Showing results for 
Search instead for 
Did you mean: 

Message tracking shows time in the past and recent.


We've got 2 Cisco Ironport C100V in cluster mode.

Now we have some trouble with a mailing to 1 subcontractor.

We can recieve mails but when we want to send a mail there a problem.

In the message tracking you see the following.

messagetooold, Email Security

Schermafbeelding 2021-05-04 162617.png


When i open some other message trackings i see some of them with the normal date and some of them with also 2017 in the first rules. 

There are no problems with this mails.


What can i check or verify?



Cisco Employee

There is some kind of an issue with the connectivity to the remote server.

ESA acted as per default configuration and tried to deliver the email for 3 days before give up and generate a hard bounce message to the sender.

You can search in the mail logs for connection errors to this server or recipient domain:

grep "Apr 30.*Connection Error.*domain\\.nl" mail_logs

grep "Apr 30.*Connection Error.*recipient'sIP" mail_logs


Might also be a TLS related error, may want to check what are your TLS settings for outgoing traffic and check what the remote server is supporting. A packet capture to this same remote server may also be handy.

About your other query - you can ignore the older data from previous years - this happens on ESAs with relatively high traffic when the counters for ICID in your case got flipped and starts counting again. In your case it seems like it takes ~4 years to flip the counter.



Thanks for the reply. I checked the logs and saw the following:

 10:45:51 2021 Info: Connection Error: DCID 1143081 domain: IP: xx.5.xx.111 port: 25 details: [Errno 61] Connection refused interface: reason: network error


Today i heard all the messaged send were deliverd. There was no change on our or their side. So the problem is gone but still a wierd thing.

Content for Community-Ad