Free Microsoft Outlook Resources & Whitepapers

Time stamp in SMTP Logs

Hi all,

This may sound loke a funny question.

Why is the time stamp in the SMTP Logs 1 hour behide, and can this be corrected as the Windows 2008 Server has the correct Time and is in the correct day time saving.  I cant find where to change the time in exchange 2007 smtp logging.

Regards
Robet


Post your answer or comment

comments powered by Disqus
Hi,

I am new to exchange. I have a critical problem with my exchange 2003 Sp2 server.

Few users are reporting they are not getting mails from few domains. While checking smtp log i found entries related to that domain. I got helo/mail from and rcpt to entry and after that next entry was of quit. there was no entry (Data). This is not an issue related to every domain.

I requested the user to ask for an blank mail from that sender and mail was delivered in my domain. Issue starts when a user sends attachment. I have allowed zip attachment and test myself by sending zip attachment from gmail.com. Same was the case where there was no dataentry in smtp log.

Attachment type and attachment size were in allowed limits. It would be a great help if you could help me to resolve this issue.

Thanks,
Hemant

Somewhat of a complicated problem. I want to be able to re-send the same
message over and over again (using it like a template) to various different
recipients. I select the message in my Sent Items folder and select the
resend message option. After changing the recipient (To:) and sending the
message, now this newly sent item shows the time stamp of the OLD message -
it could be days or weeks beforehand!

Keep in mind the following conditions:
I am using Outlook 2007.
I have 2 .pst's. Each .pst corresponds to a different email account. The
above-described problem only happens on my 2nd .pst. For some reason, when I
send email from my 2nd email account, it does not always show up in the Sent
Items folder of my 2nd .pst, so I have created a rule to copy a message after
sending from my 2nd email account into the Sent folder in my 2nd .pst. The
time stamp problem described above is therefore on this "copied" message in
the Sent folder in my 2nd .pst. The time stamp in my primary .pst is correct
(even though I don't want it to even be in this folder - I end up deleting
it).

Any one know what's going on here?

Hi,

I think I have found a problem in the SMTP log and would like to know if this is really a problem or simply a record of normal activity.

Below is an extract from the log which shows a repeating pattern that appears to occur every few seconds.  Apparently the server, called oB00 is trying to send a message to itself.  I do not know how to use the information in the log to trace the source of these entries.  Information or help would be much appreciated.

Brian

#Fields: date time c-ip cs-username s-computername s-ip s-port cs-method time-taken
2011-09-15 09:00:16 192.168.1.20 OB00 OB00 192.168.1.20 0 HELO 2875
2011-09-15 09:00:53 192.168.1.20 OB00 OB00 192.168.1.20 0 MAIL 33140
2011-09-15 09:00:53 192.168.1.20 OB00 OB00 192.168.1.20 0 RCPT 250
2011-09-15 09:04:16 192.168.1.20 OB00 OB00 192.168.1.20 0 DATA 203516
2011-09-15 09:04:21 192.168.1.20 OB00 OB00 192.168.1.20 0 MAIL 0
2011-09-15 09:04:21 192.168.1.20 OB00 OB00 192.168.1.20 0 RCPT 0
2011-09-15 09:04:24 192.168.1.20 OB00 OB00 192.168.1.20 0 DATA 2078

I have an exchange 2003 cluster (active-passive). Was just reviewing smtp
logs and saw the following

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2009-09-24 00:00:03
#Fields: date time c-ip cs-username s-sitename s-computername s-ip s-port
cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes
cs-bytes time-taken cs-version cs-host cs(User-Agent) cs(Cookie) cs(Referer)
2009-09-24 00:00:33 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 195 4 0 SMTP - - - -
2009-09-24 00:00:43 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 319 4 0 SMTP - - - -
2009-09-24 00:00:53 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 443 4 0 SMTP - - - -
2009-09-24 00:00:53 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 567 4 0 SMTP - - - -
2009-09-24 00:01:03 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 691 4 0 SMTP - - - -
2009-09-24 00:01:13 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 815 4 0 SMTP - - - -
2009-09-24 00:01:23 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 939 4 0 SMTP - - - -
2009-09-24 00:01:33 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 195 4 0 SMTP - - - -
2009-09-24 00:01:43 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 319 4 0 SMTP - - - -
2009-09-24 00:01:53 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 443 4 0 SMTP - - - -

SMTP logging is set to maximum, but this does not look like an email coming
in or going out. SMTP QUIT command gets logged every 10 seconds all day long
every day. Is this normal to see in the cluster configuration?

