none
Exchange 2007 -2013 Mail Flow Problem

    Question

  • hello guys,

    i have problem with exchange 2013 - 2007 mailflow.

    recently i added exchange 2013 to our exchange organization everything seems to work fine , well at least for 2 days now exchange 2013 users cant send email to exchange 2007 users and exchnage 07 cant send to exchange 13.

    all messages are stuck in queue of both servers.

    • i think it's a kerberos problem i activated kerberos logging and there are a lot of kerberos errors. (event id 3 )
    • exchange and legacy exchange is enabled on default receive connectors
    • exchange 2013 have SmtpReceive warnong with event id 1035 (Inbound Authentication failed with error Target Unknown for Receive connector DefaultFrontend ex13.ex.local. .......authentication mechanism is ExchangeAuth.
    • exchange 2013 have SmtpSend Error with Event ID 2017on exchange 2013 i get Core Event ID 3005 (Rpc Htto) Making Client Access 2010 Server .... (i dont have any 2010 server - OA is Disabled on 2007 Servers)
    • i checked SPN for both server names are correct but i have multiple duplicate spn's for 2007 server (ex07 - ex07.ex.local)
    • Smtp log for send and receive attached to this post

    any help would be appreciated

    thanks!

    Sunday, January 24, 2016 1:51 AM

Answers

  • hi , after alot of testing and reading i managed to fix the problem .

    i dont know why but i have a lot of Duplicate SPN's and one of them was domain adminisrtator account with Exchange 2007 HUB Transport server after removing Domain Administrator Account from HUB SPN's and restarting both hubs problem fixed.

    take a look at this article:

    https://support.microsoft.com/en-us/kb/979174

    i use this to remove account from HUB :

    cmd

    c:\setspn -d Smtpsvc/hub07 domain\administrator

    c:\setspn -d Smtpsvc/hub07.domain.com domain\administrator

    valla!

    Monday, January 25, 2016 8:59 PM

All replies

  • Ex 13 SMTP Send Log

    #Software: Microsoft Exchange Server
    #Version: 15.0.0.0
    #Log-type: SMTP Send Protocol Log
    #Date: 2016-01-24T01:12:33.347Z
    #Fields: date-time,connector-id,session-id,sequence-number,local-endpoint,remote-endpoint,event,data,context
    2016-01-24T01:12:10.119Z,Intra-Organization SMTP Send Connector,08D32455967445E9,0,,10.140.1.53:25,*,,attempting to connect
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,1,10.140.1.81:10739,10.140.1.53:25,+,,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,2,10.140.1.81:10739,10.140.1.53:25,<,"220 ex07.ex.local Microsoft ESMTP MAIL Service ready at Sun, 24 Jan 2016 04:42:09 +0330",
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,3,10.140.1.81:10739,10.140.1.53:25,>,EHLO ex13.ex.local,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,4,10.140.1.81:10739,10.140.1.53:25,<,250-ex07.ex.local Hello [10.140.1.81],
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,5,10.140.1.81:10739,10.140.1.53:25,<,250-SIZE,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,6,10.140.1.81:10739,10.140.1.53:25,<,250-PIPELINING,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,7,10.140.1.81:10739,10.140.1.53:25,<,250-DSN,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,8,10.140.1.81:10739,10.140.1.53:25,<,250-ENHANCEDSTATUSCODES,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,9,10.140.1.81:10739,10.140.1.53:25,<,250-STARTTLS,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,10,10.140.1.81:10739,10.140.1.53:25,<,250-X-ANONYMOUSTLS,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,11,10.140.1.81:10739,10.140.1.53:25,<,250-AUTH NTLM,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,12,10.140.1.81:10739,10.140.1.53:25,<,250-X-EXPS GSSAPI NTLM,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,13,10.140.1.81:10739,10.140.1.53:25,<,250-8BITMIME,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,14,10.140.1.81:10739,10.140.1.53:25,<,250-BINARYMIME,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,15,10.140.1.81:10739,10.140.1.53:25,<,250-CHUNKING,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,16,10.140.1.81:10739,10.140.1.53:25,<,250-XEXCH50,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,17,10.140.1.81:10739,10.140.1.53:25,<,250 XRDST,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,18,10.140.1.81:10739,10.140.1.53:25,>,X-ANONYMOUSTLS,
