Logo GNT
Actualités Tests & Guides Bons Plans
Twitter iPhone pliant OnePlus 11 PS5 Disney+ Orange Livebox Windows 11
Entraide Windows Windows Serveur Exchange SMTP problem between 2 Exchange server

SMTP problem between 2 Exchange server

2 réponses
Avatar
FE
Hi,



I am currently working on a config with 2 organizations. One in 5.5 and the
other one in 2003.



In the 5.5 org, I have contacts for users located in the 2003 org.



So when I send an email to a user in 2003, the path is : My PC ->
internet -> DMZ -> 5.5 Org - contact -> E2003 - BAL



I have a strange behavior. In 5.5 some of the emails (random) are stuck in
the IMC... but the user get the email X times.



I made a sniffer trance and I see this thing.



The E5.5 start a session with E2003 with a "MAIL FROM:whatever@company.com
SIZE=49262 RET=FULL"

The I have "XEXCH50 682 2" and the E2003 replies " 504 need to authenticate
first"... but it seems that e5.5



Then the dialog starts... e5.5 send the data, e2003 accept them ... and
suddenly, the e2003 replies 'Queued mail for delivery'. But this is not the
end of the mail !!



So :

* The mail is sent by E2003 and the user receive it

* Because the mail is not finished to be transmitted, the email is
truncated

* E5.5 keep this email in the queue and retry X time to send it ... each
time the end user receive the email.



That it very strange.



If set loging to the maximum on e5.5 or e2003 side, the only warning I get
is about the XEXCH50 verb...



If someone has an idea I will be more than happy.



Thanks for your advices.



Regards



FE
Signaler un problème avec ce contenu

2 réponses

Supprimer
Cette action est irreversible, confirmez la suppression du commentaire ?
Signaler le commentaire

Veuillez sélectionner un problème

Nudité
Violence
Harcèlement
Fraude
Vente illégale
Discours haineux
Terrorisme
Autre
Avatar
Patrick Genova [MSFT]
Hi FE,
Is there anything in between these Servers? If so I would take a look at
this as a starting point. In seems that in the conversation there are pieces
getting dropped.I would take a Netmon trace and then look at TCP retransmits
and see what if any packets are getting dropped.

Hope this helps,
--
Patrick Genova

Please do not send mail directly to this alias. This alias is for Newsgroup
purposes only.
This posting is provided "AS IS" with no warranties, and confers no rights.

"FE" wrote in message
news:
Hi,



I am currently working on a config with 2 organizations. One in 5.5 and
the

other one in 2003.



In the 5.5 org, I have contacts for users located in the 2003 org.



So when I send an email to a user in 2003, the path is : My PC ->
internet -> DMZ -> 5.5 Org - contact -> E2003 - BAL



I have a strange behavior. In 5.5 some of the emails (random) are stuck in
the IMC... but the user get the email X times.



I made a sniffer trance and I see this thing.



The E5.5 start a session with E2003 with a "MAIL FROM:
SIZEI262 RET=FULL"

The I have "XEXCH50 682 2" and the E2003 replies " 504 need to
authenticate

first"... but it seems that e5.5



Then the dialog starts... e5.5 send the data, e2003 accept them ... and
suddenly, the e2003 replies 'Queued mail for delivery'. But this is not
the

end of the mail !!



So :

* The mail is sent by E2003 and the user receive it

* Because the mail is not finished to be transmitted, the email is
truncated

* E5.5 keep this email in the queue and retry X time to send it ...
each

time the end user receive the email.



That it very strange.



If set loging to the maximum on e5.5 or e2003 side, the only warning I get
is about the XEXCH50 verb...



If someone has an idea I will be more than happy.



Thanks for your advices.



Regards



FE




Avatar
FE
Patrick,

Thanks for your reply.

In fact I can see this things thanks to the netmon trace.

The 2 servers are on the same switch... one is 100/full and the other is
1000/full... the 2 machines are from a well know company.. and I don't have
any 'physical' problems (CRC, ...).

Looking at the trace, the first thing I can see is :

1)

SMTP: Command =MAIL FROM: SIZEI262 RET=FULL

... this is the first time that I can see SIZE and RET in the command line
... I checked all the frames and the amont of data sent by e5.5 before e2003
generate the problem is far below the 4495 so this is not the reason

2)
E5.5 send an 'XEXCH50 688 2' command .. and e2003 replies "504 Need to
authenticate first"
This generates an event (not documented on MS web site) when I but the SMTP
log at max. This events is generated on exchange 5.5 and 2003

... but everyhing continues as normal.

3) Here is a copy of the last frames ... I added comments with [FE] at
the beginning of the line.
You will se what I described in my question.

I really hope you will have an idea.

Thanks again

FE

The netmon trace :

=>before this frame we had 'mail from' 'rcpt to' ' data' a lot of frames
with 'SMTP' data inside ...