I have an exchange 2003 cluster (active-passive). Was just reviewing smtp
logs and saw the following

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2009-09-24 00:00:03
#Fields: date time c-ip cs-username s-sitename s-computername s-ip s-port
cs-method cs-uri-stem cs-uri-query sc-status sc-win32-status sc-bytes
cs-bytes time-taken cs-version cs-host cs(User-Agent) cs(Cookie) cs(Referer)
2009-09-24 00:00:33 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 195 4 0 SMTP - - - -
2009-09-24 00:00:43 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 319 4 0 SMTP - - - -
2009-09-24 00:00:53 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 443 4 0 SMTP - - - -
2009-09-24 00:00:53 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 567 4 0 SMTP - - - -
2009-09-24 00:01:03 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 691 4 0 SMTP - - - -
2009-09-24 00:01:13 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 815 4 0 SMTP - - - -
2009-09-24 00:01:23 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 939 4 0 SMTP - - - -
2009-09-24 00:01:33 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 195 4 0 SMTP - - - -
2009-09-24 00:01:43 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 319 4 0 SMTP - - - -
2009-09-24 00:01:53 192.168.132.100 - SMTPSVC1 mail-0 192.168.132.100 0
QUIT - - 240 0 443 4 0 SMTP - - - -

SMTP logging is set to maximum, but this does not look like an email coming
in or going out. SMTP QUIT command gets logged every 10 seconds all day long
every day. Is this normal to see in the cluster configuration?

A user was expecting an email but never got it. The message shows in the smtp logs on exchange and shows it going to the recipeint. But the user did not get it in his inbox. The queue folder is empty where did it go? Any idea?

Hi Exchange Lovers

I´m stumped.  I´m missing an Email.

I can find it in my SMTP logs but not in Message Tracking Center (MTC) or in the destination mailbox/inbox.

Also, it shows up in the SMTP logs at the Bridgehead Server and the destination mailbox (Backend) Server but not in MTC in any of the 2 servers.

The Email message was a reply in a longer conversation and messages both prior and after gets delivered?!

Server version is Exchange Server 2003 SP2 and we do not use any Build-in AntiSpam features. AntiVirus is Antigen v.9 SP1.

Any one experienced this behaviour before? Any tips would be most welcome.

Thanks for the code. I altered it slightly to add a time stamp to my tasks.
However, I would like it to enter the stamp at the top of the body, where the
cursor is, not at the bottom. I've refrenced the HELP and couldn't figure
this out. (very novice.) Can you help?

Public Sub StampTask()
Dim objItem As Object
Dim objNS As NameSpace

Set objNS = Application.GetNamespace("MAPI")
Set objItem = Application.ActiveInspector.CurrentItem
If objItem.Class = olTask Then
objItem.Body = objItem.Body & vbCrLf & Now() _
& " - " & objNS.CurrentUser
End If

Set objItem = Nothing
Set objNS = Nothing
End Sub

"Sue Mosher [MVP-Outlook]" wrote:

> See http://www.outlookcode.com/d/code/stampdate.htm for sample VBA code to do this.
>
> --
> Sue Mosher, Outlook MVP
> Author of
> Microsoft Outlook Programming - Jumpstart for
> Administrators, Power Users, and Developers
> http://www.outlookcode.com/jumpstart.aspx
>
>
> "Erin" wrote in message news:10929AA9-4462-4122-ACBD-201C7CDC[email protected]..
> > How do you quickly/automatically insert a timestamp in Outlook (using as few
> > keystrokes as possible)? I know formula's to do it in Excel,
> > shortcut/menu/macro ways to do it in Word, but HOW does a person do this in
> > Outlook? I'm using Ourlook 2003 v11.6 from Office Pro '03.
> >
> > Specifics: I'd like to use a control or function key such as ^; to insert
> > either date and or time stamps; "6/29/05, 11:44am: "
> >
> > I'm spoiled from using my Apple or Palm where you can do this with a
> > keystroke or two and want to do the same when using Outlook.
> >
> > Any ideas? :) Erin
>

Is there an easy way to get Outlook to include a Date/Time stamp whenever
something is typed into the Notes area on a Contact form? Extra bonus would
be some sort of nice formatting, too.

Thanks in advance.

From just one domain (that i know of) our email server (exchange 2003) will
not pass on the email if it has an attachment. If there is no attachment the
email is delivered fine.

