They are different. Notice the difference between "08CA20E15AD3A8FD" and "08CA20E15AD3A8FF".
You need to find the denial conversation in the log to examine for us to make any guesses about the other.Perhaps it has something to do with IMF or Junk Mail on the recipients computer? Regards, Michael B. Smith MCSE/Exchange MVP http://TheEssentialExchange.com From: Brown, Larry [mailto:[EMAIL PROTECTED] Sent: Monday, January 28, 2008 10:14 AM To: MS-Exchange Admin Issues Subject: SMTPReceive Log Hey all, I'm having an issue with a newsletter not being delivered. Other newsletters from the same company get through OK to the same user! The sending server for all of the newsletters is the same. Just to make sure I put the IP address in the IP Allow List on our Edge servers (129.33.90.145). We are using Exchange 2007 with Edge servers on a DMZ, Hub Transports and a CCR for the DB's. I found this entry in the SMTPReceive Log. My question is.if you look at the bolded part of the log it is showing a completely different IP address. Is this part of the same entry for 129.33.90.145, maybe referring to the IP address of the block list? Or is it referring to a different email and somehow got in the middle of the log entry? If the email IS blocked, then why do we receive other newsletters from the same IP address with no problems? 2008-01-25T22:37:40.328Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,1,10.101.1.205:25,129.33.90.145:49745,*,SMTPSubm it SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions 2008-01-25T22:37:40.328Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,2,10.101.1.205:25,129.33.90.145:49745,>,"220 mail1.dplinc.com Microsoft ESMTP MAIL Service ready at Fri, 25 Jan 2008 17:37:40 -0500", 2008-01-25T22:37:40.359Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FD,20,10.101.1.205:25,65.184.246.107:4898,>,"550 5.7.1 Recipient not authorized, your IP has been found on a block list", 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,3,10.101.1.205:25,129.33.90.145:49745,<,EHLO moodysws114.usf-moodys.com, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,4,10.101.1.205:25,129.33.90.145:49745,>,250-mail 1.dplinc.com Hello [129.33.90.145], 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,5,10.101.1.205:25,129.33.90.145:49745,>,250-SIZE 10485760, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,6,10.101.1.205:25,129.33.90.145:49745,>,250-PIPE LINING, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,7,10.101.1.205:25,129.33.90.145:49745,>,250-DSN, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,8,10.101.1.205:25,129.33.90.145:49745,>,250-ENHA NCEDSTATUSCODES, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,9,10.101.1.205:25,129.33.90.145:49745,>,250-X-AN ONYMOUSTLS, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,10,10.101.1.205:25,129.33.90.145:49745,>,250-AUT H, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,11,10.101.1.205:25,129.33.90.145:49745,>,250-X-E XPS NTLM, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,12,10.101.1.205:25,129.33.90.145:49745,>,250-8BI TMIME, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,13,10.101.1.205:25,129.33.90.145:49745,>,250-BIN ARYMIME, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,14,10.101.1.205:25,129.33.90.145:49745,>,250-CHU NKING, 2008-01-25T22:37:40.375Z,dmzexcet01\Default internal receive connector DMZEXCET01,08CA20E15AD3A8FF,15,10.101.1.205:25,129.33.90.145:49745,>,250 XEXCH50, Larry C. Brown LAN/WAN CS Support Dayton Power & Light (937)-331-4922 ~ Ninja Email Security with Cloudmark Spam Engine Gets Image Spam ~ ~ http://www.sunbeltsoftware.com/Ninja ~
