Solved

Help needed to interpret SMTPDiag results

Posted on 2010-08-31
13
695 Views
Last Modified: 2012-08-14
I have a MS Exchange 2003 smtp queue of undeliverable mails to a particular email domain (@bigpond.com).
I did a
smtpdiag gary@devon.co.nz devaus@bigpond.com /v
with results in attachment.
From what I could make out from the results, there does not seem to be any issue. Yet the queue stubbornly stays unmoved. Meanwhile outbound mails to other recipients continue as usual.

Administrative support of the receiving domain, @bigpond.com claim that they do not use any spam filters. In any case, if sender, @devon.co.nz is blacklisted, would'nt their mail server had rejected the connection?

Could an experts please help interpret the diagnostic results and suggest further trouble-shooting procedures?
Thank you very much for helping with reducing the stress!
log.txt
0
Comment
Question by:garychu
  • 4
  • 3
  • 2
  • +3
13 Comments
 
LVL 13

Expert Comment

by:markusdamenous
ID: 33566470
Looking over your log, the SMTP sequence of commands is normal and does not show any failure.
0
 
LVL 6

Expert Comment

by:radnbne
ID: 33566559
If you force the queue to process do you see any errors in the logs?
0
 
LVL 29

Expert Comment

by:Rich Weissler
ID: 33566584
Concur with MarkusDamen -- all looks good in that log file.

Bigpond apparently has one MX record that I see, with two hosts for that address -- and when I just attempted to connect on port 25 they (both of them) were VERY slow to respond.  Therefore, I would strongly suspect the slow response of the destination mail servers is your culprit.
0
 
LVL 28

Assisted Solution

by:sunnyc7
sunnyc7 earned 500 total points
ID: 33566615
Your SMTPDiag looks ok - no issues there

Right click on the queue name Click Unfreeze.
0
 
LVL 27

Expert Comment

by:shauncroucher
ID: 33566676
Check your IP is not on any blacklists as a matter of course.

http://www.mxtoolbox.com/blacklists.aspx

Also check it isn't one particular email that is causing a backlog, perhaps a large email?

Shaun
0
 

Author Comment

by:garychu
ID: 33571315
Thanks for the overwhelmingly quick resposnes, experts.

radnbne: Forcing the queue does not change the status. Not sure which log you meant.

Razmus: But the queue has been stuck for nearly a week now. Bigpond is the biggest ISP in Australia. I assume that at some stage, one or other of the mail servers would be free.

sunnyc7: Do you mean first freeze and then unfreeze?

shauncroucher: Yes, the IP is listed on 2 to 3 dnsbl lists. (It's hard to be not listed by at least one or two at any one time. I may be wrong, but I suspect that some are dubious. For instance, UCEPROTECTL1 asks for USD97 to be delisted immediately. Others require such details for the request - suggesting that they in fact make up mailing lists.). In any case, would it have mattered if Bigpond support insists that they do not filter spam. (Hard to believe!). If the IP is listed, would the smtp connection be still successful, yet mail could not be delivered.

I will remove the queue and ask users to re-send. Then see what happens.

Thanks in the meantime.
0
Too many email signature updates to deal with?

Do you feel like you are taking up all of your time constantly visiting users’ desks to make changes to email signatures? Wish you could manage all signatures from one central location, easily design them and deploy them quickly to users? Well, there is an easy way!

 

Author Comment

by:garychu
ID: 33573613
Have since deleted the old stuck queue.
But seem to have made no difference.
Have also tried an smtpdiag analysis from another site. This other site uses the same ISP and DNS servers.
Attached is the result. It looks pretty much the same as the problem one.
I still feel that the most likely cause would be listing on an RBL.
But how do I get to convince the support guys at Bigpond - roos with head in the sand attitude!
0
 
LVL 6

Expert Comment

by:radnbne
ID: 33573850
A global RBL Check finds no issues with their server.  Your own test managed to send the email without a problem, this would not have happened if RBL was involved.

I think you need proof that bigpond is at fault.  Usually when I send mail to an account on the blacklist the message sis accepted for delivery and then a rejection message comes back.  

Are you getting any bounced messages?




0
 
LVL 27

Expert Comment

by:shauncroucher
ID: 33574120
Usually you would get a bounce back. If you are on any blackest, you do need to get that resolved and it is likely to be the cause. You should find out how you ended up on it in the first place too.

Shaun
0
 
LVL 28

Expert Comment

by:sunnyc7
ID: 33575144
Can you try restarting the server once ?
0
 

Author Comment

by:garychu
ID: 33581917
I can confirm that the sender domain still remains on a couple of the dnsbl.info lists. Unreasonable amount of monies are demanded for immediate delisting - otherwise will take another 1-2 weeks. Who is worse, spammers or people who are supposed to help control spams?
No bounc-backs from bigpond.com which could be their policy of not doing so.
Have also re-started the server.
Biggest mistake was to have allowed the black-listing to have happen. Even changes of IP will not help if the problem of finding the spambot is not first dealt with.
Would you agree that as far as interpreting the bigpond.com smtpdiag log is concerned, the issue is now settled?
0
 
LVL 28

Accepted Solution

by:
sunnyc7 earned 500 total points
ID: 33581937
Same issue with SORBS @ see here
http://en.wikipedia.org/wiki/Spam_and_Open_Relay_Blocking_System

They request a donation to get you off the list.

--
If you need a quickfix
talk to your ISP
Ask them what is the charge for their smarthost service per month - it should be minimal.
Configure your exchange using the smarthost and start relaying.

its a nightmare when you get into such delisting issues. Its not worth the time trying to plead with them to get off.
Get smarthost / start mailing.
0
 

Author Closing Comment

by:garychu
ID: 33582895
Thanks, experts.
With your inputs I think I now have enough to proceed further.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Utilizing an array to gracefully append to a list of EmailAddresses
Exchange server is not supported in any cloud-hosted platform (other than Azure with Azure Premium Storage).
The video tutorial explains the basics of the Exchange server Database Availability groups. The components of this video include: 1. Automatic Failover 2. Failover Clustering 3. Active Manager
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

706 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now