Exchange 2003 Email Not Delivered (Dropped) When Symantec Mail Security for Exchange (SMSMSE) Returns Error Message "This message has been set as bad mail on the SMTP server"
| Article:TECH153939 | | | Created: 2011-02-22 | | | Updated: 2012-02-13 | | | Article URL http://www.symantec.com/docs/TECH153939 |
Problem
Email is lost and not delivered.
NOTE: This symptom and the associated 348 event (see below) typically occur as a result of other problems on the server. For example if SMSMSE cannot read Antivirus definitions, SMSMSE may report the 348 event (see below). If the original issue is resolved or not encountered this issue does not appear either.
Error
- SMSMSE reports the following error event in the Windows Application Event log:
- Microsoft Exchange Transport Agent may report the following error event:
Also see article How to Troubleshoot Windows Event Log ID 348 "A message could not be virus scanned - this operation will be retried later.".
- This may come in conjunction with SMSMSE problems with antivirus rules.
This may result in events with the following IDs: 110, 168, 68, and 167. See the following article The Exchange server is beeping, and / or you are getting the following SMSMSE events: 110, 168, 68, and 167, in Windows Application Event log.
Environment
- Exchange 2003
- Exchange is configured with no Badmail folder.
This is typically the case when Exchange SP1 or higher is installed. See Microsoft article The Badmail folder is disabled in Exchange Server 2003 SP1.
Cause
When SMSMSE is unable to scan an item, it is returning the "bad mail" status field when returning an error back to Exchange. When Exchange is configured without a BadMail folder Exchange drops these emails silently.
Solution
Upgrade to SMSMSE version 6.5.5 or higher.
Instead of marking items as bad mail, SMSMSE will skip SMTP scanning on items that are inaccessible to the scanner during SMTP transport and report the following message in the Windows Application Event log:
Technical Information
Use the article How to Troubleshoot Windows Event Log ID 348 "A message could not be virus scanned - this operation will be retried later." to determine why the message was inaccessible.
In some cases the email is available to the Outlook client through the Sync Issues Outlook folders (see attachment). If the Sync Issues folder is not in the list of Outlook folders click on the folder icon at the bottom of the Navigation Pane or hit Ctrl+6 to display the folder List. See the following Microsoft article regarding using the Sync Issues folders: Synchronization error folders.
Attachments
|
|
| Source | ETrack |
| Value | 2236061 |
| Source | Event ID |
| Value | 348 |
| Description | SMTP scanning failed on the message with subject: <subject> This message has been set as bad mail on the SMTP server. |
Article URL http://www.symantec.com/docs/TECH153939
Terms of use for this information are found in Legal Notices
Thank you.