[TargetIT]

Well I've already posted the email here - you can see that the ETP.DAT file/block is a lot smaller than an activation ETP.DAT. I'll activate my own phone again and post the SMTP logs - I don't have logs dating back past the last time I activated a phone.

[hdawg]

Excellent; thank you.

[TargetIT]

Here's the SMTP logs (I've only change my domain name and my name):

2009-07-30 16:39:54 192.168.195.103 OutboundConnectionResponse SMTPSVC1 EXCHANGE-X01 - 25 - - 220+smtp.Mycompany.com+ESMTP+MailMarshal+(v6.4.6.5922)+Ready 0 0 65 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionCommand SMTPSVC1 EXCHANGE-X01 - 25 HELO - exchange-x01.Mycompany.com 0 0 4 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionResponse SMTPSVC1 EXCHANGE-X01 - 25 - - 250+smtp.Mycompany.com+Hello+exchange-x01.Mycompany.com+(192.168.195.105) 0 0 83 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionCommand SMTPSVC1 EXCHANGE-X01 - 25 MAIL - FROM:<TargetIT@Mycompany.com> 0 0 4 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionResponse SMTPSVC1 EXCHANGE-X01 - 25 - - 250+sender+ok+<TargetIT@Mycompany.com> 0 0 43 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionCommand SMTPSVC1 EXCHANGE-X01 - 25 RCPT - TO:<network@etp1001.etp.na.blackberry.net> 0 0 4 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionResponse SMTPSVC1 EXCHANGE-X01 - 25 - - 250+Recipient+ok+<network@etp1001.etp.na.blackberry.net> 0 0 56 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionCommand SMTPSVC1 EXCHANGE-X01 - 25 DATA - - 0 0 4 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionResponse SMTPSVC1 EXCHANGE-X01 - 25 - - 354+send+the+mail+data,+end+with+. 0 0 34 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionResponse SMTPSVC1 EXCHANGE-X01 - 25 - - 250+B4a71ccda0000+Message+accepted+for+delivery 0 0 47 0 15 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionCommand SMTPSVC1 EXCHANGE-X01 - 25 QUIT - - 0 0 4 0 47 SMTP - - - -
2009-07-30 16:39:54 192.168.195.103 OutboundConnectionResponse SMTPSVC1 EXCHANGE-X01 - 25 - - 221+smtp.Mycompany.com+closing+connection 0 0 46 0 47 SMTP - - - -

As mentioned before, all outbound email relays through an intermediate server @ 192.168.195.103

[jibi]

We've had 217 messages sent through our infrastructure mail system to a network@etp address in the last 24 hours. Only one of these persons, who was inactive for days until the few hours when he was reactivated, is on a BES server. The other 20-30 people are not on our servers. We have a plethora of activations each hour, so I can safely say that we do not send typically have these sent during activation, although there looks like there may be other reasons they're sent (perhaps Desktop Redirector).

[TargetIT]

We don't even deploy Desktop Manager to anyone - they get the BB and that's it. I find it odd that there's no documentation on it, but it's clearly doing it - and consistantly for me.

[jibi]

There is documentation on the workflow. I'd question some other potential unknown factor in your environment, to be honest. From the logs, can you gather the source of the messages (I'm not seeing it the log lines above)?

Process flow: Activating the BlackBerry device over the wireless network
The user receives or purchases a new BlackBerry® device.

1. The user contacts your organization's IT department to activate the BlackBerry device.

2. The administrator uses the BlackBerry Manager to create a temporary activation password for the user account and communicates that password to the user. The password applies to the user account only.

3. To activate the BlackBerry device over the wireless network, the user opens the activation application on the BlackBerry device and types the appropriate email address and the activation password.

4. The BlackBerry device sends an activation request message to the email account. The message contains information about the BlackBerry device, such as routing information and the public keys for the BlackBerry device.

5. The BlackBerry® Enterprise Server sends the BlackBerry device an activation response that contains routing information about the BlackBerry Enterprise Server and the public keys for the BlackBerry Enterprise Server.

6. The BlackBerry Enterprise Server and the BlackBerry device establish a master encryption key. The BlackBerry Enterprise Server and the BlackBerry device confirm knowledge of the master encryption key to one another. If the confirmation succeeds, the activation proceeds and further communication between the BlackBerry Enterprise Server and the BlackBerry device is encrypted.

7. The BlackBerry Enterprise Server sends the IT policy to the BlackBerry device. If the BlackBerry device cannot accept the IT policy, the activation does not complete.

8. The BlackBerry Enterprise Server sends the appropriate service books (for example, the messaging service book, wireless calendar service book, browser service book, and other service books) to the BlackBerry device. The user can now send messages from and receive messages on the BlackBerry device.

9. If the user is configured for wireless synchronization, and the BlackBerry device has wireless backup and wireless calendar synchronization turned on, the BlackBerry Enterprise Server sends user data to the BlackBerry device.

[nobody7290]

I bet, that someone/somthing tried to setup synchronisation using the Desktop redirector.