=> The last frame sent by 5.5 to the e2003 server
****************************************************************************
**********************************************
Frame Time Src MAC Addr Dst MAC Addr Protocol Description Src Other
Addr Dst Other Addr Type Other Addr
71 19.471498 0002A587BB2B 000BCDE65196 SMTP Data - continued from frame
70, 1460 bytes 10.100.2.240 10.100.3.247

+ FRAME: Base frame properties
+ ETHERNET: EType = Internet IP (IPv4)
+ IP: Protocol = TCP - Transmission Control; Packet ID = 47795; Total IP
Length = 1500; Options = No Options
+ TCP: Control Bits: .A...., len: 1460, seq:1372284519-1372285979,
ack:1492772887, win:64916, src: 4617 dst: 25 (SMTP)
SMTP: Data - continued from frame 70, 1460 bytes
SMTP: Data =d="99546" src= SMTP: Data ="http://home.edt02.net/noprotect/200/6975/14654//px.gif"
width=1 heigh SMTP: Data =t=1></td><td width"7>
SMTP: Data =<table border=0 cellpadding=0 cellspac SMTP: Data =ing=0><tr><td width=9 rowspan>&nbsp;</td><td
colspan=2 height= SMTP: Data 0><img id="99547"
src="http://home.edt02.net/noprotect/200/7021/14 SMTP: Data ‡6//urgent.gif" width 9 height alt="Urgent
!" vspace="11" SMTP: Data =><br><img id="99581"
src="http://home.edt02.net/noprotect/200/7021/1 SMTP: Data H76//italie.gif" width 9 height alt="Italie"
vspace="2"></ SMTP: Data =td></tr>
SMTP: Data =<tr><td width5><a id="118286"
href="http://info.voya SMTP: Data
=ges-sncf.com/emc/R/emcrV4c.php?c 0-14876-6630-118286-139992-0--129658 SMTP: Data b-0-0-0-0" target=%5Fblank class±4b>Florence
A/R</a></td><td width SMTP: Data =•><span class=r16b>209 &euro;</span><span
class=r11><b> TTC</b></ SMTP: Data =span><sup class=r11>(2)</sup></td></tr>
SMTP: Data =<tr><td><a id="118287" hre SMTP: Data
=f="http://info.voyages-sncf.com/emc/R/emcrV4c.php?c 0-14876-6630-11 SMTP: Data ‚87-139993-0--12965862-0-0-0-0" target=%5Fblank
class±4b>Rome A/R< SMTP: Data =/a></td><td><span class=r16b>180 &euro;</span><span
class=r11><b> TTC SMTP: Data =</b></span><sup class=r11>(2)</sup></td></tr>
SMTP: Data =<tr><td><a id="11828 SMTP: Data =8"
href="http://info.voyages-sncf.com/emc/R/emcrV4c.php?c 0-14876-6 SMTP: Data c0-118288-139994-0--12965862-0-0-0-0" target=%5Fblank
class±4b>Ven SMTP: Data =ise A/R</a></td><td><span class=r16b>169
&euro;</span><span class
****************************************************************************
***************************************************
Frame Time Src MAC Addr Dst MAC Addr Protocol Description Src Other
Addr Dst Other Addr Type Other Addr
72 19.471498 000BCDE65196 0002A587BB2B TCP Control Bits: .A...., len:
0, seq:1492772887-1 10.100.3.247 10.100.2.240

+ FRAME: Base frame properties
+ ETHERNET: EType = Internet IP (IPv4)
+ IP: Protocol = TCP - Transmission Control; Packet ID = 17257; Total IP
Length = 40; Options = No Options
+ TCP: Control Bits: .A...., len: 0, seq:1492772887-1492772887,
ack:1372285979, win: 0, src: 25 (SMTP) dst: 4617


=> E2003 consider that this is the end of the mail and so 'delivers' the
mail
****************************************************************************
****************************************************
Frame Time Src MAC Addr Dst MAC Addr Protocol Description Src Other
Addr Dst Other Addr Type Other Addr
73 19.533998 000BCDE65196 0002A587BB2B SMTP Rsp: Requested mail action
okay, completed, 87 by 10.100.3.247 10.100.2.240

+ FRAME: Base frame properties
+ ETHERNET: EType = Internet IP (IPv4)
+ IP: Protocol = TCP - Transmission Control; Packet ID = 17258; Total IP
Length = 127; Options = No Options
+ TCP: Control Bits: .AP..., len: 87, seq:1492772887-1492772974,
ack:1372285979, win: 0, src: 25 (SMTP) dst: 4617
SMTP: Rsp: Requested mail action okay, completed, 87 bytes
SMTP: Response %0 2.6.0
Queued mail for

SMTP: Data Þlivery

****************************************************************************
****************************************************
=> E5.5, for him, has not finished yet ... so send the end of the mail
Frame Time Src MAC Addr Dst MAC Addr Protocol Description Src Other
Addr Dst Other Addr Type Other Addr
75 19.533998 000BCDE65196 0002A587BB2B SMTP Data - continued from frame
74, 12 bytes 10.100.3.247 10.100.2.240

