none
421 4.3.2 Service not available, closing transmission channel

    Question

  • after recent windows updates this message appeared, which is intermittent
    In brief the user "DOMAIN\usero" has multiple e-mails addresses, but a single exchange mailbox and usero@domain2.com is not his default reply address.
    when sending e-mail using his non-default address he will frequently get an error message in outlook - for example on that day the user has been getting that message for over 40min(send and receive task running every 1 min):
    2012-01-17T11:12:33.546Z,,08CE9DB0A62102C9,0,217.33.49.156:25,10.0.0.48:49593,+,,
    2012-01-17T11:12:33.546Z,,08CE9DB0A62102C9,1,217.33.49.156:25,10.0.0.48:49593,>,"421 4.3.2 Service not available, closing transmission channel",
    2012-01-17T11:12:33.546Z,,08CE9DB0A62102C9,2,217.33.49.156:25,10.0.0.48:49593,-,,Local
    the message will stay in their outbox, but is eventually sent with no intervention as per the log below
    Any idea how can I figure out what is causing this?
    setup details:
    Microsoft Exchange Server  2007 SP1, CCR and 2x CAS/HUB
    I wish I can update exchange, but will break 3rd party archiving apps :(
    2012-01-17T11:13:36.752Z,HT1\Default HT1,08CE9DB0A62102CD,0,10.30.0.16:25,10.0.0.48:49594,+,,
    2012-01-17T11:13:36.752Z,HT1\Default HT1,08CE9DB0A62102CD,1,10.30.0.16:25,10.0.0.48:49594,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
    2012-01-17T11:13:36.752Z,HT1\Default HT1,08CE9DB0A62102CD,2,10.30.0.16:25,10.0.0.48:49594,>,"220 HT1.domain.com Microsoft ESMTP MAIL Service ready at Tue, 17 Jan 2012 11:13:36 +0000",
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,3,10.30.0.16:25,10.0.0.48:49594,<,EHLO userolap,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,4,10.30.0.16:25,10.0.0.48:49594,>,250-HT1.domain.com Hello [10.0.0.48],
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,5,10.30.0.16:25,10.0.0.48:49594,>,250-SIZE,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,6,10.30.0.16:25,10.0.0.48:49594,>,250-PIPELINING,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,7,10.30.0.16:25,10.0.0.48:49594,>,250-DSN,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,8,10.30.0.16:25,10.0.0.48:49594,>,250-ENHANCEDSTATUSCODES,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,9,10.30.0.16:25,10.0.0.48:49594,>,250-STARTTLS,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,10,10.30.0.16:25,10.0.0.48:49594,>,250-X-ANONYMOUSTLS,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,11,10.30.0.16:25,10.0.0.48:49594,>,250-AUTH NTLM,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,12,10.30.0.16:25,10.0.0.48:49594,>,250-X-EXPS GSSAPI NTLM,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,13,10.30.0.16:25,10.0.0.48:49594,>,250-8BITMIME,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,14,10.30.0.16:25,10.0.0.48:49594,>,250-BINARYMIME,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,15,10.30.0.16:25,10.0.0.48:49594,>,250-CHUNKING,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,16,10.30.0.16:25,10.0.0.48:49594,>,250-XEXCH50,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,17,10.30.0.16:25,10.0.0.48:49594,>,250 XRDST,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,18,10.30.0.16:25,10.0.0.48:49594,<,STARTTLS,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,19,10.30.0.16:25,10.0.0.48:49594,>,220 2.0.0 SMTP server ready,
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,20,10.30.0.16:25,10.0.0.48:49594,*,,Sending certificate
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,21,10.30.0.16:25,10.0.0.48:49594,*,"CN=HT1.domain.com, OU=Domain Control Validated, O=HT1.domain.com",Certificate subject
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,22,10.30.0.16:25,10.0.0.48:49594,*,"SERIALNUMBER=0796287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O=""GoDaddy.com, Inc."", L=Scottsdale, S=Arizona, C=US",Certificate issuer name
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,23,10.30.0.16:25,10.0.0.48:49594,*,27F2535683C50,Certificate serial number
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,24,10.30.0.16:25,10.0.0.48:49594,*,5DE0EE0E3836085D3A1D773026240585FC12CD4,Certificate thumbprint
    2012-01-17T11:13:36.799Z,HT1\Default HT1,08CE9DB0A62102CD,25,10.30.0.16:25,10.0.0.48:49594,*,HT1.domain.com;www.HT1.domain.com;autodiscover.HT1.domain.com,Certificate alternate names
