This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(204.8, 44%, 29%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
a week ago , i install exchange server 2019 std cu 9 in my server and configure the domain name correctly. it can send the mail to the external domain email correctly and received correctly. but can't received our father company email. i tracking the log:
SourceContext :
ConnectorId : 组织内 SMTP 发送连接器
Source : SMTP
EventId : FAIL
InternalMessageId : 601295421447
MessageId : <C26F15670E21C64CA9A5CF1049E20C6A604BC3@bj-mail04.bj.domain.com.cn>
NetworkMessageId : 5fc17fc8-e8a2-44bd-c1ec-08d92c753724
Recipients : {administrator@zz.domain.com.cn}
RecipientStatus : {[{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedExceptio
n; Failed to process message due to a permanent exception with message : TNEF ConversionFai
ledException: : TNEF [Stage: PromoteCreateReplay]};{MSG=};{FQDN=zzmail.zz.domain.com.cn};{I
P=10.xx.1.3};{LRT=2021/6/11 1:06:59}]}
TotalBytes : 6131
RecipientCount : 1
in my father company ,use the owa or the email client program send a simple email ,will receive the NDR:554 5.6.0 Corrupt message content 。
help me,thanks.
Exchange server version in your parent domain is 2003
the issue only occurs between the parent-child domain。parent domain email server address is public internet address ,in child domain,send a mail to parent domain is correctly..but in parent domain.send a mail to child domain(the mail server address is private internet address ) will receive the NDR 554 5.6.0：
the log :
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:12
ClientIp :
ClientHostname :
ServerIp :
ServerHostname : zzmail
SourceContext : No suitable shadow servers
ConnectorId :
Source : SMTP
EventId : HAREDIRECTFAIL
InternalMessageId : 1120986464256
MessageId : <C26F15670E21C64CA9A5CF1049E20C6A604BC9@bj-mail04.bj.domain.com.cn>
NetworkMessageId : 8042e607-7a06-4d01-c4bc-08d93071e1e6
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {}
TotalBytes : 5090
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp :
MessageInfo :
MessageLatency :
MessageLatencyType : None
EventData : {[DeliveryPriority, Normal], [AccountForest, zz.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:13
ClientIp : 10.32.1.3
ClientHostname : zzmail.zz.domain.com.cn
ServerIp : 10.32.1.3
ServerHostname : zzmail
SourceContext : 08D92C111BE3B4ED;2021-06-16T02:49:08.822Z;2
ConnectorId : ZZMAIL\Default ZZMAIL
Source : SMTP
EventId : RECEIVE
InternalMessageId : 1120986464315
MessageId : <C26F15670E21C64CA9A5CF1049E20C6A604BC9@bj-mail04.bj.domain.com.cn>
NetworkMessageId : 8042e607-7a06-4d01-c4bc-08d93071e1e6
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {}
TotalBytes : 5484
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp : 202.xx.xx.252
MessageInfo : 0cA:
MessageLatency :
MessageLatencyType : None
EventData : {[ProxyHop1, zzmail.zz.domain.com.cn(10.32.1.3)], [MessageValue, MediumHigh], [Replication, F
ailed], [FirstForestHop, zzmail.zz.domain.com.cn], [FromEntity, Internet], [ProxiedClientIPAd
dress, 202.xx.xx.252], [ProxiedClientHostname, exchangeserver.domain.com.cn], [DeliveryPrior
ity, Normal], [AccountForest, zz.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:13
ClientIp :
ClientHostname : zzmail
ServerIp :
ServerHostname :
SourceContext : CatContentConversion
ConnectorId :
Source : AGENT
EventId : AGENTINFO
InternalMessageId : 1120986464315
MessageId : <C26F15670E21C64CA9A5CF1049E20C6A604BC9@bj-mail04.bj.domain.com.cn>
NetworkMessageId : 8042e607-7a06-4d01-c4bc-08d93071e1e6
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {}
