Solved

problem sending email via Exchange

Posted on 2010-09-17
5
1,094 Views
Last Modified: 2013-12-17
We have sent a mailing to a number of our members from Linux/sendmail (web server.ohprs.org)via SBS 2008/Exchange 2007 (mail.ohprs.org) as the smart host. We have done this often in the past with no problem. Today, we are getting numerous bounce message as shown in the attached 'code'. The sendmail maillog has entries like the following:

Sep 17 11:48:33 webserver sm-mta[30065]: o8GMA65G018214: to=<reg4park@yahoo.com>, delay=17:38:27, xdelay=00:00:00, mailer=relay, pri=3990717, relay=mail.ohprs.org., dsn=4.0.0, stat=Deferred: Connection reset by mail.ohprs.org.

Note that I can send other messages from the linux host via the exchange server just fine. Not all messages are having this problem.

Can anyone tell me what is going on or where I can look to figure out the problem? Are there similar logfiles in Exchange? If so, where do I find them?

Thanks - urgent issue!
From <> Fri Sep 17 11:25:19 2010

Return-Path: <>

X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on

        server.novatec-inc.com

X-Spam-Level:

X-Spam-Status: No, score=0.6 required=4.0 tests=AWL,DATE_IN_PAST_12_24

        autolearn=no version=3.1.5

Delivered-To: unknown

Received: from mail.novatec-inc.com (205.178.146.50) by

  server.novatec-inc.com with POP3; 17 Sep 2010 15:25:19 -0000

Return-Path: <>

Delivered-To: mfoley@1591121.1714307

Received: (qmail 4746 invoked by uid 78); 17 Sep 2010 15:23:39 -0000

Received: from unknown (HELO cloudmark1) (10.49.16.89)

  by 0 with SMTP; 17 Sep 2010 15:23:39 -0000

Return-Path: <>

Received: from [64.129.23.80] ([64.129.23.80:7917] helo=mail.ohprs.org)

        by cm-mr14 (envelope-from <>)

        (ecelerity 2.2.2.41 r(31179/31189)) with ESMTP

        id 3B/EB-08806-BF7839C4; Fri, 17 Sep 2010 11:23:40 -0400

Received: from webserver.ohprs.org (192.168.0.3) by mail.ohprs.org

 (192.168.0.2) with Microsoft SMTP Server (TLS) id 8.1.436.0; Fri, 17 Sep 2010

 11:23:27 -0400

Received: from localhost (localhost)    by webserver.ohprs.org (8.14.1/8.14.1) id

 o8H2SRoe021316;        Thu, 16 Sep 2010 22:28:31 -0400

Date: Thu, 16 Sep 2010 22:28:31 -0400

From: Mail Delivery Subsystem <MAILER-DAEMON@ohprs.org>

Message-ID: <201009170228.o8H2SRoe021316@webserver.ohprs.org>

To: <webmaster@webserver.ohprs.org>

MIME-Version: 1.0

Content-Type: multipart/report; report-type=delivery-status;

        boundary="o8H2SRoe021316.1284690511/webserver.ohprs.org"

Subject: Warning: could not send message for past 4 hours

Auto-Submitted: auto-generated (warning-timeout)

X-Antispam: NO; Spamcatcher 6.0.4. Score 10

Status: R



--o8H2SRoe021316.1284690511/webserver.ohprs.org

Content-Type: text/plain



The original message was received at Thu, 16 Sep 2010 18:10:06 -0400

from localhost [127.0.0.1]



   ----- Transcript of session follows -----

<reg4park@yahoo.com>... Deferred: Connection reset by mail.ohprs.org.

Warning: message still undelivered after 4 hours

Will keep trying until message is 5 days old



--o8H2SRoe021316.1284690511/webserver.ohprs.org

Content-Type: message/delivery-status



Reporting-MTA: dns; webserver.ohprs.org

Arrival-Date: Thu, 16 Sep 2010 18:10:06 -0400



Final-Recipient: RFC822; reg4park@yahoo.com

Action: delayed

Status: 4.4.2

Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.

