Hi Scott:
I was lucky to finally produce the DNS error that sometimes causes the
MAILFROM to fail (and I suspect the similar problem occurs with REVDNS).
Fortunately, it happened with the declude.com mailing list - so I was able
to temporarily turn on debug and then FORCE an email from your server simply
by posting.
When I checked the DNS on 63.107.174.65
D:\>nslookup
> server 63.107.174.65
> set type=mx
> declude.com.
Server: maywood-is-0002.webhost.hm-software.com
Address: 63.107.174.65
DNS request timed out.
timeout was 2 seconds.
*** Request to maywood-is-0002.webhost.hm-software.com timed-out
When I checked the DNS cache, I saw the Declude.com domain - with two name
server entries in the cache - but no MX records.
Here is the DEBUG log from the same time frame:
08/22/2001 12:07:03 CFG: Setting LOG_OK level to NONE
08/22/2001 12:07:03 CFG: Set hop to 0 and hophigh to 0.
08/22/2001 12:07:03 Console turned OFF
08/22/2001 12:07:03 CFG: Bypassing IP 63.107.174.32.
08/22/2001 12:07:03 CFG: Setting XSENDER to ON
08/22/2001 12:07:03 CFG: Setting XSPOOLNAME to ON
08/22/2001 12:07:03 CFG: Setting XINHEADER to X-Declude-Note: Processed by
Declude %VERSION%; remote host %REVDNS%.
08/22/2001 12:07:03 CFG: Setting XOUTHEADER to X-Note: Report any abuse to
[EMAIL PROTECTED]
08/22/2001 12:07:03 CFG: Whitelisting IP 63.107.174.1.
08/22/2001 12:07:03 CFG: Whitelisting IP 63.107.174.14.
08/22/2001 12:07:03 CFG: Whitelisting IP 63.107.174.78.
08/22/2001 12:07:03 CFG: Whitelisting IP 128.192.1.101.
08/22/2001 12:07:03 CFG: Whitelisting IP 130.160.4.249.
08/22/2001 12:07:03 CFG: Whitelisting IP 199.232.158.102.
08/22/2001 12:07:03 CFG: Whitelisting FROM nytimes.com.
08/22/2001 12:07:03 CFG: Whitelisting IP 148.100.1.2.
08/22/2001 12:07:03 CFG: Whitelisting IP 64.65.65.2.
08/22/2001 12:07:03 CFG: Whitelisting FROM lists.cnn.com.
08/22/2001 12:07:03 CFG: Whitelisting FROM timeinc.com.
08/22/2001 12:07:03 CFG: Whitelisting FROM hm-software.com.
08/22/2001 12:07:03 Declude v1.24
08/22/2001 12:07:03 Setting HOLD directory to: D:\IMAIL\spool\spam.
08/22/2001 12:07:03 Qd8a5190 Setting DNS server to IMail's 63.107.174.65.
08/22/2001 12:07:03 Qd8a5190 Declude JunkMail Standard Version Registered
08/22/2001 12:07:03 Qd8a5190 Start
08/22/2001 12:07:03 Qd8a5190 Locking D:\IMAIL\spool\Qd8a5190.SMD.
08/22/2001 12:07:03 Qd8a5188 Got it: relay2.primushost.com..
08/22/2001 12:07:03 Qd8a5188 Hop 0: Checking IP Address 207.244.125.21.
08/22/2001 12:07:03 Qd8a5190 D:\IMAIL\spool\Qd8a5190.SMD locked.
08/22/2001 12:07:03 Qd8a5190 CL Opening
HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains
08/22/2001 12:07:03 Qd8a5190 [EMAIL PROTECTED] [0] is local
domain1
08/22/2001 12:07:03 Qd8a5190 [EMAIL PROTECTED] [0] is local main
domain
08/22/2001 12:07:03 Qd8a5190 Done getting envelope and headers
08/22/2001 12:07:04 Qd8a5190 Ver=20 verflag=0
08/22/2001 12:07:04 Qd8a5190 About to run spam tests
08/22/2001 12:07:04 Qd8a5190 198.115.176.13] by hm-software.com with ESMTP
(SMTPD32-6.06) id A8A51D30190; Wed, 22 Aug 2001 12:07:01 -0400
08/22/2001 12:07:04 Qd8a5190 Setting remote IP address to 198.115.176.13
08/22/2001 12:07:04 Qd8a5190 13.176.115.198.in-addr.arpa
08/22/2001 12:07:04 Qd8a5190 Got it: declude.static.shore.net..
08/22/2001 12:07:04 Qd8a5190 Hop 0: Checking IP Address 198.115.176.13.
