Just figured this out this morning. I was enforcing SPF through the antispam application (Sunbelt's Ninja) on my Exchange box. When we put this other outfit in the middle of our mail flow, that apparently broke SPF, at least with regard to some domains. Turning it off fixed the issue. I hate freaking hosted services in the middle of my mail flow.
DAF -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Scharff Sent: Thursday, October 12, 2006 9:44 AM To: Exchange Discussions Subject: RE: Rejecting mail from one domain BTW, not complicated by the archival host having touched it, the logs seem to indicate your server is rejecting on the 'mail from' command. Unless they did a find and replace on that, the same behavior would be expected if they sent to you directly. > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:bounce- > [EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] Posted At: Wednesday, October 11, 2006 > 10:40 AM Posted To: swynk > Conversation: Rejecting mail from one domain > Subject: Rejecting mail from one domain > > > I'm hoping someone may have seen something like this. > > Our server (E2K3) is rejecting mail from one of our consultant's > domains > -- and appears in fact to disconnect after the session is established. > It's complicated just a touch by the fact that our mail now hits our > hosted archival service before it gets to my server -- but my server > handled mail from our consultant's domain just fine before we switched > to using the hosted archive service. > > I'm checking logging out of my SMTP Virtual server, and when I look at > the message which hits from this one user, this is what I see: > > 64.70.94.60 - advmail7ds.office.com [06/Oct/2006:09:19:12 -0800] "EHLO > -? advmail7ds.office.com SMTP" 250 327 > > 64.70.94.60 - advmail7ds.office.com [06/Oct/2006:09:19:13 -0800] "MAIL > -? FROM:<[EMAIL PROTECTED]> SMTP" 550 0 > > 64.70.94.60 - advmail7ds.office.com [06/Oct/2006:09:19:13 -0800] "QUIT > -?advmail7ds.office.com SMTP" 240 55 > > The IP address at the start of each line is the IP of our hosted > archival service. But how can I determine what my server thinks it's > doing?? Can you think of any reason why my server would disconnect a > session but only from this one domain? His domain isn't blacklisted > anywhere, and in fact I've whitelisted the domain in my antispam > application. We get a bazillion messages daily from everyone else in > the world. > > I'm stuck trying to troubleshoot this -- any ideas? Any way to get > more detail out of logging? > > > > Thanks, > > David > > > ____________________________________ > > The information contained in this E-mail message, including any > attached files transmitted, is confidential and may be legally > privileged. It is intended only for the sole use of the individual(s) > named above. If you are the intended recipient, be aware that your use > of any confidential or personal information may be restricted by state > and federal privacy laws. If you, the reader of this message, are not > the intended recipient, you are hereby notified that you should not > further disseminate, distribute or forward this E-mail message. If you > have received this E-mail in error, please notify the sender and delete > the material from your computer system. This message is provided for > information purposes and should not be construed as a solicitation or > offer to buy or sell any securities or related financial instruments in > any jurisdiction. > > > <br><br> > > _________________________________________________________________ > List posting FAQ: http://www.swinc.com/resource/exch_faq.htm > Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange > To subscribe: http://e-newsletters.internet.com/discussionlists.html/ > To unsubscribe send a blank email to [EMAIL PROTECTED] > dl.sparklist.com > Exchange List admin: [EMAIL PROTECTED] > To unsubscribe via postal mail, please contact us at: > Jupitermedia Corp. > Attn: Discussion List Management > 475 Park Avenue South > New York, NY 10016 > > Please include the email address which you have been contacted with. _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with. <br><br> ____________________________________ The information contained in this E-mail message, including any attached files transmitted, is confidential and may be legally privileged. It is intended only for the sole use of the individual(s) named above. If you are the intended recipient, be aware that your use of any confidential or personal information may be restricted by state and federal privacy laws. If you, the reader of this message, are not the intended recipient, you are hereby notified that you should not further disseminate, distribute or forward this E-mail message. If you have received this E-mail in error, please notify the sender and delete the material from your computer system. This message is provided for information purposes and should not be construed as a solicitation or offer to buy or sell any securities or related financial instruments in any jurisdiction. <br><br> _________________________________________________________________ List posting FAQ: http://www.swinc.com/resource/exch_faq.htm Web Interface: http://intm-dl.sparklist.com/read/?forum=exchange To subscribe: http://e-newsletters.internet.com/discussionlists.html/ To unsubscribe send a blank email to [EMAIL PROTECTED] Exchange List admin: [EMAIL PROTECTED] To unsubscribe via postal mail, please contact us at: Jupitermedia Corp. Attn: Discussion List Management 475 Park Avenue South New York, NY 10016 Please include the email address which you have been contacted with.
