Troubleshooting a delivery failure
One of my users is sending a message to an external organization and it bounced. The bounce doesn't seem to contain enough information for me to figure out what is going on on the remote end, but I noticed a line in the notification that didn't look right. Received-SPF: pass (mail215-ch1: domain of starpoint.com designates 64.190.10.4 as permitted sender) client-ip=64.190.10.4; envelope-from=bjawor...@starpoint.com; helo=mail.starpoint.com ;tarpoint.com ; At the very end of that line is ";tarpoint.com ;" . I've looked through my postfix config and can't find that typo, and I've also checked my SPF records. Anyone have any ideas what might have caused that? Here are the relevant entries from postconf: tnelson@mail:/var/cache/bind/external$ postconf | grep tarpoint masquerade_domains = starpoint.com mydestination = starpoint.com, starpointsolutions.com, instihire.com, sunconsultants.com, mail.starpoint.com, localhost.starpoint.com, localhost mydomain = starpoint.com myhostname = mail.starpoint.com relay_domains = exchange.starpoint.com smtpd_tls_cert_file = /etc/ssl/certs/starpoint.crt smtpd_tls_key_file = /etc/ssl/private/starpoint.key And for completeness, the full bounce is at the end of this message. Thanks for any idea, have a nice weekend. Tony Nelson Starpoint Solutions Brian Jaworski Senior Account Executive Starpoint Solutions 22 Cortlandt Street l New York, NY 10007 P: 212.238.0810 l F: 212.386.0746 _ From: postmas...@staples.com [mailto:postmas...@staples.com] Sent: Friday, May 30, 2014 3:10 PM To: Brian Jaworski Subject: Undeliverable: RE: follow up re offer Delivery has failed to these recipients or distribution lists: Hartel, Liz Your message wasn't delivered because of security policies. Microsoft Exchange will not try to redeliver this message for you. Please provide the following diagnostic text to your system administrator. Diagnostic information for administrators: Generating server: Staples.com elizabeth.har...@staples.com #< #5.7.1 smtp;550 5.7.1 RESOLVER.RST.NotAuthorized; not authorized> #SMTP# Original message headers: Received: from nedexedge101.staplesams.com (170.37.244.143) by nedexcashub105.staplesams.com (10.4.197.65) with Microsoft SMTP Server (TLS) id 14.2.318.4; Fri, 30 May 2014 14:51:11 -0400 Received: from mail215-ch1-R.bigfish.com (216.32.181.173) by nedexedge101.staplesams.com (170.37.244.143) with Microsoft SMTP Server (TLS) id 14.2.318.4; Fri, 30 May 2014 14:51:06 -0400 Received: from mail215-ch1 (localhost [127.0.0.1]) by mail215-ch1-R.bigfish.com (Postfix) with ESMTP id E053740079 for ; Fri, 30 May 2014 18:51:10 + (UTC) X-Forefront-Antispam-Report: CIP:64.190.10.4;KIP:(null);UIP:(null);IPV:NLI;H:mail.starpoint.com;RD:mail.starpoint.com;EFVD:NLI X-SpamScore: -11 X-BigFish: vps-11(zz9371I1431J1e84Mc85fhe2eI181fI148cI1506J4015I9b49M1447Idd85kzz1f42h2148h1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6h208chzz1d7338h1de098h1df219h17326ah8275bh8275dh18c673h1de097h186068h1954cbhz2fh5fh109h2a8h839hd25h1288h12a5h12bdh137ah13eah1441h1504h1537h153bh15d0h162dh1631h1758h18e1h1946h19b5h1b0ah1bceh224fh1fd0h1d0ch1d2eh1d3fh1dfeh1dffh1fe8h1ff5h20f0h2216h22d0h2336h2438h2461h2487h24d7h2516h2545h255eh25f6h2605h268bh26d3h27e2h1664i21f7m) X-FFO-Routing-Override: staples.com%corpdmz-24810.customer.frontbridge.com; Received-SPF: pass (mail215-ch1: domain of starpoint.com designates 64.190.10.4 as permitted sender) client-ip=64.190.10.4; envelope-from=bjawor...@starpoint.com; helo=mail.starpoint.com ;tarpoint.com ; Received: from mail215-ch1 (localhost.localdomain [127.0.0.1]) by mail215-ch1 (MessageSwitch) id 1401475867430249_30798; Fri, 30 May 2014 18:51:07 + (UTC) Received: from CH1EHSMHS037.