08/22/2001 12:07:05 Qd8a5190 63.107.174.32] by declude.com with ESMTP
(SMTPD32-7.03) id A801335012C; Wed, 22 Aug 2001 12:04:17 -0400
08/22/2001 12:07:05 Qd8a5190 Skipping received line (hop 1)
08/22/2001 12:07:05 Qd8a5190 63.107.174.135] unverified) by
maywood-is-0003.webhost.hm-software.com with Microsoft
SMTPSVC(5.0.2195.3779); Wed, 22 Aug 2001 12:04:40 -0400
08/22/2001 12:07:05 Qd8a5190 Skipping received line (hop 2)
08/22/2001 12:07:05 Qd8a5190 Last line of headers: Organization:
Computerized Hor
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 2 63.107.174.1
08/22/2001 12:07:05 Qd8a5190 IP 198.115.176.13 not in whitelist
(63.107.174.1)
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 2 63.107.174.14
08/22/2001 12:07:05 Qd8a5190 IP 198.115.176.13 not in whitelist
(63.107.174.14)
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 2 63.107.174.78
08/22/2001 12:07:05 Qd8a5190 IP 198.115.176.13 not in whitelist
(63.107.174.78)
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 2 128.192.1.101
08/22/2001 12:07:05 Qd8a5190 IP 198.115.176.13 not in whitelist
(128.192.1.101)
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 2 130.160.4.249
08/22/2001 12:07:05 Qd8a5190 IP 198.115.176.13 not in whitelist
(130.160.4.249)
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 2 199.232.158.102
08/22/2001 12:07:05 Qd8a5190 IP 198.115.176.13 not in whitelist
(199.232.158.102)
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 1 nytimes.com
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 2 148.100.1.2
08/22/2001 12:07:05 Qd8a5190 IP 198.115.176.13 not in whitelist
(148.100.1.2)
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 2 64.65.65.2
08/22/2001 12:07:05 Qd8a5190 IP 198.115.176.13 not in whitelist (64.65.65.2)
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 1 lists.cnn.com
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 1 timeinc.com
08/22/2001 12:07:05 Qd8a5190 Testing whitelist 1 hm-software.com
08/22/2001 12:07:05 Qd8a5190 Looping...
08/22/2001 12:07:05 Qd8a5190 S<[EMAIL PROTECTED]>
08/22/2001 12:07:05 Qd8a5190 Looking up MX/A record for declude.com at
63.107.174.65.
08/22/2001 12:07:36 Qd8a5190 Msg failed MX; testing A (declude.com)
08/22/2001 12:07:36 Qd8a5190 There were no MX/A records.
08/22/2001 12:07:36 Qd8a5190 DNS Report: [ex=0 rcode=2 ancnt=0].
08/22/2001 12:07:36 Qd8a5190 Done with MX/A record
08/22/2001 12:07:36 Qd8a5190 Opening
HKEY_LOCAL_MACHINE\software\Ipswitch\IMail\Domains
08/22/2001 12:07:36 Qd8a5190 Domain name = hm-software.com, User name =
Andy_Schmidt.
08/22/2001 12:07:36 Qd8a5190 Using CFG file
D:\IMAIL\Declude\$default$.junkmail.
08/22/2001 12:07:36 Qd8a5190 ...............X..........
08/22/2001 12:07:36 Qd8a5190 Test #15 triggered; action == 7
08/22/2001 12:07:36 Qd8a5190 Msg failed MAILFROM (domain: declude.com).
08/22/2001 12:07:36 Qd8a5190 X-Declude-Note: Processed by Declude 1.24;
remote host declude.static.shore.net.
08/22/2001 12:07:36 Qd8a5190 Subject changed to: SPAM: [Invalid Sender] RE:
[Declude.JunkMail] OSSOFT
.
08/22/2001 12:07:36 Qd8a5190 Subject: RE: [Declude.JunkMail] OSSOFT
08/22/2001 12:07:36 Qd8a5190 From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]
08/22/2001 12:07:36 Qd8a5190 Looping...
08/22/2001 12:07:36 Qd8a5190 Done Looping
08/22/2001 12:07:36 Qd8a5190 Final action=0.
08/22/2001 12:07:36 Qd8a5190 D:\IMAIL\spool\Qd8a5190.SMD
08/22/2001 12:07:36 Qd8a5190 Unlocked D:\IMAIL\spool\Qd8a5190.SMD.
08/22/2001 12:07:36 Qd8a5190 Passing to SMTP3: D:\IMAIL\SMTP32.EXE
D:\IMAIL\spool\Qd8a5190.SMD.
08/22/2001 12:07:36 Qd8a5190 Total Time: 1438ms
Best Regards
Andy Schmidt
Phone: +1 201 934-3414 x20 (Business)
Fax: +1 201 934-9206
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
