Quantcast
Channel: Exchange Server 2010 forum
Viewing all 19572 articles
Browse latest View live
↧

2010 mailbox role calc

January 22, 2014, 1:49 pm
$
0
0

Is it possible to set a maximum lun size for the mailbox role calculator?

Thanks!

↧
Search

Linked Mailboxes

January 20, 2014, 6:55 am
$
0
0

Hi,

I have two domains, domain a and domain b.  In domain a I have an Exchange 2010 server and would like to setup mailboxes for some users who have active directory accounts in domain b.  I created Link mailboxes in exchange and all worked fine for a number of days.  Came in today and the users are being prompted for passwords when they open outlook and their own domain b\ username and password are not working.  They can however use outlook web access.

Any ideas?

Cheers

↧
↧

Delayed mail for internal user send a mail to gmail account

January 17, 2014, 11:00 am
$
0
0

hi to every one,

Today we are facing an issue in exchange server 2010

Whenever internal user send a mail to some of gmail accounts user receives a mail from postmaster states that

This is an automatically generated Delivery Status Notification.

THIS IS A WARNING MESSAGE ONLY.

YOU DO NOT NEED TO RESEND YOUR MESSAGE.

Delivery to the following recipients has been delayed.

Action: delayed

Status: 4.4.7

Will-Retry-Until:

Regards

Kart26

↧

1x Exchange 2010 on-premises hosts 2 domains/companies, they've now split and will be hosted at separate locations.. autocomplete & NDR's

January 22, 2014, 4:57 am
$
0
0

Per the subject. CompanyA and CompanyB shared the same Exchange 2010 Server. They have close ties but have outgrown the shared offices so CompanyB has moved 2 miles down the road. There is no link between the offices.

CompanyA is keeping the original server, CompanyB has moved to new premises with their own Forest/Domain/DC and a shiny new Exchange 2010 Server.

I'll be using new-mailboxexportrequest / new-mailboximportrequest to move all e-mail data to CompanyB and then creating x500 proxy addresses so that at least at CompanyB they can all reply to CompanyB mails. That helps CompanyB continue to be able to respond to old CompanyB e-mails/meeting requests.

But CompanyA and CompanyB will still want to e-mail each other regularly, I haven't done the move yet but past experience suggests that due to auto-completes (and how Outlook/Exchange functions internally) they're likely to experience a lot of bounce-backs e-mailing each other, especially responding to pre-split mail.

I'm likely to use NK2Edit and a login script to automatically remove the other company from the autocompletes so new e-mails should go through okay but are there any other solutions for CompanyA responding to old CompanyB mails and meeting requests (and vica versa?) Special Send Connector with the old X400 addresses? Anything?

Any helps really appreciated.


↧

I need help

January 22, 2014, 4:37 am
$
0
0

Hello everybody. I have one problem with a new exchange server 2010. I have one organization with one forest an 3 domain.  Two domain have one exchange 2010 and both comunicated perfect. Two weeks ago I installed other exchange 2010 in the new domain. This domain have a perfect comunnication with the parent domain.

The name of the domains are, central.com - rosario.com - unfi.com. Central with rosario is perfect, Central with unfi is perfect too but rosario with unfi have problem, in my logs appear this

Inbound authentication failed with error UnexpectedExchangeAuthBlob for Receive connector Default ZREX2K10. The authentication mechanism is ExchangeAuth. The source IP address of the client who tried to authenticate to Microsoft Exchange is [10.254.0.193].

Other log:

