Business VM Connection - Delayed incoming emails to Exchange Server

[itcomms]

we have recently had Virgin Business 50MB Installed, we have now noticed that some emails to our exchange server are delayed.

emails from this forum, google, hotmail all arrive at our exchange server within a few seconds, yet we have noticed that a few of emails we get are delayed and some times can be up to 5 hours.

the pain is when ever i do external tests, i get the emails within a minute. so its hard to find out whats going on.

does anyone else have this problem?

[Kymmy]

SMTP delays should be nothing to do with your connection unless the SMTP servers trying to connect are being dropped through some issue..

[itcomms]

I Agree, but nothing has chnaged other then the internet connection. VM Business told me today they are aware of an issue to do with MTU Sizes and suggest changing the MTU on the server as they have had someone else say about delayed emails.

but they cant recall what the MTU should be set to

[qasdfdsaq]

Usually "auto" works the best. But try this to figure out manually if there's an MTU problem:

http://help.expedient.com/broadband/mtu_ping_test.shtml

If in doubt, setting it to a ridiculously low number (e.g. 576) will offer the best robustness and compatibility at the cost of throughput.

[itcomms]

1470 works

[craigj2k12]

cable uses 1500 so set it to 1472

[ccarmock]

I have had the very same issue since moving from the 10 Mb/s business service to 50 Mb/s - around 5 hour delivery time on some inbound emails.

I blamed Postini which I use for anti spam.

Where do you recommend making the MTU size change - within MS Exchange?

Do you know if VMB are going to change anything to address this?

[itcomms]

I have sent Adam More at VM Business an email regarding this issue and hope for a reply early tomorrow.

---------- Post added at 22:10 ---------- Previous post was at 21:22 ----------

Right the max MTU size i can get to work is 1472 going by the info on http://help.expedient.com/broadband/mtu_ping_test.shtml

it says add 28 to the largest size that does not fragment which then gives 1500

our servers are already set to 1500 so im now back to the drawing board i guess.

[qasdfdsaq]

If you have access to the full (detailed) headers for the message the timestamps within should tell you where the delays are occuring. That's a starting point. Check your link to/from those locations while doing a test.

[itcomms]

Ok, below email is actually a spam email, but i have noticed a 10 minute delay in this email.



X-AVG-Antispam-Info: 99,4.5,0,ac2453d9b3d57861,d41d8cd98f00b204,
reply@tiptrumpet.co.uk,,RULES_HIT:1:2:10:46:150:15 2:355:379:455:541:542:945:
946:960:962:967:972:973:978:979:983:988:989:1135:1 137:1140:1155:1189:1208:
1221:1308:1309:1313:1314:1345:1390:1431:1432:1433: 1434:1436:1437:1516:1517:
1518:1546:1550:1551:1555:1562:1571:1572:1575:1587: 1588:1589:1592:1594:1676:
1730:1776:1792:2194:2198:2199:2200:2379:2525:2568: 2610:2682:2685:2741:2827:
2857:2859:2892:2897:2902:2917:2933:2937:2939:2942: 2945:2947:2951:2954:3000:
3022:3167:3353:3636:3657:3770:3865:3866:3867:3868: 3869:3870:3871:3872:3873:
3934:3936:3938:3941:3944:3947:3950:3953:3956:3959: 4051:4080:4250:4321:4383:
4384:4386:4395:4605:4648:4810:4903:5007:6119:6216: 6238:6757:7266:7679:7757:
7809:7862:7903:7904:7974:8518:8599:8603:8651:8885: 8957:9025:9040:9060:9072:
9077:9343:9388:9391:9411:9416:9855:9908:9951:10013 ,0,RBL:none,CacheIP:none,
Bayesian:0.5,0.5,0.5,Netcheck:none,DomainCache:0,M SF:not bulk,SPF:,MSBL:,
DNSBL:tiptrumpet.co.uk-dnsbl7.mailshell.net-127.0.0.192,Custom_rules:0:2:0
X-Antivirus: AVG for E-mail
Reply-To: <reply@tiptrumpet.co.uk>
From: "PPI Advice Line with TipTrumpet, Inc." <reply@tiptrumpet.co.uk>
To: "Dave ********"
Subject: =?utf-8?Q?Taken_out_a_loan_after_2003_=E2=80=93_yo?=
=?utf-8?Q?u_may_be_able_to_claim_=C2=A31000=E2=80=99s_?=
Date: Sun, 4 Mar 2012 19:40:21 -0000
Message-ID: <1305.713.182302.913497.277298558.223@tiptrumpet.co .uk>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_068E_01CCFA4C.19010EE0"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQIbyND+JCN4jSzN1lGN0+K4F1hxaA==
Content-Language: en-gb
x-ms-exchange-organization-authsource: POWEREDGE.it-commms.local
x-ms-exchange-organization-authas: Anonymous
domainkey-signature: a=rsa-sha1; c=nofws; q=dns; s=tiptrumpet.co; d=tiptrumpet.co.uk; b=omF+yOSACQ33rTb5sPQnUCRF0NdTr2mb9rBV3KPIdDJtAkMT AwNag9vXD7ieouPiPRlQ8aROaC7Y 6P2VJ2wbBw==;
dkim-signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=tiptrumpet.co; d=tiptrumpet.co.uk; h=Date:From:Reply-To:To:Message-ID:Subject:MIME-Version:Content-Type; i=reply@tiptrumpet.co.uk; bh=vRDjqykQuhKcoS40Vy1abWIcLCA=; b=ehxYACT1FPrijgitvajsBUdFmOt8BvAQ7S8GYfiX3yQCZ0Wy udeRmjvYZB4Zg+AVH/xznx0H3mXk 8MR2sTmVeA==






