Solved

problem sending email via Exchange

Posted on 2010-09-17
5
1,091 Views
Last Modified: 2013-12-17
We have sent a mailing to a number of our members from Linux/sendmail (web server.ohprs.org)via SBS 2008/Exchange 2007 (mail.ohprs.org) as the smart host. We have done this often in the past with no problem. Today, we are getting numerous bounce message as shown in the attached 'code'. The sendmail maillog has entries like the following:

Sep 17 11:48:33 webserver sm-mta[30065]: o8GMA65G018214: to=<reg4park@yahoo.com>, delay=17:38:27, xdelay=00:00:00, mailer=relay, pri=3990717, relay=mail.ohprs.org., dsn=4.0.0, stat=Deferred: Connection reset by mail.ohprs.org.

Note that I can send other messages from the linux host via the exchange server just fine. Not all messages are having this problem.

Can anyone tell me what is going on or where I can look to figure out the problem? Are there similar logfiles in Exchange? If so, where do I find them?

Thanks - urgent issue!
From <> Fri Sep 17 11:25:19 2010

Return-Path: <>

X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on

        server.novatec-inc.com

X-Spam-Level:

X-Spam-Status: No, score=0.6 required=4.0 tests=AWL,DATE_IN_PAST_12_24

        autolearn=no version=3.1.5

Delivered-To: unknown

Received: from mail.novatec-inc.com (205.178.146.50) by

  server.novatec-inc.com with POP3; 17 Sep 2010 15:25:19 -0000

Return-Path: <>

Delivered-To: mfoley@1591121.1714307

Received: (qmail 4746 invoked by uid 78); 17 Sep 2010 15:23:39 -0000

Received: from unknown (HELO cloudmark1) (10.49.16.89)

  by 0 with SMTP; 17 Sep 2010 15:23:39 -0000

Return-Path: <>

Received: from [64.129.23.80] ([64.129.23.80:7917] helo=mail.ohprs.org)

        by cm-mr14 (envelope-from <>)

        (ecelerity 2.2.2.41 r(31179/31189)) with ESMTP

        id 3B/EB-08806-BF7839C4; Fri, 17 Sep 2010 11:23:40 -0400

Received: from webserver.ohprs.org (192.168.0.3) by mail.ohprs.org

 (192.168.0.2) with Microsoft SMTP Server (TLS) id 8.1.436.0; Fri, 17 Sep 2010

 11:23:27 -0400

Received: from localhost (localhost)    by webserver.ohprs.org (8.14.1/8.14.1) id

 o8H2SRoe021316;        Thu, 16 Sep 2010 22:28:31 -0400

Date: Thu, 16 Sep 2010 22:28:31 -0400

From: Mail Delivery Subsystem <MAILER-DAEMON@ohprs.org>

Message-ID: <201009170228.o8H2SRoe021316@webserver.ohprs.org>

To: <webmaster@webserver.ohprs.org>

MIME-Version: 1.0

Content-Type: multipart/report; report-type=delivery-status;

        boundary="o8H2SRoe021316.1284690511/webserver.ohprs.org"

Subject: Warning: could not send message for past 4 hours

Auto-Submitted: auto-generated (warning-timeout)

X-Antispam: NO; Spamcatcher 6.0.4. Score 10

Status: R



--o8H2SRoe021316.1284690511/webserver.ohprs.org

Content-Type: text/plain



The original message was received at Thu, 16 Sep 2010 18:10:06 -0400

from localhost [127.0.0.1]



   ----- Transcript of session follows -----

<reg4park@yahoo.com>... Deferred: Connection reset by mail.ohprs.org.

Warning: message still undelivered after 4 hours

Will keep trying until message is 5 days old



--o8H2SRoe021316.1284690511/webserver.ohprs.org

Content-Type: message/delivery-status



Reporting-MTA: dns; webserver.ohprs.org

Arrival-Date: Thu, 16 Sep 2010 18:10:06 -0400



Final-Recipient: RFC822; reg4park@yahoo.com

Action: delayed

Status: 4.4.2

Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.