,"220 ZIEX2K10.unfi.zeni Microsoft ESMTP MAIL Service ready at Mon, 20 Jan 2014 21:09:06 -0300",
,<,EHLO zrex2k10.rosario.zeni,
250-ZIEX2K10.unfi.zeni Hello [10.1.7.150],
250-SIZE,
250-PIPELINING,
250-DSN,
250-ENHANCEDSTATUSCODES,
250-STARTTLS,
250-X-ANONYMOUSTLS,
250-AUTH NTLM,
250-X-EXPS GSSAPI NTLM,
250-8BITMIME,
250-BINARYMIME,
250-CHUNKING,
250-XEXCH50,
250-XRDST,
250 XSHADOW,
X-ANONYMOUSTLS,
220 2.0.0 SMTP server ready,
Sending certificate
CN=ZIEX2K10,Certificate subject
CN=ZIEX2K10,Certificate issuer name
2014-01-21T00:09:06.288Z,ZIEX2K10\Default ZIEX2K10,08D0E41E3D970303,24,10.254.0.193:25,10.1.7.150:57148,*,798DE76E37751B984FFFA8820999AAEB,Certificate serial number
2014-01-21T00:09:06.288Z,ZIEX2K10\Default ZIEX2K10,08D0E41E3D970303,25,10.254.0.193:25,10.1.7.150:57148,*,AB143C2F895821918C7871CE4B0E292F0F45E927,Certificate thumbprint
2014-01-21T00:09:06.288Z,ZIEX2K10\Default ZIEX2K10,08D0E41E3D970303,26,10.254.0.193:25,10.1.7.150:57148,*,ZIEX2K10;ZIEX2K10.unfi.zeni,Certificate alternate names
EHLO zrex2k10.rosario.zeni,
250-ZIEX2K10.unfi.zeni Hello [10.1.7.150],
250-SIZE,
250-PIPELINING,
250-DSN,
250-ENHANCEDSTATUSCODES,
250-AUTH NTLM,
250-X-EXPS EXCHANGEAUTH GSSAPI NTLM,
250-X-EXCHANGEAUTH SHA256,
250-8BITMIME,
250-BINARYMIME,
250-CHUNKING,
250-XEXCH50,
250-XRDST,
250 XSHADOW,
X-EXPS EXCHANGEAUTH,
Inbound ExchangeAuth negotiation failed because of UnexpectedExchangeAuthBlob
User Name: NULL
Tarpit for '0.00:00:05',
454 4.7.0 Temporary authentication failure,
Local

I have been anything with the receive connector, security and more. Really I need help boys...

↧
↧

Exchange and Active Directory Sites

January 22, 2014, 4:07 am
$
0
0

Hi I have a question about our Exchange SP2 system. Right now some our M/H/T servers are in Active Directory Site A and another server we are migrating from is in Site B. If I move the servers in Site  A to Site B will Exchange recognize that they are in a different Active Directory Site? The IP's of the server would not change. I would simply remove the subnet those servers are in from Site A and add the subnet to Site B.

Any help is appreciated.

↧

Intermittent AutoDiscover / Web Services outages - OOA, MailTips, Free/busy

January 13, 2014, 5:24 pm
$
0
0

Hi, we have a three-server Exchange 2010 environment and are near the end of our transition from Exchange 2003 to 2010 (99% of users moved over).

We have two CAS-MBX-HT Exchange servers in one AD site, call it Site A, sitting behind a Citrix Netscaler 5500 load balancer. The third CAS-MBX-HT server is in another AD site (Site B) on its own. All three servers are in one DAG.

We're experiencing intermittent internal autodiscover / EWS functionality affecting these services: free/busy availability, MailTips and Out of Office, but only for users on the two servers in site A. Everything works fine from within OWA and users in the other AD site with the single server.

Whether it works or not is sporadic throughout each work day. Sometimes everything is fine for hours. Sometimes it's broken for hours. Sometimes just minutes. There is no real pattern to it.

It seems as though MailTips won't be working sometimes while OOA/FreeBusy works fine. Sometimes the other way around. However 100% of the time if OOA doesn't work then FreeBusy also doesn't work and vice versa.

All three issues are completely resolved by doing an /iisreset on both Site A Exchange servers. Everything works great for an hour or more and then back to intermittent outages.

We've already increased RAM on both servers to 24GB and CPUs are not pegged at all (15-30% utilization), so it's not a server performance issue. Mail itself is lightning fast.

Test E-mail Autoconfiguration results also vary depending on Exchange's mood. Sometimes it times out on one server and connects fine to the second. Sometimes it works fine on both. Sometimes it fails completely. Doing an /iisreset fixes everything, for a period of time.

Here are the results from Test-OutlookWebServices -Identity user@company.com while the problems are active:

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1019
Type       : Information
Message    : A valid Autodiscover service connection point was found. The Autodiscover URL on this object is https://server1.company.com/Autodiscover/Autodiscover.xml.

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1013
Type       : Error
Message    : When contacting https://server2.company.com/Autodiscover/Autodiscover.xml received the error The operation has timed out

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1023
Type       : Error
Message    : The Autodiscover service couldn't be contacted.

