Mark
asked on
problem sending email via Exchange
We have sent a mailing to a number of our members from Linux/sendmail (web server.ohprs.org)via SBS 2008/Exchange 2007 (mail.ohprs.org) as the smart host. We have done this often in the past with no problem. Today, we are getting numerous bounce message as shown in the attached 'code'. The sendmail maillog has entries like the following:
Sep 17 11:48:33 webserver sm-mta[30065]: o8GMA65G018214: to=<reg4park@yahoo.com>, delay=17:38:27, xdelay=00:00:00, mailer=relay, pri=3990717, relay=mail.ohprs.org., dsn=4.0.0, stat=Deferred: Connection reset by mail.ohprs.org.
Note that I can send other messages from the linux host via the exchange server just fine. Not all messages are having this problem.
Can anyone tell me what is going on or where I can look to figure out the problem? Are there similar logfiles in Exchange? If so, where do I find them?
Thanks - urgent issue!
Sep 17 11:48:33 webserver sm-mta[30065]: o8GMA65G018214: to=<reg4park@yahoo.com>, delay=17:38:27, xdelay=00:00:00, mailer=relay, pri=3990717, relay=mail.ohprs.org., dsn=4.0.0, stat=Deferred: Connection reset by mail.ohprs.org.
Note that I can send other messages from the linux host via the exchange server just fine. Not all messages are having this problem.
Can anyone tell me what is going on or where I can look to figure out the problem? Are there similar logfiles in Exchange? If so, where do I find them?
Thanks - urgent issue!
From <> Fri Sep 17 11:25:19 2010
Return-Path: <>
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on
server.novatec-inc.com
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=4.0 tests=AWL,DATE_IN_PAST_12_24
autolearn=no version=3.1.5
Delivered-To: unknown
Received: from mail.novatec-inc.com (205.178.146.50) by
server.novatec-inc.com with POP3; 17 Sep 2010 15:25:19 -0000
Return-Path: <>
Delivered-To: mfoley@1591121.1714307
Received: (qmail 4746 invoked by uid 78); 17 Sep 2010 15:23:39 -0000
Received: from unknown (HELO cloudmark1) (10.49.16.89)
by 0 with SMTP; 17 Sep 2010 15:23:39 -0000
Return-Path: <>
Received: from [64.129.23.80] ([64.129.23.80:7917] helo=mail.ohprs.org)
by cm-mr14 (envelope-from <>)
(ecelerity 2.2.2.41 r(31179/31189)) with ESMTP
id 3B/EB-08806-BF7839C4; Fri, 17 Sep 2010 11:23:40 -0400
Received: from webserver.ohprs.org (192.168.0.3) by mail.ohprs.org
(192.168.0.2) with Microsoft SMTP Server (TLS) id 8.1.436.0; Fri, 17 Sep 2010
11:23:27 -0400
Received: from localhost (localhost) by webserver.ohprs.org (8.14.1/8.14.1) id
o8H2SRoe021316; Thu, 16 Sep 2010 22:28:31 -0400
Date: Thu, 16 Sep 2010 22:28:31 -0400
From: Mail Delivery Subsystem <MAILER-DAEMON@ohprs.org>
Message-ID: <201009170228.o8H2SRoe021316@webserver.ohprs.org>
To: <webmaster@webserver.ohprs.org>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="o8H2SRoe021316.1284690511/webserver.ohprs.org"
Subject: Warning: could not send message for past 4 hours
Auto-Submitted: auto-generated (warning-timeout)
X-Antispam: NO; Spamcatcher 6.0.4. Score 10
Status: R
--o8H2SRoe021316.1284690511/webserver.ohprs.org
Content-Type: text/plain
The original message was received at Thu, 16 Sep 2010 18:10:06 -0400
from localhost [127.0.0.1]
----- Transcript of session follows -----
<reg4park@yahoo.com>... Deferred: Connection reset by mail.ohprs.org.
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old
--o8H2SRoe021316.1284690511/webserver.ohprs.org
Content-Type: message/delivery-status
Reporting-MTA: dns; webserver.ohprs.org
Arrival-Date: Thu, 16 Sep 2010 18:10:06 -0400
Final-Recipient: RFC822; reg4park@yahoo.com
Action: delayed
Status: 4.4.2
Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.
