SMTP response "354 Ready, steady, go"

Hello,
I have Exchange 2007 SP1 Update 7 running on a Windows 2003 SP2 single box.  It is behind ISA 2006 firewall.

Twice now different people have said that they are getting a 5.5.0 NDR when trying to send to us.  It appears to be intermitant. The diagnositic code is:
Diagnostic-Code: smtp; 354 Start mail input; end with <CRLF>.<CRLF>

I have tried looking up the error codes and they haven't told me anything specific.  I have telneted to test it out and my email gets through every time.  However I do get a weird response after typing DATA -

220 <myEmailServer> Microsoft ESMTP MAIL Service ready at Tue, 31 Mar 2009 17:09:42 +1300
EHLO xmas.com
250-<myEmailServer> Hello [XX.XX.XX.XX]
250-SIZE 10485760
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-X-ANONYMOUSTLS
250-AUTH NTLM LOGIN
250-X-EXPS GSSAPI NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250-XEXCH50
250 XRDST
MAIL FROM:santa@xmas.com
250 2.1.0 Sender OK
RCPT TO:tom@<mycomany>.co.nz
250 2.1.5 Recipient OK
DATA
354 Ready, steady, go

Why is my Exchange server responding with Ready, Steady, Go?  This can't be normal?!  Could this be why some people are getting the 5.5.0 354 error?

Thanks
Tom
TomMonkeyAsked:
Who is Participating?
 
MesthaConnect With a Mentor Commented:
AV software maybe, but I cannot find anything that would allow that to be modified.

Most odd.

Simon.
0
 
MesthaCommented:
That is not normal.
Something or someone has fiddled with the server. I normally see this when "funny" linux admins customise their SMTP server. What else is on the server?

Did you telnet to Exchange or the ISA server?

Simon.
0
 
SurajCommented:
This is not an error from your exchange server. Its some other 3rd party application responding for sure?
where did u do this telnet to?

-x
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

 
TomMonkeyAuthor Commented:
Hi guys,

I telneted to the external IP address of our ISA server.  I tried it internally and from my home machine.  I also elneting directly to the Exchange server and got the same thing each time.

ISA has a publishing rule on that just directs all SMTP inbound traffic straight to the IP address of the exchange server.

I know how to change the 220 banner but not the 354 response so I don't think it was me mucking around and forgetting about it!

All our emails seem to be flowing in and out ok.  Just occasionally two different people have been complaining about these NDRs -

Reporting-MTA: dns; <server>.<theircompany>.local
X-Postfix-Queue-ID: 838F18CA15
X-Postfix-Sender: rfc822; <sender>@<theircompany>.co.nz
Arrival-Date: Tue, 31 Mar 2009 15:51:05 +1300 (NZDT)

Final-Recipient: rfc822; user@<mycomany>.co.nz
Original-Recipient: rfc822;user@<mycompany>.co.nz
Action: failed
Status: 5.5.0
Remote-MTA: dns; smtp.<mycompany>.co.nz
Diagnostic-Code: smtp; 354 Start mail input; end with <CRLF>.<CRLF>

Cheers
Tom
0
 
MesthaCommented:
This is what you should see:

354 Start mail input; end with <CRLF>.<CRLF>

So I think someone has modified the SMTP response code.
No idea where it is changed though.

Simon.
0
 
TomMonkeyAuthor Commented:
I have no idea either.

I only got suspicious about it because of the line in the NDR:

Diagnostic-Code: smtp; 354 Start mail input; end with <CRLF>.<CRLF>

So I thought maybe their server was expecting the standard response but got something else and rejected it.
0
 
TomMonkeyAuthor Commented:
You are right Simon, it was AV!

A while back we upgraded all the AV from Trend Micro to Vipre.  It has been much better but has an email scannig agent in it for Outlook and scans any incoming SMTP traffic.  No idea why it changed the 354 response but when I made a new policy for our Exchange server and turned off the email scanning it went away.

There was nothing about this on the Vipre website.

Thanks for the help.  Not sure if this is what caused the intermitant email problem.  Will have to wait and see.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.