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1013
Type       : Error
Message    : When contacting https://server2.company.com/EWS/Exchange.asmx received the error The operation has timed out

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1025
Type       : Error
Message    : [EXCH] Error contacting the AS service at https://server2.company.com/EWS/Exchange.asmx. Elapsed time was 76 milliseconds.

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1013
Type       : Error
Message    : When contacting https://server2.company.com/EWS/Exchange.asmx received the error The operation has timed out

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1027
Type       : Error
Message    : [EXCH] Error contacting the UM service at https://server2.company.com/EWS/Exchange.asmx. Elapsed time was 42 milliseconds.

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1113
Type       : Error
Message    : When contacting https://server2.company.com/ews/exchange.asmx received the error The operation has timed out

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1125
Type       : Error
Message    : [Server] Error contacting the AS service at https://server2.company.com/ews/exchange.asmx. Elapsed time was 42 milliseconds.

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1113
Type       : Error
Message    : When contacting https://server2.company.com/ews/exchange.asmx received the error The operation has timed out

RunspaceId : bdd389c6-0a02-430a-940c-6b98d48dde86
Id         : 1127
Type       : Error
Message    : [Server] Error contacting the UM service at https://server2.company.com/ews/exchange.asmx. Elapsed time was 41 milliseconds.


↧

Webpage error for Apple User in OWA

January 22, 2014, 2:53 pm
$
0
0

Exchange 2010- User with Apple Mac gets the following errors when trying to respond to an email in OWA.  No Windows users have indicated any problems.

Safari:  A problem occurred with this webpage so it was reloaded.

Chrome: Aw, Snap!  Something went wrong while displaying this webpage.  To continue, reload or go to another page.

This happens repeatedly on some emails but not on every email.

Any insight would be helpful.

↧
Search

Exchange 2010 calendar meetings - allows meeting to be sent then sends decline message

January 22, 2014, 4:30 pm
$
0
0

We updated from Exchange 2003 to 2010 last year and are still trying to figure out how to make the resource rooms work properly.  In 2003, if you tried to schedule a meeting and the room was not available, it would not let you send the request.  2010 does and then sends back a decline message.  Can this be changed to be like 2003?

↧
↧

Received date not populating from MAPI?

January 22, 2014, 4:36 pm
$
0
0

Ok - this is a bit odd. Just upgraded to Exchange 2010 a few months back - and one of my accounting users has noticed a quirk with MAPI.

Our accounting package sends invoices via MAPI.  Up until now, both the "Sent" AND the "Received" Dates were populated with the date the email was sent.  Using the default view in Outlook/OWA, she was able to view the items (which she moves into a custom folder under her inbox) by date.  Since moving to Exchange 2010, for whatever reason, the "Received" date is no longer populated.  This renders viewing by date in OWA unusable, as all the new emails have a date of "None".  In Outlook, we can manually go in and add the "Sent" column and sort by that, but I'm wondering why the change.

I'm attaching a screenshot of OWA and of her Outlook inbox.  Just very strange...

Any ideas?

 - Mark

- Mark

↧

SMTP Error email to Public Folder

February 3, 2010, 9:05 am
$
0
0
We completed a 2003/2010 transition and the 2003 server has been decommissioned and shutdown.  I am getting this error when I send an email to a mail-enabled Public folder.    

Message delivery to 'domain.org' failed on server MAILSERVER Server: MAILSERVER
 A message tracking log entry was generated on server MAILSERVER at 02/01/2010 14:21:09 indicating that a message sent by USER@domain.org could not be delivered to 'domain.org'. Check the status to determine the reason for the failure. Recipients: address@domain.org Status: 554 5.6.0 STOREDRV.Deliver.Exception:ObjectNotFoundException; Failed to process message due to a permanent exception with message The Active Directory user wasn't found.

Exchange 2010 ENT on Server 2008 R2. 

↧

Users with Outlook showing connected, however can't send/receive email.

January 22, 2014, 10:41 am
$
0
0

Users work fine for about an hour and a half, then suddenly it doesn't send and receive. It shows Connected (Status "Established"). Mail will sit in outbox until Outlook is closed and re-opened. ActiveSync devices work perfectly as well as OWA. Just Outlook clients having strange problem.

Nothing is showing up in the server logs on the CASArray.

