problem sending email via Exchange

We have sent a mailing to a number of our members from Linux/sendmail (web server.ohprs.org)via SBS 2008/Exchange 2007 (mail.ohprs.org) as the smart host. We have done this often in the past with no problem. Today, we are getting numerous bounce message as shown in the attached 'code'. The sendmail maillog has entries like the following:

Sep 17 11:48:33 webserver sm-mta[30065]: o8GMA65G018214: to=<reg4park@yahoo.com>, delay=17:38:27, xdelay=00:00:00, mailer=relay, pri=3990717, relay=mail.ohprs.org., dsn=4.0.0, stat=Deferred: Connection reset by mail.ohprs.org.

Note that I can send other messages from the linux host via the exchange server just fine. Not all messages are having this problem.

Can anyone tell me what is going on or where I can look to figure out the problem? Are there similar logfiles in Exchange? If so, where do I find them?

Thanks - urgent issue!
From <> Fri Sep 17 11:25:19 2010
Return-Path: <>
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on
        server.novatec-inc.com
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=4.0 tests=AWL,DATE_IN_PAST_12_24
        autolearn=no version=3.1.5
Delivered-To: unknown
Received: from mail.novatec-inc.com (205.178.146.50) by
  server.novatec-inc.com with POP3; 17 Sep 2010 15:25:19 -0000
Return-Path: <>
Delivered-To: mfoley@1591121.1714307
Received: (qmail 4746 invoked by uid 78); 17 Sep 2010 15:23:39 -0000
Received: from unknown (HELO cloudmark1) (10.49.16.89)
  by 0 with SMTP; 17 Sep 2010 15:23:39 -0000
Return-Path: <>
Received: from [64.129.23.80] ([64.129.23.80:7917] helo=mail.ohprs.org)
        by cm-mr14 (envelope-from <>)
        (ecelerity 2.2.2.41 r(31179/31189)) with ESMTP
        id 3B/EB-08806-BF7839C4; Fri, 17 Sep 2010 11:23:40 -0400
Received: from webserver.ohprs.org (192.168.0.3) by mail.ohprs.org
 (192.168.0.2) with Microsoft SMTP Server (TLS) id 8.1.436.0; Fri, 17 Sep 2010
 11:23:27 -0400
Received: from localhost (localhost)    by webserver.ohprs.org (8.14.1/8.14.1) id
 o8H2SRoe021316;        Thu, 16 Sep 2010 22:28:31 -0400
Date: Thu, 16 Sep 2010 22:28:31 -0400
From: Mail Delivery Subsystem <MAILER-DAEMON@ohprs.org>
Message-ID: <201009170228.o8H2SRoe021316@webserver.ohprs.org>
To: <webmaster@webserver.ohprs.org>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
        boundary="o8H2SRoe021316.1284690511/webserver.ohprs.org"
Subject: Warning: could not send message for past 4 hours
Auto-Submitted: auto-generated (warning-timeout)
X-Antispam: NO; Spamcatcher 6.0.4. Score 10
Status: R

--o8H2SRoe021316.1284690511/webserver.ohprs.org
Content-Type: text/plain

The original message was received at Thu, 16 Sep 2010 18:10:06 -0400
from localhost [127.0.0.1]

   ----- Transcript of session follows -----
<reg4park@yahoo.com>... Deferred: Connection reset by mail.ohprs.org.
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old

--o8H2SRoe021316.1284690511/webserver.ohprs.org
Content-Type: message/delivery-status

Reporting-MTA: dns; webserver.ohprs.org
Arrival-Date: Thu, 16 Sep 2010 18:10:06 -0400

Final-Recipient: RFC822; reg4park@yahoo.com
Action: delayed
Status: 4.4.2
Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.
Last-Attempt-Date: Thu, 16 Sep 2010 22:28:31 -0400
Will-Retry-Until: Tue, 21 Sep 2010 18:10:06 -0400

