Remote(SocketError)

Hi,

I have a strange Problem. I am not getting some emails from some recipient, the TXT emails are delivered without any problem but with PDF attached emails are not passing through.
Even Message tracking it not showing but in SMTP receive logs its showing delivered


____________________________________________________________________________________________________________________________________________________________________________________
XPROXYFROM SID=08D57BA5EA83526F IP=88.99.86.106 PORT=47904 DOMAIN=mail.merint.com SEQNUM=1 PERMS=1073 AUTHSRC=Anonymous,
8847,>,250 XProxyFrom accepted,
8847,<,MAIL FROM:<manivel.arumugam@merint.com> SIZE=0 AUTH=<>,
8847,*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
2018-03-04T13:01:48.037Z,GSEXCHMC1\Default GSEXCHMC1,08D57BA60716263A,263,[2002:c864:6406::c864:6406]:2525,[2002:c864:6406::c864:6406]:8847,*,08D57BA60716263A;2018-03-04T12:54:14.609Z;12,receiving message
<,RCPT TO:<mfawzi@grandstores.ae>,
8847,>,250 2.1.0 Sender OK,
8847,>,250 2.1.5 Recipient OK,
8847,<,DATA,
8847,>,354 Start mail input; end with <CRLF>.<CRLF>,
8847,-,,Remote(SocketError)
LVL 2
Usman AfzalSystem Support ExecutiveAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Hello ThereSystem AdministratorCommented:
Outlook blocks files that have more dots before extension (..pdf) or contain more extensions (.txt.pdf).

Uninstall the following KB to fix this:
Outlook 2016:  wusa /uninstall /kb:KB3191932 /quiet /norestart  
Outlook 2013: wusa /uninstall /kb:KB3191938 /quiet /norestart
Outlook 2010: wusa /uninstall /kb:KB3203467 /quiet /norestart
Outlook 2007:  wusa /uninstall /kb:KB3191898 /quiet /norestart

OR

Locate the following key
Outlook 2007: [HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security]
Outlook 2010: [HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security]
etc...
Create a new string value and name the value Level1Remove. Double-click on the newly created value and enter the extension including the "dot" that you want to open in Outlook.
Usman AfzalSystem Support ExecutiveAuthor Commented:
Thanks for your replay,

Dear
Problem is strange to me when the user asked the sender on cc the same email to his Gmail and once he got the email in his Gmail account, he is forwarding to his official email id; then, he is able to receive the same email with the attachment without any problem and delay.
But Other emails are not traceable
slightwv (䄆 Netminder) Commented:
You might have better luck if you could provide more information so we can get this in the correct Topic Areas.  The Experts Exchange Topic Area is for site related questions for this site.
Active Protection takes the fight to cryptojacking

While there were several headline-grabbing ransomware attacks during in 2017, another big threat started appearing at the same time that didn’t get the same coverage – illicit cryptomining.

Usman AfzalSystem Support ExecutiveAuthor Commented:
Thank,

what kind of information is required Please let me know I am happy to provide

still getting the error
Hello ThereSystem AdministratorCommented:
Check if the sender isn't blacklisted somehow.
Usman AfzalSystem Support ExecutiveAuthor Commented:
NOPE

Checked that already

What I have done,

Checked Blacklist on Exchange 2013 as well as pure messages (SOPHOS)
Make an External relay for the same sender
uninstalled kb:KB3191898 as suggested

The funny part, in the message, logs its showing socked error but when I use some GUI application to track the same it is not showing @ all
Hello ThereSystem AdministratorCommented:
1. Does it happen when you get emails from specific senders?
2. Does it happen to all PDF files?
Usman AfzalSystem Support ExecutiveAuthor Commented:
YAP from some senders and when they sending with attachments only that time
Hello ThereSystem AdministratorCommented:
What happens if you disable antivirus?

