Exchange 2016 CU23 sending complete but not receive.

[Supanirun_R]

I'm having some trouble with my Exchange 2016 server. I can send emails without any problem, but I don't receive them. I'm running CU23 Version 15.1 (Build 2507.6)

PS C:\Users\administrator> Get-MessageTrackingLog -Start "10/18/2023 01:00AM" -End "10/19/2023 11:59PM" -Sender "email address removed for privacy reasons" -Recipients "email address removed for privacy reasons"

Timestamp EventId Source Sender Recipients MessageSubject
--------- ------- ------ ------ ---------- --------------
18-Oct-23 10:26:20 PM HARECEIVE SMTP email address removed for privacy reasons {email address removed for privacy reasons, gsstaff21@lighting... ขอนำส่งใบเสนอราคา PJ โรบินสัน สาขา นครพนม มาให้พ...
18-Oct-23 10:27:49 PM HADISCARD SMTP email address removed for privacy reasons {email address removed for privacy reasons, gsstaff21@lighting... ขอนำส่งใบเสนอราคา PJ โรบินสัน สาขา นครพนม มาให้พ...
19-Oct-23 11:39:42 AM HARECEIVE SMTP email address removed for privacy reasons {email address removed for privacy reasons, gsstaff21@lighting... RE: ขอนำส่งใบเสนอราคา PJ โรบินสัน สาขา นครพนม มา...
19-Oct-23 11:40:09 AM HADISCARD SMTP email address removed for privacy reasons {email address removed for privacy reasons, gsstaff21@lighting... RE: ขอนำส่งใบเสนอราคา PJ โรบินสัน สาขา นครพนม มา...

PS C:\Users\administrator> Get-MessageTrackingLog -Start "10/18/2023 01:00AM" -End "10/19/2023 11:59PM" -Recipients "email address removed for privacy reasons" -Sender "email address removed for privacy reasons"

Timestamp EventId Source Sender Recipients MessageSubject
--------- ------- ------ ------ ---------- --------------
18-Oct-23 10:26:20 PM HARECEIVE SMTP email address removed for privacy reasons {email address removed for privacy reasons, gsstaff21@lighting... ขอนำส่งใบเสนอราคา PJ โรบินสัน สาขา นครพนม มาให้พ...
18-Oct-23 10:27:49 PM HADISCARD SMTP email address removed for privacy reasons {email address removed for privacy reasons, gsstaff21@lighting... ขอนำส่งใบเสนอราคา PJ โรบินสัน สาขา นครพนม มาให้พ...
19-Oct-23 11:39:42 AM HARECEIVE SMTP email address removed for privacy reasons {email address removed for privacy reasons, gsstaff21@lighting... RE: ขอนำส่งใบเสนอราคา PJ โรบินสัน สาขา นครพนม มา...
19-Oct-23 11:40:09 AM HADISCARD SMTP email address removed for privacy reasons {email address removed for privacy reasons, gsstaff21@lighting... RE: ขอนำส่งใบเสนอราคา PJ โรบินสัน สาขา นครพนม มา...

[#2]

Hi @Supanirun_R,

The error is that the emails are being received by the Exchange server, but then they are being discarded. The event ID "HADDISCARD" indicates that the email was discarded by the server. This could be due to a number of reasons, including:

• The emails contain spam or malicious content.
• The emails are being blocked by a mail flow rule.
• The recipient mailbox is disabled or blocked.

To troubleshoot this issue, you can try the following steps:

1. Check the emails to see if they contain any spam or malicious content. You can do this by using a spam filter online.
2. Check your mail flow rules to make sure that the emails are not being blocked. You can do this by going to the Exchange Admin Center (EAC) and navigating to Mail flow > Rules.
3. Check the status of the recipient mailboxes to make sure that they are not disabled or blocked. You can do this by going to the EAC and navigating to Recipients > Mailboxes.
4. Full or disabled mailboxes: If a recipient mailbox is full, the server will reject any new emails sent to that mailbox. If a recipient mailbox is disabled, the server will discard any new emails sent to that mailbox.

Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.

If the post was useful in other ways, please consider giving it Like.

Kindest regards,

Leon Pavesic
(LinkedIn)

[#3]

Hi @LeonPavesic 

Thanks for your reply.

I have checked.

1. The emails contain spam or malicious content.

PS C:\Users\administrator> Get-TransportAgent "Malware Agent"

Identity Enabled Priority
-------- ------- --------
Malware Agent False 5

2. The emails are being blocked by a mail flow rule.

Nothing in the rule.

3. The recipient mailbox is disabled or blocked

The mailbox is enabled and allowed.

The mailbox has free space.

Do you have any suggestions to help us solve this problem?

[#4]

Hi @Supanirun_R,

thanks for your update.

I'm glad to hear that you have checked the emails for spam and malicious content, the mail flow rules, and the recipient mailbox. Since you have found no issues with any of these items, you can try following steps:

1. Check Message Tracking Logs:
Revisit message tracking logs for additional clues or errors. This is the example for that.

Get-MessageTrackingLog -Start "10/18/2023 01:00AM" -End "10/19/2023 11:59PM" -Sender "email address removed for privacy reasons" -Recipients "email address removed for privacy reasons"

2. Check Queue:
Check email queues in Exchange to check for issues in real-time.

To view the email queues, you can use the Get-Queue cmdlet. This cmdlet provides a list of all email queues on your Exchange server. For example:

Get-Queue 

3. Server Logs:
Look for errors or warnings in your server's event logs.

4. External Factors:
Confirm DNS settings and check for issues with your domain's DNS records.

5. **Restart or /and Update**:
Try restarting your Exchange server and apply any available updates.

Please click Mark as Best Response & Like if my post helped you to solve your issue.
This will help others to find the correct solution easily. It also closes the item.

If the post was useful in other ways, please consider giving it Like.

Kindest regards,

Leon Pavesic
(LinkedIn)