Problem sending mail between exchange servers in the same domain/org

[nitrous0rangez]

I have recently setup an exchange 2003 organization that have 3 exchange members in it: mail01 (first exchange server/master) , mail02 and mail03.

However, i faced mail delivery problem between users in mail01 to users located in mail02 and mail03.

To diagnose the problem i ran some e-mail delivery test and here is the result.

sending e-mail:

from mail02 to internet mail address(eg. yahoo.com) - OK

from mail02 to mail01 - OK

from mail02 to mail02 - OK

from internet mail address(eg. yahoo.com) to mail01 - OK

from internet mail address(eg. yahoo.com) to mail02 - NOT OK stucked at mail01 queue - mail02 folder

from internet mail address(eg. yahoo.com) to mail03 - NOT OK stucked at mail01 queue - mail03 folder

from mail01 to mail02 - NOT OK stucked at mail01 queue - mail02 folder

from mail01 to mail03 - NOT OK stucked at mail01 queue - mail03 folder

from mail02 to mail03 - OK

from mail03 to mail02 - OK

FYI, all exchange servers except for mail02 is using public IP. Mail02 is using internal IP but i don't think it is a problem as sending mail between mail02 and mail03 have proved to be successful. The only thing that is bugging me is why sending e-mail from yahoo and from user in mail01 failed if the recipient is located in mail02 and mail03 server.

Please give some enlightenments to the problems above..


-nitrous-

 

[felixfong]

Have you check the SMTP log??

BTW, are all Exchange servers in the same subnet?? Also, are you using PIX??

 

[nitrous0rangez]

Felixfong,

FYI, mail01 and mail03 is in the same subnet mask. However, mail02 is in different subnet mask and yes, there is a PIX in between mail01 and mail02 server.

Forgive me for my ignorance but where do i look for smtp logs, and what kind of events that i should pay attention to?

 

[nitrous0rangez]

Ok, i have selected a few portion of smtplog from both mail01 and mail02 to give a light to the problem, could someone decipher it for me and tell me if there is something wrong from the log?

Do take note that 172.16.10.152 = mail02
and 210.79.xxx.xxx = mail01

smtp log at mail01:

2005-04-05 02:32:36 172.16.10.152 OutboundConnectionCommand SMTPSVC1 MAIL01 - 25 MAIL - FROM:<myswissbank@yahoo.com>+AUTH=<> 0 -
2005-04-05 02:32:36 172.16.10.152 OutboundConnectionResponse SMTPSVC1 MAIL01 - 25 - - 250+2.1.0+myswissbank@yahoo.com....Sender+OK 0 -
2005-04-05 02:32:36 172.16.10.152 OutboundConnectionCommand SMTPSVC1 MAIL01 - 25 RCPT - TO:<mail02user@mydomain.com.my> 0 -
2005-04-05 02:32:36 172.16.10.152 OutboundConnectionResponse SMTPSVC1 MAIL01 - 25 - - 250+2.1.5+mail02user@mydomain.com.my+ 0 -
2005-04-05 02:32:36 172.16.10.152 OutboundConnectionCommand SMTPSVC1 MAIL01 - 25 XEXCH50 - 1092+2 0 -
2005-04-05 02:32:36 172.16.10.152 OutboundConnectionResponse SMTPSVC1 MAIL01 - 25 - - 354+Send+binary+data 0 -

2005-04-05 02:49:27 216.109.118.184 web60401.mail.yahoo.com SMTPSVC1 MAIL01 210.79.xxx.xxx 0 MAIL - +FROM:<myswissbank@yahoo.com> 250 -
2005-04-05 02:49:28 216.109.118.184 web60401.mail.yahoo.com SMTPSVC1 MAIL01 210.79.xxx.xxx 0 RCPT - +TO:<mail02user@mydomain.com.my> 250 -
2005-04-05 02:49:28 216.109.118.184 web60401.mail.yahoo.com SMTPSVC1 MAIL01 210.79.xxx.xxx 0 DATA - +<20050405024414.58203.qmail@web60401.mail.yahoo.com> 250 -
2005-04-05 02:49:29 216.109.118.184 web60401.mail.yahoo.com SMTPSVC1 MAIL01 210.79.xxx.xxx 0 QUIT - web60401.mail.yahoo.com 240 -

