Hi- Running 3 node DAG, CAS/MBX on 1 server, MBX only on other two (I know, not best practice). Also have an Edge Transport Server in the DMZ. This is the tail end of my upgrade/migration from Exchange 2010. We've been using the new servers for about two
months.
I have two network printers that do Scan-to-email. They seemed to have been working fine for the past couple of weeks. Now, we are having issues where emails from those printers may or may not get to the domain user recipient. I have a receive connector
set up on my CAS server that accepts anonymous connections and has the printers' IPs listed.
This is a entry in the SMTP Send Log:
2016-04-05T22:22:58.080Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,123,10.0.0.15:30119,10.0.0.15:2525,<,250 2.0.0 Resetting,
2016-04-05T22:22:58.080Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,124,10.0.0.15:30119,10.0.0.15:2525,>,XPROXYFROM SID=08D34182FBCDF8F8 IP=10.0.0.31 PORT=1148 DOMAIN=wince SEQNUM=1 PERMS=1077 AUTHSRC=Anonymous,
2016-04-05T22:22:58.080Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,125,10.0.0.15:30119,10.0.0.15:2525,<,250 XProxyFrom accepted,
2016-04-05T22:22:58.080Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,126,10.0.0.15:30119,10.0.0.15:2525,*,,sending message with RecordId 0 and InternetMessageId <a2c9152b3ca53b89bf12bab10a828fda@wince>
2016-04-05T22:22:58.080Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,127,10.0.0.15:30119,10.0.0.15:2525,>,MAIL FROM:<printer@domain.com> SIZE=0 AUTH=<>,
2016-04-05T22:22:58.080Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,128,10.0.0.15:30119,10.0.0.15:2525,>,RCPT TO:<user@domain.com> NOTIFY=FAILURE,
2016-04-05T22:22:58.080Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8F9,15,10.0.0.15:30465,10.0.0.43:25,<,221 2.0.0 Service closing transmission channel,
2016-04-05T22:22:58.080Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8F9,16,10.0.0.15:30465,10.0.0.43:25,-,,Local
2016-04-05T22:22:58.095Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,129,10.0.0.15:30119,10.0.0.15:2525,<,250 2.1.0 Sender OK,
2016-04-05T22:22:58.095Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,130,10.0.0.15:30119,10.0.0.15:2525,<,250 2.1.5 Recipient OK,
2016-04-05T22:22:58.095Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,131,10.0.0.15:30119,10.0.0.15:2525,>,DATA,
2016-04-05T22:22:58.095Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,132,10.0.0.15:30119,10.0.0.15:2525,<,354 Start mail input; end with <CRLF>.<CRLF>,
2016-04-05T22:23:00.533Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,133,10.0.0.15:30119,10.0.0.15:2525,<,250 2.6.0 <a2c9152b3ca53b89bf12bab10a828fda@wince> Queued mail for delivery,
2016-04-05T22:23:00.533Z,Inbound Proxy Internal Send Connector,08D34182FBCDF8EA,134,10.0.0.15:30119,10.0.0.15:2525,*,,successfully added connection to cache. Current cache size is 2
-----------------------------------
I see some of the messages listed in the Shadow Redundancy queues, some that have been delivered, others that have not. Here's one that never made it to my inbox:
Source IP: xxx.xxx.xxx.xxx
SCL: 0
Date Received: 4/5/2016 10:46:01 AM
Expiration Time: 4/7/2016 10:46:01 AM
Last Error:
Queue ID: ExchServ01\Shadow\13544
Recipients: username@domain.com;2;0;[{LRT=};{LED=};{FQDN=};{IP=}];0;;0
-----------------------------------
I've got my domain and the email address of the printer as exceptions in the Sender ID Config. I've can't find any corresponding entries in the Message Tracking logs or Agent Logs or any other logs (did a search based on file contents and used the subject
of one message that disappeared)
I've checked DNS and mail.domain.com points to the internal IP of my CAS server. The SMTP server setting on the printer points to the same IP.
So where else can I look?
Thanx
You should never, never doubt what nobody is sure about. -Willy Wonka