This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(12.8, 52%, 11%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EO%3C/text%3E%3C/svg%3E)
Hi everyone!
I have implemented Exchange 2016 on a Windows Server 2016, I am using a send connector so that the mail is sent through an antispam filter but all the sent mail is stuck in Drafts.
In the MessageTracking logs I can see the following error:
2021-07-28T20:56:31.196Z,::1,EXCH-SRVR,,mailboxtransportsubmissioninternalproxy,"MDB:1cf213fc-b792-425a-bc56-45cccf8e2e7b, Mailbox:e8ae9375-274c-4190-9602-cf1a02ac7e35, Event:95964, MessageClass:IPM.Note, CreationTime:2021-07-28T19:54:00.108Z, ClientType:OWA, SubmissionAssistant:MailboxTransportSubmissionEmailAssistant",,STOREDRIVER,SUBMITDEFER,,<******@contoso.com>,20bd2897-33c3-4ec8-0f5a-08d9520a2ca6,******@xx.gob,,,1,,,,******@contoso.com,,2021-07-28T19:54:00.108Z;LSRV=EXCH-SRVR.contoso.com:TOTAL-SUB=3751.088|SA=3750.041|MTSS=1.046(MTSSD=1.046(MTSSDA=0.009|MTSSDC=0.006|SDSSO=1.004(SMS=1.002)|X-MTSSDPL=0.006|X-MTSSDSS=0.004|MTSSDSDS=0.001)),Originating,,,,"S:ItemEntryId=00-00-00-00-58-FD-61-71-D2-81-9E-47-8C-1A-6F-18-92-6D-8B-7D-07-00-B8-28-1B-E7-4D-32-E6-45-B2-E0-1C-0D-E1-43-29-8A-00-00-00-00-01-0F-00-00-B8-28-1B-E7-4D-32-E6-45-B2-E0-1C-0D-E1-43-29-8A-00-00-0D-DE-C8-39-00-00;'S:DiagnosticInfo=Error: RetrySmtp, Diagnostic Information: Stage:UpdateMsgIdToPoisonContextMapping, SmtpResponse:451 4.4.397 Error communicating with target host. -> 421 4.2.1 Unable to connect -> SocketConnectionRefused: Socket error code 10061, details:FailedRecipientCount:0; RetryRecipientCount:0';S:DeliveryPriority=Normal",Email,5c5c285e-9b03-4892-37d0-08d9520a2d40,15.01.1466.003
But when doing a tcpdump in the antispam I don't see any connection coming from the Exchange server.
The two servers are on the same network, there is no firewall between them.
Any idea what the problem is?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 17%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EYS%3C/text%3E%3C/svg%3E)
Hi @Oliver ツ ,
As this is a public forum, I've edited your posts to remove sensitive data like domain name in order to protect the personal information. Please remember to scrub any personal data involved in your future posts for privacy concerns. Thanks for your understanding.
Enable SMTP Protocol logging on that send connector and see what the actual SMTP conversation is and where the anti-spam server throws the 451/421 error
Sure the anti spam is configured to allow the Exch Server to send mail to it?
Hi Andy!
I had already activated the verbose log of the send connector a few hours ago, but it is not creating any logs, the folder in which it is supposed to save them is always empty (C:\Program Files\Microsoft\Exchange Server\V15\TransportRoles\Logs\Hub\ProtocolLog\SmtpSend)
The antispam is configured to be able to receive outgoing emails from the Exchange IP from its initial configuration, and from that side I do not see that it is even rejecting connections.
Restart the transport service
If you still dont see any logs - ensure you are logging to that path following that doc.
If you still dont see any that indicates its not using that send connector. Is that your only one?
Is the Address Space set correctly?
The services and even the server have been restarted several times during the day.
The path of the logs was configured by default but it matches the article you shared with me:
The send connector is configured as follows:
!
Interesting, so it appears to not even really attempt to send despite the message tracking log.
Anything interesting in the event logs? Any transport warning events or errors ?
How about the components?
get-servercomponentstate <server>
test-servicehealth
Did this ever work?
Can you receive messages from the internet and send mail internally?
Hi Andy!
All these servers are in a laboratory environment, the domains that I am using are not public on the internet. The environment is only an Exchange Server that sends mail to the Antispam and this delivers it to another Exchange Server, in short, the antispam serves as a bridge between the two Exchange Servers.
We have tested this architecture before and it works without a problem.
As for logs, it still doesn't create any log files.
For components, this was the output of the commands:
EDIT:
I hadn't tried sending internal mail, I just tried it and I can't send mail to other internal accounts either.
Hi @Oliver ツ ,
I hadn't tried sending internal mail, I just tried it and I can't send mail to other internal accounts either.
Have you run a get-messagetrackinglog for this internal message and see if it has the same error as shared in your original post?
Sitting in drafts often means a DNS issue.
Anything set here?
If not, what is set for DNS checking with ipconfig/all ?
Here's the DNS configuration:
EDIT:
Here's the ipconfig:
I'd remove the entry set in Exchange and restart the transport service.
that 8.8.8.8 entry may be the issue as well
I just leave the internal DNS, restart the service but it still does not send mails.
Can you remove that 8.8.8.8
I already did but it still remains the same.
What CU is this?
Is this a VM? Can you move it to another host?
Nothing in the event logs?
How much disk space is available?
Version:
Name : EXCH-SRVR
Edition : Enterprise
AdminDisplayVersion : Version 15.1 (Build 1466.3)
Yes, it'a a VM but a can't move it to another host, I'm starting to consider creating another environment from scratch.
Nothing in the logs.
Disk space: 136 GB free