↧

Exchange 2010, Outlook 2010, Outlook 2011 (Mac)

January 22, 2014, 6:02 pm
$
0
0

Hey Team

I am working on an issue with "Send on Behalf of", the permissions have been granted and it is working, however the user wants to be able to do the following: (And only the following)

1) Click on the Inbox of her manager (In outlook), She has full access permissions and send on behalf for his box.
2) Send a message, from his Inbox.
3) Have the message she just sent show up as "Sent on behalf of" - without having to select the from field.

As mentioned above she is able to do "Send on behalf of" if she selects new message, from field >> manager name, and then she can send her email that way.

I think this has something to do with delegation, she is using outlook 2010.

Any ideas?

Robert

Robert

↧
↧

Problem with SMTP

January 1, 2014, 11:23 pm
$
0
0
Hi,
I get this exception and stacktrace
The server committed a protocol violation The server response was: UGFzc3dvcmQ6
   at System.Net.Mail.MailCommand.CheckResponse(SmtpStatusCode statusCode, String response)

due to these codes in my VS 2013 project

                    MailMessage message = new MailMessage();
                    message.From = new MailAddress("Administrator@my-friend.co");
                    message.To.Add("peterchen@gmail.com");
                    message.Subject = "test message";
                    message.Body = "This is a test e-mail message sent by an application. ";


                    SmtpClient client = new SmtpClient("my-friend.co", 587);
                    client.UseDefaultCredentials = false;
                    client.Credentials = new System.Net.NetworkCredential("Administrator@my-friend.co", "?????");
                    client.EnableSsl = true;
                    client.Send(message);
                    ...


I am not sure what to configure in my Exchange server, while right now it is fine to receive/send out mails. Meanwhile I've created Inbound and Outbound exceptions on TCP Port 25 & 587, on both server and client machines.

Many Thanks & Best Regards, Hua Min


↧

Build DR Site for Exchange 2010

January 17, 2014, 12:35 pm
$
0
0

Dear All,

We have Exchange 2010, 2 mailbox servers configured in DAG and two servers configure HUB and CAS on each with CAS Array. we want to build our DR site in case if the production site goes down then the user should not loose their email and the exchange servers should be up and running in DR site. my concern is;

- Should I build the same environment in DR site, I mean with 4 exchange servers or if I use one mailbox and 1 CAS/HUB server with heavy specs then it should be fine.

the total number of user are 3800 and the databases on each servers are 18.

how can I achieve this and what will be the procedure?

thanks in advance.


↧
Search

Can exchange accept email from this type of address?

January 22, 2014, 6:39 pm
$
0
0

Will exchange 2010 accept email with the from address in the following format?alom-alert@[192.168.0.1]

thanks

Clestine

↧

Outlook Web App can't connect to the Mailbox server yyyyyyyyyy.ccccccccccc.com for Cccccccccccc\xxxxx because the server is refusing RPC calls

