https://bugs.exim.org/show_bug.cgi?id=1832
--- Comment #3 from Sander Hoentjen <[email protected]> --- exim debug output: =================== Connecting to mailin.kpnmail.nl [213.75.3.30]:25 from 195.211.73.60 ... connected read response data: size=79 SMTP<< 220 cpsps-ews13.kpnxchange.com kpnxchange.com Fri, 3 Jun 2016 11:53:58 +0200 213.75.3.30 in hosts_avoid_esmtp? no (option unset) SMTP>> EHLO s165.webhostingserver.nl read response data: size=92 SMTP<< 421 5.5.0 Your IP has been blacklisted. Please contact [email protected] for more information. SMTP>> HELO s165.webhostingserver.nl ok=0 send_quit=0 send_rset=1 continue_more=0 yield=1 first_address is not NULL LOG: MAIN H=mailin.kpnmail.nl [213.75.3.30]: Remote host closed connection in response to HELO s165.webhostingserver.nl =================== So the issue seems to be that because of the 421 in reponse to the EHLO, exim tries again with HELO. Now in this case I know the remote host closes the connection after the EHLO. tshark output below: =================== 1 0.000000 195.211.73.60 -> 213.75.3.30 TCP 78 47646 > smtp [SYN] Seq=0 Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1854996 TSecr=0 WS=128 2 0.005010 213.75.3.30 -> 195.211.73.60 TCP 64 smtp > 47646 [SYN, ACK] Seq=0 Ack=1 Win=8192 Len=0 MSS=1460 3 0.005072 195.211.73.60 -> 213.75.3.30 TCP 58 47646 > smtp [ACK] Seq=1 Ack=1 Win=14600 Len=0 4 0.010001 213.75.3.30 -> 195.211.73.60 SMTP 137 S: 220 cpsps-ews10.kpnxchange.com kpnxchange.com Fri, 3 Jun 2016 12:03:54 +0200 5 0.010044 195.211.73.60 -> 213.75.3.30 TCP 58 47646 > smtp [ACK] Seq=1 Ack=80 Win=14600 Len=0 6 0.010149 195.211.73.60 -> 213.75.3.30 SMTP 89 C: EHLO s165.webhostingserver.nl 7 0.015718 213.75.3.30 -> 195.211.73.60 SMTP 150 S: 421 5.5.0 Your IP has been blacklisted. Please contact [email protected] for more information. 8 0.015792 195.211.73.60 -> 213.75.3.30 SMTP 89 C: HELO s165.webhostingserver.nl 9 0.017513 213.75.3.30 -> 195.211.73.60 TCP 64 smtp > 47646 [FIN, ACK] Seq=172 Ack=32 Win=64209 Len=0 10 0.017591 195.211.73.60 -> 213.75.3.30 TCP 58 47646 > smtp [FIN, ACK] Seq=63 Ack=173 Win=14600 Len=0 11 0.020351 213.75.3.30 -> 195.211.73.60 TCP 64 smtp > 47646 [RST, ACK] Seq=173 Ack=63 Win=0 Len=0 =================== It looks like the connection is closed too late, so exim sends the HELO before the connection is really closed, and doesn't get a return anymore. -- You are receiving this mail because: You are on the CC list for the bug. -- ## List details at https://lists.exim.org/mailman/listinfo/exim-dev Exim details at http://www.exim.org/ ##
