cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
455
Views
0
Helpful
4
Replies

Delay in getting emails

jnourbakhsh
Level 1
Level 1

Hello Community, I have delay to getting emails from internet. how should i troubleshoot and find the reason?

Thanks and Best regard

4 Replies 4

you dont provide enough details... was it working before ? what product are you using ?

virus/malware scanning can cause delays, and also rate limiting of messages etc..

did you check the logs ?

is it happening for every email ? or just some of them ?

can you reproduce this consistently from for example gmail or yahoo or hotmail etc at will ?

Hi ccieexpert. Thanks for replying. This cause after upgrading to the new version 16.xx as follows:

ESA Model: C600V

Operating System: 16.0.0-054

Yes i check the logs and it seems that, there is problem in getting emails from out side as follow:

Message 2312201 Consolidated Sender Threat Level: Favorable, Threat Category: N/A, Suspected Domain(s) : N/A (other reasons for verdict). Sender Maturity: 30 days (or greater) for domain: YQZPR01CU011.outbound.protection.outlook.com

Message 2312201 on incoming connection (ICID 272437) added recipient (myemail@mydomain.com).

Message 2312201 original subject on injection:

Message 2312201 aborted: Receiving aborted

SMTP connection closed on incoming connection (ICID 272437).

Yes it happened for all emails even gmail/yahoo/outlook as i check these domains everyday to verify everything's ok.

When i rebooting the ESA, problem solve and i will get all emails without any problem. By the way, this story will repeat everyday once at beginning of morning for getting emails.

 

 

To add to what ccieexpert noted, it would also be valuable to understand what you consider a delay.
Are we talking about minutes, or hours?

(minutes is no uncommon, since email isn't real time communication, and for emails with attachments up to an hour can be expected in some edge-cases.)

Regarding "how to troubleshoot", one of the  ways would be to look at the email header on an inbound email that you received.
In outlook you can, for example, just open up the email, go into properties and look at "Internet headers".

The email will include an "Received" header for each SMTP gateway it goes through, (unless it's deliberately removed).
The Received header will include timestamps.

For example, consider the headers from this email I got in 2021, and tried to remove identifying info from.


Received: from <my email srv> (LHLO <my email srv>) (<my email srv ip>) by
 <my email srv> with LMTP; Tue, 26 Oct 2021 12:58:58 +0000 (UTC)
Received: from localhost (localhost.localdomain [127.0.0.1])
	by <my email srv> (Postfix) with ESMTP id 4AB181105CAB2
	for <my email>; Tue, 26 Oct 2021 12:58:58 +0000 (UTC)
Received: from <my email srv> ([127.0.0.1])
	by localhost (<my email srv> [127.0.0.1]) (amavisd-new, port 10032)
	with ESMTP id ID2ayBhvnpD4 for <my email>;
	Tue, 26 Oct 2021 12:58:56 +0000 (UTC)
Received: from localhost (localhost.localdomain [127.0.0.1])
	by <my email srv> (Postfix) with ESMTP id 79E171105CAB3
	for <my email>; Tue, 26 Oct 2021 12:58:56 +0000 (UTC)
Received: from <my email server> ([127.0.0.1])
	by localhost (<my email srv> [127.0.0.1]) (amavisd-new, port 10026)
	with ESMTP id yFd9eV9UOJoR for <my email>;
	Tue, 26 Oct 2021 12:58:56 +0000 (UTC)
Received: from <my mx hostname> (unknown [<my mx ip>])
	by <my email server> (Postfix) with ESMTPS id 33CEB1105CAB2
	for <my email>; Tue, 26 Oct 2021 12:58:56 +0000 (UTC)
Received: from <remote MX hostname> ([<remote mx IP>])
 by <my mx hostname> with ESMTP/TLS/ECDHE-RSA-AES256-GCM-SHA384;
 26 Oct 2021 12:58:34 +0000
Received: from unknown (HELO <remote exchange hostname>) ([<remote mail srv IP addr>])
 by <remote MX hostname> with ESMTP; 26 Oct 2021 12:58:34 +0000
Received: from <remote mail srv hostname> ([::1]) by <remote mail srv hostname> ([::1]) with mapi id
 14.03.0513.000; Tue, 26 Oct 2021 12:58:34 +0000

You can see that the remote email server (exchange) sent the email at 12:58:34 to it's local MX, and over to my MX, and there's a 22 second delay before my MX sends the email over to my email server, and we can see another 2 second delay in internal processing between components.

This is what you could to to identify where the supposed delay is happening.

If you're operating your own mail server & gateway, logs from those systems is what you could also be looking at.

 

 

 

Hi Jonatan Jonasson

Thanks for reply. It takes minutes and around 3 to 5 minutes. Please look at my answer to ccieexport too.