Hi all
I want to determine if I have setup my environment correctly
To that end when an internal user sends an email to another internal user is it possible to see the mail flow path
i.e. did the mail remain within the environment versus was the mail sent out over the internet and back again
The users are connected via outloook
Thanks
Tadhg
Tadhg Concannon
Hi everybody.I created a mail flow rule but it does not work.
Output of get-TransportRule -Identity:
[PS] C:\Windows\system32>get-TransportRule -Identity 'no subj' | fl
RunspaceId : 9e9cb819-32ec-469d-a476-7c5a14009fa4
Priority : 1
DlpPolicy :
DlpPolicyId : 00000000-0000-0000-0000-000000000000
Comments :
ManuallyModified : False
ActivationDate :
ExpiryDate :
Description : If the message:
Includes these patterns in the message subject: '^$'
Take the following actions:
Prepend the subject with 'Finance Leasing Company'
RuleVersion : 15.0.0.0
Conditions : {SubjectMatches}
Exceptions :
Actions : {PrependSubject}
State : Enabled
Mode : Enforce
RuleSubType : None
UseLegacyRegex : False
From :
FromMemberOf :
FromScope :
SentTo :
SentToMemberOf :
SentToScope :
BetweenMemberOf1 :
BetweenMemberOf2 :
ManagerAddresses :
ManagerForEvaluatedUser :
SenderManagementRelationship :
ADComparisonAttribute :
ADComparisonOperator :
SenderADAttributeContainsWords :
SenderADAttributeMatchesPatterns :
RecipientADAttributeContainsWords :
RecipientADAttributeMatchesPatterns :
AnyOfToHeader :
AnyOfToHeaderMemberOf :
AnyOfCcHeader :
AnyOfCcHeaderMemberOf :
AnyOfToCcHeader :
AnyOfToCcHeaderMemberOf :
HasClassification :
HasNoClassification : False
SubjectContainsWords :
SubjectOrBodyContainsWords :
HeaderContainsMessageHeader :
HeaderContainsWords :
FromAddressContainsWords :
SubjectMatchesPatterns : {^$}
SubjectOrBodyMatchesPatterns :
HeaderMatchesMessageHeader :
HeaderMatchesPatterns :
FromAddressMatchesPatterns :
AttachmentNameMatchesPatterns :
AttachmentExtensionMatchesWords :
HasSenderOverride : False
MessageContainsDataClassifications :
SenderIpRanges :
SCLOver :
AttachmentSizeOver :
MessageSizeOver :
WithImportance :
MessageTypeMatches :
RecipientAddressContainsWords :
RecipientAddressMatchesPatterns :
SenderInRecipientList :
RecipientInSenderList :
AttachmentContainsWords :
AttachmentMatchesPatterns :
AttachmentIsUnsupported : False
AttachmentProcessingLimitExceeded : False
AttachmentHasExecutableContent : False
AnyOfRecipientAddressContainsWords :
AnyOfRecipientAddressMatchesPatterns :
ExceptIfFrom :
ExceptIfFromMemberOf :
ExceptIfFromScope :
ExceptIfSentTo :
ExceptIfSentToMemberOf :
ExceptIfSentToScope :
ExceptIfBetweenMemberOf1 :
ExceptIfBetweenMemberOf2 :
ExceptIfManagerAddresses :
ExceptIfManagerForEvaluatedUser :
ExceptIfSenderManagementRelationship :
ExceptIfADComparisonAttribute :
ExceptIfADComparisonOperator :
ExceptIfSenderADAttributeContainsWords :
ExceptIfSenderADAttributeMatchesPatterns :
ExceptIfRecipientADAttributeContainsWords :
ExceptIfRecipientADAttributeMatchesPatterns :
ExceptIfAnyOfToHeader :
ExceptIfAnyOfToHeaderMemberOf :
ExceptIfAnyOfCcHeader :
ExceptIfAnyOfCcHeaderMemberOf :
ExceptIfAnyOfToCcHeader :
ExceptIfAnyOfToCcHeaderMemberOf :
ExceptIfHasClassification :
ExceptIfHasNoClassification : False
ExceptIfSubjectContainsWords :
ExceptIfSubjectOrBodyContainsWords :
ExceptIfHeaderContainsMessageHeader :
ExceptIfHeaderContainsWords :
ExceptIfFromAddressContainsWords :
ExceptIfSubjectMatchesPatterns :
ExceptIfSubjectOrBodyMatchesPatterns :
ExceptIfHeaderMatchesMessageHeader :
ExceptIfHeaderMatchesPatterns :
ExceptIfFromAddressMatchesPatterns :
