Mails Lost Exchange 2007

Question

Hi,
I've some problems with the exchange server 2007. We are losing some mails and it looks like they getting lost between the Edge and the Hub role. All roles are installed on one physical device (no vms). I searched the one of the lost mails with the trouble
shooting tool and found it after that i check the details with get-messagetrackinglog -internalmessageid "XXXX".
The result was that this "lost message" has just one entry with the eventID RECEIVE. Then I checked an email for the same sender which arrived the mailbox. This mail has two entries, one with eventID RECEIVE and another with the eventID DELIVER.
My question is how can I find and resend this lost emails. They can not be in the queue anymore bnecause they are deleted after the categorizer categorizes them.
Is there a shell command to resend them?
Where can I find the e-mails, are tehy still cached on the system?
Thanks for your Help
BR
MessageTrackingLog one Good and one BAd (from same Sender outside our oraginization)
BAD:
Timestamp               : 2011-07-19 10:21:30
ClientIp                : XXX.XXX.XXX.XXX
ClientHostname          :
ServerIp                : YYY.YYY.YYY.YYY
ServerHostname          : MX01
SourceContext           : 08CE0319BEFF6A57;2011-07-19T08:21:26.747Z;0
ConnectorId             : MX01\Default MX01
Source                  : SMTP
EventId                 : RECEIVE
InternalMessageId       : 30960401
MessageId               : <[email protected]>
Recipients              :
{[email protected]}
RecipientStatus         : {}
TotalBytes              : 3639154
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Lost Mail
Sender                  :
[email protected]
ReturnPath              :
[email protected]
MessageInfo             : 00A:
good:
Timestamp               : 2011-07-20 12:18:06
ClientIp                : XXX.XXX.XXX.XXX
ClientHostname          :
ServerIp                : YYY.YYY.YYY.YYY
ServerHostname          : MX01
SourceContext           : 08CE0319BEFFA713;2011-07-20T10:18:00.120Z;0
ConnectorId             : MX01\Default MX01
Source                  : SMTP
EventId                 : RECEIVE
InternalMessageId       : 32070502
MessageId               : <[email protected]>
Recipients              :
{[email protected]}
RecipientStatus         : {}
TotalBytes              : 7731
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Mail
Sender                  :
[email protected]
ReturnPath              :
[email protected]
MessageInfo             : 00A:
Timestamp               : 2011-07-20 12:18:06
ClientIp                :
ClientHostname          : MX01
ServerIp                :
ServerHostname          : MX01
SourceContext           :
ConnectorId             :
Source                  : STOREDRIVER
EventId                 : DELIVER
InternalMessageId       : 32070502
MessageId               : <[email protected]>
Recipients              :
{[email protected]}
RecipientStatus         : {}
TotalBytes              : 7926
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Mail
Sender                  :
[email protected]
ReturnPath              :
[email protected]
MessageInfo             : 2011-07-20 12:18:00

Answer 1

Hi,
as you can see in my earlier post I checked two messages of the same sender, one good and one bad message.
Both were received from the system and one was acctually delivered.
I just called the one mail "Badmail" because it didn't went trough to the mailbox but it was recived and it still think it got lost on the way from teh queue to the mbx.
Trackinglog Bad mail (check out the full log in my first post)
>Timestamp : 2011-07-19 10:21:30
>ClientIp : XXX.XXX.XXX.XXX
>ClientHostname :
>ServerIp : YYY.YYY.YYY.YYY
>ServerHostname : MX01
>SourceContext : 08CE0319BEFF6A57;2011-07-19T08:21:26.747Z;0
>ConnectorId : MX01\Default MX01
>Source : SMTP
>EventId : RECEIVE (received by edge and filled into the queue)
>and the failure is somewhere between edge and hub.
>The mail comes in ->edge puts it into the queue->categorizier checks it (smtp adr..) ->transferstarts + queue entry is removed
Here is the Agentlog and as I've written the logs look fine.
Timestamp       : 2011-07-19 10:21:29
SessionId       : 08CE0319BEFF6A57
IPAddress       : XXX.XXX.XXX.XXX
MessageId       : <[email protected]>
P1FromAddress   : [email protected]
P2FromAddresses : {[email protected]}
Recipients      :
{[email protected]}
Agent           : Content Filter Agent
Event           : OnEndOfData
Action          : AcceptMessage
SmtpResponse    :
Reason          : SCL
ReasonData      : 0
Diagnostics     :
Any solutions?
BR
..next time we eat bacon