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.254]) by mail215-ch1.bigfish.com (Postfix) with ESMTP id 64D8B2E0063 for ; Fri, 30 May 2014 18:51:07 + (UTC) Received: from mail.starpoint.com (64.190.10.4) by CH1EHSMHS037.bigfish.com (10.43.69.246) with Microsoft SMTP Server (TLS) id 14.16.227.3; Fri, 30 May 2014 18:51:06 + X-DKIM: OpenDKIM Filter v2.6.8 mail.starpoint.com 9AA051BC1EC1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=starpoint.com; s=mail; t=1401475865; bh=Ap6q2LbXDzsomaP87OYrUx1iVscHFJ4Ykco+dxevu8U=; h=From:To:Date:Subject:References:In-Reply-To; b=nEUOvCYduEC5bedJlzLJ7Vvkv0GlL8j3RQTivdYCl/xOvTj3RPGNFwltM5kWRewbO m4HEbq8wEawI3BTUaP/DbPNcCq0wZY0UG/niggPqRqHnl8hBglKCk3qGCxG8ZVL/5j epeY/ZH8kWa6So3pzhMOuTipPePCT0TNkXRgRNrY= X-Virus-Scanned: Debian amavisd-new at starpoint.com Received: from mail.starpoint.com ([127.0.0.1]) by localhost (mail.starpoint.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id m7OSaNx5h0wJ for ;Fri, 30 May 2014 14:51:05 -0400 (EDT) Received: from exchange.starpoint.com (NY-HUBT02.WIN.STARPOINT.COM [192.168.43.19]) by mail.starpoint.com (Postfix) with ESMTPS id 58D1D1BC1EB8 for ; Fri
Re: Troubleshooting a delivery failure
On 5/30/2014 3:52 PM, Tony Nelson wrote: And for completeness, the full bounce is at the end of this message. Try again. Your report won't be complete until you show the full logs for this event. The bounce notification, while not totally useless, is not necessary. Best regards, Charles
RE: Troubleshooting a delivery failure
It looks to me that is more related to Exchange server, not Postfix. More likely the recipient(s) (users or groups) are limited to authenticated senders (internal). http://social.technet.microsoft.com/Forums/exchange/en-US/b7128bf2-4ec0-4508 -840f-32a34a12ac8b/550-571-resolverrstauthrequired-authentication-required?f orum=exchangesvradminlegacy Marius. From: owner-postfix-us...@postfix.org [mailto:owner-postfix-us...@postfix.org] On Behalf Of Tony Nelson Sent: Friday, May 30, 2014 10:52 PM To: postfix-users@postfix.org Subject: Troubleshooting a delivery failure One of my users is sending a message to an external organization and it bounced. The bounce doesn't seem to contain enough information for me to figure out what is going on on the remote end, but I noticed a line in the notification that didn't look right. Received-SPF: pass (mail215-ch1: domain of starpoint.com designates 64.190.10.4 as permitted sender) client-ip=64.190.10.4; envelope-from=bjawor...@starpoint.com; helo=mail.starpoint.com ;tarpoint.com ; At the very end of that line is ";tarpoint.com ;" . I've looked through my postfix config and can't find that typo, and I've also checked my SPF records. Anyone have any ideas what might have caused that? Here are the relevant entries from postconf: tnelson@mail:/var/cache/bind/external$ postconf | grep tarpoint masquerade_domains = starpoint.com mydestination = starpoint.com, starpointsolutions.com, instihire.com, sunconsultants.com, mail.starpoint.com, localhost.starpoint.com, localhost mydomain = starpoint.com myhostname = mail.starpoint.com relay_domains = exchange.starpoint.com smtpd_tls_cert_file = /etc/ssl/certs/starpoint.crt smtpd_tls_key_file = /etc/ssl/private/starpoint.key And for completeness, the full bounce is at the end of this message. Thanks for any idea, have a nice weekend. Tony Nelson Starpoint Solutions Brian Jaworski Senior Account Executive Starpoint Solutions 22 Cortlandt Street l New York, NY 10007 P: 212.238.0810 l F: 212.386.0746 _ From: postmas...@staples.com [mailto:postmas...@staples.com] Sent: Friday, May 30, 2014 3:10 PM To: Brian Jaworski Subject: Undeliverable: RE: follow up re offer Delivery has failed to these recipients or distribution lists: Hartel, Liz Your message wasn't delivered because of security policies. Microsoft Exchange will not try to redeliver this message for you. Please provide the following diagnostic text to your system administrator. Diagnostic information for administrators: Generating server: Staples.com elizabeth.har...