I figured out that the message ID changes from Dxx to Qxx and followed it
further (How did I miss that?).
Weirdest thing. Imail performed an ldeliver for all users on our server.
Then delivered to an alias that points offsite (mindspring). Then logged
"Postmaster creating message" (I assume this is the bounce message). Then
stopped with a finished status=2 message. The final solution was to re-type
the message and everything went out fine. The log snippet is below, I'm
curious if anyone else has seen something like this.
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] HELO si-05
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] MAIL FROM:
<[EMAIL PROTECTED]>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO: <'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO: <'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO: <'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO: <'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO: <'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO:
<'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO:
<'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO: <'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO:
<'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO: <'[EMAIL PROTECTED]'>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO:
<[EMAIL PROTECTED]>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO:
<[EMAIL PROTECTED]>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO:
<[EMAIL PROTECTED]>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] RCPT TO:
<[EMAIL PROTECTED]>
09:15 08:33 SMTPD(19BF0154) [192.168.10.58] C:\IMAIL\spool\D920b154.SMD
38790
09:15 08:33 SMTP-(000001E2) processing C:\IMAIL\spool\Q920b154.SMD
09:15 08:33 SMTPD(0A2D002A) [192.168.10.10] connect 192.168.10.10 port 2738
09:15 08:34 SMTPD(0A2F002A) [192.168.10.10] connect 192.168.10.10 port 2926
09:15 08:34 SMTP-(000001E2) ldeliver si.serviceintelligence.com
lgoodman-main (1) <[EMAIL PROTECTED]> 38790
09:15 08:34 SMTP-(000001E2) ldeliver si.serviceintelligence.com pgurney-main
(1) <[EMAIL PROTECTED]> 38790
09:15 08:34 SMTP-(000001E2) ldeliver si.serviceintelligence.com
rholtack-main (1) <[EMAIL PROTECTED]> 38790
09:15 08:34 SMTP-(000001E2) Trying mindspring.com (0)
09:15 08:34 SMTP-(000001E2) Connect mindspring.com [207.69.200.36:25] (1)
09:15 08:34 SMTP-(000001E2) 220 mx6.mindspring.com ESMTP Mindspring Mail
Service Wed, 15 Sep 1999 08:35:44 -0400 (EDT)
09:15 08:34 SMTP-(000001E2) >EHLO si.serviceintelligence.com
09:15 08:34 SMTP-(000001E2) 250-mx6.mindspring.com Hello
si.serviceintelligence.com [216.111.212.66], pleased to meet you
09:15 08:34 SMTP-(000001E2) 250-8BITMIME
09:15 08:34 SMTP-(000001E2) 250-SIZE 5120000
09:15 08:34 SMTP-(000001E2) 250 HELP
09:15 08:34 SMTP-(000001E2) >MAIL From:<[EMAIL PROTECTED]>
09:15 08:34 SMTP-(000001E2) 250 <[EMAIL PROTECTED]>... Sender ok
09:15 08:34 SMTP-(000001E2) >RCPT To:<[EMAIL PROTECTED]>
09:15 08:34 SMTP-(000001E2) 250 <[EMAIL PROTECTED]>... Recipient ok
09:15 08:34 SMTP-(000001E2) >DATA
09:15 08:34 SMTP-(000001E2) 354 Enter mail, end with "." on a line by itself
09:15 08:35 SMTP-(000001E2) >.
09:15 08:35 SMTP-(000001E2) 250 rtv4l0.4pl.37kbi14 Message accepted for
delivery
09:15 08:35 SMTP-(000001E2) rdeliver mindspring.com [EMAIL PROTECTED]
(1) <[EMAIL PROTECTED]> 38790
09:15 08:35 SMTP-(000001E2) >QUIT
09:15 08:35 SMTP-(000001E2) 221 mx6.mindspring.com closing connection
09:15 08:35 SMTP-(000001E2) Creating message from Postmaster
09:15 08:35 SMTP-(000001E2) finished C:\IMAIL\spool\Q920b154.SMD status=2
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of ## Dusty Carden
Sent: Wednesday, September 15, 1999 10:46 PM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] How to Read Logs
At some point after the RCPT TO entries you should see a
response from the remote server. May be Invalid User,
or something to that effect.
If you are not seeing that how do you have your relaying set
up in SMTP security? Is 192.168.10.58 in the allowable
range?
Dusty
----- Original Message -----
From: Brian Politis <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, September 15, 1999 9:48 AM
Subject: [IMail Forum] How to Read Logs
> Can anyone help me out with how to read imail logs properly. I have a
user
> who is sending a message that is getting bounced. All local addresses go
> through, but offsite addresses are bouncing with an "unknown host" error
> message. I have checked DNS and can lookup and telnet to the mail servers
> for at least two of the 10 addresses that are bouncing.
>
> I opened the logs and found the following that seems to apply to the
message
> in question:
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
