Quantcast
Channel: Exchange Server 2013 - Mail Flow and Secure Messaging forum
Viewing all 3168 articles
Browse latest View live

552 5.3.4 Message size exceeds fixed maximum message size - sending large files to exchange 2010 mailboxes

$
0
0

i'm trying to troubleshoot an issue where my users send large files and i want to increase the file size possible to get to the exchange mailbox but i'm not having success.  In a test internally from one exchange user to another i am able to send these set of jpg files totalling 19mb.  But, when i send from the internet to the same user i get a failure.  Below are the details of the failure.  From my gmail accont to my exchange account.  Any advice on where to check or change settings?  Further troubleshooting steps?

Also...i'm running Exchange 2010 and not 2013...the web page did not allow me to choose 2010 for some reason...

---------- Forwarded message ----------
From: Mail Delivery Subsystem<mailer-daemon@googlemail.com>
Date: Fri, Sep 6, 2013 at 3:49 PM
Subject: Delivery Status Notification (Failure)
To: aamato9072@gmail.com

Delivery to the following recipient failed permanently:

     andy@salesmasterflooring.com

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domainsalesmasterflooring.com bymobile.salesmasterflooring.com. [24.187.246.100].

The error that the other server returned was:
552 5.3.4 Message size exceeds fixed maximum message size

----- Original message -----

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=JKB8gjV5GQJz+C5f9MoExeVCGE6IN4GDrvDkWVOTlag=;
        b=SR4z/PtZOB9ww/RkkMZ+TekYkMKAm7sHHeJ/hvDNbcl+/4ZEz2d5OxRWibfkjuFnQz
         3feRY5PukaGgvEoS3N+cSa6ZUH+yIB1iqKnVpT6qQcO8FXDRyQIPvUbX5oXXKZGMowGj
         ActDZc/9K9IFZrKt67P612bMGLHCpN7Rh9gpn7Nez1X42mCN95VxSHW+Ntdna8Rruvl/
         RC7DsUTx9ocf7pADVYD2FCK7sxtr9QsZyptebbKacQgLhijMfsuY51x6scQTFCXkVga6
         gAmDDVDfjEfYWCtsvxs8CBPSJFOrLo+Ia9xlKrLol/hgtN8kB4WaKJIt03AUunQmxY3o
         iRiw==
MIME-Version: 1.0
X-Received: by 10.220.145.132 with SMTP id d4mr3849854vcv.9.1378496939474;
Fri, 06 Sep 2013 12:48:59 -0700 (PDT)
Received: by 10.52.182.162 with HTTP; Fri, 6 Sep 2013 12:48:51 -0700 (PDT)
In-Reply-To: <CAJCo5u44AeoSqOUtqi-1XRT71D+Wu5CerRzEhLgaYcxubn6arw@mail.gmail.com>
References: <CAJCo5u44AeoSqOUtqi-1XRT71D+Wu5CerRzEhLgaYcxubn6arw@mail.gmail.com>
Date: Fri, 6 Sep 2013 15:48:51 -0400
Message-ID: <CAJCo5u4-zgp-Ni=Mi-mYQs=kY_ehjzrUd3UZqZ5KYC7iJ31W=Q@mail.gmail.com>
Subject: Fwd: test...19mb - S:\photos\SMA Volleyball 2013\061913
From: Andy Amato <aamato9072@gmail.com>
To: A Amato <andy@salesmasterflooring.com>
Content-Type: multipart/mixed; boundary=047d7b34347c66fcfa04e5bc540a

redirect incoming and outgoing mail

$
0
0

We can redirect incoming mail only but we need redirect incoming and outgoing mail. How can I do?

Actually my company required that, store copy of all incoming & outgoing mail from our exchange 2010 server for security purpose. How can I do?