January 21, 2014, 1:31 am
$
0
0
Log Name:      Application
Source:        MSExchange OWA
Date:          1/21/2014 11:06:28 AM
Event ID:      94
Task Category: Core
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      *********.cccccccccccc
Description:
Outlook Web App can't connect to the Mailbox server yyyyyyyyyy.ccccccccccc.com for cccccccc\xxxxx because the server is refusing RPC calls. This may indicate a problem with the Mailbox server. Exception: "Microsoft.Exchange.Data.Storage.StorageTransientException: The process failed to get the correct properties. ---> Microsoft.Mapi.MapiExceptionRpcServerTooBusy: MapiExceptionRpcServerTooBusy: Unable to get properties on object. (hr=0x80004005, ec=2419)
Diagnostic context:
    Lid: 41841   StoreEc: 0x973     
    Lid: 51059  
    Lid: 62321   StoreEc: 0x973     
    Lid: 49811  
    Lid: 64625   StoreEc: 0x973     
    Lid: 50128  
    Lid: 50288  
    Lid: 23354   StoreEc: 0x973     
    Lid: 25913  
    Lid: 21817   ROP Failure: 0x973     
    Lid: 20385  
    Lid: 28577   StoreEc: 0x973     
    Lid: 32001  
    Lid: 29953   StoreEc: 0x973     
   at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, SafeExInterfaceHandle iUnknown, Exception innerException)
   at Microsoft.Mapi.MapiProp.GetProps(ICollection`1 propTagsRequested)
   at Microsoft.Exchange.Data.Storage.MapiPropertyBag.GetProperties(IList`1 propertyDefinitions)
   --- End of inner exception stack trace ---
   at Microsoft.Exchange.Data.Storage.MapiPropertyBag.GetProperties(IList`1 propertyDefinitions)
   at Microsoft.Exchange.Data.Storage.StoreObjectPropertyBag.InternalLoad(ICollection`1 extraProperties)
   at Microsoft.Exchange.Data.Storage.StoreObjectPropertyBag..ctor(StoreSession session, MapiProp mapiProp, ICollection`1 autoloadProperties, Boolean canSaveOrDisposeMapiProp)
   at Microsoft.Exchange.Data.Storage.FolderPropertyBag..ctor(StoreSession session, MapiFolder mapiFolder, ICollection`1 properties)
   at Microsoft.Exchange.Data.Storage.CoreFolder.InternalBind(StoreSession storeSession, MapiFolder mapiFolder, StoreObjectId folderObjectId, Byte[] changeKey, ICollection`1 propsToReturn, Boolean allowSoftDeleted)
   at Microsoft.Exchange.Data.Storage.CoreFolder.InternalBind(StoreSession session, StoreId folderId, Boolean allowSoftDeleted, ICollection`1 propsToReturn)
   at Microsoft.Exchange.Data.Storage.Folder.<>c__DisplayClass23`1.<InternalBind>b__22()
   at Microsoft.Exchange.Data.Storage.Folder.InternalBind[T](CoreFolderBindDelegate coreFolderBindDelegate)
   at Microsoft.Exchange.Data.Storage.Folder.InternalBind[T](StoreSession storeSession, StoreId folderId, ICollection`1 propsToReturn)
   at Microsoft.Exchange.Data.Storage.SearchFolder.Bind(MailboxSession session, DefaultFolderType defaultFolderType, ICollection`1 propsToReturn)
   at Microsoft.Exchange.Clients.Owa.Core.OwaMapiNotificationHandler.InitReminderTableSubscription()
   at Microsoft.Exchange.Clients.Owa.Core.OwaMapiNotificationHandler.InitSubscriptions(ClientSubscriptionFlags flagsInit)
   at Microsoft.Exchange.Clients.Owa.Core.OwaMapiNotificationHandler.SubscribeForReminderChanges()
   at Microsoft.Exchange.Clients.Owa.Premium.StartPage.OnInit(EventArgs e)
   at System.Web.UI.Control.InitRecursive(Control namingContainer)
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)"
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="MSExchange OWA" />
    <EventID Qualifiers="49152">94</EventID>
    <Level>2</Level>
    <Task>2</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2014-01-21T05:36:28.000000000Z" />
    <EventRecordID>389747</EventRecordID>
    <Channel>Application</Channel>
    <Computer>********.Cccccccccc.com</Computer>
    <Security />
  </System>
  <EventData>
    <Data>yyyyyyyyyy.Cccccccccc.com</Data>
    <Data>ccccccccccc\xxxxxx</Data>
    <Data>Microsoft.Exchange.Data.Storage.StorageTransientException: The process failed to get the correct properties. ---&gt; Microsoft.Mapi.MapiExceptionRpcServerTooBusy: MapiExceptionRpcServerTooBusy: Unable to get properties on object. (hr=0x80004005, ec=2419)
Diagnostic context:
    Lid: 41841   StoreEc: 0x973     
    Lid: 51059  
    Lid: 62321   StoreEc: 0x973     
    Lid: 49811  
    Lid: 64625   StoreEc: 0x973     
    Lid: 50128  
    Lid: 50288  
    Lid: 23354   StoreEc: 0x973     
    Lid: 25913  
    Lid: 21817   ROP Failure: 0x973     
    Lid: 20385  
    Lid: 28577   StoreEc: 0x973     
    Lid: 32001  
    Lid: 29953   StoreEc: 0x973     
   at Microsoft.Mapi.MapiExceptionHelper.ThrowIfError(String message, Int32 hresult, SafeExInterfaceHandle iUnknown, Exception innerException)
   at Microsoft.Mapi.MapiProp.GetProps(ICollection`1 propTagsRequested)
   at Microsoft.Exchange.Data.Storage.MapiPropertyBag.GetProperties(IList`1 propertyDefinitions)
   --- End of inner exception stack trace ---
   at Microsoft.Exchange.Data.Storage.MapiPropertyBag.GetProperties(IList`1 propertyDefinitions)
   at Microsoft.Exchange.Data.Storage.StoreObjectPropertyBag.InternalLoad(ICollection`1 extraProperties)
   at Microsoft.Exchange.Data.Storage.StoreObjectPropertyBag..ctor(StoreSession session, MapiProp mapiProp, ICollection`1 autoloadProperties, Boolean canSaveOrDisposeMapiProp)
   at Microsoft.Exchange.Data.Storage.FolderPropertyBag..ctor(StoreSession session, MapiFolder mapiFolder, ICollection`1 properties)
   at Microsoft.Exchange.Data.Storage.CoreFolder.InternalBind(StoreSession storeSession, MapiFolder mapiFolder, StoreObjectId folderObjectId, Byte[] changeKey, ICollection`1 propsToReturn, Boolean allowSoftDeleted)
   at Microsoft.Exchange.Data.Storage.CoreFolder.InternalBind(StoreSession session, StoreId folderId, Boolean allowSoftDeleted, ICollection`1 propsToReturn)
   at Microsoft.Exchange.Data.Storage.Folder.&lt;&gt;c__DisplayClass23`1.&lt;InternalBind&gt;b__22()
   at Microsoft.Exchange.Data.Storage.Folder.InternalBind[T](CoreFolderBindDelegate coreFolderBindDelegate)
   at Microsoft.Exchange.Data.Storage.Folder.InternalBind[T](StoreSession storeSession, StoreId folderId, ICollection`1 propsToReturn)
   at Microsoft.Exchange.Data.Storage.SearchFolder.Bind(MailboxSession session, DefaultFolderType defaultFolderType, ICollection`1 propsToReturn)
   at Microsoft.Exchange.Clients.Owa.Core.OwaMapiNotificationHandler.InitReminderTableSubscription()
   at Microsoft.Exchange.Clients.Owa.Core.OwaMapiNotificationHandler.InitSubscriptions(ClientSubscriptionFlags flagsInit)
   at Microsoft.Exchange.Clients.Owa.Core.OwaMapiNotificationHandler.SubscribeForReminderChanges()
   at Microsoft.Exchange.Clients.Owa.Premium.StartPage.OnInit(EventArgs e)
   at System.Web.UI.Control.InitRecursive(Control namingContainer)
   at System.Web.UI.Page.ProcessRequestMain(Boolean includeStagesBeforeAsyncPoint, Boolean includeStagesAfterAsyncPoint)</Data>
  </EventData>
</Event>
↧
↧