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,26,10.30.0.16:25,10.0.0.48:49594,<,EHLO userolap,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,27,10.30.0.16:25,10.0.0.48:49594,>,250-HT1.domain.com Hello [10.0.0.48],
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,28,10.30.0.16:25,10.0.0.48:49594,>,250-SIZE,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,29,10.30.0.16:25,10.0.0.48:49594,>,250-PIPELINING,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,30,10.30.0.16:25,10.0.0.48:49594,>,250-DSN,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,31,10.30.0.16:25,10.0.0.48:49594,>,250-ENHANCEDSTATUSCODES,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,32,10.30.0.16:25,10.0.0.48:49594,>,250-AUTH NTLM LOGIN,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,33,10.30.0.16:25,10.0.0.48:49594,>,250-X-EXPS GSSAPI NTLM,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,34,10.30.0.16:25,10.0.0.48:49594,>,250-8BITMIME,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,35,10.30.0.16:25,10.0.0.48:49594,>,250-BINARYMIME,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,36,10.30.0.16:25,10.0.0.48:49594,>,250-CHUNKING,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,37,10.30.0.16:25,10.0.0.48:49594,>,250-XEXCH50,
    2012-01-17T11:13:36.815Z,HT1\Default HT1,08CE9DB0A62102CD,38,10.30.0.16:25,10.0.0.48:49594,>,250 XRDST,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,39,10.30.0.16:25,10.0.0.48:49594,<,AUTH NTLM,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,40,10.30.0.16:25,10.0.0.48:49594,>,334 <authentication response>,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,41,10.30.0.16:25,10.0.0.48:49594,>,334 <authentication response>,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,42,10.30.0.16:25,10.0.0.48:49594,*,SMTPSubmit SMTPAcceptAnyRecipient BypassAntiSpam AcceptRoutingHeaders,Set Session Permissions
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,43,10.30.0.16:25,10.0.0.48:49594,*,DOMAIN\usero,authenticated
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,44,10.30.0.16:25,10.0.0.48:49594,>,235 2.7.0 Authentication successful,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,45,10.30.0.16:25,10.0.0.48:49594,<,MAIL FROM: <usero@domain2.com>,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,46,10.30.0.16:25,10.0.0.48:49594,*,08CE9DB0A62102CD;2012-01-17T11:13:36.752Z;1,receiving message
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,47,10.30.0.16:25,10.0.0.48:49594,>,250 2.1.0 Sender OK,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,48,10.30.0.16:25,10.0.0.48:49594,<,RCPT TO: <rocele8@blueyonder.co.uk>,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,49,10.30.0.16:25,10.0.0.48:49594,>,250 2.1.5 Recipient OK,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,50,10.30.0.16:25,10.0.0.48:49594,<,DATA,
    2012-01-17T11:13:36.831Z,HT1\Default HT1,08CE9DB0A62102CD,51,10.30.0.16:25,10.0.0.48:49594,>,354 Start mail input; end with <CRLF>.<CRLF>,
    2012-01-17T11:13:37.096Z,HT1\Default HT1,08CE9DB0A62102CD,52,10.30.0.16:25,10.0.0.48:49594,>,250 2.6.0 <000001ccd509$0ee655e0$2cb301a0$@co.uk> Queued mail for delivery,
    2012-01-17T11:13:37.096Z,HT1\Default HT1,08CE9DB0A62102CD,53,10.30.0.16:25,10.0.0.48:49594,<,MAIL FROM: <usero@domain2.com>,
    2012-01-17T11:13:37.096Z,HT1\Default HT1,08CE9DB0A62102CD,54,10.30.0.16:25,10.0.0.48:49594,*,08CE9DB0A62102CD;2012-01-17T11:13:36.752Z;2,receiving message
    2012-01-17T11:13:37.096Z,HT1\Default HT1,08CE9DB0A62102CD,55,10.30.0.16:25,10.0.0.48:49594,>,250 2.1.0 Sender OK,
    2012-01-17T11:13:37.096Z,HT1\Default HT1,08CE9DB0A62102CD,56,10.30.0.16:25,10.0.0.48:49594,<,RCPT TO: <customerservice@domain2.com>,
    2012-01-17T11:13:37.096Z,HT1\Default HT1,08CE9DB0A62102CD,57,10.30.0.16:25,10.0.0.48:49594,>,250 2.1.5 Recipient OK,
    2012-01-17T11:13:37.096Z,HT1\Default HT1,08CE9DB0A62102CD,58,10.30.0.16:25,10.0.0.48:49594,<,DATA,
    2012-01-17T11:13:37.096Z,HT1\Default HT1,08CE9DB0A62102CD,59,10.30.0.16:25,10.0.0.48:49594,>,354 Start mail input; end with <CRLF>.<CRLF>,
    2012-01-17T11:13:37.206Z,HT1\Default HT1,08CE9DB0A62102CD,60,10.30.0.16:25,10.0.0.48:49594,>,250 2.6.0 <000601ccd509$0f074b60$2d15e220$@co.uk> Queued mail for delivery,
    2012-01-17T11:13:39.721Z,HT1\Default HT1,08CE9DB0A62102CD,61,10.30.0.16:25,10.0.0.48:49594,<,QUIT,
    2012-01-17T11:13:39.721Z,HT1\Default HT1,08CE9DB0A62102CD,62,10.30.0.16:25,10.0.0.48:49594,>,221 2.0.0 Service closing transmission channel,
    2012-01-17T11:13:39.721Z,HT1\Default HT1,08CE9DB0A62102CD,63,10.30.0.16:25,10.0.0.48:49594,-,,Local




