cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3627
Views
10
Helpful
3
Replies

Stop re-sending bounced messages

cthayer
Level 1
Level 1

Hello, I need help preventing delayed/bounced messages from being re-sent.

Our network team accidentally removed some IP restrictions on Port 25 to our IronPort C370, and suddenly we were being used as an SMTP relay for spam. As soon as we discovered this we fixed the issue, but there are still tons of delayed messages that are trying to be sent every hour.

Is there a way I can kill all these queued messages to prevent them from re-sending?

Here's the tail-end of an example message:

30 Nov 2016 16:00:44 (GMT -05:00) (DCID 9104165) Message 26159394 to (no recipient data) delayed. Reason: 4.3.2 - Not accepting messages at this time ('421', ['4.7.0 [TSS04] Messages from x.x.x.x temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html']) []
30 Nov 2016 16:00:44 (GMT -05:00) Message 26159394 to (no recipient data) pending until Wed Nov 30 17:00:44 2016 as per bounce profile Default.
1 Accepted Solution

Accepted Solutions

Libin Varghese
Cisco Employee
Cisco Employee

Hi,

As these emails have already been processed by the ESA and are currently in the delivery queue, this would re-attempt delivery as per bounce profile which by default is 3 days.

Emails in the delivery queue can be deleted using command "deleterecipients", however use with caution so as not to delete required emails

cisco.lab> deleterecipients

Please select how you would like to delete messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]> 1

Please enter the hostname for the messages you wish to delete.
[]> destinationdomain.com

As the emails have finished processing in the workqueue we cannot create filters to take action on them any longer.

You can use "showreceipients" to review these emails.

cisco.lab> showrecipients

Please select how you would like to show messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]>

Thanks
Libin Varghese

View solution in original post

3 Replies 3

Libin Varghese
Cisco Employee
Cisco Employee

Hi,

As these emails have already been processed by the ESA and are currently in the delivery queue, this would re-attempt delivery as per bounce profile which by default is 3 days.

Emails in the delivery queue can be deleted using command "deleterecipients", however use with caution so as not to delete required emails

cisco.lab> deleterecipients

Please select how you would like to delete messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]> 1

Please enter the hostname for the messages you wish to delete.
[]> destinationdomain.com

As the emails have finished processing in the workqueue we cannot create filters to take action on them any longer.

You can use "showreceipients" to review these emails.

cisco.lab> showrecipients

Please select how you would like to show messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]>

Thanks
Libin Varghese

Thank you. I have deleted most messages from the largest number of domains, however there were still some bouncing around.

I ended up tweaking my default bounce profile as well (Network > Bounce Profiles > Default). Maximum queue time was changed to 86400, which is only 1 day. I also changed the maximum number of retries to 10.

By this morning all messages were gone.

Glad to be of help.

-- Libin