1） 查詢網關上面的日誌；

2）查詢Exchange的傳輸日誌

3）看客戶端的郵件頭信息

4）搞懂整個郵件的投遞環節

5）善於利用退信代碼，Google搜索投遞代碼

實際操作

1）如何看網關日誌（省略）

這部分無法實際截圖和演示，下圖是梭子魚網關查看日誌的截圖。

2）如何看傳輸日誌（上節課內容）

3）如何看客戶端郵件頭信息

比如zengchuixin給administrator發了一封郵件，那麽可以到administrator打開收件箱，打開收到的郵件，查看郵件頭，如圖。

選擇下圖的三角符號，打開後如圖。

4）對郵件投遞環節進行分析，分段排錯

實戰案例

451 4.4.0 Primary target IP address responded with: "454 4.7.0 Temporary authentication failure."

Additionally, you may find the following error message in the Application log file on the Exchange server that is receiving the e-mail message:

Event Type: Error Event Source: MSExchangeTransport Event Category: SmtpReceive Event ID: 1035 Description: Inbound authentication failed with error IllegalMessage for Receive connector Default <Server> . The authentication mechanism is ExchangeAuth. The source IP address of the client who tried to authenticate to Microsoft Exchange is [xxx.xxx.xxx.xxx].

原因

This issue occurs if the Exchange server cannot authenticate with the remote Exchange server. Exchange servers requires authentication to route internal user messages between servers. The issue can be caused by one of the following reasons:

The Exchange server is experiencing Time synchronization issues

There is a replication issue between the domain controllers

The Exchange server is experiencing Service Principal Name (SPN) issues

The required TCP/UDP ports for the Kerberos protocol are blocked by the firewall

獲取更多IT資訊，您也可以關註下方的微信公眾號：

曾垂鑫的網絡課堂，曾垂鑫大講堂 - 51CTO學院

http://edu.51cto.com/lecturer/639838.html

Exchange Server 2016管理系列課件38.常見退信或投遞失敗問題處理