RE: [qmailtoaster] Re: Bounce Message

[Amit]

How do I enable detailed Spamdyke logging.

-Original Message-
From: Eric Shubert [mailto:e...@shubes.net] 
Sent: Friday, March 29, 2013 8:53 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: Bounce Message

On 03/29/2013 05:08 AM, Amit wrote:
> Hi Everyone,
>
> After a long time back to list and looking for small help. Getting 
> below
> bounce:
>
> 2013-03-29 07:38:11.124342500 CHKUSER accepted sender: from
> mailto:j...@mfeformwork.com::>> remote 
>  rcpt <> :
> sender accepted
>
> 2013-03-29 07:38:27.284377500 spamdyke[24197]: DENIED_OTHER from:
> j...@mfeformwork.com  to:
> jigersa...@ikf.co.in  origin_ip:
> 65.55.88.12 origin_rdns: tx2ehsobe002.messaging.microsoft.com auth:
> (unknown) encryption: (none) reason: 503_MAIL_first_(#5.5.1)
>
> Unable to understand and resolve the same.
>
> *Amit Dalia**
>
> *
>

Is this smtp or submission log? Presuming smtp log.

Do you have REQUIRE_AUTH=1 set anywhere (tcp.smtp or run file)?

Please turn on spamdyke's detail logging and capture one of these so we can
see what's going on in detail. It appears to be a problem related to the
smtp protocol.

--
-Eric 'shubes'

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Re: Bounce Message

[Amit]

Even I thinking that. But client is unable to understand the same as he is able 
to receive mail from same id on his gmail account.


-Original Message-
From: Sebastian Grewe [mailto:sebast...@grewe.ca] 
Sent: Friday, March 29, 2013 11:17 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Bounce Message

Looks like the remote server is starting the smtp connection out of order:

503_MAIL_first

Maybe it starts with a "rcpt to" for some reason. Seeing its a Microsoft node:

* Outlook client without authentication?
* Is it always the same server failing?
* only one sender affected by this?

Rather strange indeed - maybe something trivial as packet loss?

Cheers,
Sebastian

On 29.03.2013, at 18:35, Eric Shubert  wrote:

> On 03/29/2013 10:26 AM, Aleksander Podsiadły wrote:
>> Dnia 2013-03-29, pią o godzinie 17:38 +0530, Amit pisze:
>>> reason: 503_MAIL_first_(#5.5.1)
>> 
>> IMHO it's the greylist, try again.
> 
> You can try again, but I don't think that's it. DENIED_OTHER is a rejection 
> outside the scope of spamdyke, which is what does graylisting. If it were 
> graylisting, you'd see DENIED_GRAYLISTED in the log.
> 
> -- 
> -Eric 'shubes'
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

RE: [qmailtoaster] Re: Bounce Message

[Amit]

Sorry couldn't get back to you as it was last of Financial Year in India.

Ok now some more inputs:

1) This is incoming mail.
2) Gray listing disabled on my server.
3) Domain is skipped for anti-virus and anti-spam check in Simcontrol.
4) Log is coming from webmail.ikf.co.in MX. I use Google as a backup MX.

As far as I'm understanding, remote server is trying to send completion of mail 
transfer request before complete mail is getting delivered at my end.

Any other detail required from my side, do let me know.


Amit Dalia




-Original Message-
From: Aleksander Podsiadły [mailto:a...@mniow.pl] 
Sent: Saturday, March 30, 2013 1:32 AM
To: qmailtoaster-list@qmailtoaster.com
Subject: Re: [qmailtoaster] Re: Bounce Message

Dnia 2013-03-29, pią o godzinie 20:38 +0100, Aleksander Podsiadły pisze:
> The second machine answers with responses that don't give me quite 
> enough information to identify it