Last-Attempt-Date: Thu, 16 Sep 2010 22:28:31 -0400

Will-Retry-Until: Tue, 21 Sep 2010 18:10:06 -0400



--o8H2SRoe021316.1284690511/webserver.ohprs.org

Content-Type: message/rfc822



Return-Path: <webmaster@webserver.ohprs.org>

Received: from webserver.ohprs.org (localhost [127.0.0.1])      by

 webserver.ohprs.org (8.14.1/8.14.1) with ESMTP id o8GMA65G018214       for

 <reg4park@yahoo.com>; Thu, 16 Sep 2010 18:10:06 -0400

Received: (from ohprs@localhost)

        by webserver.ohprs.org (8.14.1/8.14.1/Submit) id o8GMA6AO018206

        for reg4park@yahoo.com; Thu, 16 Sep 2010 18:10:06 -0400

Message-ID: <201009162210.o8GMA6AO018206@webserver.ohprs.org>

X-Authentication-Warning: webserver.ohprs.org: ohprs set sender to webmaster using -r

Date: Thu, 16 Sep 2010 18:10:06 -0400

From: <webmaster@webserver.ohprs.org>

To: <reg4park@yahoo.com>

Subject: New HPRS Newsletter

User-Agent: Heirloom mailx 12.1 6/15/06

MIME-Version: 1.0

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: 7bit



The most recent HPRS newsletter is now available on the website.

Please click on the link below to view it.



https://www.ohprs.org/ohprs/newsletters.jsp





--o8H2SRoe021316.1284690511/webserver.ohprs.org--

Open in new window

0
Comment
Question by:jmarkfoley
  • 3
  • 2
5 Comments
 
LVL 76

Expert Comment

by:Alan Hardisty
Comment Utility
Your IP Address is currently blacklisted on NOMOREFUN:
http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist%3a64.129.23.80
Apparently you are using a Dynamic IP Address or have a Generic Reverse DNS set on your IP Address.
Reverse DNS Check:
The Reverse DNS is surrently set as:
80.23.129.64.in-addr.arpa ohprs.org. [TTL=86400
Your Reverse DNS should be configured as mail.ohprs.org not ohprs.org.  Please call your ISP and ask them to change this ASAP.
0
 
LVL 1

Author Comment

by:jmarkfoley
Comment Utility
I sure we went through all this with them already, but I will check again.
0
 
LVL 1

Author Comment

by:jmarkfoley
Comment Utility
That doesn't appear to be the problem. Our ISP made the recommended reverse DNS change and we are still getting these bounces (from the original mailing).

I'm not convinced it is a DNS or blacklist thing. Attached is another message. You will note that it says "Deferred: Connection reset by mail.ohprs.org." That host: mail.ohprs.org, is the exchange server in our lan and is the smarthost for the linux sendmail. It appears to me that the exchange server itself is rejecting the message, not something out on the web.

Is there a way to check this? Is there a logfile or something on exchange that might give me some detail, or at least confirm whether or not it is exchange itself that is rejecting these messages?

Note that the linux host (webserver) is still able to send emails using MAIL as the smarthost. This particular mailing was 364 emails sent as individual messages. Still, we sent out 477 individual emails last Wednesday (SEPT 15) with no bounces and no problem whatsoever.

Advice?
From <> Fri Sep 17 22:15:04 2010

Return-Path: <>

X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on

        server.novatec-inc.com

X-Spam-Level:

X-Spam-Status: No, score=0.8 required=4.0 tests=AWL,DATE_IN_PAST_12_24,

        MAILTO_TO_SPAM_ADDR autolearn=no version=3.1.5

Delivered-To: unknown

Received: from mail.novatec-inc.com (205.178.146.50) by

  server.novatec-inc.com with POP3; 18 Sep 2010 02:15:04 -0000

Return-Path: <>

Delivered-To: mfoley@1591121.1714307

Received: (qmail 30838 invoked by uid 78); 18 Sep 2010 02:13:27 -0000

Received: from unknown (HELO cloudmark1) (10.49.16.112)

  by 0 with SMTP; 18 Sep 2010 02:13:27 -0000

Return-Path: <>

Received: from [64.129.23.80] ([64.129.23.80:55725] helo=mail.ohprs.org)

        by cm-mr27 (envelope-from <>)