    • Edited by bitadm Wednesday, January 18, 2012 10:16 AM I was distracted yesterday - inaccurate description posted
    Tuesday, January 17, 2012 12:15 PM

All replies

  • The log just shows the normal connection for an email within Exchange.  The Service closing transmission channel is how the Exchange server terminates its connection to the client.  As to why Outlook is keeping messages in the Outbox, this is not related to what you see in the logs.

    Have you tried to create a new Outlook profile to see if this issue repeats itself?


    JAUCG
    Wednesday, January 18, 2012 1:31 AM
  • apologies I was distracted yesterday - the problem is "421 4.3.2 Service not available, closing transmission channel" & I've edited the original post. This problem is somewhat intermittent.

    For example the user has been receiving "421 4.3.2 Service not available, closing transmission channel" message for over 40min before the message was sent successfully(now gone from outbox too).

    In the same time in the the same log file on the hub server with less than a second difference I can see a successful inbound transmission from our edge mail gateway for that user therefore not sure what service not available relates to...

     

    Wednesday, January 18, 2012 10:26 AM
  • Forgot to reply to your message.  Do you have more of the log around that error message?  Also, do all emails eventually flow out of the Outbox and get sent?  Do you have any messages that either get completely stuck in th eOutbox or generate other errors?
    JAUCG
    Friday, January 20, 2012 10:35 PM
  • Check your event logs on Hun, look for events, check for any back pressure events,

    Run ExchBPA and see what is comes back with


    Sukh
    Friday, January 20, 2012 11:07 PM