I've turned on verbose logging and it appears that the "listen on all
IPs" option did not work. But here is a better log snippet:
10:08 15:32 SMTPD(b01501a7000002f1) [192.168.0.4] connect 64.121.33.15
port 5672
10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] EHLO [192.168.1.110]
10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] AUTH
10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] AUTH
10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] AUTH
10:08 15:32 SMTPD(b01501a7000002f1) Authenticated [EMAIL PROTECTED],
session treated as local.
10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] MAIL
FROM:<[EMAIL PROTECTED]>
10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] RCPT
TO:<[EMAIL PROTECTED]>
10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] DATA
10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15]
d:\imail\spool\Db01501a7000002f1.SMD 558
10:08 15:32 SMTP-(0000000000000000) Info - Adding Queue file
d:\imail\spool\qb01501a7000002f1.smd
10:08 15:32 SMTP-(b01501a7000002f1) processing
d:\imail\spool\qb01501a7000002f1.smd
10:08 15:32 SMTP-(b01501a7000002f1) [x] looking up healthnet.com in
HOSTS and MX
10:08 15:32 SMTP-(b01501a7000002f1) Info - Adding healthnet.com to DNS
cache - TTL = 1724
10:08 15:32 SMTP-(b01501a7000002f1) [Att-Blk] Got Attachment Blocking
Host Info for Rogersbenefit.com
10:08 15:32 SMTP-(b01501a7000002f1) Trying healthnet.com (0)
10:08 15:32 SMTP-(b01501a7000002f1) [x] Connecting socket to service
<SMTP> on host <healthnet.com> using protocol <tcp>
10:08 15:32 SMTP-(b01501a7000002f1) [x] using source IP for
Rogersbenefit.com [192.168.0.4]
10:08 15:32 SMTP-(b01501a7000002f1) Info - Found healthnet.com in DNS Cache
10:08 15:32 SMTP-(b01501a7000002f1) Connect healthnet.com
[204.107.47.187:25] (1)
10:08 15:32 SMTP-(b01501a7000002f1) 421 Service not available, closing
transmission channel
10:08 15:32 SMTP-(b01501a7000002f1) SMTP_DELIV_FAILED
10:08 15:32 SMTP-(b01501a7000002f1) >QUIT
10:08 15:32 SMTP-(b01501a7000002f1)
10:08 15:32 SMTP-(b01501a7000002f1) [u] closing socket (u)
10:08 15:32 SMTP-(b01501a7000002f1) requeuing
d:\imail\spool\qb01501a7000002f1.smd R0 T1
10:08 15:32 SMTP-(b01501a7000002f1) finished
d:\imail\spool\qb01501a7000002f1.smd status=3
Does this help?
Kevin Rogers wrote:
FYI -
I just noticed that on the SMTP Advanced tab of Imail, the option to
"Enable SMTP to Listen On All IP's" was NOT selected. I'm not sure if
this could've been the problem, but I've now selected that option and
will watch the logs.
Kevin
Darrell ([EMAIL PROTECTED]) wrote:
Your "A" / "PTR" records look fine.
mail.rogersbenefit.com. 7200 IN A 207.47.22.58
58.22.47.207.in-addr.arpa. 86288 IN PTR mail.rogersbenefit.com
Your listed in one RBL - "backscatter" so it would seem that it
should not be related to spam.
Can you post a more detailed smtp log for the 6863023f00005c41
transaction. This would help more. You can xxxx out any addresses
etc to prevent harvesting..
Darrell
----------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
Kevin Rogers wrote:
I'm not sure if this is the right place to post this issue, but here
goes:
We recently upgraded our server (to Server2003 - running Imail.
8.21, Declude 4.3) and we're getting a lot of delivery failures to
specific domains. It looks like the error we used to get before we
had a PTR record setup correctly - certain domains refusing to
connect with us. But I believe our PTR record is setup correctly.
We upgraded our server, and so it has a different local IP address,
but the same external IP, so our PTR record shouldn't have to
change. The domain is rogersbenefit.com
The errors in the imail log look like this:
10:08 13:20 SMTP-(57f5021f00004794) Trying LifeWiseHealth.com (0)
10:08 13:20 SMTP-(5b95020600004c35) Trying healthnet.com (0)
10:08 13:20 SMTP-(66fa00000818097c) Trying healthnet.com (0)
10:08 13:20 SMTP-(5939023700004927) Trying healthnet.com (0)
10:08 13:20 SMTP-(69ac021800005d9b) Trying taylorjohnsongroup.com (0)
10:08 13:20 SMTP-(64bd009a000057db) Trying heiworld.com (0)
and end like this:
10:08 13:20 SMTP-(6863023f00005c41) 421 Service not available,
closing transmission channel
10:08 13:20 SMTP-(6863023f00005c41) SMTP_DELIV_FAILED
10:08 13:20 SMTP-(6863023f00005c41) >QUIT
I can ping our DNS servers fine.
Any ideas?
Thanks - Kevin
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
