During
these days I had a major issue between two Exchange servers in different
continents.
Suddenly email between two exchange servers wasn't delivered and I got
this error:
451 4.4.0 Primary target IP address responded with "421 4.4.2
connection dropped due to timeout"
here are actions that I followed to solve this kind of issue:
1. telnet on each exchange server on port 25 and trying to send email
(I didn't got no errors but no email was delivered)
telnet smtpserver 25
helo Test
mail from: user1@mail1
rcpt to: user1@mail1
data
"End data with."
.
quit
helo Test
mail from: user1@mail1
rcpt to: user1@mail1
data
"End data with
.
quit
2. Restart Transport services and Attendant
3. Restart servers
4. Enabled verbose logging on send and receive connectors
To locate relatives log we should open the Exchange Management Console, expand Server Configuration, click on the server role (which may be Hub, Mailbox or an Edge Server), and right click on the chosen server and Properties. Finally, click on Log Settings tab
And using trace32.exe to view logs and I found strange errors
5. So I suspected certificate problems so:
6. Get-ExchangeCertificate | fl
7. So I reattached same certificate to SMTP service, for your reference, here's the powershell command we ran to reattach itto the SMTP service:
Enable-ExchangeCertificate -Thumbprint xxxxxxxxxxx -Services SMTP
You can find the thumbprints for all availabe cert by running the Get-ExchangeCertificate command.
8. restarted attendand services and after some minutes everythings worked again
[Useful related articles]
http://visualplanet.org/blog/?p=5
http://exchangeserverpro.com/exchange-transport-server-back-pressure/
http://www.msexchange.org/articles-tutorials/exchange-server-2007/management-administration/managing-exchange-server-2007-log-files-part3.html
http://exchange.mvps.org/smtp_frames.htm
http://www.networkadminsecrets.com/2010/04/421-and-451-exchange-2007-errors.html
https://social.technet.microsoft.com/Forums/en-US/6bbea3ef-28b5-4faa-a622-c1abe4a1a3c3/421-442-connection-dropped-due-to-socketerror