Exchange 2010 (SP1) CAS & MB communication problem with different site

$
0
0

Hi team,

We are facing problem while connecting Ex-2010 SP1 MB (Site-3) user's OWA using Ex-2010 SP1 CAS server (Site-1 & Site-2) and getting error "Outlook Web App isn't available. If the problem continues, please contact your helpdesk."

Our Design:

Site-1: CAS/HT/MB           (IP: 172.16.128.0 MASK: 255.255.255.0 GW:172.16.128.1)

Site-2: CAS/HT/MB           (IP: 172.16.128.0 MASK: 255.255.255.0 GW:172.16.128.1)

CASARRAY and DAG is configured in between Site-1 & Site-2 and we can access the HA environment.

Site-3: MB                        (IP: 172.26.2.0 MASK: 255.255.224.0 GW:172.26.1.1)

Our Goal: We trying to access Site-3 MB OWA using CASARRAY.

Please assist.

Thanks;


NA

Receive Connector RemoteIPrange upper limit Exchange2013

$
0
0
What is the maximum limit of number of IPs  "RemoteIPrange" on receive connector in EXCH 2013. I found few blogs saying 1200 in Exch 2007, need to know for EXCH 2013.

Exchange 2013 Error 400 4.4.7 Message Delayed Between My Server And Itself!

$
0
0

My users are getting Delivery Delayed messages.  The received from and by servers are both my Exchange 2013 server "wiley". What is going on?

Diagnostic information for administrators:

Generating server: Wiley.coyote.gwcommunityschool.com

xxx@gmail.com
Remote Server returned '400 4.4.7 Message delayed'

Original message headers:

Received: from Wiley.coyote.gwcommunityschool.com (10.0.0.2) by
 Wiley.coyote.gwcommunityschool.com (10.0.0.2) with Microsoft SMTP Server
 (TLS) id 15.0.712.24; Sat, 7 Sep 2013 11:09:45 -0400
Received: from Wiley.coyote.gwcommunityschool.com
 ([fe80::30bc:26b1:b175:c893]) by Wiley.coyote.gwcommunityschool.com
 ([fe80::30bc:26b1:b175:c893%13]) with mapi id 15.00.0712.012; Sat, 7 Sep 2013
 11:09:45 -0400
Content-Type: multipart/mixed;
        boundary="_000_3f687247d30e443baefa9b63fe9a4a8dWileycoyotegwcommunitys_"
From: <XXX@GWCommunitySchool.com>
To: "Ferguson, Jeanine (TrevorF)" <XXX@gmail.com>
Subject: RE: GWCS:  AP Exam Schedule
Thread-Topic: GWCS:  AP Exam Schedule
Thread-Index: Ac5Ngn+Lv1Z7fbLFT5uPZyzY06iyGhd8T4CAABoQd2E=
Date: Sat, 7 Sep 2013 15:09:44 +0000
Message-ID: <3f687247d30e443baefa9b63fe9a4a8d@Wiley.coyote.gwcommunityschool.com>
References: <9fee0486f2cc4834aedc33b270df5ae7@PRAIRIE.coyote.gwcommunityschool.com>,<A51422D6-599E-4B27-BAAC-67E9158EE590@gmail.com>
In-Reply-To: <A51422D6-599E-4B27-BAAC-67E9158EE590@gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator: <3f687247d30e443baefa9b63fe9a4a8d@Wiley.coyote.gwcommunityschool.com>
x-originating-ip: [68.100.124.155]
MIME-Version: 1.0

Gary T. Lindner Network Admin GW Community School

Auth Spam Attack

$
0
0
I can I figure out which account is being used to relay messages through our exchange server, no matter which log I enable the login ID used seem to be missing?

Exchange 2010 and Exchange 2013 co-existence

$
0
0

Good Day Guys,

We are battling with an exchange 2013 installation, we have

1 x Exchange 2010 SP3 all roles installed - Physical

1 x Exchange 2010 SP3 CAS roles only - Virtual

1 x Exchange 2013 RU2 All roles (To replace current servers) - Physical

No edge server

Our problem is exchange 2010 can send to exchange 2013 but 2013 can't send to 2010. 2013 also needs to send out via the primary physical 2010 box as this is only server that is allowed to send out of my environment. Anyone had this problem? I see there is another update for sp3 that we will be applying tonight to see if it helps.

Any help is greatly appreciated.

Thanks

Shaun


Exchange 2010 Content Filtering - can you force mail from authenticated users to be scanned?

$
0
0

Hi,

I am using the Exchange 2010 content filter agent, which is working fine on inbound messages. I need to do content filtering on all mail inbound and outbound. I have have set "InternalMailEnabled" to True, but this doesn't seem to make a difference on messages coming from authenticated users (which all my users are) - the messages just seem to be assigned an SCL of -1 and that bypasses the content filtering.

Has anyone managed to get this working?

Thanks.


Internal relay receive connectors on the same ip address

$
0
0

Hello,

How is Exchange [2007sp3] matching the receive connectors to the coming clients? What if there are similar or same ones on the same ip address & port?

At the moment Anonymous smtp relay is configured to accept the clients only on the server secondary ip address. And there are some other connectors specific to the printers, scanners on the server primary ip address.

What will happen to those other connectors if I move the Anonymous smtp relay connector to the primary ip address and the same port 25?

Many thanks,

Pawel

Exchange 2007/2013 Coexistence Internal Relay Mail Flow to the Internet

$
0
0

Hello all

I have a 2007/2013 in coexistence:

2 x '07 HTs
2 x '07 CAS
1 x '07 MB

2 x '13 CAS
2 x '13 MB

On one of the '07 HTs, I've set up a receive connector for apps and printers to use for email transmission. To ensure continuity in the future, I set up a receive connector on one of the '13 CAS. Apps and printers using this receive connect will have emails delivered to in-org mailboxes but not to the Internet. Is there a configuration I'm missing?

For example, when I try to add the '13 servers to the default Send Connector to the Internet, I can only choose '13 MBs and if I do add them, I get mail bounces. What should the set up be for mail flow during coexistence? There's not much information available.

Thanks in advance.

Migrated to Exchange 2013 - now unable to receive email messages from yahoo

$
0
0

I have recently migrated to Exchange 2013 CU2 from 2010, and ever since then we have been unable to receive any email messages from Yahoo.  Whenever someone sends an email, they will receive a delivery failure email in their inbox (see below) Unfortunately the error provides absolutely NO helpful information as far as I can tell, like what the heck does "unreachable for too long" mean, especially when I can receive mail from all kinds of other domains.

I have enabled email security on our Exchange 2013 servers, but I have no blocked domains, and I have added yahoo.com, yahoo.ca and ymail.com to the Content Filter Config bypassed sender domain list.

I am also trying to deal with yahoo, but they don't seem to get the problem!

[PS] C:\Windows\system32>Get-TransportAgent

Identity                                           Enabled         Priority
--------                                           -------         --------
Content Filter Agent                               True            1
Sender Id Agent                                    True            2
Sender Filter Agent                                True            3
Recipient Filter Agent                             True            4
Protocol Analysis Agent                            True            5
Transport Rule Agent                               True            6
Malware Agent                                      True            7
Text Messaging Routing Agent                       True            8
Text Messaging Delivery Agent                      True            9

And:

[PS] C:\Windows\system32>Get-TransportAgent -TransportService FrontEnd

Identity                                           Enabled         Priority
--------                                           -------         --------
Connection Filtering Agent                         True            1

Sorry, we were unable to deliver your message to the following address.

<jsmith@domain.ca>:
Mail server for "domain.ca" unreachable for too long

--- Below this line is a copy of the message.

