Solved

TLS Connect failed....I'm not going to try again

Posted on 2008-10-06
8
1,005 Views
Last Modified: 2013-11-16
Hi,

I'm having a strange email issue.  Basically, my company can receive most external emails just fine, but
when emails are sent from one particular external domain, the emails get bounced back to the sender SLOOOWLY.
After several days, the sender will receive an email that says something like this:

TLS Connect failed.  connected to xyz.ab.de.fg
I'm not going to try again; this message has been in the queue too long.

The same emails are delivered properly to gmail accounts.

the MX records appear to be fine and I notice no other issues in the logs of our
firewall or exchange server (we're using Exchange 2003).

We thought this might be a TLS issue, but we are receiving TLS-encrypted emails from other domains, so I'm not sure that's the issue.

I've seen similar questions on experts-exchange, but without satisfactory resolution.

Any ideas as to what/where to test?
I'm not a sysadmin/exchange expert...it's just a job I inherited, so go easy!

Thanks!
0
Comment
Question by:pdanese
  • 3
  • 3
  • 2
8 Comments
 
LVL 32

Accepted Solution

by:
dpk_wal earned 300 total points
ID: 22657009
Although I am not an expert on exchange; writing this comment as it might help, I think either NDR or reverse DNS lookup can be the cause of the behavior observed.

Thank you.
0
 

Author Comment

by:pdanese
ID: 22658970
Hi, thank you for the response.

I have a few questions, tho...what is NDR?

also, could you elaborate on reverse dns lookup being 'the cause'?

0
 

Author Comment

by:pdanese
ID: 22658997
i just looked up NDR...that seems to be an error when the recipient doesn't exist.

that is not the case here.  the recipients *do* exist and they receive emails from most sources just fine.  but no one in our domain is capable of receiving emails from one specific external domain.

hope that helps clarify the issue.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 32

Expert Comment

by:dpk_wal
ID: 22660590
If you are using a firewall which does NAT for your email server and the MX record and the public IP of the firewall are different; the firewall normally sends all outbound traffic from the server using the puclic IP instead of MX record; in this case the domain which is doing reverse DNS lookup would not accept the emails from your domain. To overcome this problem we configure 1-1 NAT; and this ensures that all outbound traffic from server goes out with the same IP as the MX record IP.

As you clarified NDR is not the issue. If this is ruled out then I am not sure what else is the issue.

Thank you.
0
 
LVL 12

Assisted Solution

by:RobinHuman
RobinHuman earned 150 total points
ID: 22660765
This sounds like a TLS authentication issue on the recipient's side - I suggest that you contact them and advise them of this issue - could be the trust with them no longer exists.
0
 

Author Closing Comment

by:pdanese
ID: 31503372
suggestions didn't fix the problem but I wanted to distribute points to close the question.

Thanks to both for responding!
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 22768402
Thank you for the points.
0
 
LVL 12

Expert Comment

by:RobinHuman
ID: 22768794
Thank you
0

Featured Post

NFR key for Veeam Backup for Microsoft Office 365

Veeam is happy to provide a free NFR license (for 1 year, up to 10 users). This license allows for the non‑production use of Veeam Backup for Microsoft Office 365 in your home lab without any feature limitations.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VB.Net creating Contact in Outlook 1 55
exchange 2007 1 14
Launch Outlook minimized 6 29
PowerShell:  Use of subproperties in a Select statement 7 27
What does UTC stand for?  “Coordinated Universal Time” – Think of this as the true time on Planet Earth that never changes with the exception of minor leap seconds here and there to account for the changes in the planet's rotation.   What does th…
When you have clients or friends from around the world, it becomes a challenge to arrange a meeting or effectively manage your time. This is where Outlook's capability to show 2 time zones in one calendar comes in handy.
Many of my clients call in with monstrous Gmail overloading issues with Outlook. A quick tip is to turn off the All Mail and Important folders from synching. Here is a quick video I made to show you how to turn off these and other folders in Gmail s…
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to: http://www.codetwo.com/excha…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question