Remote(SocketError)

Usman Afzal
Usman Afzal used Ask the Experts™
on
Hi,

I have a strange Problem. I am not getting some emails from some recipient, the TXT emails are delivered without any problem but with PDF attached emails are not passing through.
Even Message tracking it not showing but in SMTP receive logs its showing delivered


____________________________________________________________________________________________________________________________________________________________________________________
XPROXYFROM SID=08D57BA5EA83526F IP=88.99.86.106 PORT=47904 DOMAIN=mail.merint.com SEQNUM=1 PERMS=1073 AUTHSRC=Anonymous,
8847,>,250 XProxyFrom accepted,
8847,<,MAIL FROM:<manivel.arumugam@merint.com> SIZE=0 AUTH=<>,
8847,*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
2018-03-04T13:01:48.037Z,GSEXCHMC1\Default GSEXCHMC1,08D57BA60716263A,263,[2002:c864:6406::c864:6406]:2525,[2002:c864:6406::c864:6406]:8847,*,08D57BA60716263A;2018-03-04T12:54:14.609Z;12,receiving message
<,RCPT TO:<mfawzi@grandstores.ae>,
8847,>,250 2.1.0 Sender OK,
8847,>,250 2.1.5 Recipient OK,
8847,<,DATA,
8847,>,354 Start mail input; end with <CRLF>.<CRLF>,
8847,-,,Remote(SocketError)
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Outlook blocks files that have more dots before extension (..pdf) or contain more extensions (.txt.pdf).

Uninstall the following KB to fix this:
Outlook 2016:  wusa /uninstall /kb:KB3191932 /quiet /norestart  
Outlook 2013: wusa /uninstall /kb:KB3191938 /quiet /norestart
Outlook 2010: wusa /uninstall /kb:KB3203467 /quiet /norestart
Outlook 2007:  wusa /uninstall /kb:KB3191898 /quiet /norestart

OR

Locate the following key
Outlook 2007: [HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security]
Outlook 2010: [HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security]
etc...
Create a new string value and name the value Level1Remove. Double-click on the newly created value and enter the extension including the "dot" that you want to open in Outlook.
Usman AfzalSystem Support Executive

Author

Commented:
Thanks for your replay,

Dear
Problem is strange to me when the user asked the sender on cc the same email to his Gmail and once he got the email in his Gmail account, he is forwarding to his official email id; then, he is able to receive the same email with the attachment without any problem and delay.
But Other emails are not traceable
Most Valuable Expert 2012
Distinguished Expert 2018

Commented:
You might have better luck if you could provide more information so we can get this in the correct Topic Areas.  The Experts Exchange Topic Area is for site related questions for this site.
Ensure you’re charging the right price for your IT

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Usman AfzalSystem Support Executive

Author

Commented:
Thank,

what kind of information is required Please let me know I am happy to provide

still getting the error
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Check if the sender isn't blacklisted somehow.
Usman AfzalSystem Support Executive

Author

Commented:
NOPE

Checked that already

What I have done,

Checked Blacklist on Exchange 2013 as well as pure messages (SOPHOS)
Make an External relay for the same sender
uninstalled kb:KB3191898 as suggested

The funny part, in the message, logs its showing socked error but when I use some GUI application to track the same it is not showing @ all
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
1. Does it happen when you get emails from specific senders?
2. Does it happen to all PDF files?
Usman AfzalSystem Support Executive

Author

Commented:
YAP from some senders and when they sending with attachments only that time
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
What happens if you disable antivirus?

How many characters the PDF filename contains? Reduce it up to 8 characters without any special characters.
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Open Outlook -> HOME Tab -> Delete section -> Junk -> Junk Email options -> add these email addresses to Safe Senders. Results?
Usman AfzalSystem Support Executive