@staples.com #< #5.7.1 smtp;550 5.7.1 RESOLVER.RST.NotAuthorized; not authorized> #SMTP# Original message headers: Received: from nedexedge101.staplesams.com (170.37.244.143) by nedexcashub105.staplesams.com (10.4.197.65) with Microsoft SMTP Server (TLS) id 14.2.318.4; Fri, 30 May 2014 14:51:11 -0400 Received: from mail215-ch1-R.bigfish.com (216.32.181.173) by nedexedge101.staplesams.com (170.37.244.143) with Microsoft SMTP Server (TLS) id 14.2.318.4; Fri, 30 May 2014 14:51:06 -0400 Received: from mail215-ch1 (localhost [127.0.0.1]) by mail215-ch1-R.bigfish.com (Postfix) with ESMTP id E053740079 for ; Fri, 30 May 2014 18:51:10 + (UTC) X-Forefront-Antispam-Report: CIP:64.190.10.4;KIP:(null);UIP:(null);IPV:NLI;H:mail.starpoint.com;RD:mail.s tarpoint.com;EFVD:NLI X-SpamScore: -11 X-BigFish: vps-11(zz9371I1431J1e84Mc85fhe2eI181fI148cI1506J4015I9b49M1447Idd85kzz1f42h2 148h1ee6h1de0h1fdah2073h2146h1202h1e76h2189h1d1ah1d2ah21bch1fc6h208chzz1d733 8h1de098h1df219h17326ah8275bh8275dh18c673h1de097h186068h1954cbhz2fh5fh109h2a 8h839hd25h1288h12a5h12bdh137ah13eah1441h1504h1537h153bh15d0h162dh1631h1758h1 8e1h1946h19b5h1b0ah1bceh224fh1fd0h1d0ch1d2eh1d3fh1dfeh1dffh1fe8h1ff5h20f0h22 16h22d0h2336h2438h2461h2487h24d7h2516h2545h255eh25f6h2605h268bh26d3h27e2h166 4i21f7m) X-FFO-Routing-Override: staples.com%corpdmz-24810.customer.frontbridge.com; Received-SPF: pass (mail215-ch1: domain of starpoint.com designates 64.190.10.4 as permitted sender) client-ip=64.190.10.4; envelope-from=bjawor...@starpoint.com; helo=mail.starpoint.com ;tarpoint.com ; Received: from mail215-ch1 (localhost.localdomain [127.0.0.1]) by mail215-ch1 (MessageSwitch) id 1401475867430249_30798; Fri, 30 May 2014 18:51:07 + (UTC) Received: from CH1EHSMHS037.bigfish.com (snatpool1.int.messaging.microsoft.com [10.43.68.254]) by mail215-ch1.bigfish.com (Postfix) with ESMTP id 64D8B2E0063 for ; Fri, 30 May 2014 18:51:07 + (UTC) Received: from mail.starpoint.com (64.190.10.4) by CH1EHSMHS037.bigfish.com (10.43.69.246) with Microsoft SMTP Server (TLS) id 14.16.227.3; Fri, 30 May 2014 18:51:06 + X-DKIM: OpenDKIM Filter v2.6.8 mail.starpoint.com 9AA051BC1EC1 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simpl
Re: Troubleshooting a delivery failure
On Fri, May 30, 2014 at 03:52:21PM -0400, Tony Nelson wrote: > One of my users is sending a message to an external organization and it > bounced. It bounced deep inside the mail system of the recipient's organization. This is not your problem. > Received-SPF: pass (mail215-ch1: domain of starpoint.com designates > 64.190.10.4 as permitted sender) client-ip=64.190.10.4; > envelope-from=bjawor...@starpoint.com; helo=mail.starpoint.com ;tarpoint.com ; This is irrelevant. > elizabeth.har...@staples.com > #< #5.7.1 smtp;550 5.7.1 RESOLVER.RST.NotAuthorized; not authorized> #SMTP# The recipient might not be allowed to receive external email, or something about the content (attachments, ...) was restricted for this recipient, or the user's mailbox may be misconfigured. > Received: from nedexedge101.staplesams.com (170.37.244.143) > by nedexcashub105.staplesams.com (10.4.197.65) > with Microsoft SMTP Server (TLS) id 14.2.318.4; Fri, 30 May 2014 > 14:51:11 -0400 > Received: from mail215-ch1-R.bigfish.com (216.32.181.173) > by nedexedge101.staplesams.com (170.37.244.143) > with Microsoft SMTP Server (TLS) id 14.2.318.4; Fri, 30 May 2014 > 14:51:06 -0400 > Received: from mail215-ch1 (localhost [127.0.0.1]) > by mail215-ch1-R.bigfish.com (Postfix) with ESMTP id E053740079 > for ; Fri, 30 May 2014 18:51:10 + > (UTC) Accepted by bigfish and two additional SMTP hops inside staples before bouncing, long past being the sender's problem. > Received: from mail215-ch1 (localhost.localdomain [127.0.0.1]) > by mail215-ch1 (MessageSwitch) id 1401475867430249_30798; > Fri, 30 May 2014 18:51:07 + (UTC) > Received: from CH1EHSMHS037.bigfish.com > (snatpool1.int.messaging.microsoft.com [10.43.68.254]) > by mail215-ch1.bigfish.com (Postfix) with ESMTP id 64D8B2E0063 > for ; Fri, 30 May 2014 18:51:07 + > (UTC) > Received: from mail.starpoint.com (64.190.10.4) > by CH1EHSMHS037.bigfish.com (10.43.69.246) > with Microsoft SMTP Server (TLS) id 14.16.227.3; Fri, 30 May 2014 > 18:51:06 + Also three prior hops inside microsoft/bigfish. The problem is on the receiving end. -- Viktor.