How many characters the PDF filename contains? Reduce it up to 8 characters without any special characters.
Hello ThereSystem AdministratorCommented:
Open Outlook -> HOME Tab -> Delete section -> Junk -> Junk Email options -> add these email addresses to Safe Senders. Results?
Usman AfzalSystem Support ExecutiveAuthor Commented:
Thanks Dear, Tired but failed :(
Usman AfzalSystem Support ExecutiveAuthor Commented:
607174EBD,1,[2002:c864:6406::c864:6406]:2525,[2002:c864:6407::c864:6407]:41825,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
,>,"220 GSEXCHMC1.grandstores.ae Microsoft ESMTP MAIL Service ready at Thu, 8 Mar 2018 02:23:09 +0400",
,<,EHLO GSEXCHMC2.grandstores.ae,
,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
>,250-GSEXCHMC1.grandstores.ae Hello [2002:c864:6407::c864:6407],
>,250-SIZE,
250-PIPELINING,
,250-DSN,
,250-ENHANCEDSTATUSCODES,
>,250-STARTTLS,
2018-03-07T22:23:09.831Z,GSEXCHMC1\Default GSEXCHMC1,08D57BA607174EBD41825,>,250-X-ANONYMOUSTLS,
>,250-AUTH NTLM,
>,250-X-EXPS GSSAPI NTLM,
,>,250-8BITMIME,
>,250-BINARYMIME,
>,250-CHUNKING,
>,250-XEXCH50,
>,250-XRDST,
>,250 XSHADOWREQUEST,
<,X-ANONYMOUSTLS,
,>,220 2.0.0 SMTP server ready,
*,,Sending certificate
*,CN=GSEXCHMC1.grandstores.ae,Certificate subject
*,"CN=grandstores-GRANDS-CA, DC=grandstores, DC=ae",Certificate issuer name
*,7E3E1397000200007D7F,Certificate serial number
*,4AC9550087E9A386C9D413C9D0E7C75E93999969,Certificate thumbprint
*,GSEXCHMC1.grandstores.ae,Certificate alternate names
*,,"TLS protocol SP_PROT_TLS1_0_SERVER negotiation succeeded using bulk encryption algorithm CALG_AES_256 with strength 256 bits, MAC hash algorithm CALG_SHA1 with strength 160 bits and key exchange algorithm CALG_ECDHE with strength 384 bits"
<,EHLO GSEXCHMC2.grandstores.ae,
*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
>,250-GSEXCHMC1.grandstores.ae Hello [2002:c864:6407::c864:6407],
>,250-SIZE,
>,250-PIPELINING,
>,250-DSN,
>,250-ENHANCEDSTATUSCODES,
>,250-AUTH NTLM LOGIN,
>,250-X-EXPS EXCHANGEAUTH GSSAPI NTLM,
>,250-X-EXCHANGEAUTH SHA256,
>,250-8BITMIME,
>,250-BINARYMIME,
>,250-CHUNKING,
>,250-XEXCH50,
>,250-XRDST,
>,250-XSHADOWREQUEST,
>,250-XPROXY,
>,250-XPROXYFROM,
>,250-X-MESSAGECONTEXT ADRC-2.1.0.0 EPROP-1.2.0.0,
>,250-XSYSPROBE,
>,250 XORIGFROM,
<,X-EXPS EXCHANGEAUTH,
*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
*,GSTORES\GSEXCHMC2$,authenticated
>,235 <authentication response>,
<,XSHADOWREQUEST GSEXCHMC2.grandstores.ae J5mPTPdVFUO6RlnqQiyIyA==,
>,250 R1NFWENITUMxLmdyYW5kc3RvcmVzLmFl,
<,MAIL FROM:<interior@merint.com> SIZE=0 XSHADOW=22e655ca-9991-4df4-9984-94282ee80fc8,
*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
*,08D57BA607174EBD;2018-03-07T22:23:09.831Z;1,receiving message
<,RCPT TO:<mfawzi@grandstores.ae>,
>,250 2.1.0 Sender OK,
>,250 2.1.5 Recipient OK,
<,DATA,
>,354 Start mail input; end with <CRLF>.<CRLF>,
*,,receiving message with InternetMessageId <16d59e3e-4820-4863-92fc-47d6ccd6a37f@merint.com>
-,,Remote(SocketError)
Hello ThereSystem AdministratorCommented:
Is this the only log you can see?
We have Kerio and we can see Security log, Mail log, Error log, Warning log, Spam log...
If you are able to see these logs, check them all (let them send you the email again and look at entries in all logs related to the specific time when you received the mail).
Hello ThereSystem AdministratorCommented:
Check for any IP restriction in receive connector.
Hello ThereSystem AdministratorCommented:
Let them send the email to different users... Does it happen to them too?

Disable firewall and see.

Did you try to reinstall the connector?
Usman AfzalSystem Support ExecutiveAuthor Commented:
Disable firewall YAP Done but still the same
Did you try to reinstall the connector! YAP Default Setting and I have created Relay connector for him also but still the same when they sending the Text email. it is coming without any problem
Hello ThereSystem AdministratorCommented:
Well, I'd contact the other side IT dept. to see their logs...
Maybe they will be able to tell you more... outgoing messages quota, or anything else.
nageshwar raoCommented:
Even i have the same issue in Exch 2016, application will send 5 or 6 emails and stops. Users are getting below error.

This SMTP server did not list authentication methods. Login_method: None oe already authenticated.
451 4.7.1 temporary server error. please try again later. PRX5
smtpconversation: Elapsed time: 1685 millisec
Failed.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Clients

From novice to tech pro — start learning today.