Received: from [98.139.212.145] by nm17.bullet.mail.bf1.yahoo.com with NNFMP; 27 Aug 2013 19:40:14 -0000
Received: from [98.139.212.204] by tm2.bullet.mail.bf1.yahoo.com with NNFMP; 27 Aug 2013 19:40:14 -0000
Received: from [127.0.0.1] by omp1013.mail.bf1.yahoo.com with NNFMP; 27 Aug 2013 19:40:14 -0000
X-Yahoo-Newman-Property: ymail-3
X-Yahoo-Newman-Id: 849317.96045.bm@omp1013.mail.bf1.yahoo.com
Received: (qmail 73564 invoked by uid 60001); 27 Aug 2013 19:40:14 -0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ymail.com; s=s1024; t=1377632414; bh=FJWBDU3I4fcZwHtJWwOn4jLzT7AYxKdkYU4brQVwGxA=; h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type; b=3gRD6fjCzO+WOZlRVLcRSLTQwYp9wVX1JhcnQ2q07m93c+3rqhg8y//zkAOabeFDFLhCZaCb5sMSzVilG42pg7lWtyIeGGF8Lx768nNaM2WTB6XZG+nX/CX05E8KcB8yXS1LvBF1rK5EoENoKnwfMi1Z08m2brx0GOszq8l+qxA=
DomainKey-Signature:a=rsa-sha1; q=dns; c=nofws;
  s=s1024; d=ymail.com;
  h=X-YMail-OSG:Received:X-Rocket-MIMEInfo:X-Mailer:References:Message-ID:Date:From:Reply-To:Subject:To:In-Reply-To:MIME-Version:Content-Type;
  b=oldn5hDWyczYByh5ekPQGqP1FqUuombMneHueZOQUtLwJk8ozesSWgt7NC9imE/ZEOhwxpqq7ksSWSXMUyhoRboaDXJ8JZJpw7hjxtuHRS9dZhMtmgkaRrsjVR25nYR9rMcZgSSfrkWQLSeC4lxeNfoe6gnbRJdK56jA6P1tNkQ=;
X-YMail-OSG: dl8LpfMVM1nvM14Y.G9_uaEOLhiVsQOdnz3k2Io6_D7iOxw
E1xeqs9LE0i6n6LjRfA.IaY0ZllUtVC0ZogFigWhh6kkN6ILc4FGZbPELwFL
kzC1Arab2s.J4KvCNQFB3rQX.UQWC3ak.Q2woPC422qltM7EBYydxpTXuXcq
tMz71XfUgFC2gfWCYfcerypXbzSrZIL9Cceu8pybdGmWBdajWThhwcO0rD6I
FxmwbVbtpdCxiTZ4_3ElyPSuX.Kiwj7RZ9YoI7I0JD9NMKOSome02j_WYJIE
ii2ZFUHD2IIiqRDQJpn0RSdCS0_u5g144LFHfpV.7gUHV_LSC5ijJ2ROd8MU
mWtGvLkcy7Dzn4SVSbCBH2vuIZJ90oPfkWwyT57fRiHDqqGUzQsRc3u9GkQ6
pqslwApB_li7xU_GV5hBG5EGlP90YDwKz4O84CzcBYhAsP3fWD4q_SIr7KhE
ay1HIEuOUh8.ZgVz4RdIGDhETzwmgDAIFJSAG6nF2F_9CqoVVpZBAlbKGzkj
p62jgv9T4PPCfZhy1UsMCLMn_U92wZflqJfisD1p5ihGizE3SmZDNwoke3TH
KBaeXqg--
Received: from [64.46.58.226] by web161806.mail.bf1.yahoo.com via HTTP; Tue, 27 Aug 2013 12:40:14 PDT
X-Rocket-MIMEInfo: 002.001,CiAKLS0tLS0gRm9yd2FyZGVkIE1lc3NhZ2UgLS0tLS0KRnJvbTogSm9lbCBTbWl0aCA8am9lbHJzbWl0aEB5bWFpbC5jb20.ClRvOiAianNtaXRoQGNhZWRtLmNhIiA8anNtaXRoQGNhZWRtLmNhPiAKU2VudDogVHVlc2RheSwgQXVndXN0IDI3LCAyMDEzIDEwOjUyOjUyIEFNClN1YmplY3Q6IFRlc3RpbmcKICAKCgpUaGlzIGlzIGEgdGVzdC4BMAEBAQE-
X-Mailer: YahooMailWebService/0.8.155.576
References: <1377622372.44837.YahooMailNeo@web161804.mail.bf1.yahoo.com>
Message-ID: <1377632414.67081.YahooMailNeo@web161806.mail.bf1.yahoo.com>
Date: Tue, 27 Aug 2013 12:40:14 -0700 (PDT)
From: Joel Smith <joelrsmith@ymail.com>
Reply-To: Joel Smith <joelrsmith@ymail.com>
Subject: Fw: Testing
To: "jsmith@domain.ca" <jsmith@domain.ca>
In-Reply-To: <1377622372.44837.YahooMailNeo@web161804.mail.bf1.yahoo.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="1665047788-682622650-1377632414=:67081"

