Saturday, February 19, 2005

Digitally signed and encrypted messages hold in the Pending Submission queue on Exchange 2003

Mi compadre Aran sent me an e-mail the other day asking me why some messages on some of the servers we help support are not being delivered. The users were receiving delay notifications:

Subject: Delivery Status Notification (Delay)
This is an automatically generated Delivery Status Notification.
THIS IS A WARNING MESSAGE ONLY.
YOU DO NOT NEED TO RESEND YOUR MESSAGE.
Delivery to the following recipients has been delayed.


I was pretty confused about why this is happening, but by the time I could respond, Aran had tracked down the problem. This can happen when an Exchange-aware antivirus software package is installed and the Transport Scanning feature is enabled. The Transport Scanning feature of the AVAPI 2.5 API allows scanning of messages not only in the store, but also when it is going through SMTP.

In this customer's case, Symantec Mail Security for Exchange had the SMTP Transport Scanning enabled. This was the only way we could get Symantec to do some of the Anti-Spam things we wanted it to do. (In hindsight, I wish I had put Symantec Mail Security on the front-end/bridgehead servers and Trend ScanMail on the mailbox servers instead).

KB 842801 Digitally signed messages remain in the Messages pending submission queue and are not delivered in Exchange 2003 outlines the fix for problem. You can either turn off the transport scanning feature or call PSS and get the hot fix.

3 Comments:

At 10:02 AM, Blogger Sayakhom said...

is safe enough for me to turn off the transport scanning? i'm scare to install the hotfix and something might now work on my Exchange server. i dont have a test server but only the production one. please give me your thought. thanks!

 
At 1:42 PM, Blogger Michael said...

Here is a related article
http://www.windowsitpro.com/articles/index.cfm?articleid=50422

Also look at this Symantec Knowledgebase article
2004102615323554

 
At 11:24 PM, Blogger Victor Osten said...

Solution from Orbasoft.
If you own a computer, you must have antispyware to keep it running at its best. The problem is choosing a scan that works. I have tried many different types of scans in the past and then I ran across Orbasoft Antispyware. I have to say that the antispyware solution from Orbasoft is the best that I have used to date. It gets the job done and keeps my computer working like new. If you are interested in seeing for yourself just how good this antispyware works you can click on www.orbasoft.com to learn more. I’m sure it would be worth your time to check it out.

 

Post a Comment

<< Home