I turned on smtp logging and can see the email arrive the lines are below if
they will help. After it hits the smtp log nothing seems to happen. We have
GFI mailessentials as our spam filter, which it does not get to. I turned on
"backup email before it gets to gfi", which is an option in their system, but
it doesn't get there. And I turned off GFI all together and the email
doesn't seem to get through.

It seems that somewhere after arriving the email is dropped or something
like that. Any ideas or ideas for trying to figure out what is going on?
Thanks

2009-11-13 19:31:33 69.191.244.23 mgnj5.bloomberg.net SMTPSVC1 ICCSERVER
192.168.1.252 0 EHLO - +mgnj5.bloomberg.net 250 0 278 24 0 SMTP - - - -
2009-11-13 19:31:33 69.191.244.23 mgnj5.bloomberg.net SMTPSVC1 ICCSERVER
192.168.1.252 0 MAIL - +FROM: 250 0 45 43 0 SMTP - - - -
2009-11-13 19:31:33 69.191.244.23 mgnj5.bloomberg.net SMTPSVC1 ICCSERVER
192.168.1.252 0 RCPT - +TO: 250 0 35 32 0 SMTP - - - -

Hi All

The time stamp in headers sent from my exchange environments mailbox server is incorrect in that it is stamped as 1 hour behind (GMT +0000).

Although the windows server time and time zone is correct & incorporating the "Automatically adjust for daylight saving time" tick box the Exchange install on the mailbox server is reading the time on the server clock -1 hour because it is not taking the "Automatically adjust for daylight saving time" into account (This is proven as changing the clocks actual time affects the detail in the headers but ticking and un-ticking the adjust for daylight savings tick box has no affect on message headers, although it does adjust the servers time correctly)

We are running exchange 2010 - 4 servers - 2 Client accesshub transport (Windows NLB configuration), 2 mailbox (Dag configuration)

The time stamp within the headers of a message for the client accesshub transport servers hops is displaying correctly as GMT +0100

All 4 servers time and time zones are the same and set correctly to "(UTC) Dublin, Edinburgh, Lisbon, London" and with the "Automatically adjust for daylight saving time" tick box ticked.

Any suggestions on how to get exchange to recognise the "Automatically adjust for daylight saving time" adjustment on the mailbox servers would be greatly appreciated

Thanks

Ben


Hi,

I seem to be having an issue with my users where Outlook 2007 does not always insert into the body of a calender meeting request the time stamp information. Sometimes users have noticed that this works but most the time it does not work.

I have tested by sending from Outlook 2010 on Exchange 2010 > Outlook 2007 on Exchange 2007 and can only seem to see the time stamp in meeting requests when sent from Outlook 2007 to Outlook 2010. If I send a meeting request back from Outlook 2010 to Outlook 2007 I simply have a standard meeting request invitation.

When I talk about the time stamp I mean this bit of text that you see in the body of the request:

When: 09 November 2010 11:30-12:00 (GMT) Greenwich Mean Time : Dublin, Edinburgh, Lisbon, London.

Where: Test

 

Note: The GMT offset above does not reflect daylight saving time adjustments.

 

*~*~*~*~*~*~*~*~*~*

Is there a setting I am missing in Outlook or Exchange that needs to be enabled to have this across organizations?

Thanks

J

I have a problem with getting certain emails to go through.
we use MessageLabs for our spam and virus scanning. We are from time to time
getting delays in sending mail. Messagelabs suggested I turn on SMTP logging,
which I did, but when I look at the log file, the date is correct, but the
system time is 3 hour ahead of me. I checked the clock on the server and it
is set to EST
Shouldnt this be created based on the time of the host, which is the
exchange server.

We have Ex 2003, Win2k3 domain.

thanks in advance.

Hi,

I am trying to troubleshoot a problem with SMTP and have the logging
enabled, however at the current time:

11:41AM

If I open up the last log file it has time stamps which are 1 hour behind?,
so it is showing as 10:41AM...

Can anyone explain this?

Hi,

I am trying to troubleshoot a problem with SMTP and have the logging
enabled, however at the current time:

11:41AM

If I open up the last log file it has time stamps which are 1 hour behind?,
so it is showing as 10:41AM...

Can anyone explain this?

Microsoft IIS SMTP logging / mail tracking We are running Exchange across the estate but this particular box isn't Exchange. I'm hoping you guys know this stuff.

We have a gateway Win 2003 cluster before passing emails to a SendMail box in a DMZ then going to outside world.