TotalBytes : 5690
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp : 202.xx.xx.252
MessageInfo :
MessageLatency :
MessageLatencyType : None
EventData : {[AMA, SUM|v=0|action=|error=|atch=1], [AMA, EV|engine=M|v=0|sig=1.341.814.0|name=|file=], [C
ompCost, |AMA=0], [DeliveryPriority, Normal], [AccountForest, zz.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:13
ClientIp : 10.32.1.3
ClientHostname : zzmail
ServerIp : 10.32.1.3
ServerHostname : zzmail.zz.domain.com.cn
SourceContext :
ConnectorId : 组织内 SMTP 发送连接器
Source : SMTP
EventId : FAIL
InternalMessageId : 1120986464315
MessageId : <C26F15670E21C64CA9A5CF1049E20C6A604BC9@bj-mail04.bj.domain.com.cn>
NetworkMessageId : 8042e607-7a06-4d01-c4bc-08d93071e1e6
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {[{LED=554 5.6.0 Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedExceptio
n; Failed to process message due to a permanent exception with message : TNEF ConversionFai
ledException: : TNEF [Stage: PromoteCreateReplay]};{MSG=};{FQDN=zzmail.zz.domain.com.cn};{I
P=10.32.1.3};{LRT=2021/6/16 2:53:13}]}
TotalBytes : 10636
RecipientCount : 1
RelatedRecipientAddress :
Reference : {<4cc2c962-342b-41f5-8929-e04f9e61474e@zzmail.zz.domain.com.cn>}
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp :
MessageInfo : 2021-06-16T02:53:12.803Z;LSRV=zzmail.zz.domain.com.cn:TOTAL-HUB=0.191|SMR=0.104(SMRDE=0.002|S
MRC=0.102(SMRCL=0.101))|CAT=0.056(CATOS=0.031(CATSM=0.031(CATSM-Unified Group Post Sent Item
Routing Agent=0.002|CATSM-Malware Agent=0.028))|CATRESL=0.004|CATORES=0.018(CATRS=0.018(CATRS
-Index Routing Agent=0.018)))|SMSC=0.011|SMS=0.013(SMSMBXD=0.006)
MessageLatency :
MessageLatencyType : None
EventData : {[E2ELatency, 0.304], [ToEntity, Unknown], [FromEntity, Internet], [MsgRecipCount, 1], [Inclu
deInSla, True], [Microsoft.Exchange.Transport.MailRecipient.RequiredTlsAuthLevel, Opportunist
ic], [IsSmtpResponseFromExternalServer, False], [DeliveryPriority, Normal], [AccountForest, z
z.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:39
ClientIp :
ClientHostname :
ServerIp :
ServerHostname : zzmail
SourceContext : No suitable shadow servers
ConnectorId :
Source : SMTP
EventId : HAREDIRECTFAIL
InternalMessageId : 1120986464256
MessageId : <202106161054489363688@keyman .com.cn>
NetworkMessageId : b5a43e12-81bc-4cec-9c2c-08d93071f1e5
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {}
TotalBytes : 4423
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp :
MessageInfo :
MessageLatency :
MessageLatencyType : None
EventData : {[DeliveryPriority, Normal], [AccountForest, zz.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:39
ClientIp : 10.32.1.3
ClientHostname : zzmail.zz.domain.com.cn
ServerIp : 10.32.1.3
ServerHostname : zzmail
SourceContext : 08D92C111BE3B4ED;2021-06-16T02:49:08.822Z;2
ConnectorId : ZZMAIL\Default ZZMAIL
Source : SMTP
EventId : RECEIVE
InternalMessageId : 1120986464317
MessageId : <202106161054489363688@keyman .com.cn>
NetworkMessageId : b5a43e12-81bc-4cec-9c2c-08d93071f1e5
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {}
TotalBytes : 4763
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp : 202.xx.xx.252
MessageInfo : 0cA:
MessageLatency :
MessageLatencyType : None
EventData : {[ProxyHop1, zzmail.zz.domain.com.cn(10.32.1.3)], [MessageValue, MediumHigh], [Replication, F
ailed], [FirstForestHop, zzmail.zz.domain.com.cn], [FromEntity, Internet], [ProxiedClientIPAd
dress, 202.xx.xx.252], [ProxiedClientHostname, exchangeserver.domain.com.cn], [DeliveryPrior
ity, Normal], [AccountForest, zz.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:39