Last-Attempt-Date: Thu, 16 Sep 2010 22:28:31 -0400
Will-Retry-Until: Tue, 21 Sep 2010 18:10:06 -0400
--o8H2SRoe021316.1284690511/webserver.ohprs.org
Content-Type: message/rfc822
Return-Path: <webmaster@webserver.ohprs.org>
Received: from webserver.ohprs.org (localhost [127.0.0.1]) by
webserver.ohprs.org (8.14.1/8.14.1) with ESMTP id o8GMA65G018214 for
<reg4park@yahoo.com>; Thu, 16 Sep 2010 18:10:06 -0400
Received: (from ohprs@localhost)
by webserver.ohprs.org (8.14.1/8.14.1/Submit) id o8GMA6AO018206
for reg4park@yahoo.com; Thu, 16 Sep 2010 18:10:06 -0400
Message-ID: <201009162210.o8GMA6AO018206@webserver.ohprs.org>
X-Authentication-Warning: webserver.ohprs.org: ohprs set sender to webmaster using -r
Date: Thu, 16 Sep 2010 18:10:06 -0400
From: <webmaster@webserver.ohprs.org>
To: <reg4park@yahoo.com>
Subject: New HPRS Newsletter
User-Agent: Heirloom mailx 12.1 6/15/06
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
The most recent HPRS newsletter is now available on the website.
Please click on the link below to view it.
https://www.ohprs.org/ohprs/newsletters.jsp
--o8H2SRoe021316.1284690511/webserver.ohprs.org--
ASKER
I sure we went through all this with them already, but I will check again.
ASKER
That doesn't appear to be the problem. Our ISP made the recommended reverse DNS change and we are still getting these bounces (from the original mailing).
I'm not convinced it is a DNS or blacklist thing. Attached is another message. You will note that it says "Deferred: Connection reset by mail.ohprs.org." That host: mail.ohprs.org, is the exchange server in our lan and is the smarthost for the linux sendmail. It appears to me that the exchange server itself is rejecting the message, not something out on the web.
Is there a way to check this? Is there a logfile or something on exchange that might give me some detail, or at least confirm whether or not it is exchange itself that is rejecting these messages?
Note that the linux host (webserver) is still able to send emails using MAIL as the smarthost. This particular mailing was 364 emails sent as individual messages. Still, we sent out 477 individual emails last Wednesday (SEPT 15) with no bounces and no problem whatsoever.
Advice?
I'm not convinced it is a DNS or blacklist thing. Attached is another message. You will note that it says "Deferred: Connection reset by mail.ohprs.org." That host: mail.ohprs.org, is the exchange server in our lan and is the smarthost for the linux sendmail. It appears to me that the exchange server itself is rejecting the message, not something out on the web.
Is there a way to check this? Is there a logfile or something on exchange that might give me some detail, or at least confirm whether or not it is exchange itself that is rejecting these messages?
Note that the linux host (webserver) is still able to send emails using MAIL as the smarthost. This particular mailing was 364 emails sent as individual messages. Still, we sent out 477 individual emails last Wednesday (SEPT 15) with no bounces and no problem whatsoever.
Advice?