The same dialog with QMT:
8<--
[alex@mniow ~]$ telnet mail.mniow.pl 25
Trying 194.181.132.129...
Connected to mail.mniow.pl (194.181.132.129).
Escape character is '^]'.
220 mniow.mniow.pl - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP HELP
214 netqmail home page: http://qmail.org/netqmail DEBUG
502 unimplemented (#5.5.1)
VERB
502 unimplemented (#5.5.1)
RCPT TO: postmaster
554 Improper recipient address. Try supplying a domain name.
RCPT TO: postmas...@mniow.pl
421 Your address has been graylisted. Try again later.
QUIT
221 mniow.mniow.pl - Welcome to Qmail Toaster Ver. 1.3 SMTP Server Connection 
closed by foreign host.
8<-- EOT


--
Pozdrawiam/Regards,
mgr inż. Aleksander Podsiadły
st. informatyk gminy
Urząd Gminy w Mniowie
ul. Centralna 9
26-080 Mniów
tel:+48 413737002
fax:+48 413737024
mail:   a...@mniow.pl
a...@mniow.eu
jid:a...@jabber.mniow.pl
gg: 9150578


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com



-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Bounce Message

[Aleksander Podsiadły]

Dnia 2013-03-29, pią o godzinie 20:38 +0100, Aleksander Podsiadły pisze:
> The second machine answers with responses that don't give me quite
> enough information to identify it 

The same dialog with QMT:
8<--
[alex@mniow ~]$ telnet mail.mniow.pl 25
Trying 194.181.132.129...
Connected to mail.mniow.pl (194.181.132.129).
Escape character is '^]'.
220 mniow.mniow.pl - Welcome to Qmail Toaster Ver. 1.3 SMTP Server ESMTP
HELP
214 netqmail home page: http://qmail.org/netqmail
DEBUG
502 unimplemented (#5.5.1)
VERB
502 unimplemented (#5.5.1)
RCPT TO: postmaster
554 Improper recipient address. Try supplying a domain name.
RCPT TO: postmas...@mniow.pl
421 Your address has been graylisted. Try again later.
QUIT  
221 mniow.mniow.pl - Welcome to Qmail Toaster Ver. 1.3 SMTP Server
Connection closed by foreign host.
8<-- EOT


-- 
Pozdrawiam/Regards,
mgr inż. Aleksander Podsiadły
st. informatyk gminy
Urząd Gminy w Mniowie
ul. Centralna 9
26-080 Mniów
tel:+48 413737002
fax:+48 413737024
mail:   a...@mniow.pl
a...@mniow.eu
jid:a...@jabber.mniow.pl
gg: 9150578


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Bounce Message

[Aleksander Podsiadły]

Dnia 2013-03-29, pią o godzinie 11:26 -0700, Eric Shubert pisze:
> Not on a typical QMT.

The second machine answers with responses that don't give me quite
enough information to identify it (and clearly show that it's already in
violation of RFC-821 right from the first greeting it sends), and given
what it does do I wouldn't be at all surprised that it could be
responsible for the connection "attack" you witnessed.
8<--
[alex@mniow ~]$ telnet webmail.ikf.co.in. 25
Trying 115.111.37.3...
Connected to webmail.ikf.co.in (115.111.37.3).
Escape character is '^]'.
220 mail3.amitip.com - Welcome to IKF SMTP Server ESMTP
HELP
214 netqmail home page: http://qmail.org/netqmail
DEBUG
502 unimplemented (#5.5.1)
VERB
502 unimplemented (#5.5.1)
RCPT TO: postmas...@ikf.co.in
503 MAIL first (#5.5.1)
HELO foo
250 mail3.amitip.com - Welcome to IKF SMTP Server
RCPT TO: postmas...@ikf.co.in
503 MAIL first (#5.5.1)
MAIL FROM: <>
250 ok
RCPT TO: postmas...@ikf.co.in
250 ok
QUIT
221 mail3.amitip.com - Welcome to IKF SMTP Server
Connection closed by foreign host.
8<-- EOT

