Duplicated incoming emails??

[RichardHuang]

Hello,

We have a wired problem in our environment. We are using Exchange 2003/Outlook 2003. Some users got duplicated emails sometimes. The emails may be a few hours apart, but it's exactly the same email. I even saw it one time from one of our vendors. Does anybody have any ideas for this? Thanks.

Ri

 

[snootalope]

I've seen this a couple times, if there's more than one person getting duplicate message (the duplicates being different messages in different mailboxes) and it came from whenever the SMTP service was restarted on the Exchange Server.

Seen antivirus do it before, too.

Best thing to do, try and pattern the duplicate messages via their time stamps. Also, check your SMTP logs and determine if the duplicate messages are coming from outside the office. If not, you know it's on your Exchange server.

Also, I've seen Outlook Rules do this once.

Check your queues, not via system manager, but via the actual directories, typically x:\Program Files\Exchsrvr\Mailroot\vsi 1\

Good Luck!
fyi, i'm currently troubleshooting a duplicate message problem to a single user in our domain, but i'm pretty sure it's the other end that is causing the problem. We're just in the middle of "IT department 1 vs IT department 2

 

[RichardHuang]

Thanks for your reply. I also think the problem is on the other side. We never have this problem between internal users. I also noticed that the major problem seems happens on a specific domain.

 

[snootalope]

Well, if you think it's coming from the other side, check you smtp logs and it should verify that for ya..

 

[RichardHuang]

I just enabled the logging on the SMTP virtual server. Let's see what I can get from there. Thanks.

 

[RichardHuang]

Hi Snootalope,

The SMTP log doesn't show the sender and receiver's name and email address. Do you know how to log the sending and receiving details on the Exchange server? I have the log as below. Thanks.

#Fields: date time cs-username cs(User-Agent)
2007-03-21 18:43:51 OutboundConnectionResponse -
2007-03-21 18:43:51 OutboundConnectionCommand -
2007-03-21 18:43:51 OutboundConnectionResponse -
2007-03-21 18:43:51 OutboundConnectionCommand -
2007-03-21 18:43:51 OutboundConnectionResponse -
2007-03-21 18:43:51 OutboundConnectionCommand -
2007-03-21 18:43:51 OutboundConnectionResponse -
2007-03-21 18:43:51 OutboundConnectionCommand -
2007-03-21 18:43:51 OutboundConnectionResponse -
2007-03-21 18:43:51 OutboundConnectionResponse -
2007-03-21 18:43:51 OutboundConnectionCommand -
2007-03-21 18:43:51 OutboundConnectionResponse -
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2007-03-21 18:44:09
#Fields: date time cs-username cs(User-Agent)
2007-03-21 18:44:09 domain-name -
2007-03-21 18:44:09 domain-name -
2007-03-21 18:44:09 domain-name -
....

 

[snootalope]

No problem..

In Exchange System Manager, drill down to your server, and go under Protocols. Expand SMTP and right click your virtual server.

On the General tab at the bottom, you'll want to put a check in the box that says "Enable Logging" - then choose "Microsoft IIS Log File Format" in the drop down box. You can hit properties of that and put the log files wherever you like.

This will give you the info you need in the logs..

 

[RichardHuang]

Yes, the log looks right now. I am waiting for the event to happen again. Thanks.