Last-Attempt-Date: Thu, 16 Sep 2010 22:28:31 -0400

Will-Retry-Until: Tue, 21 Sep 2010 18:10:06 -0400



--o8H2SRoe021316.1284690511/webserver.ohprs.org

Content-Type: message/rfc822



Return-Path: <webmaster@webserver.ohprs.org>

Received: from webserver.ohprs.org (localhost [127.0.0.1])      by

 webserver.ohprs.org (8.14.1/8.14.1) with ESMTP id o8GMA65G018214       for

 <reg4park@yahoo.com>; Thu, 16 Sep 2010 18:10:06 -0400

Received: (from ohprs@localhost)

        by webserver.ohprs.org (8.14.1/8.14.1/Submit) id o8GMA6AO018206

        for reg4park@yahoo.com; Thu, 16 Sep 2010 18:10:06 -0400

Message-ID: <201009162210.o8GMA6AO018206@webserver.ohprs.org>

X-Authentication-Warning: webserver.ohprs.org: ohprs set sender to webmaster using -r

Date: Thu, 16 Sep 2010 18:10:06 -0400

From: <webmaster@webserver.ohprs.org>

To: <reg4park@yahoo.com>

Subject: New HPRS Newsletter

User-Agent: Heirloom mailx 12.1 6/15/06

MIME-Version: 1.0

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: 7bit



The most recent HPRS newsletter is now available on the website.

Please click on the link below to view it.



https://www.ohprs.org/ohprs/newsletters.jsp





--o8H2SRoe021316.1284690511/webserver.ohprs.org--

Open in new window

0
Comment
Question by:jmarkfoley
  • 3
  • 2
5 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
ID: 33702736
Your IP Address is currently blacklisted on NOMOREFUN:
http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist%3a64.129.23.80
Apparently you are using a Dynamic IP Address or have a Generic Reverse DNS set on your IP Address.
Reverse DNS Check:
The Reverse DNS is surrently set as:
80.23.129.64.in-addr.arpa ohprs.org. [TTL=86400
Your Reverse DNS should be configured as mail.ohprs.org not ohprs.org.  Please call your ISP and ask them to change this ASAP.
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 33702870
I sure we went through all this with them already, but I will check again.
0
 
LVL 1

Author Comment

by:jmarkfoley
ID: 33706536
That doesn't appear to be the problem. Our ISP made the recommended reverse DNS change and we are still getting these bounces (from the original mailing).

I'm not convinced it is a DNS or blacklist thing. Attached is another message. You will note that it says "Deferred: Connection reset by mail.ohprs.org." That host: mail.ohprs.org, is the exchange server in our lan and is the smarthost for the linux sendmail. It appears to me that the exchange server itself is rejecting the message, not something out on the web.

Is there a way to check this? Is there a logfile or something on exchange that might give me some detail, or at least confirm whether or not it is exchange itself that is rejecting these messages?

Note that the linux host (webserver) is still able to send emails using MAIL as the smarthost. This particular mailing was 364 emails sent as individual messages. Still, we sent out 477 individual emails last Wednesday (SEPT 15) with no bounces and no problem whatsoever.

Advice?
From <> Fri Sep 17 22:15:04 2010

Return-Path: <>

X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on

        server.novatec-inc.com

X-Spam-Level:

X-Spam-Status: No, score=0.8 required=4.0 tests=AWL,DATE_IN_PAST_12_24,

        MAILTO_TO_SPAM_ADDR autolearn=no version=3.1.5

Delivered-To: unknown

Received: from mail.novatec-inc.com (205.178.146.50) by

  server.novatec-inc.com with POP3; 18 Sep 2010 02:15:04 -0000

Return-Path: <>

Delivered-To: mfoley@1591121.1714307

Received: (qmail 30838 invoked by uid 78); 18 Sep 2010 02:13:27 -0000

Received: from unknown (HELO cloudmark1) (10.49.16.112)

  by 0 with SMTP; 18 Sep 2010 02:13:27 -0000

Return-Path: <>

Received: from [64.129.23.80] ([64.129.23.80:55725] helo=mail.ohprs.org)

        by cm-mr27 (envelope-from <>)