ClientIp :
ClientHostname : zzmail
ServerIp :
ServerHostname :
SourceContext : CatContentConversion
ConnectorId :
Source : AGENT
EventId : AGENTINFO
InternalMessageId : 1120986464317
MessageId : <202106161054489363688@keyman .com.cn>
NetworkMessageId : b5a43e12-81bc-4cec-9c2c-08d93071f1e5
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {}
TotalBytes : 4969
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp : 202.xx.xx.252
MessageInfo :
MessageLatency :
MessageLatencyType : None
EventData : {[AMA, SUM|v=0|action=|error=|atch=0], [AMA, EV|engine=M|v=0|sig=1.341.814.0|name=|file=], [C
ompCost, |AMA=0], [DeliveryPriority, Normal], [AccountForest, zz.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:39
ClientIp : 10.32.1.3
ClientHostname : zzmail
ServerIp : 10.32.1.3
ServerHostname : zzmail.zz.domain.com.cn
SourceContext : ;250 2.0.0 OK <202106161054489363688@keyman .com.cn> [Hostname=zzmail.zz.domain.com.cn];Client
SubmitTime:
ConnectorId : 组织内 SMTP 发送连接器
Source : SMTP
EventId : SEND
InternalMessageId : 1120986464317
MessageId : <202106161054489363688@keyman .com.cn>
NetworkMessageId : b5a43e12-81bc-4cec-9c2c-08d93071f1e5
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {250 2.1.5 Recipient OK}
TotalBytes : 6224
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp :
MessageInfo : 2021-06-16T02:53:39.628Z;LSRV=zzmail.zz.domain.com.cn:TOTAL-HUB=0.243|SMR=0.125(SMRDE=0.001|S
MRC=0.123(SMRCL=0.123))|CAT=0.044(CATOS=0.029(CATSM=0.028(CATSM-Unified Group Post Sent Item
Routing Agent=0.003|CATSM-Malware Agent=0.024))|CATRESL=0.004|CATORES=0.009(CATRS=0.009(CATRS
-Index Routing Agent=0.008)))|SMSC=0.007|SMS=0.064(SMSMBXD=0.061)
MessageLatency : 00:00:00.3660000
MessageLatencyType : LocalServer
EventData : {[E2ELatency, 0.366], [MsgRecipCount, 1], [IncludeInSla, True], [Microsoft.Exchange.Transport
.MailRecipient.RequiredTlsAuthLevel, Opportunistic], [IsSmtpResponseFromExternalServer, False
], [DeliveryPriority, Normal], [AccountForest, zz.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:13
ClientIp :
ClientHostname : zzmail
ServerIp :
ServerHostname :
SourceContext : 08D92C111FA1ACCC;2021-06-16T02:53:13.098Z
ConnectorId :
Source : STOREDRIVER
EventId : DELIVERFAIL
InternalMessageId : 1120986464315
MessageId : <C26F15670E21C64CA9A5CF1049E20C6A604BC9@bj-mail04.bj.domain.com.cn>
NetworkMessageId : 8042e607-7a06-4d01-c4bc-08d93071e1e6
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {Corrupt message content; STOREDRV.Deliver.Exception:ConversionFailedException; Failed to pro
cess message due to a permanent exception with message : TNEF ConversionFailedException: :
TNEF [Stage: PromoteCreateReplay][DestinationFolder: ]}
TotalBytes : 10636
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp :
MessageInfo : 2021-06-16T02:53:12.803Z;SRV=zzmail.zz.domain.com.cn:TOTAL-FE=0.111|SMR=0.108(SMRPI=0.005(SMR
PI-FrontendProxyAgent=0.004))|SMS=0.003;SRV=zzmail.zz.domain.com.cn:TOTAL-DEL=0.011|SMR=0.007
(SMRDI=0.006)|D-PEN=0.003(SDDSPCR-PEN=0.002(SDDCC=0.001))
MessageLatency :
MessageLatencyType : None
EventData : {[E2ELatency, 0.300], [DeliveryPriority, Normal], [AccountForest, zz.domain.com.cn]}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
RunspaceId : afae34e7-eba5-4136-ab5d-49b5ae1f168b
Timestamp : 2021/6/16 10:53:39
ClientIp :
ClientHostname : zzmail.zz.domain.com.cn
ServerIp :
ServerHostname : zzmail
SourceContext : 08D92C111FA1ACCE;2021-06-16T02:53:39.934Z;ClientSubmitTime:
ConnectorId :
Source : STOREDRIVER
EventId : DELIVER
InternalMessageId : 1120986464317
