Ironport - mailflow stops for minutes and then continue

[Pontus27]

Hi,

Here is a log that shows that it takes minutes for the mail to get delivered.
It happens sometimes, never the same time, never from the same domain.
Do anyone have a idea where i should look to get more information what cause this?
mail.logg does not say anything.


23 Oct 2023 11:33:02 (GMT +02:00) Message 13804929 Consolidated Sender Threat Level: Neutral, Threat Category: N/A, Suspected Domain(s) : N/A (other
reasons for verdict). Sender Maturity: 30 days (or greater) for domain: Domain.se
23 Oct 2023 11:33:02 (GMT +02:00) Message 13804929 (3668 bytes) from prvs=653b96b11=x.y@domain.se ready.
23 Oct 2023 11:38:09 (GMT +02:00) Message 13804929 has sender_group: UNKNOWNLIST, sender_ip: xxx.xx.xx.xx.x and sbrs: 5.2
23 Oct 2023 11:38:09 (GMT +02:00) Message 13804929 matched per-recipient policy All Users Content Filters for inbound mail policies.
23 Oct 2023 11:39:09 (GMT +02:00) SMTP delivery connection (DCID 731336) opened from Cisco IronPort interface xx.xx.x.xx to IP address xx.xx.x.xx
on port 25.

Regards
Pontus

[Udupi Krishna.]

This is generally seen when there are workqueue delays or when the box is experiencing high workqueue. If you have used status logs in the past, feel free to go through them around the time of this delay to check the workqueue size

[Pontus27]

Hi,

Thanks for checking this out - sadly i do not see anything sticking out in status logs.
Is it anything else i should take a look at?

Regards
Pontus