From <> Fri Sep 17 22:15:04 2010
Return-Path: <>
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on
server.novatec-inc.com
X-Spam-Level:
X-Spam-Status: No, score=0.8 required=4.0 tests=AWL,DATE_IN_PAST_12_24,
MAILTO_TO_SPAM_ADDR autolearn=no version=3.1.5
Delivered-To: unknown
Received: from mail.novatec-inc.com (205.178.146.50) by
server.novatec-inc.com with POP3; 18 Sep 2010 02:15:04 -0000
Return-Path: <>
Delivered-To: mfoley@1591121.1714307
Received: (qmail 30838 invoked by uid 78); 18 Sep 2010 02:13:27 -0000
Received: from unknown (HELO cloudmark1) (10.49.16.112)
by 0 with SMTP; 18 Sep 2010 02:13:27 -0000
Return-Path: <>
Received: from [64.129.23.80] ([64.129.23.80:55725] helo=mail.ohprs.org)
by cm-mr27 (envelope-from <>)
(ecelerity 2.2.2.41 r(31179/31189)) with ESMTP
id 53/F5-10304-740249C4; Fri, 17 Sep 2010 22:13:27 -0400
Received: from webserver.ohprs.org (192.168.0.3) by mail.ohprs.org
(192.168.0.2) with Microsoft SMTP Server (TLS) id 8.1.436.0; Fri, 17 Sep 2010
22:13:26 -0400
Received: from localhost (localhost) by webserver.ohprs.org (8.14.1/8.14.1) id
o8H2SRp6021316; Thu, 16 Sep 2010 22:28:31 -0400
Date: Thu, 16 Sep 2010 22:28:31 -0400
From: Mail Delivery Subsystem <MAILER-DAEMON@ohprs.org>
Message-ID: <201009170228.o8H2SRp6021316@webserver.ohprs.org>
To: <webmaster@webserver.ohprs.org>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="o8H2SRp6021316.1284690511/webserver.ohprs.org"
Subject: Warning: could not send message for past 4 hours
Auto-Submitted: auto-generated (warning-timeout)
X-Antispam: NO; Spamcatcher 6.0.4. Score 10
Status: R
--o8H2SRp6021316.1284690511/webserver.ohprs.org
Content-Type: text/plain
The original message was received at Thu, 16 Sep 2010 18:10:04 -0400
from localhost [127.0.0.1]
----- Transcript of session follows -----
<groomsaj2003@msn.com>... Deferred: Connection reset by mail.ohprs.org.
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old
--o8H2SRp6021316.1284690511/webserver.ohprs.org
Content-Type: message/delivery-status
Reporting-MTA: dns; webserver.ohprs.org
Arrival-Date: Thu, 16 Sep 2010 18:10:04 -0400
Final-Recipient: RFC822; groomsaj2003@msn.com
Action: delayed
Status: 4.4.2
Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.
Last-Attempt-Date: Thu, 16 Sep 2010 22:28:31 -0400
Will-Retry-Until: Tue, 21 Sep 2010 18:10:04 -0400
--o8H2SRp6021316.1284690511/webserver.ohprs.org
Content-Type: message/rfc822
Return-Path: <webmaster@webserver.ohprs.org>
Received: from webserver.ohprs.org (localhost [127.0.0.1]) by
webserver.ohprs.org (8.14.1/8.14.1) with ESMTP id o8GMA4oL017615 for
<groomsaj2003@msn.com>; Thu, 16 Sep 2010 18:10:04 -0400
Received: (from ohprs@localhost)
by webserver.ohprs.org (8.14.1/8.14.1/Submit) id o8GMA4Qm017593
for groomsaj2003@msn.com; Thu, 16 Sep 2010 18:10:04 -0400
Message-ID: <201009162210.o8GMA4Qm017593@webserver.ohprs.org>
X-Authentication-Warning: webserver.ohprs.org: ohprs set sender to webmaster using -r
Date: Thu, 16 Sep 2010 18:10:04 -0400
From: <webmaster@webserver.ohprs.org>
To: <groomsaj2003@msn.com>
Subject: New HPRS Newsletter
User-Agent: Heirloom mailx 12.1 6/15/06
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
The most recent HPRS newsletter is now available on the website.
Please click on the link below to view it.
https://www.ohprs.org/ohprs/newsletters.jsp
--o8H2SRp6021316.1284690511/webserver.ohprs.org--
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I'm going to revisit this if/when it occurs again. Meanwhile, I'll research the backscatter issue.
http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist%3a64.129.23.80
Apparently you are using a Dynamic IP Address or have a Generic Reverse DNS set on your IP Address.
Reverse DNS Check:
The Reverse DNS is surrently set as:
80.23.129.64.in-addr.arpa ohprs.org. [TTL=86400
Your Reverse DNS should be configured as mail.ohprs.org not ohprs.org. Please call your ISP and ask them to change this ASAP.