MessageId : <202106161054489363688@keyman .com.cn>
NetworkMessageId : b5a43e12-81bc-4cec-9c2c-08d93071f1e5
Recipients : {zhang_xinshuai@zz.domain.com.cn}
RecipientStatus : {}
TotalBytes : 6224
RecipientCount : 1
RelatedRecipientAddress :
Reference :
MessageSubject : 回复: ceshi 01
Sender : hwgzz@keyman .com.cn
ReturnPath : hwgzz@keyman .com.cn
Directionality : Incoming
TenantId :
OriginalClientIp : 202.xx.xx.252
MessageInfo : 2021-06-16T02:53:39.628Z;SRV=zzmail.zz.domain.com.cn:TOTAL-FE=0.122|SMR=0.120(SMRPI=0.006(SMR
PI-FrontendProxyAgent=0.006))|SMS=0.002;SRV=zzmail.zz.domain.com.cn:TOTAL-HUB=0.179|SMR=0.125
(SMRDE=0.001|SMRC=0.123(SMRCL=0.123))|CAT=0.044(CATOS=0.029(CATSM=0.028 (CATSM-Unified Group
Post Sent Item Routing Agent=0.003|CATSM-Malware Agent=0.024 ))|CATRESL=0.004|CATORES=0.009(C
ATRS=0.009(CATRS-Index Routing Agent=0.008)))|QDM=0.009;SRV=zzmail.zz.domain.com.cn:TOTAL-DEL
=0.063|SMR=0.004(SMRDI=0.004)|SDD=0.059(SDDSPCR=0.002(SDDCC=0.002)|SDDSPCS=0.002(SDDOS=0.002)
|SDDPM=0.020(SDDPM-Conversations Processing Agent=0.015|SDDPM-Mailbox Rules Agent=0.002)|SDDS
CMG=0.003(SDDCMM=0.002)|SDDSDMG=0.027(SDDR=0.027)|X-SDDS=0.011)
MessageLatency : 00:00:00.3660000
MessageLatencyType : EndToEnd
EventData : {[IncludeInSla, True], [MailboxDatabaseGuid, f24b90f5-a5d6-421f-8b61-657280af34bd], [Mailboxe
s, 2066284f-ce80-47a5-b26e-d7c435a5a27a], [StoreObjectIds, AAAAAAdMGf3pVzNKpgeB7PJhA+wHABPfQi
3INSBJvyRjR1WU1eQAAAAAAQwAABPfQi3INSBJvyRjR1WU1eQAAAAABXcAAA==], [FromEntity, Internet], [ToE
ntity, Hosted], [P2RecipStat, 0.002/1], [MsgRecipCount, 1], [DeliveryLatency, 0.365], [Attach
Count, 0], [E2ELatency, 0.366], [DeliveryPriority, Normal], [AccountForest, zz.domain.com.cn]
}
TransportTrafficType : Email
SchemaVersion : 15.02.0858.002
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(25.6, 67%, 12%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJS%3C/text%3E%3C/svg%3E)
Hi @冰 丁
Thanks for providing the information above. However please note that Exchange server 2003 has end of support, and according to my reaserch, previous version of Exchange server may have such kind of problems. It's suggested that you upgrade your Exchange to the latest two CUs of Exchange 2013/2016/2019 for better support.
In addition, here is a related thread discussed the similar issue about NDR 554 5.6.0 between internal servers. The issue is related to the antivirus software. Refer to the thread below for more information:
554 5.6.0 Corrupt message content
And here attach the official document which introduces about the Event types in the message tracking log
Hi @冰 丁
What's the Exchange server version in your parent domain?
Do all the messages sent from your parent domain receive the NDR 554 5.6.0? No matter to external domains or child domain? Please try using the EXRCA tool checking the outbound smtp email to help determine the possible cause for this issue.
In addition, if the issue only occurs between the parent-child domain, we may need to consider that did you deploy any antivirus product between the two servers, or configured any settings which include SMTP filter or IP filter.
You could also provide the complete NDR message tou received here for further troubleshooting, don't forget to remove the personal information. Thanks for your understanding!
If an Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.
thinks for your help,this afternoon one of my parent domain user delete the mailbox account from the mail client program ( named foxmail in china) and recreate the mail account. all is fine. i don't understand why cause this issue. but it's ok now..
thanks again!