locked
250 2.1.5 Recipient OK extremely long delay RRS feed

  • Question

  • Hi, We recently upgraded our Exchange 2007 environment to Exchange 2010. Upon doing so, we have been having trouble with some mail servers not being able to send us mail. I did an SMTP test with Telnet, and my server seems to be getting stuck between me sending the RCPT TO command and the server responding with 250 2.1.5 Recipient OK. On average, there is at least a 1 minute delay between the command and server response. This does not happen on the Exchange 2007 server. I have attached logs from my test session with the server demonstrating this.

    If anyone has any tips or tricks to try for this, I'm not sure where to go from here. Thank you in advance for your help!

    2011-06-21T16:37:02.968Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,0,10.1.0.20:25,10.1.5.220:49407,+,,
    2011-06-21T16:37:02.968Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,1,10.1.0.20:25,10.1.5.220:49407,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
    2011-06-21T16:37:02.968Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,2,10.1.0.20:25,10.1.5.220:49407,>,"220 [Exchange Server] Microsoft ESMTP MAIL Service ready at Tue, 21 Jun 2011 12:37:02 -0400",
    2011-06-21T16:37:09.884Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,3,10.1.0.20:25,10.1.5.220:49407,<,HELO [Client Computer Name],
    2011-06-21T16:37:09.884Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,4,10.1.0.20:25,10.1.5.220:49407,>,250 [Exchange Server] Hello [10.1.5.220],
    2011-06-21T16:37:23.637Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,5,10.1.0.20:25,10.1.5.220:49407,<,MAIL FROM:<test@example.com>,
    2011-06-21T16:37:23.637Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,6,10.1.0.20:25,10.1.5.220:49407,*,08CDFE36F8579AA0;2011-06-21T16:37:02.968Z;1,receiving message
    2011-06-21T16:37:23.637Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,7,10.1.0.20:25,10.1.5.220:49407,>,250 2.1.0 Sender OK,
    2011-06-21T16:37:32.654Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,8,10.1.0.20:25,10.1.5.220:49407,<,RCPT TO:<my@email.address>,
    2011-06-21T16:38:38.054Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,9,10.1.0.20:25,10.1.5.220:49407,>,250 2.1.5 Recipient OK,
    2011-06-21T16:38:58.238Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,10,10.1.0.20:25,10.1.5.220:49407,<,DATA,
    2011-06-21T16:38:58.238Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,11,10.1.0.20:25,10.1.5.220:49407,>,354 Start mail input; end with <CRLF>.<CRLF>,
    2011-06-21T16:40:03.115Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,12,10.1.0.20:25,10.1.5.220:49407,*,Tarpit for '0.00:00:01.757' due to 'DelayedAck',Delivered
    2011-06-21T16:40:03.115Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,13,10.1.0.20:25,10.1.5.220:49407,>,250 2.6.0 <394a499f-d1c6-4217-bd7b-2406bdc1265d@[Exchange Server]> [InternalId=48283] Queued mail for delivery,
    2011-06-21T16:40:08.077Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,14,10.1.0.20:25,10.1.5.220:49407,<,QUIT,
    2011-06-21T16:40:08.077Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,15,10.1.0.20:25,10.1.5.220:49407,>,221 2.0.0 Service closing transmission channel,
    2011-06-21T16:40:08.077Z,[Exchange Server]\Default [Exchange Server],08CDFE36F8579AA0,16,10.1.0.20:25,10.1.5.220:49407,-,,Local
    

    Tuesday, June 21, 2011 6:30 PM

Answers

  • Your Exchange server is tarpitting the other server because it suspects that it is trying to harvest recipients from your directory.  This article explains the feature:

    http://technet.microsoft.com/en-us/library/bb123891.aspx

     


    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    • Proposed as answer by Novak Wu Thursday, June 23, 2011 1:55 AM
    • Marked as answer by Novak Wu Tuesday, July 5, 2011 1:38 AM
    Tuesday, June 21, 2011 6:47 PM

All replies

  • Your Exchange server is tarpitting the other server because it suspects that it is trying to harvest recipients from your directory.  This article explains the feature:

    http://technet.microsoft.com/en-us/library/bb123891.aspx

     


    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."
    • Proposed as answer by Novak Wu Thursday, June 23, 2011 1:55 AM
    • Marked as answer by Novak Wu Tuesday, July 5, 2011 1:38 AM
    Tuesday, June 21, 2011 6:47 PM
  • As an additional information, please refer to the following article:

     

    http://www.exchangepedia.com/blog/2007/01/enabled-by-default-smtp-tarpit-in.html

     

    Thanks.

    Novak

     


    Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
    Thursday, June 23, 2011 1:55 AM
  • Hi All

    I have one Edge server and two HUB-CAS server in my organization, now from 2 days I am getting same issue, getting delay delivery on one particular domain. I check queue viewer and found below given error

    451 4.4.0 Primary target IP address responded with: "421 SMTP Service is temporary unavailable. "attemp failover to alternate host, but that did not succeed. either there are no alternate host, or delivery failed to all alternate host.

    external mail delivery throgh edge server (Exchange sever 2010)

    please help to resolve the issue.

    Tarpitting value already set to 00:00:00

    Wednesday, October 30, 2013 4:13 AM
  • That error can many any number of things.  I see it most often when someone has futzed with the default permissions on a receive connector, making servers unable to talk to each other.

    Ed Crowley MVP "There are seldom good technological solutions to behavioral problems."

    Thursday, October 31, 2013 6:32 AM