• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 728
  • Last Modified:

Help needed to interpret SMTPDiag results

I have a MS Exchange 2003 smtp queue of undeliverable mails to a particular email domain (@bigpond.com).
I did a
smtpdiag gary@devon.co.nz devaus@bigpond.com /v
with results in attachment.
From what I could make out from the results, there does not seem to be any issue. Yet the queue stubbornly stays unmoved. Meanwhile outbound mails to other recipients continue as usual.

Administrative support of the receiving domain, @bigpond.com claim that they do not use any spam filters. In any case, if sender, @devon.co.nz is blacklisted, would'nt their mail server had rejected the connection?

Could an experts please help interpret the diagnostic results and suggest further trouble-shooting procedures?
Thank you very much for helping with reducing the stress!
log.txt
0
garychu
Asked:
garychu
  • 4
  • 3
  • 2
  • +3
2 Solutions
 
Mark DamenERP System ManagerCommented:
Looking over your log, the SMTP sequence of commands is normal and does not show any failure.
0
 
radnbneCommented:
If you force the queue to process do you see any errors in the logs?
0
 
Rich WeisslerProfessional Troublemaker^h^h^h^h^hshooterCommented:
Concur with MarkusDamen -- all looks good in that log file.

Bigpond apparently has one MX record that I see, with two hosts for that address -- and when I just attempted to connect on port 25 they (both of them) were VERY slow to respond.  Therefore, I would strongly suspect the slow response of the destination mail servers is your culprit.
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 
sunnyc7Commented:
Your SMTPDiag looks ok - no issues there

Right click on the queue name Click Unfreeze.
0
 
shauncroucherCommented:
Check your IP is not on any blacklists as a matter of course.

http://www.mxtoolbox.com/blacklists.aspx

Also check it isn't one particular email that is causing a backlog, perhaps a large email?

Shaun
0
 
garychuAuthor Commented:
Thanks for the overwhelmingly quick resposnes, experts.

radnbne: Forcing the queue does not change the status. Not sure which log you meant.

Razmus: But the queue has been stuck for nearly a week now. Bigpond is the biggest ISP in Australia. I assume that at some stage, one or other of the mail servers would be free.

sunnyc7: Do you mean first freeze and then unfreeze?

shauncroucher: Yes, the IP is listed on 2 to 3 dnsbl lists. (It's hard to be not listed by at least one or two at any one time. I may be wrong, but I suspect that some are dubious. For instance, UCEPROTECTL1 asks for USD97 to be delisted immediately. Others require such details for the request - suggesting that they in fact make up mailing lists.). In any case, would it have mattered if Bigpond support insists that they do not filter spam. (Hard to believe!). If the IP is listed, would the smtp connection be still successful, yet mail could not be delivered.

I will remove the queue and ask users to re-send. Then see what happens.

Thanks in the meantime.
0
 
garychuAuthor Commented:
Have since deleted the old stuck queue.
But seem to have made no difference.
Have also tried an smtpdiag analysis from another site. This other site uses the same ISP and DNS servers.
Attached is the result. It looks pretty much the same as the problem one.
I still feel that the most likely cause would be listing on an RBL.
But how do I get to convince the support guys at Bigpond - roos with head in the sand attitude!
0
 
radnbneCommented:
A global RBL Check finds no issues with their server.  Your own test managed to send the email without a problem, this would not have happened if RBL was involved.

I think you need proof that bigpond is at fault.  Usually when I send mail to an account on the blacklist the message sis accepted for delivery and then a rejection message comes back.  

Are you getting any bounced messages?




0
 
shauncroucherCommented:
Usually you would get a bounce back. If you are on any blackest, you do need to get that resolved and it is likely to be the cause. You should find out how you ended up on it in the first place too.

Shaun
0
 
sunnyc7Commented:
Can you try restarting the server once ?
0
 
garychuAuthor Commented:
I can confirm that the sender domain still remains on a couple of the dnsbl.info lists. Unreasonable amount of monies are demanded for immediate delisting - otherwise will take another 1-2 weeks. Who is worse, spammers or people who are supposed to help control spams?
No bounc-backs from bigpond.com which could be their policy of not doing so.
Have also re-started the server.
Biggest mistake was to have allowed the black-listing to have happen. Even changes of IP will not help if the problem of finding the spambot is not first dealt with.
Would you agree that as far as interpreting the bigpond.com smtpdiag log is concerned, the issue is now settled?
0
 
sunnyc7Commented:
Same issue with SORBS @ see here
http://en.wikipedia.org/wiki/Spam_and_Open_Relay_Blocking_System

They request a donation to get you off the list.

--
If you need a quickfix
talk to your ISP
Ask them what is the charge for their smarthost service per month - it should be minimal.
Configure your exchange using the smarthost and start relaying.

its a nightmare when you get into such delisting issues. Its not worth the time trying to plead with them to get off.
Get smarthost / start mailing.
0
 
garychuAuthor Commented:
Thanks, experts.
With your inputs I think I now have enough to proceed further.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

  • 4
  • 3
  • 2
  • +3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now