We are finding some outbound emails some of the time are being delayed with a 4.4.7 notification to the sending user.

Unix/DMZ folk say there is a delay on the message getting to DMZ but it isn't clearly in our queue. We check smtp logs (all options are ticked) but there is no unique message ID. There is such a volume of mail (several per hour from similar senders and to same recipients) that I'm finding it hard to work out which log entry belongs to which email.

There are concurrent threads meaning that the usual EHLO, MAIL, RCPT, DATA, QUIT sequence isn't followed in the logs. I hope it is followed in practice. How do you follow these when there is no way to link the starting EHLO, MAIL, RCPT commands with their corresponding DATA, QUIT parts ?

Here is an example where I'm working at Company.com

2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 EHLO - +DMZ.Unix.mail.server 250 0 244 17 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 MAIL - +From: 250 0 48 46 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 RCPT - +To: 250 0 34 31 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 EHLO - +DMZ.Unix.mail.server 250 0 244 17 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 MAIL - +From: 250 0 50 47 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 RCPT - +To: 250 0 24 21 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 RCPT - +To: 250 0 35 32 16 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 RCPT - +To: 250 0 32 29 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 RCPT - +To: 250 0 34 31 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 RCPT - +To: 250 0 38 35 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 EHLO - +DMZ.Unix.mail.server 250 0 244 17 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 MAIL - +From: 250 0 84 96 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 RCPT - +To: 250 0 35 32 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 DATA - + 250 0 140 23341 266 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 QUIT - DMZ.Unix.mail.server 240 266 71 4 0 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 DATA - + 250 0 127 27286 343 SMTP - - - -
2009-12-06 23:00:09 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 QUIT - DMZ.Unix.mail.server 240 343 71 4 0 SMTP - - - -
2009-12-06 23:00:10 201.1.1.55 DMZ.Unix.mail.server SMTPSVC1 GFI_smtp_server 10.108.1.80 0 QUIT - DMZ.Unix.mail.server 240 1313 71 4 0 SMTP - - - -

Am I missing a trick here?

We have a occasional strange behaviour/missing emails/ sunk without trace!
Being able to track each mail would be a big plus.

I have a request to monitor a users OWA usage. I am using Crystal reports to read in the logs that are found by default in the following location;

C:WINDOWSsystem32LogFilesW3SVC1

After running some reports for the given user, I noticed the time stamp on her activity was rather odd. I then logged in myself and ran a report only to notice the time stamp is ahead by 8 hours. I logged into OWA at 7:38 am, but the time stamp was 3:38 pm. The date stamp is correct, assuming you log into OWA 8 hours before the next day.

I checked the clock on the Exchange server and it is the correct time. How can the time in IIS be different from that of the server it is running on?

I sent a test message at 2:30 p.m. and then I went to Exchange SMTP Logs and
tracked my test message and it shows it was sent at 16:35, strange enough
because it is should be showing 14:35.

How can I fix this ... I want the SMTP logs to show 2:35 p.m instead of
14:35.

Time on my Exchange Server and on my PC is correct.

Please advise.

Thank you in advance.

My computer (win-98se) has a correctly modified time-zone registry entry
for my time zone so it knows when DST is.

The clock in the bottom corner of my screen says 10:45 pm EST, and it's
currently set for GMT-5.

In outlook, I just recieved an e-mail with the following in the header:

--------------
Received:
from (sender's out-bound SMTP server) by (my corporate server)
for (me)
Sun, 28 Mar 2010 10:39:12 -0500

My corporate server has the correct time and time-zone offset.

Received:
from (some intermediate machine)
by (sender's out-bound SMTP server)
for (me)
Sun, 28 Mar 2010 10:38:17 -0400

The second recieved line indicates that the intermediate machine has the
right time, but wrong offset.

Received:
from (the sender's machine) by (intermediate machine)
28 Mar 2010 10:25:56 -0400

The sender's machine seems to have the right time, but wrong offset.
The sender is also in the Eastern Time zome.
---------------

In Outlook 2000, outlook is showing me the above e-mail (in the e-mail
list pane) with a time of 11:39 am. When I double-click the message to
open it in it's own window, Outlook displays a time of 10:27 am in the
grey header-type area above the actual message window.

In Outlook, Tools, Options, Calendar options, time-zone, I have Time
Zone: GMT-5 (Eastern time USA Canada) and a check in the "adjust for
daylight savings time".

The current time says "10:57 am". The option "show an additional time
zone" is not checked.

