Message Tracking - Determing what happens to specific email

Question

Good afternoon all!  I have a situation with a client Exchange 2010 server.  They have a front end/back end exchange setup.  They are running this on Server 2008 R2.  Mail is setup and working great.  They have ONE specific email
they receive on a nightly basis.  This email makes it through the front end spam solution, then passes the receive connector.  In the message tracking logs I see the message is received.  It is sent to a distribution group.  Other email
that is sent to the distribution group will have a corresponding expand and deliver logs.  This particular email does not have anything further than receive.  No other logs to identify why it is not being delivered or dropped or anything.  I
have run the following command to ensure I have the full information:
[PS] C:\Program Files\Microsoft\Exchange Server\V14\Scripts>get-exchangeserver | where {$_.isHubTransportServer -eq $tru
e -or $_.isMailboxServer -eq $true} | Get-MessageTrackinglog -MessageId "[email protected]" | fl
RunspaceId              : e5feafd8-bb88-414d-ad8f-7841df4ad30d
Timestamp               : 10/24/2014 12:20:44 AM
ClientIp                : *.*.*.* (Front End IP)
ClientHostname          : frontend.spam.solution
ServerIp                : 192.168.10.240
ServerHostname          : Exch2010.domain.local
SourceContext           : 08D1BC5A8D9DC4B6;2014-10-24T05:20:43.396Z;0
ConnectorId             : Exch2010\Default Exch2010
Source                  : SMTP
EventId                 : RECEIVE
InternalMessageId       : 3816
MessageId               : <[email protected]>
Recipients              :
{[email protected]}
RecipientStatus         : {}
TotalBytes              : 5091
RecipientCount          : 1
RelatedRecipientAddress :
Reference               :
MessageSubject          : Delivery Status Notification (Failure)
Sender                  :
[email protected]
ReturnPath              : <>
MessageInfo             : 00A: NTS:
MessageLatency          :
MessageLatencyType      : None
EventData               : {[FirstForestHop, Exch2010.domain.local]}
There are no further logs on this message.  For those that will read the delivery status notification.  This message is a bounce back message that they are not receiving.  I did change the Default Properties on the remote domains, so that
Allow external out-of-office messages and legacy out-of-office messages is selected as well as under message format: Allow Auto replies, Allow Auto Forward, Allow Delivery Reports, Allow Non-Delivery Reports are also all selected.
I am lost on where to figure out what happens to this email after the receive connector gets it.  Messages normally have other messages that show additional information; however this message just dies there.
Any ideas or help would be greatly appreciated!
Thanks
Jason

Answer 1

Thanks for the reply.  I actually started with searches for anything going to that distribution group.  I used the GUI version, then went to the shell.  Neither was able to produce anything beyond receive.  I thought maybe the group was
not setup properly to get emails from the outside, but after testing from my email address directly to the group, I see normal behavior it expands then delivers to the store.  With these particular emails, they only ever have the event of receive nothing
further.  Any ideas where to look when that happens?
Thanks
Jason