Solved

Emails return NDR #550 4.4.7 QUEUE.Epired; message expired

Posted on 2010-08-23
11
1,623 Views
Last Modified: 2013-11-30
Unable to send or receive emails from one particular company.  Cannot, telnet to their mail.domain.com
ERROR: 5 Incomplete SMTP session (cause: idle timeout [company.domain]
0
Comment
Question by:flannk
11 Comments
 
LVL 21

Expert Comment

by:chapmanjw
ID: 33507921
This sounds like an issue on their end.  If you can send/receive emails from other organizations, but not this one, it is most likely their issue.  From what you provided, it seems that their SMTP server is either offline or being blocked by a network issue on their end.
0
 

Author Comment

by:flannk
ID: 33507964
There advise to us is that they can send to other organisations, but is only our organisation that they can't send to.  Would this occur if it was still their smtp server??
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 33508170
Please advise your domain name and sending IP address and their domain name (which I will immediately obscure) then I can look at the configurations of your domain / their domain and see where the problems might be.
0
 
LVL 14

Expert Comment

by:Shabarinath Ramadasan
ID: 33508347
Did you tried sending a test mail from gmail or yahoo?
See if some blacklisting happened from your ip range or domain name.

Good luck
Shaba
0
 

Author Comment

by:flannk
ID: 33516270
alanhardisty >  Can I email you this information as I don't really want to publise either organisation?
0
How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 33516293
Sure - just drop the details in an email to alan @ it-eye.co.uk.  My Anti-spam software will initially reject you (greylisting), but it should hopefully get through at the second attempt to send.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 33519160
Thanks - email received - my findings areas follows:
You are sitting behind a Cisco PIX / ASA device and that device has SMTP FIXUP or INSPECT ESMTP enabled.  This is messing with the available verbs that Exchange can play with and also stops recipients from determining your Fully Qualified Domain Name.  All they see is the following:
mail.yourdomain.subdomain.xxx.au claims to be invalid hostname '******************************************************************************': <br />   220 ****************************************************************************** <br />
What they should see is something similar to this:
mail.yourdomain.subdomain.xxx.au :<br />    220
mail.yourdomain.subdomain.xxx.au Microsoft ESMTP MAIL Service, Version: 6.0.3790.4675 ready at Wed, 25 Aug 2010 09:39:35 +0100 <br />
Please therefore disable SMTP FIXUP or INSPECT ESMTP and then see if that cures the problem of sending / receiving.
You don't have Reverse DNS setup properly.  This is what you currently have:
Answer:
203.213.xxx.xxx PTR record: 203-213-xxx-xxx-mpls.tpgi.com.au. [TTL 172800s] [A=203.213.xxx.xxx]
Please call your ISP and ask them to setup Reverse DNS on your Fixed IP Address as mail.yourdomain.subdomain.xxx.au (replace this with your proper domain name).
 
Their domain responds as follows:
mail.theirdomain.biz claims to be non-existent host sydmail01.australia.wan: <br /> 220 sydmail01.australia.wan Microsoft ESMTP MAIL Service ready at Wed, 25 Aug 2010 18:42:27 +1000 <br />
If they have Exchange 2007 / 2010 then this will be reporting on their RECEIVE connector and thus won't necessarily be valid.
They also don't have Reverse DNS setup properly.  This is what they have currently:
Answer:
202.7.xxx.xxx PTR record: 202-7-xxx-xxx-mwl-ts1-2600.tpgi.com.au. [TTL 172800s] [A=None]
*ERROR* There is no A record for 202-7-xxx-xxx-mwl-ts1-2600.tpgi.com.au. (may be negatively cached).
Reverse DNS (or lack of it) is the most likely problem causing them problems sending mail out.  They need to call their ISP and get it setup properly as mail.theirdomain.biz
 
Once you have tweaked your side - let me know and I will re-check to confirm the world sees your changes.
Thanks
Alan
0
 

Author Comment

by:flannk
ID: 33555977
Thanks for your response.
I have been able to get the reverse DNS setup on our ISP, this hasn't resolved the issue.  I am looking into the firewall.
Information I forgot to mention early was that emails to & from was working up until early June.  Nothing obvious has been changed,upgraded, etc.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 33556589
No probs - the Router will need to be changed before people can actually see the name of yur server, so please let me know when that has been changed.
0
 

Accepted Solution

by:
flannk earned 0 total points
ID: 33602481
Problem has been resolved.  It is apparent that the problem was with their ISP (thought to be related to their routing tables) but could get anything concrete from their ISP as to the exact problem.
Thanks all it gave me places to look.
0
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 33602484
Ah well - that one would have been rather tricky to determine!
Don't forget to close the question down - accepting your last comment is acceptable as we didn't resolve it for you and you have posted the answer.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Resolve DNS query failed errors for Exchange
"Migrate" an SMTP relay receive connector to a new server using info from an old server.
In this Micro Video tutorial you will learn the basics about Database Availability Groups and How to configure one using a live Exchange Server Environment. The video tutorial explains the basics of the Exchange server Database Availability grou…
This video discusses moving either the default database or any database to a new volume.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now