The Exclaimer Community

Exclaimer Forums
Welcome to The Exclaimer Community Sign in | Join | Help
in Search
Home Forums
The Exclaimer Community » Exclaimer Technical Issues » Technical Issues » Anti-Spam » Legit messages not getting through - Exchange event-id 1026, "advanced queue failed to deliver message"

Legit messages not getting through - Exchange event-id 1026, "advanced queue failed to deliver message"

Last post 09-05-2007, 5:37 PM by Chris Crawshay. 5 replies.
Sort Posts: Previous Next

  •  02-17-2006, 9:06 PM 309

    Legit messages not getting through - Exchange event-id 1026, "advanced queue failed to deliver message"

    NOTE: emailed support as well.

    We upgraded Exclaimer on 1/30/06.  We have had problems with certain senders not getting messages through.  Can't confirm that this started happening right after the upgrade because message tracking wasn't enabled.  With Exchange message tracking enabled we have found that these messages trigger event-id 1026 (advanced queue failed to deliver message).  Yesterday we had 888 of these events.  Most of them were spam, but some were legit email.

    We've confirmed that the problem is Exclaimer. We noticed that SOME of the messages not getting through w/ the Exchange 1026 (advanced queue failed to deliver message) event had a subject line of "tonight" so I used my external account to send a message w/ tonight in the subject and another with test.  Test gets through, tonight does not and it has the 1026 Exchange event-id.

    We tried changing the bottom rule for anti-spam, "detection center-spam," to mark, and had it mark with SPAM on the front of the subject.  I also am archiving incoming messages to a mailbox.  Once we did that we could see many SPAM... subject lines, but my tonight subject still did not get through.  Doesn't even show up in the archive mailbox.
     
    I turned anti-spam completely off and ALL of my messages from my outside account got through, even with tonight in the subject.
     
    Therefore, something in the anti-spam rules above detection center - spam is stopping this because of the subject line(?).  Note, some of the other subject lines getting blocked are: Re: news, inventory, mops and brooms, Re:email, Fw: Arthur, work, fyi, etc.  Many different sender domains too.  Doesn't make a lot of sense.

  •  02-21-2006, 3:12 PM 314 in reply to 309

    Re: Legit messages not getting through - Exchange event-id 1026, "advanced queue failed to deliver message"

    To update:  We are getting roughly 1000 of the 1026 events a day and about 2% are legit.  We are having to add the legit senders to the whitelist, which allows their messages through.

  •  02-21-2006, 5:27 PM 317 in reply to 314

    Re: Legit messages not getting through - Exchange event-id 1026, "advanced queue failed to deliver message"

    Working w/ support, but wanted to keep adding my findings here as well.
     
    Something else I've noticed is sometimes a sender won't get anything through.  If I try one of his failed subjects it sometimes goes through for me.  So it's not just the subject triggering the problem.  It has to be some sort of combination.
     
    Example, my outside account only gets messages dropped when I use certain subject lines.
     
    I've had other senders have everything they send dropped, regardless of subject line. 

  •  02-27-2006, 2:26 PM 324 in reply to 317

    Re: Legit messages not getting through - Exchange event-id 1026, "advanced queue failed to deliver message"

    Problem seems to be solved.  Here is what we found:

    Many of these email messages were from aol.com users, had words like hey!, HI, or tonight in the subject causing them to be labeled as suspicious.  However, there were numerous subject lines and domains being blocked.  There seemed to be a few addresses that were consistently blocked too, not just aol accounts either.  Didn't seem to make much sense.

    Evidently what normally happens with the suspicious  messages is they are staged for 10 minutes in the Documents and Settings\All Users\Application Data\Exclaimer\Staged Message Queue.  This gives the software an additional 10 minutes to determine if it is a spam outbreak. Once the message is staged, it is re-tested prior to delivery and either aborted or delivered.  After the upgrade the legitimate staged messages weren't being released for delivery.  Doing an IISRESET seems to have solved the problem and all but 2 of the blocked messages were released.

    NOTE TO EXCLAIMER:  It would have helped us quite a bit if your documentation was more thorough.  If we would have known about the staged message queue it would have helped us troubleshoot this problem.

  •  08-27-2007, 3:34 PM 1881 in reply to 324

    Re: Legit messages not getting through - Exchange event-id 1026, "advanced queue failed to deliver message"

    Well this is happening again.  Looking at the Exchange Message Tracking I see every email that is probably spam having "advanced queue failed to deliver message."  One sender to another user was legit, but once I whitelisted them they were able to get messages through.  IISRESET did not help.  Would appreciate a response from Exclaimer on this.

  •  09-05-2007, 5:37 PM 1912 in reply to 1881

    Re: Legit messages not getting through - Exchange event-id 1026, "advanced queue failed to deliver message"

    Hi,

    What version of Exclaimer are you running?

     -Chris
View as RSS news feed in XML
© Exclaimer Ltd, 2000-2008
Powered by Community Server, by Telligent Systems