2005-04-05 02:14:54 172.16.10.152 mydomain.com.my SMTPSVC1 MAIL01 210.79.xxx.xxx 0 MAIL - +from:+<mail01user@mydomain.com.my> 250 -
2005-04-05 02:14:55 172.16.10.152 mydomain.com.my SMTPSVC1 MAIL01 210.79.xxx.xxx 0 RCPT - +to:+<mail02user@mydomain.com.my> 250 -
2005-04-05 02:14:55 172.16.10.152 mydomain.com.my SMTPSVC1 MAIL01 210.79.xxx.xxx 0 QUIT - mydomain.com.my 240 -

smtp log of mail02:

2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 MAIL - +FROM:<test2@yahoo.com> 250 - - -
2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 RCPT - +TO:<mail02user@mydomain.com.my> 250 - - -
2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 xexch50 - +1092+2 354 - - -
2005-04-05 02:39:24 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 QUIT - mydomain.com.my 240 - - -


2005-04-05 01:27:14 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 TIMEOUT - mydomain.com.my 121 - - -
2005-04-05 01:27:14 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 QUIT - mydomain.com.my 240 - - -
2005-04-05 01:42:13 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 EHLO - +mydomain.com.my 250 - - -
2005-04-05 01:42:13 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 x-exps - +GSSAPI 0 - - -
2005-04-05 01:42:13 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 x-link2state - +LAST+CHUNK={0000006a}+MULTI+(5)+({00000051}+DIGEST_QUERY+359efd428ea8db41859c48432c5ca778+b9fc347d0941cb221a517b204f018633++)++ 200 - - -
2005-04-05 01:42:13 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 MAIL - +FROM:<test1@yahoo.com> 250 - - -
2005-04-05 01:42:13 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 RCPT - +TO:<EPA-TC@mydomain.com.my> 250 - - -
2005-04-05 01:42:13 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 xexch50 - +1092+2 354 - - -
2005-04-05 01:52:14 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 TIMEOUT - mydomain.com.my 121 - - -
2005-04-05 01:52:14 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 QUIT - mydomain.com.my 240 - - -
2005-04-05 02:07:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 EHLO - +mydomain.com.my 250 - - -
2005-04-05 02:07:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 x-exps - +GSSAPI 0 - - -
2005-04-05 02:07:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 x-link2state - +LAST+CHUNK={0000006a}+MULTI+(5)+({00000051}+DIGEST_QUERY+359efd428ea8db41859c48432c5ca778+b9fc347d0941cb221a517b204f018633++)++ 200 - - -
2005-04-05 02:07:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 MAIL - +FROM:<test1@yahoo.com> 250 - - -
2005-04-05 02:07:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 RCPT - +TO:<EPA-TC@mydomain.com.my> 250 - - -
2005-04-05 02:07:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 xexch50 - +1092+2 354 - - -
2005-04-05 02:17:37 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 QUIT - mydomain.com.my 240 - - -
2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 EHLO - +mydomain.com.my 250 - - -
2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 x-exps - +GSSAPI 0 - - -
2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 x-link2state - +LAST+CHUNK={0000006a}+MULTI+(5)+({00000051}+DIGEST_QUERY+359efd428ea8db41859c48432c5ca778+b9fc347d0941cb221a517b204f018633++)++ 200 - - -
2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 MAIL - +FROM:<test2@yahoo.com> 250 - - -
2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 RCPT - +TO:<mail02user@mydomain.com.my> 250 - - -
2005-04-05 02:32:36 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 xexch50 - +1092+2 354 - - -
2005-04-05 02:39:24 210.79.xxx.xxx mydomain.com.my SMTPSVC1 MAIL02 172.16.10.152 0 QUIT - mydomain.com.my 240 - - -