    2016-01-24T01:12:10.135Z,Intra-Organization SMTP Send Connector,08D32455967445E9,19,10.140.1.81:10739,10.140.1.53:25,<,220 2.0.0 SMTP server ready,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,20,10.140.1.81:10739,10.140.1.53:25,*,,Remote certificate
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,21,10.140.1.81:10739,10.140.1.53:25,*,CN=nima,Certificate subject
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,22,10.140.1.81:10739,10.140.1.53:25,*,CN=nima,Certificate issuer name
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,23,10.140.1.81:10739,10.140.1.53:25,*,1F96C8F6C1FC9BBA4608EFD308FDA534,Certificate serial number
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,24,10.140.1.81:10739,10.140.1.53:25,*,F390DF76718CEB33400849EFDABA65FE73554CFC,Certificate thumbprint
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,25,10.140.1.81:10739,10.140.1.53:25,*,nima;ex07.ex.local,Certificate alternate names
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,26,10.140.1.81:10739,10.140.1.53:25,*,,"TLS protocol SP_PROT_TLS1_0_CLIENT negotiation succeeded using bulk encryption algorithm CALG_RC4 with strength 128 bits, MAC hash algorithm CALG_MD5 with strength 128 bits and key exchange algorithm CALG_RSA_KEYX with strength 2048 bits"
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,27,10.140.1.81:10739,10.140.1.53:25,*,,Received certificate
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,28,10.140.1.81:10739,10.140.1.53:25,*,F390DF76718CEB33400849EFDABA65FE73554CFC,Certificate thumbprint
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,29,10.140.1.81:10739,10.140.1.53:25,>,EHLO ex13.ex.local,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,30,10.140.1.81:10739,10.140.1.53:25,<,250-ex07.ex.local Hello [10.140.1.81],
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,31,10.140.1.81:10739,10.140.1.53:25,<,250-SIZE,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,32,10.140.1.81:10739,10.140.1.53:25,<,250-PIPELINING,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,33,10.140.1.81:10739,10.140.1.53:25,<,250-DSN,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,34,10.140.1.81:10739,10.140.1.53:25,<,250-ENHANCEDSTATUSCODES,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,35,10.140.1.81:10739,10.140.1.53:25,<,250-AUTH NTLM,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,36,10.140.1.81:10739,10.140.1.53:25,<,250-X-EXPS EXCHANGEAUTH GSSAPI NTLM,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,37,10.140.1.81:10739,10.140.1.53:25,<,250-X-EXCHANGEAUTH SHA256,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,38,10.140.1.81:10739,10.140.1.53:25,<,250-8BITMIME,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,39,10.140.1.81:10739,10.140.1.53:25,<,250-BINARYMIME,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,40,10.140.1.81:10739,10.140.1.53:25,<,250-CHUNKING,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,41,10.140.1.81:10739,10.140.1.53:25,<,250-XEXCH50,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,42,10.140.1.81:10739,10.140.1.53:25,<,250 XRDST,
    2016-01-24T01:12:10.244Z,Intra-Organization SMTP Send Connector,08D32455967445E9,43,10.140.1.81:10739,10.140.1.53:25,*,,Outbound Authentication failed with TargetUnknown
    2016-01-24T01:12:10.260Z,Intra-Organization SMTP Send Connector,08D32455967445E9,44,10.140.1.81:10739,10.140.1.53:25,>,QUIT,
    2016-01-24T01:12:10.276Z,Intra-Organization SMTP Send Connector,08D32455967445E9,45,10.140.1.81:10739,10.140.1.53:25,<,221 2.0.0 Service closing transmission channel,
    2016-01-24T01:12:10.276Z,Intra-Organization SMTP Send Connector,08D32455967445E9,46,10.140.1.81:10739,10.140.1.53:25,-,,Local
    Sunday, January 24, 2016 1:53 AM
  • EX 07 SMTP Send

