Exchange 2007 stopped sending emails!

[chazzy2501]

I know very little about exchange so plz help!

 

So Emails are still coming in but are no longer going out. I have exchange 2007 on 2003R264BIT the errors I see are the following.

 

"The account 'NT AUTHORITY\ANONYMOUS LOGON' provided valid credentials, but is not authorized to use the server; failing authentication."

 

and about 3 hours ago! the following!

 

"An internal transport certificate will expire soon. Thumbprint:4293EB6D8097AAC38F25826A9B0F39E6B5968AE3, hours remaining: 167"

[chazzy2501]

Anyone feel like nursing me through this?

 

The STARTTLS certificate will expire soon: subject: exchange.DCC-SCH-4505.local, hours remaining: 4293EB6D8097AAC38F25826A9B0F39E6B5968AE3. Run the New-ExchangeCertificate cmdlet to create a new certificate.

[sukh]

Hi

 

1. Is this issue for all users or some?

2. If this is for some, is this a member of a privledge group such as domain admins, if so remove them

3. If this is for all users, can you test via OWA,

4. If this still fails, we can up the logging on Exchange for SMTP and see what's going on.

 

Sukh

[chazzy2501]

its for all users. The second error message make sense as it has now expired, I just don't know what exactly to do. I found the example on the MS website (I think)

Get-ExchangeCertificate -Thumbprint c4248cd7065c87cb942d60f7293feb7d533a4afc | New-ExchangeCertificate

 

but I use my certificate thumb print?

 

Where do I do this?

[sukh]

Is this a self signed certificate?

 

See below.

 

Exchange Server 2007: Renewing the self-signed certificate | Exchangepedia

 

Sukh

[chazzy2501]

OK so I did this, http://img34.imageshack.us/img34/4885/exchangecert.png

 

then reset the server no transport errors! Is it fixed how long until mail starts shifting again?

 

odd that the date on the cert is the 05/05 it shouldn't have expired yet? server date and time correct btw:)

[sukh]

I would restart your MS Exchange services again.

 

Get-ExchangeCertificate | fl >c:\exchcert.txt

 

Post/PM me the details

 

Sukh

[chazzy2501]

So a certificate with a thumb print "5445EBEEC3F61EEBDE6503805B0A5FBA7DD9ECA2" expired today? but no error message.. do I perform the same renew?

[sukh]

BAC80680ACF0C1B521F8DD69D832BDB591873DD9 - This is the only which which is invalid. That expired, the one you renewed today is fine. Except you have not bound it to IIS.

 

Are you still having an issue with sending emails? If yes do you get any NDR's?

 

Sukh

[chazzy2501]

The event viewer is clean but emails are not going, I used the queue viewer and I can see 128 messages, it has an error 451 4.40 DNS query failed under last error. But nothing in the even logs..

 

where do I get an NDR

[chazzy2501]

YAY! it's all working? the error I described above was reoccuring but when I manually told it to retry it worked....

 

Thanks EVER so much for your help! My lack of experience with exchange bit me again. I'll have to go on some training, if the school will pay for it!

[sukh]

Glad it worked

 

Cheers

S

[techie08]

Hi Everyone

 

Im getting the 451 4.4.0 DNS query failed on my messages when people send to external email addresses. does anyone know how i can resolve this?

 

Thanks

[chazzy2501]

Hi Everyone

 

Im getting the 451 4.4.0 DNS query failed on my messages when people send to external email addresses. does anyone know how i can resolve this?

 

Thanks

 

Damn, it's come back! I manualy hit retry and it's ok but then it fails again on the automatic retry?

 

Nothing relavant in the error logs this error is only appears on the queue viewer?

[techie08]

Damn, it's come back! I manualy hit retry and it's ok but then it fails again on the automatic retry?

 

Nothing relavant in the error logs this error is only appears on the queue viewer?

 

How do you manually retry? also are you using a smarthost on SWGFL?

[chazzy2501]

OK, I've flushed my DNS cache and whilst it seemed to have no effect the server has now started to deliver emails again, unprompted.... an intermittent problem? This is gonna hurt.

 

If your in the queue viewer just right click on the SMTP.WHATEVER and select retry. Pre-empting the automatic retry.

[techie08]

OK, I've flushed my DNS cache and whilst it seemed to have no effect the server has now started to deliver emails again, unprompted.... an intermittent problem? This is gonna hurt.

 

If your in the queue viewer just right click on the SMTP.WHATEVER and select retry. Pre-empting the automatic retry.

 

I dont have that option, just view messages, Suspend, Remove (With NDR) Remove (Without NDR) and Properties

[chazzy2501]

what about in the actions menu on the right?

 

Damn, problems back... Maybe this is a swgfl issue?

[techie08]

No it doesn't

 

Are you SWGFL aswell?

[techie08]

Ive just tried manually retrying the queue but the 451 4.4.0 DNS Query Failed error still returns.

[chazzy2501]

Yes I am, I've just spoken to their techie people and they say they've had issues with emails and he got me to change the SMTP value in my exchange (Despite it seeming to work ok).

 

I changed it from "SMTP.beaminster.dorset.sch.uk" to "MX.SWGFL.IFL.NET" both resolve to the same IP but he said this seems to fix the issue.

[techie08]

Did you just change the smarthost in "Hub Transport" and "Outbound Mail" Properties?

 

Also do you get a response when pinging? mine just times out. but does resolve the IP

[chazzy2501]

You shoudl try to ping your SMTP address (from your exchange server) it will fail to ping but should show that it resolves to mx.swgfl.ifl.net with an ip 62.171.194.108, it's a dynamic ip tho and Im not sure we all seee the same one.

 

You could also ring SWGFL support and have them walk you through changing the SMTP.

[techie08]

I will give them a call just in case.

 

Very weird but at least you got it working!

[sukh]

If you still have the issue...

 

1. Up the logging on your send connector and set to verbose. Post/PM the results

2. Seems like you're using a smart host to send out, perform telnet test to both smart hosts and out the results here

 

Sukh