ExceptIfAttachmentNameMatchesPatterns :
ExceptIfAttachmentExtensionMatchesWords :
ExceptIfSCLOver :
ExceptIfAttachmentSizeOver :
ExceptIfMessageSizeOver :
ExceptIfWithImportance :
ExceptIfMessageTypeMatches :
ExceptIfRecipientAddressContainsWords :
ExceptIfRecipientAddressMatchesPatterns :
ExceptIfSenderInRecipientList :
ExceptIfRecipientInSenderList :
ExceptIfAttachmentContainsWords :
ExceptIfAttachmentMatchesPatterns :
ExceptIfAttachmentIsUnsupported : False
ExceptIfAttachmentProcessingLimitExceeded : False
ExceptIfAttachmentHasExecutableContent : False
ExceptIfAnyOfRecipientAddressContainsWords :
ExceptIfAnyOfRecipientAddressMatchesPatterns :
ExceptIfHasSenderOverride : False
ExceptIfMessageContainsDataClassifications :
ExceptIfSenderIpRanges :
PrependSubject : Finance Leasing Company
SetAuditSeverity :
ApplyClassification :
ApplyHtmlDisclaimerLocation :
ApplyHtmlDisclaimerText :
ApplyHtmlDisclaimerFallbackAction :
ApplyRightsProtectionTemplate :
SetSCL :
SetHeaderName :
SetHeaderValue :
RemoveHeader :
AddToRecipients :
CopyTo :
BlindCopyTo :
AddManagerAsRecipientType :
ModerateMessageByUser :
ModerateMessageByManager : False
RedirectMessageTo :
RejectMessageEnhancedStatusCode :
RejectMessageReasonText :
DeleteMessage : False
Disconnect : False
Quarantine : False
SmtpRejectMessageRejectText :
SmtpRejectMessageRejectStatusCode :
LogEventText :
StopRuleProcessing : False
SenderNotificationType :
GenerateIncidentReport :
IncidentReportOriginalMail :
RouteMessageOutboundConnector :
RouteMessageOutboundRequireTls : False
Identity : no subj
DistinguishedName : CN=no subj,CN=TransportVersioned,CN=Rules,CN=Transport Settings,CN=FLC,C
N=Microsoft Exchange,CN=Services,CN=Configuration,DC=flc,DC=md
Guid : 2bceff38-d29b-47bd-96be-0f11cb5654b0
ImmutableId : 2bceff38-d29b-47bd-96be-0f11cb5654b0
OrganizationId :
Name : no subj
IsValid : True
WhenChanged : 05.12.2013 11:44:57
ExchangeVersion : 0.1 (8.0.535.0)
ObjectState : Unchanged
Please help.Hi,
We're trying to set up a transport rule to send to members of a distribution group.
When we add the distribution group to the rule, it only sends to one person in the list.
Rules are as follows:
Name: transportruletest
*Apply this rule if: The sender is a member of... 'TESTDISTRIBUTIONGROUP'
*Do the following: Append the disclaimer... 'Test disclaimer*'; and fall back to action Ignore if the disclaimer can't be inserted.
Properties of thie rule: Audit this rule with severity level: Not Specified
Choose a mode for this rule: Enforce
*The disclaimer text we are using contains quite a bit of html coding within it for text and font sizes etc. However, it still sends when we test the rule using the sender is this person rule.
No other options are selected.
I hope someone can help with this.
Cheers,
Stephen
Hi,
I have Exchange 2013 CU3 installed.
I have configured a SendConnector for relaying mails to a smarthost. My problem is that I need a SSH tunnel to connect to the smarthost. So I configured a SSH port forwarding to the smarthost SMTP. So I can connect to "localhost 9925" with SMTP
and get connected to the smarthost SMTP port 25.The port 9925 is the port that is forwarded to 25. I configured localhost 9925 as smarthost in the sendconnector. I added the real smarthost address to the namespace.
But when I now try to send an email through the SendConnector the messages get stocked in the queue with the error "454 4.7.5 Certificate Validation Failure".
Can anyone help me with this problem?
Hello,
To renew my public certificate on the exchange CAS 2013 I used the ECP.
