Original Message:
Sent: 5/24/2023 10:47:00 AM
From: Art_P
Subject: RE: Errors when sending email via SMG from Exchange
It is absolutely not acceptable for you to ask for a packet capture, or any personal/business data, from someone else. Please refrain from such behavior.
------------------------------
---------------------------------------------
Support Engineer
* Integrated Cyber Defense Exchange
* Messaging Gateway
* Packet Shaper
Symantec Enterprise Division
Broadcom Software
------------------------------
Original Message:
Sent: May 24, 2023 10:39 AM
From: alexander smg
Subject: Errors when sending email via SMG from Exchange
I also didn't get your packet capture. I will need that as well please.
Original Message:
Sent: 5/24/2023 10:19:00 AM
From: Tomasz Zielinski
Subject: RE: Errors when sending email via SMG from Exchange
Description of pacet capture is from Case 33390143. Exchange and VM are in VLAN, same site maybe sometimes different host. But from OWA mails are working. From transport service logs i se that certificate negotiation using tls 1.2 is succeded
Original Message:
Sent: May 24, 2023 09:41 AM
From: Art_P
Subject: Errors when sending email via SMG from Exchange
Sounds like something might be between SMG and Exchange that should be looked at. the "Abort message (message timed out)" specifically means that the Messaging Gateway was communicating with the other server but the network connection was lost (not due to direct action from SMG). Your description of the packet capture lacked context, but in general you said that SMG sent an ACK (meaning it acknowledged Exchanges previous packet) and would generally then be waiting for Exchange's next packet, which never arrived - ending in time out.
Your Exchange logs seem to indicate that Exchange thought SMG stopped responding. Thus, most likely culprit is something in between.
------------------------------
---------------------------------------------
Support Engineer
* Integrated Cyber Defense Exchange
* Messaging Gateway
* Packet Shaper
Symantec Enterprise Division
Broadcom Software
Original Message:
Sent: May 24, 2023 03:44 AM
From: Tomasz Zielinski
Subject: Errors when sending email via SMG from Exchange
When Exchange (from Outlook) is sending emails via SMG i have errors in SMG "Abort message (message time out)". Problem was reported to Broadcom Support and after looking at packet capture they found that Exchange send data packet to SMG, SMG sends ACK to Exchange, SMG sends ACK with TCP widow update to Exchange, five minutes after most recent ACK no other packets have been received form Exchang and SMG time out the sesion.
In Exchange transport service logs I have
2023-05-18T20:18:41.277Z,SMG,08DB53CAAC00F8FF,21,192.168.45.35:49461,192.168.45.41:25,*,,"HandleError has encountered a suspicious connection reset from a remote, non-mailbox transport server."
From Exchange Queue
[{LED=450 4.4.318 Connection was closed abruptly (SuspiciousRemoteServerError)} Exchange 2016
Emails sended via OWA are working fine