July 6, 2008 03:19am pdt

1. jar3817 29,765
2. PsiCop 19,775
3. Nopius 19,639
4. RaulDias 17,250
5. _jesper_ 14,100
6. war1 13,122
7. kieran_b 12,000
8. Sembee 8,186
9. grblades 7,500
10. fgrushevsky 6,290
11. hielo 5,875
12. uetian1707 5,800
13. kenfcamp 5,450
14. gheist 4,500
14. mwecompu... 4,500

1. jlevie 347,626
2. PsiCop 246,264
3. anfi 85,387
4. jar3817 75,174
5. Nopius 64,789
6. kenfcamp 48,713
7. markt9 39,546
8. Sembee 34,311
9. war1 29,797
10. it_alche... 25,390
11. samri 25,291
12. _jesper_ 24,300
13. grblades 24,095
14. HalldorG 18,447
15. ygoutham 17,675

03.20.2008 at 07:20AM PDT, ID: 23256955

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

4.6

Sendmail problems - dsn=4.0.0, stat=Deferred

Zones: SendMail Email Server, Linux, Linux Administration

Tags: dsn=4.0.0, stat=Deferred

Hi,
We are using Centos 4.6 + Sendmail version 8.13.1, config V10/Berkeley + MailScanner. lately we got manu errors of "dsn=4.0.0, stat=Deferred" with many server.

What can be the problem?

Thanks,
Amir

         
             Mar 20 13:22:48 fastweb2 sendmail[31690]: m2JFPgDE020515: to=<info@arcd.net>, delay=19:57:03, xdelay=00:00:00, mailer=esmtp, pri=7068887, relay=mx20.netvision.net.il., dsn=4.0.0, stat=Deferred
Mar 20 13:22:48 fastweb2 sendmail[31264]: m2IEcUt0011069: to=<info@ronitnesher.com>, delay=1+20:44:16, xdelay=00:00:00, mailer=esmtp, pri=15511183, relay=mx20.netvision.net.il., dsn=4.0.0, stat=Deferred
Mar 20 13:22:48 fastweb2 sendmail[31690]: m2JF9waq019867: to=<info@school-of-emotions.com>, delay=20:12:44, xdelay=00:00:00, mailer=esmtp, pri=7140778, relay=mx20.netvision.net.il., dsn=4.0.0, stat=Deferred
Mar 20 13:22:43 fastweb2 sendmail[21100]: m2FKP7ip027039: to=<nuritl8@netvision.net.il>, ctladdr=<nuri@spanana.com> (565/509), delay=4+14:56:47, xdelay=00:00:00, mailer=esmtp, pri=31364226, relay=mx20.netvision.net.il., dsn=4.0.0, stat=Deferred

Start your free trial to view this solution

Question Stats

Zone: Software

Question Asked By: amirlevy

Solution Provided By: amirlevy

Participating Experts: 3

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

03.20.2008 at 07:52AM PDT, ID: 21172104

_jesper_:

Some thoughts:

Have you recently made changes to your sendmail configuration files?

Do you have connectivity issues?

Are there any other maillog messages associated with a sample SMTP ID that give more information?

Are you on any black lists (www.mxtoolbox.com)?

Can you telnet to port 25 to any of the mail servers that you see defers?

Assisted Solution

03.20.2008 at 08:23AM PDT, ID: 21172450

amirlevy:

Hi,

I regularly check the DNS with DnsStuff and it's OK, with mxtoolbox i got this line:
=========================================
Transaction Time:       16.219 seconds - Not good!
=========================================
Relay Check:       OK - This server is not an open relay.
Rev DNS Check:       OK - 212.179.112.243 resolves to bzq-179-112-243.static.bezeqint.net

other issue is that our ISP is listed on UCEPROTECTL3 (it always was like that - the ISP told us that this list is not used usually) and the server worked fine in the past even with that list :
===============================================
UCEPROTECTL3      Listed      LISTED      Your ISP BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbone/AS8551 is UCEPROTECT-Level3 listed because he is responsible for a total of 3964 abusers on the net. See: Detail
Return codes were: 127.0.0.2
================================================

Any ID?

Thanks,
Amir

03.20.2008 at 08:36AM PDT, ID: 21172593

_jesper_:

A remote suggestion, allow ICMP. I can telnet to port 25 with reasonable response but am not able to ping or traceroute (which would tell me the total number of hops).

03.20.2008 at 08:39AM PDT, ID: 21172628

amirlevy:

How can i do that with iptables?

03.20.2008 at 08:54AM PDT, ID: 21172785

_jesper_:

iptables <firewall rule> -p icmp -m icmp --icmp-type any -j ACCEPT

change <firewall rule> to whatever you have listed.

03.20.2008 at 09:32AM PDT, ID: 21173154

amirlevy:

Hi,

I open the ICMP on the server but it seems that it blocked on the ISP firewall - I send a request to open it.

I just looked at the maillog and found this lines:
=====================================
Mar 20 18:23:26 fastweb2 sendmail[31579]: NOQUEUE: connect from [84.238.130.238]
Mar 20 18:23:27 fastweb2 sendmail[31579]: m2KGNQXk031579: [84.238.130.238] did not issue MAIL/EXPN/VRFY/ETRN during connection to Daemon0

can it help?

Thanks,
Amir

03.20.2008 at 09:38AM PDT, ID: 21173209

_jesper_:

No, that's just a connect without issuing any commands.

Other things to check:

1) the total number of sendmail processes
-> ps awx|grep -c sendmail
2) the total number of allowed processes
-> grep MaxDaemonChildren /etc/mail/sendmail.mc
3) disk utilization

03.20.2008 at 09:44AM PDT, ID: 21173271

amirlevy:

ps awx|grep -c sendmail = 7

grep MaxDaemonChildren /etc/mail/sendmail.mc = Didn't give anything...