--1665047788-682622650-1377632414=:67081
Content-Type: text/plain; charset=us-ascii

Exchange Server Authentication vs FQDN

$
0
0

Hi, I have a single Exchange Server 2013 that is setup to receive emails from the internet and local. Im receiving error message that my certificate is not matching with my FQDN. When I try to change my FQDN that can match with my Certificate common name, I receive a message that I need to disable Exchange Server Authentication method that I can be able to change it. So, I disabled this option and then I stopped to receive the message error. However, I stopped to receive email. I notice that when Exchange Server Authentication method is unchecked, Im not able to receive emails. Once I checked it back and change back my FQDN, I started to receive emails. Why do I need to have Exchange Server Authentication method if I only have a single server? How is it possible to fix this problem? 

Thank everyone!

Microsoft Exchange could not find a certificate that contains the domain name server.mydomain.local in the personal store on the local computer. Therefore, it is unable to support the STARTTLS SMTP verb for the connector Default servername with a FQDN parameter of server.mydomain.loca. If the connector's FQDN is not specified, the computer's FQDN is used. Verify the connector configuration and the installed certificates to make sure that there is a certificate with a domain name for that FQDN. If this certificate exists, run Enable-ExchangeCertificate -Services SMTP to make sure that the Microsoft Exchange Transport service has access to the certificate key



Flavio Ribeiro

Exchange 2013 Anti-Spam doesn't block most spam (even GTUBE test mail is passed)

$
0
0

Hello All,

I have been installing and configuring Anti-Spam agents on my Exchange Servers. When testing with a GTUBE test mail, I see the mail is passed through and delivered to the end-user mailbox. The AgentLog shows:

2013-09-10T06:53:56.911Z,08D078FD1630A0BE,10.x.y.z:25,78.47.119.33:57650,78.47.119.33,emailsecuritycheck.net.3.dmPd6!rpDgG9NsTHLlzAIw==,securitycheck@emailsecuritycheck.net,securitycheck@emailsecuritycheck.net;,<testuser>@<domain>.com,1,Content Filter Agent,OnEndOfData,AcceptMessage,,SCL,2,,2407cb00-38da-4875-925d-08d07c09a7ad,,Undefined

So the message is scanned and marked as SCL 2! Why doesn't Exchange catagorize it as SCL 9?

Regards,

Stephan


You know you're an engineer when you have no life and can prove it mathematically

Email flow problem between two site

$
0
0

We've configure 2 different AD sites and both the site are configured with Ex2010 SP1 server with different MailboxDB. We are facing problem while trying to send/receive internal email between two sites also cant receive email from the external.

Site-1: CAS + HT + MB (Mailboxdb1)

Site-2: CAS + HT + MB (Mailboxdb2)

Site-1 : Can send and receive mail to the external as well as the Mailboxdb1 but cant send to the Mailboxdb2

Site-2 : Mailboxdb2 users cant send/receive mail to Mailboxdb1 users but can send mail to the external only.