1. Generate a .req file via ECP using the renew option.
2. Sent the .req file to our CA provider.
3. Uploaded the certificate via ECP but.. no option to bind services and the still see the Pending request status.
I looked in command shell and i see the certificate with the command dir cert:\LocalMachine\My | fl
when I use the command enable-ExchangeCertificate -thumbprint XXXXXXXEDDD248B1A3EB40AF0FF549A -services "IIS,
IMAP,POP,SMTP"
I get the error:
A special Rpc error occurs on server EXCH01: The certificate with thumbprint XXXXXXXEDDD248B1A3EB40AF0FF549A
as not found.
+ CategoryInfo : ObjectNotFound: (:) [Enable-ExchangeCertificate], InvalidOperationException
+ FullyQualifiedErrorId : [Server=EXCH01,RequestId=0f4d0049-407b-4b41-80ef-0b06d3b756fc,TimeStamp=5-12-2013 14:56:
53] C0A3D0CB,Microsoft.Exchange.Management.SystemConfigurationTasks.EnableExchangeCertificate
+ PSComputerName : excas01.xxxxx.corp
I think that there could be two options to this fault:
1. the .req file was somehow incorrectly used for the renew.
2. I dont know....
My question is what happens if i just delete the certificate i was trying to renew and just import the certificate I got from the CA?
Will users be affected ie they need to reinstall the certificate in outlook, phone, etc..
I only have 4 days before my certificate expires so please be quick!
thanks,
Rob
I have updated the internal certificate on my edge server (exchange 2007ccr) based on the steps below:
From your edge server:
In Exchange Powershell perform the following commands:
New-exchangecertificate
Remove-edgesubscription
New-edgesubscription –FileName “c:\whatever.xml”
Copy the xml file just created to your Hub Transport server.
From your Hub Transport server:
Open Exchange Management Console and go to ”Organization Configuration > Hub Transport > Edge Subscription”
Remove the current edge subscription
Click New Edge Subscription (right hand task menu)
Import the xml file you copied.
From your edge server:
Restart Microsoft Exchange ADAM service
From your hub transport server:
Open the exchange powershell and perform the following commands:
start-edgesynchronization
Now I am not getting incoming email, can someone help?
Hi everyone,
I need when an specific email is sent to someone on the company, this email is forwarded automatically BUT the sender of the email forwarded needs to show as the same person that received the email and not the original sender. If I try to use the rule "redirect email" on the Exchange server, the email is sent as the original sender. Is there a way to do that?
I want to create this rule on the Exchange server that all the email accounts have this rule, otherwise I would need to create an email rule forward individually on each user's mailbox.
Thanks!!!
Flavio Ribeiro
Hi,
Yesterday I had to create a new Edge Subscription due to an expired certificate, after that all external messages stopped to be received with an Unable to Relay NDR error.
This part I have fixed but now I am getting this error for all extenal messages:
#554 5.4.4 SMTPSEND.DNS.MxLoopback; DNS records for this domain are configured in a loop ##
Anyone could help, please?
Laercio Pires
We moved to another location and got a new ip from ISP and our exchange server is not able to send emails to some recipients getting .mail.protection.outlook.com error.
user@domain.com
BN1AFFO11FD036.mail.protection.outlook.com #550 5.7.1 Service unavailable; Client host [72.76.xxx.xx] blocked using Blocklist 1; To request removal from this list please forward this message todelist@messaging.microsoft.com ##
This is the error I am getting and I did email to delist@messaging.microsoft.com and I am wondering when will my IP get unblocked as this is causing a lot of communication issues. I checked my ip for blacklist but its not in any database. Hope I'll be able to find some solution soon on this.
When I set up forwarding mail in exchange 2013 following message shows whenever I send a test mail to the forwarded mail recipient:
550
5.4.6 RESOLVER.FWD.Loop; there is a forwarding loop configured in the directory##rfc822;recipient@domain.edu
Hello everyone,
Could someone tell me what is the code to create a New-inboxrule to make email forward from my OrganizationUnit content an specific word on body of the email?
It needs to be email forward and not redirection.
THANKS!!!!
Flavio Ribeiro
Hello,
at the moment I am in the process to create the automatic mail disclaimers for our Company.
The problem is for the last part of the disclaimer we have 5 different versions.
In AD all the users that need the same version are also in the same OU.
So my question is what would be the best practice for the mail flow rules.
I saw that there is an option to give all users that are in the same group the same disclaimer.
