[FW-1] AW: Re: [FW-1] Connection to final MTA failed

[Eric Ernst]

This just to tune it a bit more in......
 
We had an similar issue, it all came down to where some of our mail servers where not 
resolvable by the DNS Server (Reverse Resolve). Some MTA's do an reverse lookup before 
accepting the MTA session. 
 
Regards,
 
Eric Ernst
runIT AG, Switzerland

        -----Ursprüngliche Nachricht----- 
        Von: Spadafora, Robert (CA - Toronto) [mailto:[EMAIL PROTECTED]] 
        Gesendet: Mi 15.05.2002 20:36 
        An: [EMAIL PROTECTED] 
        Cc: 
        Betreff: Re: [FW-1] Connection to final MTA failed
        
        

        Well, I think this was is resolved...for the most part. 
        After trying all of the suggestions provided so far (such as explicitly 
rejecting ident, bouncing the CVP service, changing SMTP security timeouts, etc.) 
rejectng ident seemed to do the trick most of the time.

        Out of 10 e-mails sent out at once to hotmail, nine are delivered on the first 
try while one fails several times with "connection to final MTA failed".

        Thanks to everyone for your help. 

        Rob S. 

                 -----Original Message----- 
                From:   Spadafora, Robert (CA - Toronto)  
                Sent:   Thursday, May 09, 2002 3:49 PM 
                To:     '[EMAIL PROTECTED]' 
                Subject:        Connection to final MTA failed 

                Outbound e-mail from an internal ms exchange server to the Internet 
through 
                a Fw-1 4.1 SP5 on a Nokia IP-120 using an SMTP resource that passes 
the 
                e-mail to a CVP server (Trend Interscan virus wall). 

                When sending e-mails to web based e-mail services such as hotmail and 
                yahoo, we will notice between 3 - 5 "Connection to final MTA failed" 
                messages in the fw-1 log.  When sending them to private corporate 
e-mail 
                accounts, such as [EMAIL PROTECTED], we do not get the "Connection 
to final MTA 
                failed" messages. 

                We've already tried settng Policy-->Properties---> "Accept outgoing 
                packets originating from gateway" to "first". However, the symptom 
still exists. 

                Can you or someone suggest reasoning as to why we are getting the 
                "Connection to final MTA failed" messages with web based 
                e-mail destinations and not with private corporate e-mail 
destinations? 

                Can anyone suggest a remedy? 

                Note, that without using an SMTP resource, any message to any e-mail 
                account passes on the first attempt without any error message. 

                Regards, 
                Rob S. 

�ǭ���*':�N|�߉Ǩ���g����ǧu�ޙ�����I4�EYb��.��^rJh�{\�h���86(~�^zf���]��_�Y��X��X��z&j)S��칻�&�~�&������x%��i��zǞ����k��b�{�m����!y�)�)�r�����Ǭ�f��)��٥!����y��笶*'���hr��쨺�.n�+��b�z)�*'�隊W�֌'z�lr���"��(