        (ecelerity 2.2.2.41 r(31179/31189)) with ESMTP

        id 53/F5-10304-740249C4; Fri, 17 Sep 2010 22:13:27 -0400

Received: from webserver.ohprs.org (192.168.0.3) by mail.ohprs.org

 (192.168.0.2) with Microsoft SMTP Server (TLS) id 8.1.436.0; Fri, 17 Sep 2010

 22:13:26 -0400

Received: from localhost (localhost)    by webserver.ohprs.org (8.14.1/8.14.1) id

 o8H2SRp6021316;        Thu, 16 Sep 2010 22:28:31 -0400

Date: Thu, 16 Sep 2010 22:28:31 -0400

From: Mail Delivery Subsystem <MAILER-DAEMON@ohprs.org>

Message-ID: <201009170228.o8H2SRp6021316@webserver.ohprs.org>

To: <webmaster@webserver.ohprs.org>

MIME-Version: 1.0

Content-Type: multipart/report; report-type=delivery-status;

        boundary="o8H2SRp6021316.1284690511/webserver.ohprs.org"

Subject: Warning: could not send message for past 4 hours

Auto-Submitted: auto-generated (warning-timeout)

X-Antispam: NO; Spamcatcher 6.0.4. Score 10

Status: R



--o8H2SRp6021316.1284690511/webserver.ohprs.org

Content-Type: text/plain



The original message was received at Thu, 16 Sep 2010 18:10:04 -0400

from localhost [127.0.0.1]



   ----- Transcript of session follows -----

<groomsaj2003@msn.com>... Deferred: Connection reset by mail.ohprs.org.

Warning: message still undelivered after 4 hours

Will keep trying until message is 5 days old



--o8H2SRp6021316.1284690511/webserver.ohprs.org

Content-Type: message/delivery-status



Reporting-MTA: dns; webserver.ohprs.org

Arrival-Date: Thu, 16 Sep 2010 18:10:04 -0400



Final-Recipient: RFC822; groomsaj2003@msn.com

Action: delayed

Status: 4.4.2

Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.

Last-Attempt-Date: Thu, 16 Sep 2010 22:28:31 -0400

Will-Retry-Until: Tue, 21 Sep 2010 18:10:04 -0400



--o8H2SRp6021316.1284690511/webserver.ohprs.org

Content-Type: message/rfc822



Return-Path: <webmaster@webserver.ohprs.org>

Received: from webserver.ohprs.org (localhost [127.0.0.1])      by

 webserver.ohprs.org (8.14.1/8.14.1) with ESMTP id o8GMA4oL017615       for

 <groomsaj2003@msn.com>; Thu, 16 Sep 2010 18:10:04 -0400

Received: (from ohprs@localhost)

        by webserver.ohprs.org (8.14.1/8.14.1/Submit) id o8GMA4Qm017593

        for groomsaj2003@msn.com; Thu, 16 Sep 2010 18:10:04 -0400

Message-ID: <201009162210.o8GMA4Qm017593@webserver.ohprs.org>

X-Authentication-Warning: webserver.ohprs.org: ohprs set sender to webmaster using -r

Date: Thu, 16 Sep 2010 18:10:04 -0400

From: <webmaster@webserver.ohprs.org>

To: <groomsaj2003@msn.com>

Subject: New HPRS Newsletter

User-Agent: Heirloom mailx 12.1 6/15/06

MIME-Version: 1.0

Content-Type: text/plain; charset="us-ascii"

Content-Transfer-Encoding: 7bit



The most recent HPRS newsletter is now available on the website.

Please click on the link below to view it.



https://www.ohprs.org/ohprs/newsletters.jsp





--o8H2SRp6021316.1284690511/webserver.ohprs.org--

Open in new window

0
 
LVL 76

Accepted Solution

by:
Alan Hardisty earned 500 total points
Comment Utility
Based on the:
Diagnostic-Code: SMTP; 451 4.4.1 reply: read error from mail.ohprs.org.
There is a similar question with a fix that was down to firewall firmware needing upgrading!
http://www.experts-exchange.com/Networking/Email_Groupware/Sendmail/Q_21876883.html
You still need to resolve your Backscatter problem by filtering recipients otherwise you won't get off the Backscatterer.org blacklist site.  It may not be related, but it still needs to be resolved.
0
 
LVL 1

Author Closing Comment

by:jmarkfoley
Comment Utility
I'm going to revisit this if/when it occurs again. Meanwhile, I'll research the backscatter issue.
0

Featured Post

Threat Intelligence Starter Resources

Integrating threat intelligence can be challenging, and not all companies are ready. These resources can help you build awareness and prepare for defense.

Join & Write a Comment

Easy CSR creation in Exchange 2007,2010 and 2013
Follow this checklist to learn more about the 15 things you should never include in an email signature from personal quotes, animated gifs and out-of-date marketing content.
In this video we show how to create a Distribution Group in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center. Navigate to the Recipients >>…
To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now