+ FRAME: Base frame properties
+ ETHERNET: EType = Internet IP (IPv4)
+ IP: Protocol = TCP - Transmission Control; Packet ID = 17260; Total IP
Length = 52; Options = No Options
+ TCP: Control Bits: .AP..., len: 12, seq:1492774434-1492774446,
ack:1372285979, win: 0, src: 25 (SMTP) dst: 4617
SMTP: Data - continued from frame 74, 12 bytes
SMTP: Data í command

=> For e2003 the session is finished... and so it does not understand the
'command'
****************************************************************************
****************************************************
Frame Time Src MAC Addr Dst MAC Addr Protocol Description Src Other
Addr Dst Other Addr Type Other Addr
74 19.533998 000BCDE65196 0002A587BB2B SMTP Rsp: Syntax error, command
not recognized, 1460 b 10.100.3.247 10.100.2.240

+ FRAME: Base frame properties
+ ETHERNET: EType = Internet IP (IPv4)
+ IP: Protocol = TCP - Transmission Control; Packet ID = 17259; Total IP
Length = 1500; Options = No Options
+ TCP: Control Bits: .AP..., len: 1460, seq:1492772974-1492774434,
ack:1372285979, win: 0, src: 25 (SMTP) dst: 4617
SMTP: Rsp: Syntax error, command not recognized, 1460 bytes
SMTP: Response P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command

****************************************************************************
***************************************************
Frame Time Src MAC Addr Dst MAC Addr Protocol Description Src Other
Addr Dst Other Addr Type Other Addr
76 19.533998 000BCDE65196 0002A587BB2B TCP Control Bits: .A...., len:
0, seq:1492774446-1 10.100.3.247 10.100.2.240

+ FRAME: Base frame properties
+ ETHERNET: EType = Internet IP (IPv4)
+ IP: Protocol = TCP - Transmission Control; Packet ID = 17261; Total IP
Length = 40; Options = No Options
+ TCP: Control Bits: .A...., len: 0, seq:1492774446-1492774446,
ack:1372285979, win: 3760, src: 25 (SMTP) dst: 4617

=> E2003 reset the connection...
****************************************************************************
*********************************************
Frame Time Src MAC Addr Dst MAC Addr Protocol Description Src Other
Addr Dst Other Addr Type Other Addr
77 19.533998 000BCDE65196 0002A587BB2B SMTP Data - continued from frame
75, 146 bytes 10.100.3.247 10.100.2.240

+ FRAME: Base frame properties
+ ETHERNET: EType = Internet IP (IPv4)
+ IP: Protocol = TCP - Transmission Control; Packet ID = 17262; Total IP
Length = 186; Options = No Options
+ TCP: Control Bits: .AP..F, len: 146, seq:1492774446-1492774593,
ack:1372285979, win: 3760, src: 25 (SMTP) dst: 4617
SMTP: Data - continued from frame 75, 146 bytes
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data P0 5.3.3 Unrecognized command
SMTP: Data B1 Too many errors on this connection---closing




"Patrick Genova [MSFT]" wrote in message
news:
Hi FE,
Is there anything in between these Servers? If so I would take a look at
this as a starting point. In seems that in the conversation there are
pieces

getting dropped.I would take a Netmon trace and then look at TCP
retransmits

and see what if any packets are getting dropped.

Hope this helps,
--
Patrick Genova

Please do not send mail directly to this alias. This alias is for
Newsgroup

purposes only.
This posting is provided "AS IS" with no warranties, and confers no
rights.


"FE" wrote in message
news:
Hi,



I am currently working on a config with 2 organizations. One in 5.5 and
the

other one in 2003.



In the 5.5 org, I have contacts for users located in the 2003 org.



So when I send an email to a user in 2003, the path is : My PC ->
internet -> DMZ -> 5.5 Org - contact -> E2003 - BAL



I have a strange behavior. In 5.5 some of the emails (random) are stuck
in


the IMC... but the user get the email X times.



I made a sniffer trance and I see this thing.



The E5.5 start a session with E2003 with a "MAIL
FROM:


SIZEI262 RET=FULL"

The I have "XEXCH50 682 2" and the E2003 replies " 504 need to
authenticate

first"... but it seems that e5.5



Then the dialog starts... e5.5 send the data, e2003 accept them ... and
suddenly, the e2003 replies 'Queued mail for delivery'. But this is not
the

end of the mail !!



So :

* The mail is sent by E2003 and the user receive it

* Because the mail is not finished to be transmitted, the email is
truncated

* E5.5 keep this email in the queue and retry X time to send it ...
each

time the end user receive the email.



That it very strange.



If set loging to the maximum on e5.5 or e2003 side, the only warning I
get


is about the XEXCH50 verb...



If someone has an idea I will be more than happy.



Thanks for your advices.



Regards



FE