But is there also an option to do this on an OU level, bc if I do it this way I
have to change the group membership every time a user is moved between the Ou’s
EDIT: We have exchange as part of Office365, I hope this is still the right part of the board to post the question
So my exchange 2013 Microsoft filtermanament stops and I get these
Log Name: Application
Source: Microsoft-Filtering-FIPFS
Date: 12/11/2013 5:47:15 PM
Event ID: 1104
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: HV-EXCH-2013.FMCO.com
Description:
The FIP-FS Filtering Management Service failed initialization. Error: 0x80004005. Error Details: (0x80004005) Unspecified error. Unable to read data from configuration server for tenant id: 0
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Filtering-FIPFS" Guid="{1BE3A000-EA09-4AB8-B0A0-30BBB6793D80}" />
<EventID>1104</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2013-12-11T22:47:15.900822700Z" />
<EventRecordID>361312</EventRecordID>
<Correlation />
<Execution ProcessID="11336" ThreadID="8268" />
<Channel>Application</Channel>
<Computer>HV-EXCH-2013.FMCO.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="ErrorCode">0x80004005</Data>
<Data Name="ErrorDetails">(0x80004005) Unspecified error. Unable to read data from configuration server for tenant id: 0</Data>
</EventData>
</Event>
Log Name: Application
Source: Microsoft-Filtering-FIPFS
Date: 12/11/2013 5:59:09 PM
Event ID: 2200
Task Category: None
Level: Critical
Keywords:
User: SYSTEM
Computer: HV-EXCH-2013.FMCO.com
Description:
The FIP-FS configuration file "C:\Program Files\Microsoft\Exchange Server\V15\FIP-FS\Data\ConfigurationServer.lkg" is missing.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Filtering-FIPFS" Guid="{1BE3A000-EA09-4AB8-B0A0-30BBB6793D80}" />
<EventID>2200</EventID>
<Version>0</Version>
<Level>1</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2013-12-11T22:59:09.378843900Z" />
<EventRecordID>361352</EventRecordID>
<Correlation />
<Execution ProcessID="11420" ThreadID="11688" />
<Channel>Application</Channel>
<Computer>HV-EXCH-2013.FMCO.com</Computer>
<Security UserID="S-1-5-18" />
</System>
<EventData>
<Data Name="FilePath">C:\Program Files\Microsoft\Exchange Server\V15\FIP-FS\Data\ConfigurationServer.lkg</Data>
</EventData>
</Event>
I have looked for this magical file on a production box and no dice. Any helps? Thank you in advance.
Adam
I have this program that is trying to send an email to an outside address using an internal Exchange account, and I'm getting the following error:
"mailbox unavailable. the server response was 5.7.1 unable to relay"
We have Exchange 2010. I don't understand why, since the account I'm using to send is a local account. Here's my code:
Dim client As SmtpClient = New SmtpClient("webmail.company.com")
client.DeliveryMethod = SmtpDeliveryMethod.Network
client.UseDefaultCredentials = False
client.Credentials = New NetworkCredential("Service", "pwd", "company")
Dim message As MailMessage = New MailMessage("service@company.com", "someone@outsidecompany.com")
Message.Body = "Test Message"
Message.Subject = "Hello"
client.Send(message)
message = NothingLukasz
Hi
I am Exchange admin in reputed organization, want to apply email message filtering which have .exe extention and compressed with rar & zip as an attachment.
some external user's send exe file in zip or rar as an attachment. guide me to stop mailing exe file in exchange organization.
I have a weird situation here. Currently, we are migrating from MDaemon to Exchange 2013.
As it's setup now, MDaemon is acting as a smart host for the Exchange server. This allows us to move individual users from MDaemon to Exchange as time permits. Exchange sends all mail to the MDaemon server, which then passes it to a Barracuda Spam & Virus firewall.
I've started moving some devices that send email to inside and outside users (IE: IBM iSeries 5, Sharp copiers, etc). I created a Hub Transport for these units and authorized their IP address to pass mail to the Exchange server.
These units can send to internal users on both MDaemon and Exchange without a problem. However, when they try to send, using the SMTP gateway on Exchange, to outside users they receive an error. 550.5.7.1 Unable to Relay.
Exchange users can send/receive to the outside world, through MDaemon, without any issues. They can receive email from the outside world just fine.
Is there something I could be missing?
EX of errors received back from IBM server when trying to send to a gmail address:
NOT ABLE TO DELIVER MAIL TO SOME/ALL RECIPIENTS.
REPLY CODES WITH FIRST DIGIT = '4' OR '5' ARE ERROR REPLIES.
ERRORS THAT DO NOT HAVE ERROR REPLY CODES MAY EXIST.
HOST S1015FE4 NOT ABLE TO DELIVER MAIL TO FOLLOWING RECIPIENT(S):
MAIL REJECTED BY gmail WITH THE MESSAGE:
550 5.7.1 Unable to relay