ERROR: There is currently no route to the mailbox database.

Please advise


NA

Exchange 2013 Server email blocked by Bigfish.com

$
0
0
Hi,

I'm hoping someone can help out as this issue is causing serious issues within my company.

We upgraded from Exchange 2003 to 2013 recently and everything was fine for a start, but in the last week we have had numerous problems sending email to certain customers (from various companies) and get the error email below:



CO1EHSMHS030 bigfish com rejected your message to the following email addresses:

Service unavailable; Client host [xxx.xxx.xxx.xxx] blocked using Blocklist 1, mail from IP banned; To request removal from this list please forward this message to delist messaging microsoft com and include your ip address xxx.xxx.xxx.xxx.


(PS '.' and @'s removed as I can't post links yet)

Your message wasn't delivered due to a permission or security issue. It may have been rejected by a moderator, the address may only accept email from certain senders, or another restriction may be preventing delivery.



We have obviously tried emailing the delist@ address as stated (more than once), but all we ever get is an automated response and stating we will be contacted within 24 is there are an problems...and of course we receive nothing.

This has been going on for a whole week now and it is seriously effecting our relationships with clients. Can anyone help? Who do I contact to get this resolved?



SBS 2008 migration to Exchange 2013 issues

$
0
0
I am in the middle of a SBS 2008 to Exchange 2013 migration. I have not setup the legacy namespace yet. I have most of the mailboxes migrated to the 2013 server except the 4 largest. I exported the SSL cert from the SBS and imported it into the 2013 server. I don't think I applied the services/certificates correctly as I get cert errors when people launch their Outlook internally and external ActiveSync users do not function. Can I use the cert from the SBS on the 2013 server?

S/Mime compability when NOT using your own laptop

$
0
0

Hi

I have a question about S/MIME when I´m not using my own laptop, should this work?

For exampel if I use my PC at home I don´t have my corporate certificate and of course I can´t sign/encrypt my email. Is it possible to solve this in anyway?

Another exampel if I have a PC from my work but it´s not part of our domain,  it´s part of a remote user Domain, no trust with corporate domain. We have a CA in remote user Domain is it possible to get Exchange to trust our certificates?

As it is now I receive following error:

Outlook Web App needs your digital ID to save a draft of a message that has a digital signature. If your digital ID is on a smart card, insert the card in the card reader and try to save the message again.


If your digital ID isn't trusted by the Exchange server, you can't use it to sign messages.

Thanks in advance

Mikael

Restircing users to only be able to send to certain addresses via policy

$
0
0

I have a 1000 mailboxes for retail employees, I want to make it to where these mailboxes can only send to a small selections of SMTP addresses (i.e. they will be able to emailstoresupport@contoso.com, but not each other).  I could do this by running a script to set 'Message Delivery Restrictions' on every mailbox but I would rather be able to do it via a policy or a group setting (i.e. members of this group can only send to these mailboxes). 

Mails being refused by Gmail due ti ipv6 in mailheader

$
0
0

Hi

Gmail is rejecting mails because of ipv6 information in the mail header (exchange 2013). I have read some threads saying that I could do a reghack do disable ipv6. But I have also read that Exchange 2013 depends on IPv6 - so disabling IPv6 could cause other problems in mail routing. I have reverse PTR on ip4. I dont have the option to create SPF records.

So what can I do to prevent Exchange 2013 from adding IPV6 info to the mail header?

Regards


LS

Creating new receiveconnctor in Exchange 2013 for scan2email etc.

$
0
0

Hi

When creating a custom receive connector for scan2email etc on exchange 2013, other connectors stops working after a couple of hours? I reboot and all connectors work again for a couple of hours and then stops working?

I have exchange 2013 cu2

Regards


LS

Viewing all 3168 articles
Browse latest View live