    #Software: Microsoft Exchange Server
    #Version: 8.0.0.0
    #Log-type: SMTP Send Protocol Log
    #Date: 2016-01-24T01:10:07.093Z

    2016-01-24T01:24:06.500Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,0,,10.140.1.81:25,*,,attempting to connect
    2016-01-24T01:24:06.500Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,1,10.140.1.53:1647,10.140.1.81:25,+,,
    2016-01-24T01:24:09.484Z,Intra-Organization SMTP Send Connector,08D324590CC62B83,41,10.140.1.53:1645,10.140.1.81:25,<,454 4.7.0 Temporary authentication failure,
    2016-01-24T01:24:09.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B83,42,10.140.1.53:1645,10.140.1.81:25,>,QUIT,
    2016-01-24T01:24:09.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B83,43,10.140.1.53:1645,10.140.1.81:25,-,,Remote
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,2,10.140.1.53:1647,10.140.1.81:25,<,"220 ex13.ex.local Microsoft ESMTP MAIL Service ready at Sun, 24 Jan 2016 04:54:05 +0330",
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,3,10.140.1.53:1647,10.140.1.81:25,>,EHLO ex07.ex.local,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,4,10.140.1.53:1647,10.140.1.81:25,<,250-ex13.ex.local Hello [10.140.1.53],
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,5,10.140.1.53:1647,10.140.1.81:25,<,250-SIZE 37748736,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,6,10.140.1.53:1647,10.140.1.81:25,<,250-PIPELINING,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,7,10.140.1.53:1647,10.140.1.81:25,<,250-DSN,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,8,10.140.1.53:1647,10.140.1.81:25,<,250-ENHANCEDSTATUSCODES,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,9,10.140.1.53:1647,10.140.1.81:25,<,250-STARTTLS,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,10,10.140.1.53:1647,10.140.1.81:25,<,250-X-ANONYMOUSTLS,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,11,10.140.1.53:1647,10.140.1.81:25,<,250-AUTH NTLM,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,12,10.140.1.53:1647,10.140.1.81:25,<,250-X-EXPS GSSAPI NTLM,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,13,10.140.1.53:1647,10.140.1.81:25,<,250-8BITMIME,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,14,10.140.1.53:1647,10.140.1.81:25,<,250-BINARYMIME,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,15,10.140.1.53:1647,10.140.1.81:25,<,250-CHUNKING,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,16,10.140.1.53:1647,10.140.1.81:25,<,250 XRDST,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,17,10.140.1.53:1647,10.140.1.81:25,>,X-ANONYMOUSTLS,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,18,10.140.1.53:1647,10.140.1.81:25,<,220 2.0.0 SMTP server ready,
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,19,10.140.1.53:1647,10.140.1.81:25,*,,Received certificate
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,20,10.140.1.53:1647,10.140.1.81:25,*,35DD8042A00A404B14768E8A679656AD37E0EBF2,Certificate thumbprint
    2016-01-24T01:24:11.515Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,21,10.140.1.53:1647,10.140.1.81:25,>,EHLO ex07.ex.local,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,22,10.140.1.53:1647,10.140.1.81:25,<,250-ex13.ex.local Hello [10.140.1.53],
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,23,10.140.1.53:1647,10.140.1.81:25,<,250-SIZE 37748736,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,24,10.140.1.53:1647,10.140.1.81:25,<,250-PIPELINING,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,25,10.140.1.53:1647,10.140.1.81:25,<,250-DSN,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,26,10.140.1.53:1647,10.140.1.81:25,<,250-ENHANCEDSTATUSCODES,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,27,10.140.1.53:1647,10.140.1.81:25,<,250-AUTH NTLM LOGIN,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,28,10.140.1.53:1647,10.140.1.81:25,<,250-X-EXPS EXCHANGEAUTH GSSAPI NTLM,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,29,10.140.1.53:1647,10.140.1.81:25,<,250-X-EXCHANGEAUTH SHA256,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,30,10.140.1.53:1647,10.140.1.81:25,<,250-8BITMIME,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,31,10.140.1.53:1647,10.140.1.81:25,<,250-BINARYMIME,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,32,10.140.1.53:1647,10.140.1.81:25,<,250-CHUNKING,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,33,10.140.1.53:1647,10.140.1.81:25,<,250-XRDST,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,34,10.140.1.53:1647,10.140.1.81:25,<,250-XPROXY,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,35,10.140.1.53:1647,10.140.1.81:25,<,250-XPROXYFROM,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,36,10.140.1.53:1647,10.140.1.81:25,<,250-XPROXYTO XRSETPROXYTO,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,37,10.140.1.53:1647,10.140.1.81:25,<,250-XSYSPROBE,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,38,10.140.1.53:1647,10.140.1.81:25,<,250 XORIGFROM,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,39,10.140.1.53:1647,10.140.1.81:25,>,X-EXPS EXCHANGEAUTH SHA256 ,
    2016-01-24T01:24:11.578Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,40,10.140.1.53:1647,10.140.1.81:25,>,<Binary Data>,
    2016-01-24T01:24:16.593Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,41,10.140.1.53:1647,10.140.1.81:25,<,454 4.7.0 Temporary authentication failure,
    2016-01-24T01:24:16.671Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,42,10.140.1.53:1647,10.140.1.81:25,>,QUIT,
    2016-01-24T01:24:16.671Z,Intra-Organization SMTP Send Connector,08D324590CC62B84,43,10.140.1.53:1647,10.140.1.81:25,-,,Remote

    Sunday, January 24, 2016 1:54 AM
  • anyone?
    Monday, January 25, 2016 6:47 AM
  • Hi,

    Have you made any changes recently?

    Have you tried restarting restarting the exchange server to test ?

    Please check if you can find some error message in queue viewer.

    Kerberos uses UDP/88 by default, please check if the port for the Kerberos protocol is blocked by the firewall.

    In addiction, according to the error message, I have found the following article for your reference:

    https://support.microsoft.com/en-us/kb/979174  

    Regards,

    David


    Monday, January 25, 2016 9:04 AM
    Moderator
  • Hi,

    thanks for your replay,

    no im not changed anything , there is no firewall in between .

    but after i checked my exchange 2007 Server ( 2 MB - 1 CAS/Hub) time was wrong (30 Minutes) i fixed the time on all servers and restarted 2013 and CAS/HUB of 2007 (but not MB servers).

    Monday, January 25, 2016 12:37 PM
  • hi , after alot of testing and reading i managed to fix the problem .

    i dont know why but i have a lot of Duplicate SPN's and one of them was domain adminisrtator account with Exchange 2007 HUB Transport server after removing Domain Administrator Account from HUB SPN's and restarting both hubs problem fixed.

    take a look at this article:

    https://support.microsoft.com/en-us/kb/979174

    i use this to remove account from HUB :

    cmd

    c:\setspn -d Smtpsvc/hub07 domain\administrator

    c:\setspn -d Smtpsvc/hub07.domain.com domain\administrator

    valla!

    Monday, January 25, 2016 8:59 PM