-- 
Pozdrawiam/Regards,
mgr inż. Aleksander Podsiadły
st. informatyk gminy
Urząd Gminy w Mniowie
ul. Centralna 9
26-080 Mniów
tel:+48 413737002
fax:+48 413737024
mail:   a...@mniow.pl
a...@mniow.eu
jid:a...@jabber.mniow.pl
gg: 9150578


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Bounce Message

[Aleksander Podsiadły]

Dnia 2013-03-29, pią o godzinie 11:26 -0700, Eric Shubert pisze:
> Not on a typical QMT.
That's right:

8<--
[alex@mniow ~]$ telnet webmail.ikf.co.in. 25
Trying 115.111.37.3...
Connected to webmail.ikf.co.in (115.111.37.3).
Escape character is '^]'.
220 mail3.amitip.com - Welcome to IKF SMTP Server ESMTP
EHLO a...@mniow.pl
250-mail3.amitip.com - Welcome to IKF SMTP Server
250-STARTTLS
250-PIPELINING
250-8BITMIME
250-SIZE 20971520
250 AUTH LOGIN PLAIN CRAM-MD5
RCPT TO: jigersa...@ikf.co.in
503 MAIL first (#5.5.1)
8<-- EOT

Remote problem. ;)

-- 
Pozdrawiam/Regards,
mgr inż. Aleksander Podsiadły
st. informatyk gminy
Urząd Gminy w Mniowie
ul. Centralna 9
26-080 Mniów
tel:+48 413737002
fax:+48 413737024
mail:   a...@mniow.pl
a...@mniow.eu
jid:a...@jabber.mniow.pl
gg: 9150578


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Bounce Message

[Aleksander Podsiadły]

Dnia 2013-03-29, pią o godzinie 11:26 -0700, Eric Shubert pisze:
> If I understand correctly, this is a rejection (not technically a
> bounce 
> at this stage) of a message coming into QMT. 

IMHO sending message from QMT outside.

-- 
Pozdrawiam/Regards,
mgr inż. Aleksander Podsiadły
st. informatyk gminy
Urząd Gminy w Mniowie
ul. Centralna 9
26-080 Mniów
tel:+48 413737002
fax:+48 413737024
mail:   a...@mniow.pl
a...@mniow.eu
jid:a...@jabber.mniow.pl
gg: 9150578


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Bounce Message

[Aleksander Podsiadły]

Dnia 2013-03-29, pią o godzinie 10:35 -0700, Eric Shubert pisze:
> If it were graylisting, you'd see DENIED_GRAYLISTED in the log.

It can be antivirus. GDATA client, for example, listen on 25 port.

-- 
Pozdrawiam/Regards,
mgr inż. Aleksander Podsiadły
st. informatyk gminy
Urząd Gminy w Mniowie
ul. Centralna 9
26-080 Mniów
tel:+48 413737002
fax:+48 413737024
mail:   a...@mniow.pl
a...@mniow.eu
jid:a...@jabber.mniow.pl
gg: 9150578


-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com

Re: [qmailtoaster] Re: Bounce Message

[Sebastian Grewe]

Looks like the remote server is starting the smtp connection out of order:

503_MAIL_first

Maybe it starts with a "rcpt to" for some reason. Seeing its a Microsoft node:

* Outlook client without authentication?
* Is it always the same server failing?
* only one sender affected by this?

Rather strange indeed - maybe something trivial as packet loss?

Cheers,
Sebastian

On 29.03.2013, at 18:35, Eric Shubert  wrote:

> On 03/29/2013 10:26 AM, Aleksander Podsiadły wrote:
>> Dnia 2013-03-29, pią o godzinie 17:38 +0530, Amit pisze:
>>> reason: 503_MAIL_first_(#5.5.1)
>> 
>> IMHO it's the greylist, try again.
> 
> You can try again, but I don't think that's it. DENIED_OTHER is a rejection 
> outside the scope of spamdyke, which is what does graylisting. If it were 
> graylisting, you'd see DENIED_GRAYLISTED in the log.
> 
> -- 
> -Eric 'shubes'
> 
> -
> To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
> For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
> 

-
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com