/dev/mapper/VolGroup00-LogVol00
227G 22G 194G 10% /
/dev/sda1 99M 59M 36M 63% /boot
none 2.0G 0 2.0G 0% /dev/shm

03.20.2008 at 10:33AM PDT, ID: 21173669

_jesper_:

Can you telnet to port 25 to any of the mail servers that you see deferred?

03.20.2008 at 10:59AM PDT, ID: 21173950

amirlevy:

No...

telnet mx20.netvision.net.il 25
Trying 194.90.9.19...
Connected to mx20.netvision.net.il (194.90.9.19).
Escape character is '^]'.
452 try later
Connection closed by foreign host.

telnet c.mx.mail.yahoo.com 25
Trying 216.39.53.2...
Connected to c.mx.mail.yahoo.com (216.39.53.2).
Escape character is '^]'.
421 Message from (212.179.112.243) temporarily deferred - 4.16.50. Please refer to http://help.yahoo.com/help/us/mail/defer/defer-06.html
Connection closed by foreign host.

03.20.2008 at 11:48AM PDT, ID: 21174502

_jesper_:

It sounds like you are being blocked due to spam

03.20.2008 at 12:06PM PDT, ID: 21174690

amirlevy:

How can We solve this (we are not spammers) ?

03.20.2008 at 12:20PM PDT, ID: 21174828

_jesper_:

I would start by contacting one of the smaller companies that is deferring your mail and ask them why they are doing so.

Assisted Solution

03.20.2008 at 01:21PM PDT, ID: 21175457

amirlevy:

Thanks,

I already sent an email to Yahoo and to another company and hopefully I'll get some answers.

03.20.2008 at 02:50PM PDT, ID: 21176222

amirlevy:

Is it possible to set a secondary SMTP server with different IP address on the same machine (maybe chroot with other domain)?

03.22.2008 at 10:17PM PDT, ID: 21188802

amirlevy:

ICMP is aloud now

03.23.2008 at 04:22AM PDT, ID: 21189264

Rank: Guru

Nopius:

> Is it possible to set a secondary SMTP server with different IP address on the same machine (maybe chroot with other domain)?

If you have anither IP address, say x.x.x.x, you may use it. Just add it to your host, and change sendmail.cf option and restart sendmail:

O ClientPortOptions=Family=inet, Address=x.x.x.x

So that any outgoing connections will be originated from this IP, but the incoming mail routing will be same as before.

Assisted Solution

03.23.2008 at 07:33AM PDT, ID: 21189710

_jesper_:

If this mail server handles both incoming and outgoing mail, you cannot run two sendmail processes, each on its own IP on the same port (25).

If you want to use an *alternate* IP address, you need to change the DNS for the MX record to point to that IP.

03.25.2008 at 10:20AM PDT, ID: 21203948

amirlevy:

Ok, I decided to replace the current domain for the MX record with new one - i setup this domain with another IP and add it to the server with virtual network interfcae (eth0:1).

How can I set Sendmail to use this domain and IP?

03.25.2008 at 11:10AM PDT, ID: 21204453

_jesper_:

edit /etc/mail/sendmail.mc

DAEMON_OPTIONS(`Port=smtp,Addr=192.168.0.10, Name=MTA')dnl

change 192.168.0.10 to the IP address that you choose to use. save the change.

make -C /etc/mail
service sendmail reload

03.30.2008 at 01:24AM PDT, ID: 21240017

amirlevy:

Hi,

Thanks for the help so far.

As I mention in the first message the ISP is listed in one black list and he gave us another IP to use but the same results and now he is working to find solution for this issue:
[Your ISP BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbone/AS8551 is UCEPROTECT-Level3 listed]

We have another server with clean IP (other ISP), I did some tests with this server and use it as the SMTP for some of the mail boxes that we had problems with and it's work fine (I had to set up a domain with same users to make it work) the mail arrived to servers that didn't except mail from this boxes before.

I know that sendmail can relay on another host and I would like to set this server as the relay for all the outgoing messages from the problematic server without the need of setting domains and users for each domain.

How can I do it?

Thanks again,
Amir

03.30.2008 at 05:12AM PDT, ID: 21240420

mwecomputers:

With all the problems you are having, I recommend setting up your sendmail to work with a smart host and possibly a mail redirection as well.

A smart host is for email sending only. The service is beneficial to a traveler on the road, whose company does not provide a server that allows remotely authenticated relaying, or whose ISP blocks outgoing SMTP port. It provides a secure, authenticated outbound SMTP relay server, operating both on standard and non-standard ports (25, 26, 940 and 2525).

Mail Redirection allows you to relay incoming mail to a mail server on a non-standard port. This is quite useful for those who want to run a mail server but are stuck with an ISP that blocks inbound port 25, the standard mail port.

NOTE: I am using DNSExit as an example as that is who I use for my site.

Reference:
http://www.dnsexit.com/Direct.sv?cmd=mailRelay
http://www.dnsexit.com/Direct.sv?cmd=mailRedirect

Example:
http://www.dnsexit.com/support/mailrelay/sendmail.html

03.30.2008 at 05:25AM PDT, ID: 21240450

amirlevy:

I want to relay SERVER1 (this one with the problem) on SERVER2 (another serevr we have with NO problem). so SERVER2 will be the smart host for SERVER1.

what do i need to set in SERVER2 that he will send all messgaes from SERVER1?

04.28.2008 at 08:18PM PDT, ID: 21459403

amirlevy:

Hi,

We went with the problem to our ISP who set the Rev DNS to our domain instead of the general static ISP dns.

Thanks,
Amir

Accepted Solution

20080236-EE-VQP-29 / EE_QW_2_20070628