So my question is - where exactly is outlook getting the "11:39 am" time
that it's using when it displays the recieved time for this e-mail in
the message list pane? And why does it show the more correct time
(10:27 am) in the header of the message when I open it?

Another example:

---------------
Received:
from (an IP web-camera) by (my server) for (me)
Sun, 28 Mar 2010 10:55:45 -0500
--------------

The camera is on the same LAN as my server. The camera connected
directly to my mail server to send an e-mail to a local account (mine).
The header of this e-mail does not have a DATE: line. The camera did
not stamp any line in the header with a time-stamp of it's own. Outlook
displays this e-mail in the list pane with a time of 11:56 am.

When I open the e-mail, outlook prints "Sent: none" in the grey header
area above the message window. The "none" must be due to the fact that
there is no actual Date: line in the e-mail header.

But again, outlook displays a recieved time that is +1 hour after the
real received time.

Next problem:

I have outlook configured to retreive e-mail from four pop3 accounts
(using port 110) and one pop3 account (using port 995). I'm having
problems with one of the accounts using port 110, so in Tools, Options,
Mail Services, under "Check for new mail on" I've removed the check box
associated with that account. I've closed outlook and restarted several
times. But outlook is still trying to log into that account to check
for mail. Why is it doing that, and how do I get it to stop?

My computer (win-98se) has a correctly modified time-zone registry entry
for my time zone so it knows when DST is.

The clock in the bottom corner of my screen says 10:45 pm EST, and it's
currently set for GMT-5.

In outlook, I just recieved an e-mail with the following in the header:

--------------
Received:
from (sender's out-bound SMTP server) by (my corporate server)
for (me)
Sun, 28 Mar 2010 10:39:12 -0500

My corporate server has the correct time and time-zone offset.

Received:
from (some intermediate machine)
by (sender's out-bound SMTP server)
for (me)
Sun, 28 Mar 2010 10:38:17 -0400

The second recieved line indicates that the intermediate machine has the
right time, but wrong offset.

Received:
from (the sender's machine) by (intermediate machine)
28 Mar 2010 10:25:56 -0400

The sender's machine seems to have the right time, but wrong offset.
The sender is also in the Eastern Time zome.
---------------

In Outlook 2000, outlook is showing me the above e-mail (in the e-mail
list pane) with a time of 11:39 am. When I double-click the message to
open it in it's own window, Outlook displays a time of 10:27 am in the
grey header-type area above the actual message window.

In Outlook, Tools, Options, Calendar options, time-zone, I have Time
Zone: GMT-5 (Eastern time USA Canada) and a check in the "adjust for
daylight savings time".

The current time says "10:57 am". The option "show an additional time
zone" is not checked.

So my question is - where exactly is outlook getting the "11:39 am" time
that it's using when it displays the recieved time for this e-mail in
the message list pane? And why does it show the more correct time
(10:27 am) in the header of the message when I open it?

Another example:

---------------
Received:
from (an IP web-camera) by (my server) for (me)
Sun, 28 Mar 2010 10:55:45 -0500
--------------

The camera is on the same LAN as my server. The camera connected
directly to my mail server to send an e-mail to a local account (mine).
The header of this e-mail does not have a DATE: line. The camera did
not stamp any line in the header with a time-stamp of it's own. Outlook
displays this e-mail in the list pane with a time of 11:56 am.

When I open the e-mail, outlook prints "Sent: none" in the grey header
area above the message window. The "none" must be due to the fact that
there is no actual Date: line in the e-mail header.

But again, outlook displays a recieved time that is +1 hour after the
real received time.

Next problem:

I have outlook configured to retreive e-mail from four pop3 accounts
(using port 110) and one pop3 account (using port 995). I'm having
problems with one of the accounts using port 110, so in Tools, Options,
Mail Services, under "Check for new mail on" I've removed the check box
associated with that account. I've closed outlook and restarted several
times. But outlook is still trying to log into that account to check
for mail. Why is it doing that, and how do I get it to stop?

My computer (win-98se) has a correctly modified time-zone registry entry
for my time zone so it knows when DST is.

The clock in the bottom corner of my screen says 10:45 pm EST, and it's
currently set for GMT-5.

In outlook, I just recieved an e-mail with the following in the header:

--------------
Received:
from (sender's out-bound SMTP server) by (my corporate server)
for (me)
Sun, 28 Mar 2010 10:39:12 -0500

My corporate server has the correct time and time-zone offset.