        (ecelerity 2.2.2.41 r(31179/31189)) with ESMTP

        id 53/F5-10304-740249C4; Fri, 17 Sep 2010 22:13:27 -0400

Received: from webserver.ohprs.org (192.168.0.3) by mail.ohprs.org

 (192.168.0.2) with Microsoft SMTP Server (TLS) id 8.1.436.0; Fri, 17 Sep 2010

 22:13:26 -0400

Received: from localhost (localhost)    by webserver.ohprs.org (8.14.1/8.14.1) id

 o8H2SRp6021316;        Thu, 16 Sep 2010 22:28:31 -0400

Date: Thu, 16 Sep 2010 22:28:31 -0400

From: Mail Delivery Subsystem <MAILER-DAEMON@ohprs.org>

Message-ID: <201009170228.o8H2SRp6021316@webserver.ohprs.org>

To: <webmaster@webserver.ohprs.org>

MIME-Version: 1.0

Content-Type: multipart/report; report-type=delivery-status;

        boundary="o8H2SRp6021316.1284690511/webserver.ohprs.org"

Subject: Warning: could not send message for past 4 hours

Auto-Submitted: auto-generated (warning-timeout)

X-Antispam: NO; Spamcatcher 6.0.4. Score 10

Status: R



--o8H2SRp6021316.1284690511/webserver.ohprs.org

Content-Type: text/plain



The original message was received at Thu, 16 Sep 2010 18:10:04 -0400

from localhost [127.0.0.1]



   ----- Transcript of session follows -----

<groomsaj2003@msn.com>... Deferred: Connection reset by mail.ohprs.org.

Warning: message still undelivered after 4 hours

Will keep trying until message is 5 days old



--o8H2SRp6021316.1284690511/webserver.ohprs.org

Content-Type: message/delivery-status



Reporting-MTA: dns; webserver.ohprs.org

Arrival-Date: Thu, 16 Sep 2010 18:10:04 -0400



Final-Recipient: RFC822; groomsaj2003@msn.com

Action: delayed

Status: 4.4.2

Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.

Last-Attempt-Date: Thu, 16 Sep 2010 22:28:31 -0400

Will-Retry-Until: Tue, 21 Sep 2010 18:10:04 -0400



--o8H2SRp6021316.1284690511/webserver.ohprs.org

Content-Type: message/rfc822



Return-Path: <webmaster@webserver.ohprs.org>

Received: from webserver.ohprs.org (localhost [127.0.0.1])      by

 webserver.ohprs.org (8.14.1/8.14.1) with ESMTP id o8GMA4oL017615       for

 <groomsaj2003@msn.com>; Thu, 16 Sep 2010 18:10:04 -0400

Received: (from ohprs@localhost)

        by webserver.ohprs.org (8.14.1/8.14.1/Submit) id o8GMA4Qm017593

        for groomsaj2003@msn.com; Thu, 16 Sep 2010 18:10:04 -0400

Message-ID: <201009162210.o8GMA4Qm017593@webserver.ohprs.org>

X-Authentication-Warning: webserver.ohprs.org: ohprs set sender to webmaster using -r

Date: Thu, 16 Sep 2010 18:10:04 -0400

From: <webmaster@webserver.ohprs.org>

To: <groomsaj2003@msn.com>

Subject: New HPRS Newsletter

User-Agent: Heirloom mailx 12.1 6/15/06

MIME-Version: 1.0

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: 7bit



The most recent HPRS newsletter is now available on the website.

Please click on the link below to view it.



https://www.ohprs.org/ohprs/newsletters.jsp





--o8H2SRp6021316.1284690511/webserver.ohprs.org--

Open in new window

0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
ID: 33707108
Based on the:
Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.
There is a similar question with a fix that was down to firewall firmware needing upgrading!
http://www.experts-exchange.com/Networking/Email_Groupware/Sendmail/Q_21876883.html 
You still need to resolve your Backscatter problem by filtering recipients otherwise you won't get off the Backscatterer.org blacklist site.  It may not be related, but it still needs to be resolved.
0
 
LVL 1

Author Closing Comment

by:jmarkfoley
ID: 33825087
I'm going to revisit this if/when it occurs again. Meanwhile, I'll research the backscatter issue.
0

Featured Post

Best Practices: Disaster Recovery Testing

Besides backup, any IT division should have a disaster recovery plan. You will find a few tips below relating to the development of such a plan and to what issues one should pay special attention in the course of backup planning.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
This article lists the top 5 free OST to PST Converter Tools. These tools save a lot of time for users when they want to convert OST to PST after their exchange server is no longer available or some other critical issue with exchange server or impor…
In this video we show how to create a Contact in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >> Contact ta…
To show how to create a transport rule in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Mail Flow >> Rules tab.:  To cr…

914 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now