iis smtp nntp: [quoted text, click to view]

First, turn up your logging. Use Microsoft IIS log file format.

Second, yes, when there is are low-level network errors, you will not get
complete logging for would-be outbound connections.

For example, are you sure (test it now) that your mailserver can [a] reach
its DNS servers; [b] resolve remote domains' MX records; and [c]
communicate with remote MXs on TCP 25?

Typically, a completely stuck queue and no log means your machine cannot
reach the outside world, period. Look for bad gateway entries, routing
errors, subnet mask, firewall ACLs, IPS rules, etc..

--Sandy



------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.

all mail stay in the c:\inetpub\mailroot\queue.

send mail no error log,

#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-01-18 08:13:03
#Fields: time c-ip cs-method cs-uri-stem sc-status
08:13:03 127.0.0.1 QUIT - 240
08:13:17 10.16.20.166 EHLO - 250
08:13:17 10.16.20.166 AUTH - 334
08:13:17 10.16.20.166 AUTH - 235
08:13:17 10.16.20.166 MAIL - 250
08:13:17 10.16.20.166 RCPT - 250
08:13:17 10.16.20.166 DATA - 250
08:13:17 10.16.20.166 MAIL - 250
08:13:17 10.16.20.166 RCPT - 250
08:13:17 10.16.20.166 DATA - 250
08:13:19 10.16.20.166 QUIT - 240
08:25:57 10.16.20.166 EHLO - 250
08:25:57 10.16.20.166 AUTH - 334
08:25:57 10.16.20.166 AUTH - 235
08:25:57 10.16.20.166 MAIL - 250
08:25:57 10.16.20.166 RCPT - 250
08:25:57 10.16.20.166 DATA - 250
08:25:57 10.16.20.166 MAIL - 250
08:25:57 10.16.20.166 RCPT - 250
08:25:57 10.16.20.166 DATA - 250
08:25:59 10.16.20.166 QUIT - 240
#Software: Microsoft Internet Information Services 6.0
#Version: 1.0
#Date: 2008-01-18 08:27:29
#Fields: time c-ip cs-method cs-uri-stem sc-status
08:27:29 10.16.20.166 EHLO - 250
08:27:29 10.16.20.166 AUTH - 334
08:27:29 10.16.20.166 AUTH - 235
08:27:29 10.16.20.166 MAIL - 250
08:27:29 10.16.20.166 RCPT - 250
08:27:29 10.16.20.166 DATA - 250
08:27:29 10.16.20.166 MAIL - 250
08:27:29 10.16.20.166 RCPT - 250
08:27:29 10.16.20.166 DATA - 250
08:27:31 10.16.20.166 QUIT - 240




what's meaning below:

Event Type: Information
Event Source: smtpsvc
Event Category: None
Event ID: 4005
Date: 2008-1-18
Time: 16:27:09
User: N/A
Computer: SZDB01
Description:
Time spent on preparing to reset routes: [0] milliseconds Time spent on
recalculating next hops: [0] milliseconds Queue length : [2]

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.