Received:
from (some intermediate machine)
by (sender's out-bound SMTP server)
for (me)
Sun, 28 Mar 2010 10:38:17 -0400

The second recieved line indicates that the intermediate machine has the
right time, but wrong offset.

Received:
from (the sender's machine) by (intermediate machine)
28 Mar 2010 10:25:56 -0400

The sender's machine seems to have the right time, but wrong offset.
The sender is also in the Eastern Time zome.
---------------

In Outlook 2000, outlook is showing me the above e-mail (in the e-mail
list pane) with a time of 11:39 am. When I double-click the message to
open it in it's own window, Outlook displays a time of 10:27 am in the
grey header-type area above the actual message window.

In Outlook, Tools, Options, Calendar options, time-zone, I have Time
Zone: GMT-5 (Eastern time USA Canada) and a check in the "adjust for
daylight savings time".

The current time says "10:57 am". The option "show an additional time
zone" is not checked.

So my question is - where exactly is outlook getting the "11:39 am" time
that it's using when it displays the recieved time for this e-mail in
the message list pane? And why does it show the more correct time
(10:27 am) in the header of the message when I open it?

Another example:

---------------
Received:
from (an IP web-camera) by (my server) for (me)
Sun, 28 Mar 2010 10:55:45 -0500
--------------

The camera is on the same LAN as my server. The camera connected
directly to my mail server to send an e-mail to a local account (mine).
The header of this e-mail does not have a DATE: line. The camera did
not stamp any line in the header with a time-stamp of it's own. Outlook
displays this e-mail in the list pane with a time of 11:56 am.

When I open the e-mail, outlook prints "Sent: none" in the grey header
area above the message window. The "none" must be due to the fact that
there is no actual Date: line in the e-mail header.

But again, outlook displays a recieved time that is +1 hour after the
real received time.

Next problem:

I have outlook configured to retreive e-mail from four pop3 accounts
(using port 110) and one pop3 account (using port 995). I'm having
problems with one of the accounts using port 110, so in Tools, Options,
Mail Services, under "Check for new mail on" I've removed the check box
associated with that account. I've closed outlook and restarted several
times. But outlook is still trying to log into that account to check
for mail. Why is it doing that, and how do I get it to stop?

I have one external domain that cannot seem to send email to me.  This is what my SMTP logs look like after they connect (IPs hidden to protect the innocent):
17:10:22 1.2.3.4 EHLO - 250 17:10:22 1.2.3.4 MAIL - 250 17:10:22 1.2.3.4 RCPT - 250 17:35:58 1.2.3.4 xexch50 - 504 17:35:58 1.2.3.4 QUIT - 240
There are no matching event log entries, but I don't think my logging it set high enough.  My assumption is that the remote Exchange server is misconfigured.  It shouldn't be issuing XEXCH50 to just any server it has an SMTP conversation with, right?

At other times, I have this in my logs:
13:43:23 1.2.3.4 EHLO - 250 13:43:23 1.2.3.4 MAIL - 250 13:55:19 1.2.3.4 EHLO - 250 13:55:19 1.2.3.4 MAIL - 250 14:06:50 1.2.3.4 EHLO - 250 14:06:50 1.2.3.4 MAIL - 250 14:09:00 1.2.3.4 RCPT - 550 14:09:00 1.2.3.4 QUIT - 240 14:18:21 1.2.3.4 EHLO - 250 14:18:21 1.2.3.4 MAIL - 250 14:20:55 1.2.3.4 RCPT - 550 14:20:55 1.2.3.4 QUIT - 240

The log goes on for about another 100 lines of the exact same thing.  I believe the technical term for this behavior to be "on crack."
As far as I know, this is not a normal STMP conversation.  The other guy's server is the one that is misconfigured, right?  Or do I need to fix something?

Thanks,
Phill

I sent a test message at 2:30 p.m. and then I went to Exchange SMTP Logs and tracked my test message and it shows it was sent at 16:35, strange enough because it is should be showing 14:35. 

How can I fix this ... I want the SMTP logs to show 2:35 p.m instead of 14:35.

Time on my Exchange Server and on my PC is correct.

Please advise.

Thank you in advance.

Hello,
We are hosting Exchange 2003 server.
I've been having several emails returned back undelivered with the well-known error:
Could not deliver the message in the time limit specified. Please retry or contact your administrator.

The problem is that I CANNOT any entry for those specific emails in the SMTP log. I can find for otherse but not those specific ones. It is logging every hour and with full details.

Thanks for your help


Not finding an answer? Try a Google search.