Author

Commented:
Thanks Dear, Tired but failed :(
Usman AfzalSystem Support Executive

Author

Commented:
607174EBD,1,[2002:c864:6406::c864:6406]:2525,[2002:c864:6407::c864:6407]:41825,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
,>,"220 GSEXCHMC1.grandstores.ae Microsoft ESMTP MAIL Service ready at Thu, 8 Mar 2018 02:23:09 +0400",
,<,EHLO GSEXCHMC2.grandstores.ae,
,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
>,250-GSEXCHMC1.grandstores.ae Hello [2002:c864:6407::c864:6407],
>,250-SIZE,
250-PIPELINING,
,250-DSN,
,250-ENHANCEDSTATUSCODES,
>,250-STARTTLS,
2018-03-07T22:23:09.831Z,GSEXCHMC1\Default GSEXCHMC1,08D57BA607174EBD41825,>,250-X-ANONYMOUSTLS,
>,250-AUTH NTLM,
>,250-X-EXPS GSSAPI NTLM,
,>,250-8BITMIME,
>,250-BINARYMIME,
>,250-CHUNKING,
>,250-XEXCH50,
>,250-XRDST,
>,250 XSHADOWREQUEST,
<,X-ANONYMOUSTLS,
,>,220 2.0.0 SMTP server ready,
*,,Sending certificate
*,CN=GSEXCHMC1.grandstores.ae,Certificate subject
*,"CN=grandstores-GRANDS-CA, DC=grandstores, DC=ae",Certificate issuer name
*,7E3E1397000200007D7F,Certificate serial number
*,4AC9550087E9A386C9D413C9D0E7C75E93999969,Certificate thumbprint
*,GSEXCHMC1.grandstores.ae,Certificate alternate names
*,,"TLS protocol SP_PROT_TLS1_0_SERVER negotiation succeeded using bulk encryption algorithm CALG_AES_256 with strength 256 bits, MAC hash algorithm CALG_SHA1 with strength 160 bits and key exchange algorithm CALG_ECDHE with strength 384 bits"
<,EHLO GSEXCHMC2.grandstores.ae,
*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
>,250-GSEXCHMC1.grandstores.ae Hello [2002:c864:6407::c864:6407],
>,250-SIZE,
>,250-PIPELINING,
>,250-DSN,
>,250-ENHANCEDSTATUSCODES,
>,250-AUTH NTLM LOGIN,
>,250-X-EXPS EXCHANGEAUTH GSSAPI NTLM,
>,250-X-EXCHANGEAUTH SHA256,
>,250-8BITMIME,
>,250-BINARYMIME,
>,250-CHUNKING,
>,250-XEXCH50,
>,250-XRDST,
>,250-XSHADOWREQUEST,
>,250-XPROXY,
>,250-XPROXYFROM,
>,250-X-MESSAGECONTEXT ADRC-2.1.0.0 EPROP-1.2.0.0,
>,250-XSYSPROBE,
>,250 XORIGFROM,
<,X-EXPS EXCHANGEAUTH,
*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
*,GSTORES\GSEXCHMC2$,authenticated
>,235 <authentication response>,
<,XSHADOWREQUEST GSEXCHMC2.grandstores.ae J5mPTPdVFUO6RlnqQiyIyA==,
>,250 R1NFWENITUMxLmdyYW5kc3RvcmVzLmFl,
<,MAIL FROM:<interior@merint.com> SIZE=0 XSHADOW=22e655ca-9991-4df4-9984-94282ee80fc8,
*,SMTPSubmit SMTPSubmitForMLS SMTPAcceptAnyRecipient SMTPAcceptAuthenticationFlag SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender BypassAntiSpam BypassMessageSizeLimit SMTPSendEXCH50 SMTPAcceptEXCH50 AcceptRoutingHeaders AcceptForestHeaders AcceptOrganizationHeaders SendRoutingHeaders SendForestHeaders SendOrganizationHeaders SendAs SMTPSendXShadow SMTPAcceptXShadow SMTPAcceptXProxyFrom SMTPAcceptXSessionParams SMTPAcceptXMessageContextADRecipientCache SMTPAcceptXMessageContextExtendedProperties SMTPAcceptXMessageContextFastIndex SMTPAcceptXAttr SMTPAcceptXSysProbe,Set Session Permissions
*,08D57BA607174EBD;2018-03-07T22:23:09.831Z;1,receiving message
<,RCPT TO:<mfawzi@grandstores.ae>,
>,250 2.1.0 Sender OK,
>,250 2.1.5 Recipient OK,
<,DATA,
>,354 Start mail input; end with <CRLF>.<CRLF>,
*,,receiving message with InternetMessageId <16d59e3e-4820-4863-92fc-47d6ccd6a37f@merint.com>
-,,Remote(SocketError)
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Is this the only log you can see?
We have Kerio and we can see Security log, Mail log, Error log, Warning log, Spam log...
If you are able to see these logs, check them all (let them send you the email again and look at entries in all logs related to the specific time when you received the mail).
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Check for any IP restriction in receive connector.
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Let them send the email to different users... Does it happen to them too?

Disable firewall and see.

Did you try to reinstall the connector?
Usman AfzalSystem Support Executive

Author

Commented:
Disable firewall YAP Done but still the same
Did you try to reinstall the connector! YAP Default Setting and I have created Relay connector for him also but still the same when they sending the Text email. it is coming without any problem
Hello ThereSystem Administrator
Distinguished Expert 2018

Commented:
Well, I'd contact the other side IT dept. to see their logs...
Maybe they will be able to tell you more... outgoing messages quota, or anything else.
Even i have the same issue in Exch 2016, application will send 5 or 6 emails and stops. Users are getting below error.

This SMTP server did not list authentication methods. Login_method: None oe already authenticated.
451 4.7.1 temporary server error. please try again later. PRX5
smtpconversation: Elapsed time: 1685 millisec
Failed.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial