern to it.
'The server has tried to deliver this message, without success, and has stopped trying. Please try sending this message again. If the problem continues, contact your helpdesk'
My colleague switched the line over and updated all the relevant records where the domain is hosted. One thing we have noticed is that everyone in the business is receiving a stupid amount of spam emails now.
Any suggestions or help is appreciated.
Thanks,
Alex
EDIT: The client is running exchange 2010.Hi,
Although correctly updating MX Records resolved a few issues with emails, not everything is fixed.
3 Clients still have issues emailing us and receive the following bounce back:
Delivery has failed to these recipients or groups:
[email protected]
The server has tried to deliver this message, without success, and has stopped trying. Please try sending this message again. If the problem continues, contact your helpdesk.
Diagnostic information for administrators:
Generating server: EARTH.fccparagon.local
[email protected]
#550 4.4.7 QUEUE.Expired; message expired ##
Original message headers:
Received: from P000014 (192.168.110.14) by EARTH.fccparagon.local
(192.168.110.20) with Microsoft SMTP Server id 14.0.722.0; Fri, 10 Oct 2014
14:38:14 +0100
Date: Fri, 10 Oct 2014 14:38:14 +0100
From: "[email protected]" <[email protected]>
To: <[email protected]>
Message-ID: <[email protected].20>
Subject: Smart Rental Protection Payment Application PIN374121/01
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_77516_238539778.1412948294165"
X-Mailer: ColdFusion 9 Application Server
Return-Path: [email protected]
X-EXCLAIMER-MD-CONFIG: f2e42f62-f17e-4c46-b896-06fbe0c96e5c
Regards, Alex -
Can't Restore Exchange 2010 Mailbox DB from HP Data Protector backup
I'm trying to implement Exchange 2010, but I won't feel comfortable moving many users to it until I've successfully restored a mail database from tape backup. So far, this hasn't worked out so well. I'm using HP Data Protector for my backup solution.
Here's what I've done:
1. In DP's "Restore" GUI, navigated down to the MS Volume Shadow Copy Writers entry, then selected both "Files" and "Logs" from the DB's entry under Microsoft Information Store. I'm not restoring any of the other Writers. So that I don't have to take down Exchange, I'm restoring them to a temporary restore location.
2. After the restore completes, I go to the temporary restore location on the server and run eseutil /mh on the database, which returns a "Dirty Shutdown" db status.
3. Since I have the log files, I attempt to repair using eseutil /r E01 in the log files' path. This generates "Operation terminated with error -1216 (JET_errAttachedDatabaseMismatch, An outstanding database attachment has been detected at the start or end of recovery, but database is missing or does not match attachment info) after 10.608 seconds."
Can anyone suggest what I'm doing wrong with this recovery? If my steps are incorrect I'd love to know, as HP's documentation for restoring Exchange 2010 is very young and not terribly useful. My ultimate goal is to be able to restore a database from DP's tapes and bring it back online on the Exchange 2010 server.
Thanks!
Thanks!Hi Ben,
We backup our primary database (Ex Writer) and always with full backup (DB+LOGS). When we restore we restore to alternate location, then manualy copy db file and everything from restored log directory to one folder (for example: d:\restore_DB1). At this
stage DB is in dirty shutdown state. Then we run (in folder where we copied db file and log files)
Eseutil.exe /R E00 /D
it takes a couple of seconds (160GB file) and the db is in clean shutdown state. Then we do:
New-MailboxDatabase -Name “Restored DB” -Server MBOX1 -EDBFilePath “D:\Restore_DB1\DB1.edb”
-Logfolderpath “D:\Restore_DB1” -Recovery
and
Mount-Database “Restored DB”
now we can restore single mailbox or even single item from mailbox with:
1: whole mailbox with overite the destination
Restore-Mailbox –Identity “USERNAME” –RecoveryDatabase “Restored DB”
2. whole mailbox to alternate location (new folder in another mailbox)
Restore-Mailbox –Identity “EXISTING MAILBOX TO RESOTRE TO” –RecoveryDatabase “Restored DB” –RecoveryMailbox “MAILBOX DO BE RESTORED
FROM BACKUP” –TargetFolder “NEW FOLDER IN EXISTING MAILBOX”
3. the same as 2 but single item with MEETING in email subject
Restore-Mailbox –Identity “EXISTING MAILBOX TO RESOTRE TO” –RecoveryDatabase “Restored DB” –RecoveryMailbox “MAILBOX DO BE RESTORED
FROM BACKUP” -SubjectKeywords "MEETING" –TargetFolder “NEW FOLDER IN EXISTING MAILBOX”
Best Regards,
Alex -
Exchange 2010 email access from iPhone 4
Hi,
We have Exchange 2010 in our network and we are publishing OWA & Outlook Anywhere using TMG 2010 with GoDaddy Public Certificate.
Everything works well.
I can access the OWA & Outlook Anywhere from Non Domain machines without any issues but when it comes to iPhone it just doesn't work.
I followed the procedure to configure iPhone from this link and selected the manual configuration option but i get the
http://maketecheasier.com/connect-exchange-account-from-iphone/2011/02/14
I get Server‘
field added to the previous fields in the settings.
Is there any configuration required on TMG for iPhone email access?
Please suggest.
Regards,
Maqsood
Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation CertifiedHi,
We have Exchange 2010 in our network and we are publishing OWA & Outlook Anywhere using TMG 2010 with GoDaddy Public Certificate.
Everything works well.
I can access the OWA & Outlook Anywhere from Non Domain machines without any issues but when it comes to iPhone it just doesn't work.
I followed the procedure to configure iPhone from this link and selected the manual configuration option but i get the
http://maketecheasier.com/connect-exchange-account-from-iphone/2011/02/14
I get Server‘
field added to the previous fields in the settings.
Is there any configuration required on TMG for iPhone email access?
Please suggest.
Regards,
Maqsood
Maqsood Mohammed Senior Systems Engineer MCITP-Enterprise Admin & ITILv3 Foundation Certified
Please can you give some info about the Godday certificate you bought. -
Need to update Exchange 2010 to SP1 from base
I need to update my base install of Exchange 2010 to SP1 and eventually SP2. This sits on a 2008 R2 server. in reading other upgrade articles, there are references to needing hotfixes at the server level - 2008 R2. There are about 5 hot fixes referenced
to upgrade to SP1 and I would assume there are a few others for the update to SP2.
Currently the 2008 R2 server is patched via Windows update through February 2014 (including SP1 for the server). Given that, can I assume that the hot fix updates have been incorporated into other updates/patches along the way for the Windows 2008 R2
server? Or do i still have to install each of those hotfixes manually?
Also, in one of the patches, it spoke of needing, or using .net framework 2.0 and 3.51. currently my system has 4.5.1 on it. do i need 2.0 and 3.51 for SP1 to be installed and work correctly?
thanks
daveHi Dave,
I recommend you install Exchange 2010 SP3 directly. There is no need to upgrade to Exchange 2010 SP1 and then to SP2.
Service Packs are cumulative, Exchange 2010 SP3 include all fixes included in previous RUs and service packs. Here is a blog for your reference.
Released: Exchange Server 2010 SP3
http://blogs.technet.com/b/exchange/archive/2013/02/12/released-exchange-server-2010-sp3.aspx
Since Windows updated through February 2014, you don't need to install each of those hotfixes manually.
Besides, I would like to verify if you download .net framework 4.5.1 from website. There is no need to install it that way. You just need to open Server Manager, add .Net Framework 3.5.1 feature.
Hope my clarification is helpful.
Best regards,
Amy
Amy Wang
TechNet Community Support -
Exchange 2010 no back pressure event in Event Logs
Recently I had an issue on my Exchange 2010 CAS server.
I was able to send internal mails and I could send external mail but EOP was not able to send External Inbound mail to my on site servers. A message trace on the Exchange online side yielded no error... Just showed the emails delivery as "Pending".
No errors on my on-prim mailbox server or CAS servers.
After a few hours of working on this with the Office 365 team thinking it was on their side we noticed that the CAS server had roughly 3.75 Gigs of free space. I cleared out some logs and mail once again started flowing.
My question is why didn't I get the back pressure warnings in the event logs. I looked at my config file and I do see that resource monitoring is set to true. So I'm a bit confused... I do remember getting these warnings on Exchange 2007 but I didn't get
one on 2010 in this case. Would have saved me a lot of time and stress.
Cheers
RSHi,
Do you mean there is no event log for your back pressure in Exchange 2010?
Please double check whether there is any Event 1500X log for MSExchangeTransport Resource Manager. We can refer to the following article to check the
Back pressure configuration options in EdgeTransport.exe.config file (The file default location is C:\Program Files\Microsoft\Exchange Server\V14\Bin directory):
http://technet.microsoft.com/en-us/library/bb201658(v=exchg.141).aspx
If there is still no logs for back pressure, please set the event log level to High to have a try:
Set-EventLogLevel -Identity "MSExchangeTransport\ResourceManager" -Level High
Regards,
Winnie Liang
TechNet Community Support -
Email bounced back from valid addresses
Hello,
When I send email using Mail, people with certain email addresses (i.e. "pacbell" or "hotmail") don't receive them. Even though they are valid addresses, they are bounced back to me. I have a ".mac" address; when I send mail to these people through .mac's webmail, the mail goes through fine. Any ideas why?
Thanks!
-Vincashi allan,
this is what i get:
"A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:"
(even though the address is valid; this happens with newly composed and replied emails)
when i send through webmail, they go through fine.
thanks for any advice!
-vincas -
When the ringer switch is set to loud, it constantly bounces back and forth between on and off, buzzing and showing me the ringer on, ringer off symbol. Help'
i have a very similar problem, but my iPod nano is the same way. I've tried restoring and synching but nothing. May I asked what measure and methods you took? thanks in advance!!
Maybe you are looking for
-
I have my iphone 5?? help??microphone
I have my iphone 5 for 4 weeks and it was working fine but it today when i called a speakerphone the microphone does not work and if i turn of the speakerphone it works fine ??? help
-
How do I add calculating properties to the fields?
Used a template on Forms Central and made some changes. Trying to add calculating fields to three of the text fields and one drop down box but can't find how to do this? Have double clicked on the text or drop down box but the properties does not ha
-
** Seeburger AS2 Configuration in the Sender Side
Hi friends, We are trying to receive Purchase Order from the Customer using Seeburger AS2 adapter. The customer is sending the PO to Inovis a solution provider and we need to receive this documents from Inovis. We need to configure AS2 adapter to re
-
IM box will not open for one person
I have updated my skype but this has been happen to me alot on my desktop PC one person if they send me txt or call me I can't open there IM window, but when I use Skype on my Sony smartphone it works. Can some tell me how to fix this please
-
How can I down load Foxfire to a CD in a second computer so that I can install Foxfire in to a computer that does not have a working browser?