--o8H2SRoe021316.1284690511/webserver.ohprs.org
Content-Type: message/rfc822

Return-Path: <webmaster@webserver.ohprs.org>
Received: from webserver.ohprs.org (localhost [127.0.0.1])      by
 webserver.ohprs.org (8.14.1/8.14.1) with ESMTP id o8GMA65G018214       for
 <reg4park@yahoo.com>; Thu, 16 Sep 2010 18:10:06 -0400
Received: (from ohprs@localhost)
        by webserver.ohprs.org (8.14.1/8.14.1/Submit) id o8GMA6AO018206
        for reg4park@yahoo.com; Thu, 16 Sep 2010 18:10:06 -0400
Message-ID: <201009162210.o8GMA6AO018206@webserver.ohprs.org>
X-Authentication-Warning: webserver.ohprs.org: ohprs set sender to webmaster using -r
Date: Thu, 16 Sep 2010 18:10:06 -0400
From: <webmaster@webserver.ohprs.org>
To: <reg4park@yahoo.com>
Subject: New HPRS Newsletter
User-Agent: Heirloom mailx 12.1 6/15/06
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

The most recent HPRS newsletter is now available on the website.
Please click on the link below to view it.

https://www.ohprs.org/ohprs/newsletters.jsp


--o8H2SRoe021316.1284690511/webserver.ohprs.org--

Open in new window

LVL 1
jmarkfoleyAsked:
Who is Participating?
 
Alan HardistyConnect With a Mentor Co-OwnerCommented:
Based on the:
Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.
There is a similar question with a fix that was down to firewall firmware needing upgrading!
http://www.experts-exchange.com/Networking/Email_Groupware/Sendmail/Q_21876883.html 
You still need to resolve your Backscatter problem by filtering recipients otherwise you won't get off the Backscatterer.org blacklist site.  It may not be related, but it still needs to be resolved.
0
 
Alan HardistyCo-OwnerCommented:
Your IP Address is currently blacklisted on NOMOREFUN:
http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist%3a64.129.23.80
Apparently you are using a Dynamic IP Address or have a Generic Reverse DNS set on your IP Address.
Reverse DNS Check:
The Reverse DNS is surrently set as:
80.23.129.64.in-addr.arpa ohprs.org. [TTL=86400
Your Reverse DNS should be configured as mail.ohprs.org not ohprs.org.  Please call your ISP and ask them to change this ASAP.
0
 
jmarkfoleyAuthor Commented:
I sure we went through all this with them already, but I will check again.
0
 
jmarkfoleyAuthor Commented:
That doesn't appear to be the problem. Our ISP made the recommended reverse DNS change and we are still getting these bounces (from the original mailing).

I'm not convinced it is a DNS or blacklist thing. Attached is another message. You will note that it says "Deferred: Connection reset by mail.ohprs.org." That host: mail.ohprs.org, is the exchange server in our lan and is the smarthost for the linux sendmail. It appears to me that the exchange server itself is rejecting the message, not something out on the web.

Is there a way to check this? Is there a logfile or something on exchange that might give me some detail, or at least confirm whether or not it is exchange itself that is rejecting these messages?

Note that the linux host (webserver) is still able to send emails using MAIL as the smarthost. This particular mailing was 364 emails sent as individual messages. Still, we sent out 477 individual emails last Wednesday (SEPT 15) with no bounces and no problem whatsoever.