5 Hour Delay

Customer sent at 16:54 and i got it at 20:19


X-AVG-Antispam-Info: 0,0,0,,d41d8cd98f00b204,p*******************,,
RULES_HIT,0,RBL:none,CacheIP:none,Bayesian:0.5,0.5 ,0.5,Netcheck:none,
DomainCache:0,MSF:not bulk,SPF:,MSBL:,DNSBL:none,Custom_rules:0:0:0
X-Antivirus: AVG for E-mail
From: "***********
To: "***********l"
Subject: Cherisse's phone
Date: Fri, 2 Mar 2012 16:54:13 -0000
Message-ID: <014f01ccf895$19430560$4bc91020$@****************** *>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0209_01CCF8B2.6B15F510"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQH0H2lCzEk2BnXuEIIXM4qZN4rJfQ==
Content-Language: en-gb
x-ms-exchange-organization-authsource: POWEREDGE.it-commms.local
x-ms-exchange-organization-authas: Anonymous
x-antispam: NO; Spamcatcher 6.3.6. Score 50
x-avg-antispam-info: 50,0,0,b2b7cbc5b9d419ba,d41d8cd98f00b204,********* **********:********,RULES_HIT:1:10:355:379:455:476 :541:542:871:960:962:967:972:973:983:988:989:1000: 1021:1029:1155:1160:1189:1197:1208:1260:1261:1308: 1309:1313:1314:1345:1431:1432:1436:1437:1487:1516: 1517:1518:1544:1545:1573:1575:1588:1589:1592:1691: 1711:1730:1776:1792:2380:2525:2526:2528:2553:2566: 2610:2612:2682:2685:2734:2857:2859:2892:2893:2902: 2917:2933:2937:2939:2942:2945:2947:2951:2954:3000: 3022:3138:3139:3140:3141:3142:3167:3352:3366:3552: 3554:3865:3866:3867:3868:3869:3870:3871:3872:3873: 3934:3936:3938:3941:3944:3947:3950:3953:3956:3959: 4048:4093:4321:4379:4504:4512:4514:4516:5013:6117: 6119:6261:6300:6354:6358:6506:7210:7281:7653:7679: 7688:7861:7903:7974:8583:8599:8603:8957:8985:9025: 9163:9388:9521:9855:9868:9987:10004:10026:10049:10 072:10197:10261:10919:11656:11658:12043,0,RBL:neut ral,CacheIP:none,Bayesian:0.5,0.5,0.5,Netcheck:non e,DomainCache:0,MSF:not bulk,SPF:f
n,MSBL:,DNSBL:neutral,Custom_rules:0:0:0
x-authenticated-as: ****.*****@******.co.uk

[qasdfdsaq]

Hmm, those don't seem to be the full headers - not sure if that's because Exchange just doesn't show them though. This is what you'd expect in a normal header:

Delivered-To: emailaddy
Received: by 10.43.49.135 with SMTP id va7csp102546icb; Sat, 3 Mar 2012 22:11:49 -0800 (PST)
Received: by 10.236.184.8 with SMTP id r8mr17038615yhm.110.1330841508445; Sat, 03 Mar 2012 22:11:48 -0800 (PST)
Return-Path: <www@xda-developers.com>
Received: from titan.xda-developers.com (50.23.193.228-static.reverse.softlayer.com. [50.23.193.228]) by mx.google.com with ESMTP id u67si6647132yhm.26.2012.03.03.22.11.47; Sat, 03 Mar 2012 22:11:48 -0800 (PST)
Received-SPF: pass (google.com: domain of www@xda-developers.com designates 50.23.193.228 as permitted sender) client-ip=50.23.193.228; Authentication-Results: mx.google.com; spf=pass (google.com: domain of www@xda-developers.com designates 50.23.193.228 as permitted sender)
smtp.mail=www@xda-developers.com
Received: by titan.xda-developers.com (Postfix, from userid 501) id F2C061560B9A; Sun, 4 Mar 2012 00:06:36 -0600 (CST)
To: emailaddy
Subject: "Network icon: H+" update
From: "xda-developers" <webmaster@xda-developers.com>
Auto-Submitted: auto-generated
Message-ID: <20120304060636.a7219582a68c@forum.xda-developers.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="ISO-8859-1"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Date: Sun, 4 Mar 2012 00:06:36 -0600 (CST)

i.e. you see the date and time of each hop it passes through. The above example shows this message being "stuck" for 5 minutes 12 seconds on the mail server titan.xda-developers.com and then taking all of 1 second to pass through 3 Google mail servers.

[craigj2k12]

youve left your email address in there qas

[itcomms]

AVG was stripping the headers, i have removed this and waiting for the next delayed email.

[qasdfdsaq]

youve left your email address in there qas
And?

qasdfdsaq@any-major-email-provider.com ... not hard to guess.

[itcomms]

now enabled Verbose logging for the Exchange Receive Connector.

will keep an eye on this and update this page when i have info

[craigj2k12]

And?

qasdfdsaq@any-major-email-provider.com ... not hard to guess.

fair enough, i wouldnt leave my email address out in public

[qasdfdsaq]

Interesting, I thought it was already out all over the net, but this page is the first and only google search result for my full email address. I there I was wondering why I got so little spam compared to everyone else I know...