Hey Rob, This may be a stupid question but a starting point, but is the UDP Port 6277 open outbound on your firewall?
As you see on my mail server, you get a UDP Packet back. [EMAIL PROTECTED] ~]# tcpdump port 6277 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes 10:43:16.686540 IP bstpmail01.instinet.co.uk.43155 > birubiru.to.infn.it.6277: UDP, length 206 10:43:16.805724 IP birubiru.to.infn.it.6277 > bstpmail01.instinet.co.uk.43155: UDP, length 112 Gary "Robert Welz" Sent by: [EMAIL PROTECTED] 01/06/2007 10:26 To [email protected] cc Subject dcc not working Hello! I can't get dcc working. My email traffic is at about 3500 email/day so I choose the list as a last mean seeking for help. Can you help please, maybe I am blocked upstream somehow? Greetings, Robert I can see outgoing traffic from my gateway but no answer packets: tcpdump -i ppp0 port not 25 and port not 80 and port not 22 and port not 53 and port not 37 and port not 123 14:24:48.753740 IP LB-F1.DTAG.DE > www.fixe-post.de: ICMP LB- F1.DTAG.DE udp port domain unreachable, length 36 14:28:34.561453 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu. 6277: UDP, length 40 14:28:34.561487 IP Nausciaa.fixe-post.de.36172 > samantha.wu- wien.ac.at.6277: UDP, length 40 14:28:34.561671 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277: UDP, length 40 14:28:34.561793 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com. 6277: UDP, length 40 14:28:34.561920 IP Nausciaa.fixe-post.de.36172 > dcc- ns-001.ironhillhardware.com.6277: UDP, length 40 14:28:34.562044 IP Nausciaa.fixe-post.de.36172 > eth0.c.spam.sonic.net.6277: UDP, length 40 14:28:34.562169 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net. 6277: UDP, length 40 14:28:34.562296 IP Nausciaa.fixe-post.de.36172 > dcc- ns-000.ironhillhardware.com.6277: UDP, length 40 14:28:34.562547 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277: UDP, length 40 14:28:34.562571 IP Nausciaa.fixe-post.de.36172 > eth0.d.spam.sonic.net.6277: UDP, length 40 14:28:34.562796 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de. 6277: UDP, length 40 14:28:34.918985 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu. 6277: UDP, length 40 14:28:34.919019 IP Nausciaa.fixe-post.de.36172 > samantha.wu- wien.ac.at.6277: UDP, length 40 14:28:34.919039 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277: UDP, length 40 14:28:34.919058 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com. 6277: UDP, length 40 14:28:34.919077 IP Nausciaa.fixe-post.de.36172 > dcc- ns-001.ironhillhardware.com.6277: UDP, length 40 14:28:34.919099 IP Nausciaa.fixe-post.de.36172 > eth0.c.spam.sonic.net.6277: UDP, length 40 14:28:34.919121 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net. 6277: UDP, length 40 14:28:34.919142 IP Nausciaa.fixe-post.de.36172 > dcc- ns-000.ironhillhardware.com.6277: UDP, length 40 14:28:34.919161 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277: UDP, length 40 14:28:34.919196 IP Nausciaa.fixe-post.de.36172 > eth0.d.spam.sonic.net.6277: UDP, length 40 14:28:34.919297 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de. 6277: UDP, length 40 14:28:35.519030 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu. 6277: UDP, length 40 14:28:35.519058 IP Nausciaa.fixe-post.de.36172 > samantha.wu- wien.ac.at.6277: UDP, length 40 14:28:35.519079 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277: UDP, length 40 14:28:35.519097 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com. 6277: UDP, length 40 14:28:35.519116 IP Nausciaa.fixe-post.de.36172 > dcc- ns-001.ironhillhardware.com.6277: UDP, length 40 14:28:35.519138 IP Nausciaa.fixe-post.de.36172 > eth0.c.spam.sonic.net.6277: UDP, length 40 14:28:35.519156 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net. 6277: UDP, length 40 14:28:35.519175 IP Nausciaa.fixe-post.de.36172 > dcc- ns-000.ironhillhardware.com.6277: UDP, length 40 14:28:35.519218 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277: UDP, length 40 14:28:35.519292 IP Nausciaa.fixe-post.de.36172 > eth0.d.spam.sonic.net.6277: UDP, length 40 14:28:35.519310 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de. 6277: UDP, length 40 14:28:36.629060 IP Nausciaa.fixe-post.de.36172 > dcc.dmz.uncw.edu. 6277: UDP, length 40 14:28:36.629103 IP Nausciaa.fixe-post.de.36172 > samantha.wu- wien.ac.at.6277: UDP, length 40 14:28:36.629135 IP Nausciaa.fixe-post.de.36172 > avas.cnc.bc.ca.6277: UDP, length 40 14:28:36.629166 IP Nausciaa.fixe-post.de.36172 > mgw-cl-2.dmv.com. 6277: UDP, length 40 14:28:36.629214 IP Nausciaa.fixe-post.de.36172 > dcc- ns-001.ironhillhardware.com.6277: UDP, length 40 14:28:36.629245 IP Nausciaa.fixe-post.de.36172 > eth0.c.spam.sonic.net.6277: UDP, length 40 14:28:36.629291 IP Nausciaa.fixe-post.de.36172 > z.dcc-servers.net. 6277: UDP, length 40 14:28:36.629322 IP Nausciaa.fixe-post.de.36172 > dcc- ns-000.ironhillhardware.com.6277: UDP, length 40 14:28:36.629354 IP Nausciaa.fixe-post.de.36172 > 194.228.41.13.6277: UDP, length 40 14:28:36.629404 IP Nausciaa.fixe-post.de.36172 > eth0.d.spam.sonic.net.6277: UDP, length 40 14:28:36.629433 IP Nausciaa.fixe-post.de.36172 > urts102.uni-trier.de. 6277: UDP, length 40 >> May 27 14:25:14 Nausciaa dccproc[4560]: continue not asking DCC 47 seconds after failure May 27 14:28:38 Nausciaa dccproc[4569]: continue not asking DCC 2048 seconds after failure and cdcc info sagt mir Nausciaa log # cdcc info # 05/27/07 14:18:08 CEST /var/dcc/map # Re-resolve names after 14:43:01 # 12 total, 0 working servers # skipping asking DCC server 473 seconds more # 499 dccproc balance since 14:18:04 IPv6 off dcc1.dcc-servers.net,- RTT+1000 ms anon # 137.208.8.26,- # not answering # 142.27.70.214,- # not answering # 152.20.253.5,- # not answering dcc2.dcc-servers.net,- RTT+1000 ms anon # 209.34.225.42,- # not answering # 216.240.97.12,- # not answering dcc3.dcc-servers.net,- RTT+1000 ms anon # 64.124.52.232,- # not answering # 208.201.249.233,- # not answering dcc4.dcc-servers.net,- RTT+1000 ms anon # 194.228.41.13,- # not answering # 216.134.200.215,- # not answering dcc5.dcc-servers.net,- RTT+1000 ms anon # 136.199.199.102,- # not answering # 208.201.249.232,- # not answering 127.0.0.1,- RTT-1000 ms 32768 394941540y648 # 127.0.0.1,- # not answering ################ # 05/27/07 14:18:08 CEST GreyList /var/dcc/map # Re-resolve names after 16:11:26 # 1 total, 0 working servers # skipping asking Greylist server 43 seconds more 127.0.0.1,- Greylist 32768 394941540y648 # 127.0.0.1,6276 # not answering _______________________________________________ DCC mailing list [email protected] http://www.rhyolite.com/mailman/listinfo/dcc -- Disclaimer This message contains confidential information and is intended only for the named individual. If you are not the named addressee, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this message in error and delete this e-message from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, delayed in transmission, incomplete, or may contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. This message is provided for informational purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments.
