最後更新: 2019-07-29
Log
Enable smtp protocol log
Set-ReceiveConnector "My Receive Connector Name" -ProtocolLoggingLevel Verbose
Set-SendConnector "My Send Connector Name" -ProtocolLoggingLevel Verbose
Log file Location:
C:\Program Files\Microsoft\Exchange Server\V14\TransportRoles\Logs\ProtocolLog
- SmtpReceive/
- SmtpSend/
設定重試間隔
- Expand "Server Configurations"
- Click Hub Transport
- Right-click the servername and click Properties.
- Click the Limits tab.
- Under the Message Expiration section, Maximum time since submission (days) field.
Transient failure retry attempts: 6 # 0~15
The number of connection attempts that are tried after the connection attempts controlled by
the QueueGlitchRetryCount and QueueGlitchRetryInterval keys have failed.
If you set the value to 0, the next connection attempt is controlled by the "outbound connection failure retry interval".
IMAP ProtocolLog
Exchange 2010
Get-ImapSettings | format-list
LogFileLocation : C:\Program Files\Microsoft\Exchange Server\V14\Logging\Imap4 LogFileRollOverSettings : Daily LogPerFileSizeQuota : 0 B (0 bytes) ExtendedProtectionPolicy : None EnableGSSAPIAndNTLMAuth : True Server : EXSERVER
Set-ImapSettings -Server "EXSERVER" -ProtocolLogEnabled $true
OR
Set-ImapSettings -Server "EXSERVER" -ProtocolLogEnabled $true -LogFileLocation "C:\log"
Restart-Service MSExchangeImap4
Set-ImapSettings -Server "EXSERVER" -protocolLogEnabled $false
Exchange log
get-messagetrackinglog -EventId "RECEIVE"
-Start "4/1/2021 12:00:00 AM" -End "5/31/2015 11:59:59 PM"
-ResultSize unlimited
| where {$_.Sender -like "*@sender.com"}
| Select Timestamp,ClientIp,Sender
EventId
- RECEIVE
- REDIRECT
- REDIRECT
- TRANSFER
- TRANSFER
- DELIVER
- DELIVER
ResultSize parameter
WARNING: There are more results available than are currently displayed. To view them, increase the value of the
get-mailbox -resultsize unlimited ...
GUI
# Exchange 2010
發信
Eventid
RECEIVE(Source: SMTP) 之後 SEND(Source: SMTP) # SAME Messageid, 會 log 到 IP 及 Subject
收信
Eventid
RECEIVE (Source: SMTP) 之後 DELIVER (Source: STOREDRIV) # SAME Messageid