11-30-2016 01:15 PM
Hello, I need help preventing delayed/bounced messages from being re-sent.
Our network team accidentally removed some IP restrictions on Port 25 to our IronPort C370, and suddenly we were being used as an SMTP relay for spam. As soon as we discovered this we fixed the issue, but there are still tons of delayed messages that are trying to be sent every hour.
Is there a way I can kill all these queued messages to prevent them from re-sending?
Here's the tail-end of an example message:
30 Nov 2016 16:00:44 (GMT -05:00) | (DCID 9104165) Message 26159394 to (no recipient data) delayed. Reason: 4.3.2 - Not accepting messages at this time ('421', ['4.7.0 [TSS04] Messages from x.x.x.x temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html']) [] |
---|---|
30 Nov 2016 16:00:44 (GMT -05:00) | Message 26159394 to (no recipient data) pending until Wed Nov 30 17:00:44 2016 as per bounce profile Default. |
Solved! Go to Solution.
11-30-2016 02:06 PM
Hi,
As these emails have already been processed by the ESA and are currently in the delivery queue, this would re-attempt delivery as per bounce profile which by default is 3 days.
Emails in the delivery queue can be deleted using command "deleterecipients", however use with caution so as not to delete required emails
cisco.lab> deleterecipients
Please select how you would like to delete messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]> 1
Please enter the hostname for the messages you wish to delete.
[]> destinationdomain.com
As the emails have finished processing in the workqueue we cannot create filters to take action on them any longer.
You can use "showreceipients" to review these emails.
cisco.lab> showrecipients
Please select how you would like to show messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]>
Thanks
Libin Varghese
11-30-2016 02:06 PM
Hi,
As these emails have already been processed by the ESA and are currently in the delivery queue, this would re-attempt delivery as per bounce profile which by default is 3 days.
Emails in the delivery queue can be deleted using command "deleterecipients", however use with caution so as not to delete required emails
cisco.lab> deleterecipients
Please select how you would like to delete messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]> 1
Please enter the hostname for the messages you wish to delete.
[]> destinationdomain.com
As the emails have finished processing in the workqueue we cannot create filters to take action on them any longer.
You can use "showreceipients" to review these emails.
cisco.lab> showrecipients
Please select how you would like to show messages:
1. By recipient host.
2. By Envelope From address.
3. All.
[1]>
Thanks
Libin Varghese
12-01-2016 07:29 AM
Thank you. I have deleted most messages from the largest number of domains, however there were still some bouncing around.
I ended up tweaking my default bounce profile as well (Network > Bounce Profiles > Default). Maximum queue time was changed to 86400, which is only 1 day. I also changed the maximum number of retries to 10.
By this morning all messages were gone.
12-01-2016 08:50 AM
Glad to be of help.
-- Libin
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide