0

Recently we have been unable to receive emails on our Exchange 2007 server from a couple of domains, a bank and a government agency.

No changes have been made to the server recently and I'm having trouble pinpointing the cause.

When I examine the receive connector logs I can see those domains connect to the server but never deliver the message.

When they unsuccessfully try to send us an email, this is what the receive connector log looks like this unsuccessful delivery

When we successfully receive an email from other domains this is what the receive log looks like successful delivery

The certificate thumbprint that is being sent in both cases is the self-signed certificate and not our third-party signed certificate. For some reason the person who created the self-signed certificate included both our local domain name and our public domain name. The domains that are unsuccessfully sending us email seem to stop trying after that point whereas the domains that are successful are trying another method which ends up working.

Could it be that they are not able to deliver the mail to us because the certificate we are sending them is the self-signed one and not the third-party one? There have been no changes to the certificates in some time but this issue only started recently.

Also the senders of these emails do not receive an immediate bounce-back, they receive those a day or so later.

Any help with this is greatly appreciated.

Adam
  • 11
  • 1

1 Answers1

1

Turns out that there were 3 certificates on the server, 2 self-signed and one from a CA.

I deleted the first self-signed cert but it just started sending the other self-signed one.

After deleting both self-signed certs the problem has gone away and the mail from those domains are now being delivered.

I hate it when things work 99% of the time the way they are but you have to start deleting things to get that other 1% yet risk messing but the parts that work.

Anyways hope this helps someone else in the future.

Adam
  • 11
  • 1