Are you using DNS caching, turn that off. It is on the QueueManger service properties.
John T > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers > Sent: Monday, October 08, 2007 4:37 PM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] SMTP_DELIV_FAILED > > I can ping yahoo.com. These errors are happening all the time. They > are occuring only with specific recipient domains - not all domains. > Incoming traffic appears normal even from these domains. > > > Richard Lyon wrote: > > As a test, try ping something on the Internet when you see this > > delivery message. Like Yahoo.com. > > > > > > On Oct 8, 2007, at 6:52 PM, Kevin Rogers wrote: > > > >> I've turned on verbose logging and it appears that the "listen on all > >> IPs" option did not work. But here is a better log snippet: > >> > >> 10:08 15:32 SMTPD(b01501a7000002f1) [192.168.0.4] connect > >> 64.121.33.15 port 5672 > >> 10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] EHLO [192.168.1.110] > >> 10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] AUTH > >> 10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] AUTH > >> 10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] AUTH > >> 10:08 15:32 SMTPD(b01501a7000002f1) Authenticated > >> [EMAIL PROTECTED], session treated as local. > >> 10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] MAIL > >> FROM:<[EMAIL PROTECTED]> > >> 10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] RCPT > >> TO:<[EMAIL PROTECTED]> > >> 10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] DATA > >> 10:08 15:32 SMTPD(b01501a7000002f1) [64.121.33.15] > >> d:\imail\spool\Db01501a7000002f1.SMD 558 > >> 10:08 15:32 SMTP-(0000000000000000) Info - Adding Queue file > >> d:\imail\spool\qb01501a7000002f1.smd > >> 10:08 15:32 SMTP-(b01501a7000002f1) processing > >> d:\imail\spool\qb01501a7000002f1.smd > >> 10:08 15:32 SMTP-(b01501a7000002f1) [x] looking up healthnet.com in > >> HOSTS and MX > >> 10:08 15:32 SMTP-(b01501a7000002f1) Info - Adding healthnet.com to > >> DNS cache - TTL = 1724 > >> 10:08 15:32 SMTP-(b01501a7000002f1) [Att-Blk] Got Attachment Blocking > >> Host Info for Rogersbenefit.com > >> 10:08 15:32 SMTP-(b01501a7000002f1) Trying healthnet.com (0) > >> 10:08 15:32 SMTP-(b01501a7000002f1) [x] Connecting socket to service > >> <SMTP> on host <healthnet.com> using protocol <tcp> > >> 10:08 15:32 SMTP-(b01501a7000002f1) [x] using source IP for > >> Rogersbenefit.com [192.168.0.4] > >> 10:08 15:32 SMTP-(b01501a7000002f1) Info - Found healthnet.com in DNS > >> Cache > >> 10:08 15:32 SMTP-(b01501a7000002f1) Connect healthnet.com > >> [204.107.47.187:25] (1) > >> 10:08 15:32 SMTP-(b01501a7000002f1) 421 Service not available, > >> closing transmission channel > >> 10:08 15:32 SMTP-(b01501a7000002f1) SMTP_DELIV_FAILED > >> 10:08 15:32 SMTP-(b01501a7000002f1) >QUIT > >> 10:08 15:32 SMTP-(b01501a7000002f1) > >> 10:08 15:32 SMTP-(b01501a7000002f1) [u] closing socket (u) > >> 10:08 15:32 SMTP-(b01501a7000002f1) requeuing > >> d:\imail\spool\qb01501a7000002f1.smd R0 T1 > >> 10:08 15:32 SMTP-(b01501a7000002f1) finished > >> d:\imail\spool\qb01501a7000002f1.smd status=3 > >> > >> > >> Does this help? > >> > >> > >> > >> > >> Kevin Rogers wrote: > >>> FYI - > >>> > >>> I just noticed that on the SMTP Advanced tab of Imail, the option to > >>> "Enable SMTP to Listen On All IP's" was NOT selected. I'm not sure > >>> if this could've been the problem, but I've now selected that option > >>> and will watch the logs. > >>> > >>> Kevin > >>> > >>> > >>> Darrell ([EMAIL PROTECTED]) wrote: > >>>> Your "A" / "PTR" records look fine. > >>>> > >>>> mail.rogersbenefit.com. 7200 IN A 207.47.22.58 > >>>> 58.22.47.207.in-addr.arpa. 86288 IN PTR mail.rogersbenefit.com > >>>> > >>>> Your listed in one RBL - "backscatter" so it would seem that it > >>>> should not be related to spam. > >>>> > >>>> Can you post a more detailed smtp log for the 6863023f00005c41 > >>>> transaction. This would help more. You can xxxx out any addresses > >>>> etc to prevent harvesting.. > >>>> > >>>> Darrell > >>>> ---------------------------------- > >>>> Check out http://www.invariantsystems.com for utilities for > >>>> Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue > >>>> Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. > >>>> > >>>> > >>>> Kevin Rogers wrote: > >>>>> I'm not sure if this is the right place to post this issue, but > >>>>> here goes: > >>>>> > >>>>> We recently upgraded our server (to Server2003 - running Imail. > >>>>> 8.21, Declude 4.3) and we're getting a lot of delivery failures to > >>>>> specific domains. It looks like the error we used to get before > >>>>> we had a PTR record setup correctly - certain domains refusing to > >>>>> connect with us. But I believe our PTR record is setup > >>>>> correctly. We upgraded our server, and so it has a different > >>>>> local IP address, but the same external IP, so our PTR record > >>>>> shouldn't have to change. The domain is rogersbenefit.com > >>>>> > >>>>> The errors in the imail log look like this: > >>>>> 10:08 13:20 SMTP-(57f5021f00004794) Trying LifeWiseHealth.com (0) > >>>>> 10:08 13:20 SMTP-(5b95020600004c35) Trying healthnet.com (0) > >>>>> 10:08 13:20 SMTP-(66fa00000818097c) Trying healthnet.com (0) > >>>>> 10:08 13:20 SMTP-(5939023700004927) Trying healthnet.com (0) > >>>>> 10:08 13:20 SMTP-(69ac021800005d9b) Trying taylorjohnsongroup.com (0) > >>>>> 10:08 13:20 SMTP-(64bd009a000057db) Trying heiworld.com (0) > >>>>> > >>>>> and end like this: > >>>>> > >>>>> 10:08 13:20 SMTP-(6863023f00005c41) 421 Service not available, > >>>>> closing transmission channel > >>>>> 10:08 13:20 SMTP-(6863023f00005c41) SMTP_DELIV_FAILED > >>>>> 10:08 13:20 SMTP-(6863023f00005c41) >QUIT > >>>>> > >>>>> I can ping our DNS servers fine. > >>>>> > >>>>> Any ideas? > >>>>> > >>>>> Thanks - Kevin > >>>>> > >>>>> > >>>>> --- > >>>>> This E-mail came from the Declude.JunkMail mailing list. To > >>>>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >>>>> type "unsubscribe Declude.JunkMail". The archives can be found > >>>>> at http://www.mail-archive.com. > >>>>> > >>>> > >>> > >>> > >>> --- > >>> This E-mail came from the Declude.JunkMail mailing list. To > >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >>> type "unsubscribe Declude.JunkMail". The archives can be found > >>> at http://www.mail-archive.com. > >>> > >>> > >>> > >> > >> > >> --- > >> This E-mail came from the Declude.JunkMail mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >> type "unsubscribe Declude.JunkMail". The archives can be found > >> at http://www.mail-archive.com. > >> > >> [This E-mail scanned for viruses by Declude] > >> > >> > > > > [This E-mail scanned for viruses by Declude] > > > > > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
