Not Receiving E-mail from Sender Need Help Analyzing SMTP Log

We've been unable to receive email from a particular sender, which uses a bulk e-mail delivery company for several weeks now. I believe it may be due to tarpitting on our Exchange 2010 edge server, but I'm not certain.  Below is the excerpt of the SMTP log I need assistance in analyzing.  

Unfortunately I'm not able to get an accurate bounce back message from the sender, as their system will retry the mail to our secondary MX host, which is offline, and is getting a bounce back for the secondary, and nothing on the primary which should be accepting the mail:

SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders
220 EDGE1.company.com Microsoft ESMTP MAIL Service ready at Tue, 8 Oct 2013 09:56:21 -0400
EHLO mtaout.sendercompany.com
250-EDGE1.company.com Hello [212.26.22.121]
250-SIZE 103284736
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-STARTTLS
250-X-ANONYMOUSTLS
250-AUTH
250-X-EXPS NTLM
250-8BITMIME
250-BINARYMIME
250-CHUNKING
250-XEXCH50
250 XSHADOW
MAIL FROM:<bounces+recipient=company.com@bulksend.sendercompany.com> BODY=8BITMIME RET=FULL
08D065974413EC4A;2013-10-08T13:56:22.437Z;1
RCPT TO:<recipient@company.com>
250 2.1.0 Sender OK
250 2.1.5 Recipient OK
BDAT 8217
Tarpit for '0.00:00:05'
250 2.6.0 CHUNK received OK, 8217 octets
BDAT 8250
Tarpit for '0.00:00:05'
250 2.6.0 CHUNK received OK, 8250 octets
BDAT 8250
Tarpit for '0.00:00:05'
250 2.6.0 CHUNK received OK, 8250 octets
BDAT 8254
Tarpit for '0.00:00:05'
250 2.6.0 CHUNK received OK, 8254 octets
BDAT 8250
Tarpit for '0.00:00:05'

Open in new window

LVL 1
fireguy1125Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

SsbMsCommented:
Please check sender domain IP if they are blacklisted or you can check by allowing sender IP at your gateway to receive packets on port 25. may this give you some clue
0
fireguy1125Author Commented:
This has already been done, and they are not blacklisted.
0
Simon Butler (Sembee)ConsultantCommented:
What is between Exchange and the internet? A firewall? Does that firewall scan SMTP traffic?

Simon.
0
Redefine Your Security with AI & Machine Learning

The implications of AI and machine learning in cyber security are massive and constantly growing, creating both efficiencies and new challenges across the board. Check out our on-demand webinar to learn more about how AI can help your organization!

fireguy1125Author Commented:
Cisco ASA5510 to an F5 Load Balancer
0
Simon Butler (Sembee)ConsultantCommented:
By default the Cisco ASA devices scan SMTP traffic and this causes problems.

It is so bad that Microsoft have a KB article on it:
http://semb.ee/fixupsmtp

Simon.
0
fireguy1125Author Commented:
I do not have the Mailguard functionality enabled on the ASA.
0
fireguy1125Author Commented:
My issue was indeed due to tarpitting - I created a new receive connector for the sender IP and disabled Tarpitting on it.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
fireguy1125Author Commented:
No solution was provided
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.