Open Recursive Resolver within Exchange

January 23, 2014, 9:02 am
$
0
0

Hello All:

I've been inherited an Exchange 2010 environment that I've been clean up with now I got an e-mail that you can view at the bottom of this forum.  

This is an exchange server and my ns1. --- How do I fix this problem ?  I'm finding the following:

Microsoft DNS Server
It is not currently possible to restrict recursive DNS requests to a particular client address range in Microsoft DNS Server. To approximate the functionality of the BIND access control lists in Microsoft’s DNS Server, a different caching-only name server should be set up internally to provide recursive resolution. A firewall rule should be created to block incoming access to the caching-only server from outside the organization’s network. The authoritative name server functionality would then need to be hosted on a separate server, but configured to disable recursion as previously described.


You appear to be running an open recursive resolver at IP address xxx.xxx.xx.x that participated in an attack against a customer of ours today, generating large UDP responses to spoofed queries, with those responses becoming fragmented because of their size.

Please consider reconfiguring your resolver in one or more of these ways:

- To only serve your customers and not respond to outside IP addresses (in BIND, this is done by defining a limited set of hosts in "allow-query"; with a Windows DNS server, you would need to use firewall rules to block external access to UDP port 53)
- To only serve domains that it is authoritative for (in BIND, this is done by defining a limited set of hosts in "allow-query" for the server overall but setting "allow-query" to "any" for each zone)
- To rate-limit responses to individual source IP addresses (DNS Response Rate Limiting, or DNS RRL)

More information on this type of attack and what each party can do to mitigate it can be found here: http://www.us-cert.gov/ncas/alerts/TA13-088A 

If you are an ISP, please also look at your network configuration and make sure that you do not allow spoofed traffic (that pretends to be from external IP addresses) to leave the network. Hosts that allow spoofed traffic make possible this type of attack.