Advice?
From <> Fri Sep 17 22:15:04 2010
Return-Path: <>
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on
        server.novatec-inc.com
X-Spam-Level:
X-Spam-Status: No, score=0.8 required=4.0 tests=AWL,DATE_IN_PAST_12_24,
        MAILTO_TO_SPAM_ADDR autolearn=no version=3.1.5
Delivered-To: unknown
Received: from mail.novatec-inc.com (205.178.146.50) by
  server.novatec-inc.com with POP3; 18 Sep 2010 02:15:04 -0000
Return-Path: <>
Delivered-To: mfoley@1591121.1714307
Received: (qmail 30838 invoked by uid 78); 18 Sep 2010 02:13:27 -0000
Received: from unknown (HELO cloudmark1) (10.49.16.112)
  by 0 with SMTP; 18 Sep 2010 02:13:27 -0000
Return-Path: <>
Received: from [64.129.23.80] ([64.129.23.80:55725] helo=mail.ohprs.org)
        by cm-mr27 (envelope-from <>)
        (ecelerity 2.2.2.41 r(31179/31189)) with ESMTP
        id 53/F5-10304-740249C4; Fri, 17 Sep 2010 22:13:27 -0400
Received: from webserver.ohprs.org (192.168.0.3) by mail.ohprs.org
 (192.168.0.2) with Microsoft SMTP Server (TLS) id 8.1.436.0; Fri, 17 Sep 2010
 22:13:26 -0400
Received: from localhost (localhost)    by webserver.ohprs.org (8.14.1/8.14.1) id
 o8H2SRp6021316;        Thu, 16 Sep 2010 22:28:31 -0400
Date: Thu, 16 Sep 2010 22:28:31 -0400
From: Mail Delivery Subsystem <MAILER-DAEMON@ohprs.org>
Message-ID: <201009170228.o8H2SRp6021316@webserver.ohprs.org>
To: <webmaster@webserver.ohprs.org>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
        boundary="o8H2SRp6021316.1284690511/webserver.ohprs.org"
Subject: Warning: could not send message for past 4 hours
Auto-Submitted: auto-generated (warning-timeout)
X-Antispam: NO; Spamcatcher 6.0.4. Score 10
Status: R

--o8H2SRp6021316.1284690511/webserver.ohprs.org
Content-Type: text/plain

The original message was received at Thu, 16 Sep 2010 18:10:04 -0400
from localhost [127.0.0.1]

   ----- Transcript of session follows -----
<groomsaj2003@msn.com>... Deferred: Connection reset by mail.ohprs.org.
Warning: message still undelivered after 4 hours
Will keep trying until message is 5 days old

--o8H2SRp6021316.1284690511/webserver.ohprs.org
Content-Type: message/delivery-status

Reporting-MTA: dns; webserver.ohprs.org
Arrival-Date: Thu, 16 Sep 2010 18:10:04 -0400

Final-Recipient: RFC822; groomsaj2003@msn.com
Action: delayed
Status: 4.4.2
Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.
Last-Attempt-Date: Thu, 16 Sep 2010 22:28:31 -0400
Will-Retry-Until: Tue, 21 Sep 2010 18:10:04 -0400

--o8H2SRp6021316.1284690511/webserver.ohprs.org
Content-Type: message/rfc822

Return-Path: <webmaster@webserver.ohprs.org>
Received: from webserver.ohprs.org (localhost [127.0.0.1])      by
 webserver.ohprs.org (8.14.1/8.14.1) with ESMTP id o8GMA4oL017615       for
 <groomsaj2003@msn.com>; Thu, 16 Sep 2010 18:10:04 -0400
Received: (from ohprs@localhost)
        by webserver.ohprs.org (8.14.1/8.14.1/Submit) id o8GMA4Qm017593
        for groomsaj2003@msn.com; Thu, 16 Sep 2010 18:10:04 -0400
Message-ID: <201009162210.o8GMA4Qm017593@webserver.ohprs.org>
X-Authentication-Warning: webserver.ohprs.org: ohprs set sender to webmaster using -r
Date: Thu, 16 Sep 2010 18:10:04 -0400
From: <webmaster@webserver.ohprs.org>
To: <groomsaj2003@msn.com>
Subject: New HPRS Newsletter
User-Agent: Heirloom mailx 12.1 6/15/06
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

The most recent HPRS newsletter is now available on the website.
Please click on the link below to view it.

https://www.ohprs.org/ohprs/newsletters.jsp


--o8H2SRp6021316.1284690511/webserver.ohprs.org--

Open in new window

0
 
jmarkfoleyAuthor Commented:
I'm going to revisit this if/when it occurs again. Meanwhile, I'll research the backscatter issue.
0
All Courses

From novice to tech pro — start learning today.