Example DNS responses from your resolver during this attack are given below. Times are PST (UTC-8), and the date is 2014-01-22.

23:15:13.998546 IP (tos 0x0, ttl 120, id 3860, offset 0, flags [+], proto UDP (17), length 1500) xxx.xxx.xx.x.53 > 74.91.121.26.58154: 32610| 245/0/1 fkfkfkfa.co.uk. A 204.46.43.5[|domain]
0x0000: 4500 05dc 0f14 2000 7811 a606 8079 2408 E.......x....y$.
0x0010: 4a5b 791a 0035 e32a 0f9b d806 7f62 8380 J[y..5.*.....b..
0x0020: 0001 00f5 0000 0001 0866 6b66 6b66 6b66 .........fkfkfkf
0x0030: 6102 636f 0275 6b00 00ff 0001 c00c 0001 a.co.uk.........
0x0040: 0001 0000 1b68 0004 cc2e 2b05 .....h....+.
23:15:14.000943 IP (tos 0x0, ttl 120, id 3861, offset 0, flags [+], proto UDP (17), length 1500) xxx.xxx.xx.x.53 > 74.91.121.26.34633: 49032| 245/0/1 fkfkfkfa.co.uk. A 204.46.43.5[|domain]
0x0000: 4500 05dc 0f15 2000 7811 a605 8079 2408 E.......x....y$.
0x0010: 4a5b 791a 0035 8749 0f9b f3c1 bf88 8380 J[y..5.I........
0x0020: 0001 00f5 0000 0001 0866 6b66 6b66 6b66 .........fkfkfkf
0x0030: 6102 636f 0275 6b00 00ff 0001 c00c 0001 a.co.uk.........
0x0040: 0001 0000 1b68 0004 cc2e 2b05 .....h....+.
23:15:14.002766 IP (tos 0x0, ttl 120, id 3862, offset 0, flags [+], proto UDP (17), length 1500) xxx.xxx.xx.x.53 > 74.91.121.26.12919: 23562| 245/0/1 fkfkfkfa.co.uk. A 204.46.43.5[|domain]
0x0000: 4500 05dc 0f16 2000 7811 a604 8079 2408 E.......x....y$.
0x0010: 4a5b 791a 0035 3277 0f9b ac12 5c0a 8380 J[y..52w....\...
0x0020: 0001 00f5 0000 0001 0866 6b66 6b66 6b66 .........fkfkfkf
0x0030: 6102 636f 0275 6b00 00ff 0001 c00c 0001 a.co.uk.........
0x0040: 0001 0000 1b68 0004 cc2e 2b05 .....h....+.

-John
President
Nuclearfallout, Enterprises, Inc. (NFOservers.com)

(We're sending out so many of these notices, and seeing so many auto-responses, that we can't go through this email inbox effectively. If you have follow-up questions, please contact us at noc@nfoe.net.)

↧

Outlook mailenabled PublicFolder, readflag reset if someone other change the category

January 23, 2014, 9:25 am
$
0
0

Outlook mailenabled PublicFolder, readflag reset if someone other change the category.

Situation:

A Mail is incomming to the mailenabled public folder and i read it. Then i switched to the next item in outlook.

A other colleague also read this mail and change the category.

After a short period of time, the mail is marked as unread again for me.

Is there a option to disable this feature?

best regards

Chris

↧

Exchange 2010 DAG

January 9, 2014, 3:49 am
$
0
0

Hi Team,

I have 3 exchange 2010 mailbox servers installed and we have configured DAG between these 3 servers.

2 servers are in one site and 1 server is in another site.

We are frequently seing issues which shows DB status as "SERVICE DOWN" and just one refresh will bring in actual status.

What i mean to say is Service is not really down if at all it was then refresh would have not solved the problem.

Any suggestion on how to resolve this will be highly appreciated.

Note: we are using single NIC for replication and MAPI sessions.

Thanks and Regards -

Sujit

Thanks and Regards - Sujit

↧
Viewing all 19572 articles
Browse latest View live
Search
<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>