Friday, November 17, 2006, 7:37:43 AM, Chris Moody <[EMAIL PROTECTED]> wrote: CM> Sorry for the delay, I had to wait for another report...
CM> The setup is Exchange on another server, and ASSP/Imail on the other. CM> The change in this setup has been the Exchange server. Incoming email CM> into ASSP/Imail is forwarded to Exchange in local domain. For outgoing CM> email, users sent to Exchange and Exchange sends through the Imail/ASSP CM> server. Nothing is showing up in the Exchange or ASSP logs as strange, CM> just the Imail logs. CM> Can anyone figure out the pattern that is happening here? The user sent CM> one email, it looks like Imail resets and starts another delivery thread CM> which goes hunting for DNS, I don't think it's finding it. CM> Here is the Verbose logs for Imail on the most recent complaint I have CM> gotten: CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aeb) [192.168.0.2] CM> connect 127.0.0.1 port 2431 CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aeb) [127.0.0.1] CM> EHLO driller.com CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aeb) [127.0.0.1] CM> MAIL FROM:<[EMAIL PROTECTED]> CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aeb) [127.0.0.1] CM> RCPT TO:<[EMAIL PROTECTED]> NOTIFY=NEVER CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aeb) [x] looking up CM> dlcinvestments.com in HOSTS CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aeb) [127.0.0.1] CM> DATA CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aeb) [127.0.0.1] CM> D:\IMail\spool\Db253019900000aeb.SMD 1643 CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aec) [127.0.0.1] CM> RSET CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aec) [127.0.0.1] CM> MAIL FROM:<[EMAIL PROTECTED]> CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aec) [127.0.0.1] CM> RCPT TO:<[EMAIL PROTECTED]> CM> 20061116 134747 127.0.0.1 SMTP (0000000000000000) Info - Adding CM> Queue file D:\IMail\spool\Qb253019900000aeb.SMD CM> 20061116 134747 127.0.0.1 SMTP (b253019900000aeb) processing CM> D:\IMail\spool\Qb253019900000aeb.SMD CM> 20061116 134747 127.0.0.1 SMTP (b253019900000aeb) [x] looking up CM> dlcinvestments.com in HOSTS and MX CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aec) [x] looking up CM> dlcinvestments.com in HOSTS CM> 20061116 134747 127.0.0.1 SMTP (b253019900000aeb) [x] looking up CM> dlcinvestments.com by stack CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aec) [127.0.0.1] ERR CM> mail.driller.com invalid user <[EMAIL PROTECTED] CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aec) [127.0.0.1] CM> RSET CM> 20061116 134747 127.0.0.1 SMTPD (b253019900000aec) [127.0.0.1] CM> QUIT CM> 20061116 134753 127.0.0.1 SMTPD (b25901b200000aed) [192.168.0.2] CM> connect 127.0.0.1 port 2452 CM> 20061116 134753 127.0.0.1 SMTPD (b25901b200000aed) [127.0.0.1] CM> EHLO driller.com CM> 20061116 134753 127.0.0.1 SMTPD (b25901b200000aed) [127.0.0.1] CM> MAIL FROM:<[EMAIL PROTECTED]> CM> 20061116 134753 127.0.0.1 SMTPD (b25901b200000aed) [127.0.0.1] CM> RCPT TO:<[EMAIL PROTECTED]> NOTIFY=NEVER CM> 20061116 134753 127.0.0.1 SMTPD (b25901b200000aed) [x] looking up CM> dlcinvestments.com in HOSTS CM> 20061116 134753 127.0.0.1 SMTPD (b25901b200000aed) [127.0.0.1] CM> DATA CM> 20061116 134753 127.0.0.1 SMTPD (b25901b200000aed) [127.0.0.1] CM> D:\IMail\spool\Db25901b200000aed.SMD 1605 CM> 20061116 134753 127.0.0.1 SMTP (0000000000000000) Info - Adding CM> Queue file D:\IMail\spool\Qb25901b200000aed.SMD CM> 20061116 134753 127.0.0.1 SMTP (b25901b200000aed) processing CM> D:\IMail\spool\Qb25901b200000aed.SMD CM> 20061116 134753 127.0.0.1 SMTP (b25901b200000aed) [x] looking up CM> dlcinvestments.com in HOSTS and MX CM> 20061116 134753 127.0.0.1 SMTPD (b25901b200000aee) [127.0.0.1] CM> QUIT CM> 20061116 134801 127.0.0.1 SMTP (b253019900000aeb) [x] looking up CM> dlcinvestments.com in HOSTS and MX CM> 20061116 134801 127.0.0.1 SMTP (b253019900000aeb) [x] looking up CM> dlcinvestments.com by stack CM> 20061116 134808 127.0.0.1 SMTP (b25901b200000aed) [x] looking up CM> dlcinvestments.com by stack CM> 20061116 134813 127.0.0.1 SMTP (b253019900000aeb) Info - Found CM> dlcinvestments.com in skip list CM> 20061116 134814 127.0.0.1 SMTP (b253019900000aeb) requeuing CM> D:\IMail\spool\Qb253019900000aeb.SMD R0 T1 CM> 20061116 134814 127.0.0.1 SMTP (b253019900000aeb) finished CM> D:\IMail\spool\Qb253019900000aeb.SMD status=3 CM> 20061116 134840 127.0.0.1 SMTP (b25901b200000aed) [x] looking up CM> dlcinvestments.com by stack CM> 20061116 134857 127.0.0.1 SMTP (b25901b200000aed) Info - Found CM> dlcinvestments.com in skip list CM> 20061116 134858 127.0.0.1 SMTP (b25901b200000aed) requeuing CM> D:\IMail\spool\Qb25901b200000aed.SMD R0 T1 CM> 20061116 134858 127.0.0.1 SMTP (b25901b200000aed) finished CM> D:\IMail\spool\Qb25901b200000aed.SMD status=3 So, the mail flow is: Internet --> ASSP --> Imail --> Exchange Exchange --> ASSP --> Imail --> Internet Is that correct? The first (b253019900000aeb) and third (b25901b200000aed) threads show dlcinvestments.com as in the skip list. Domains are added to the skip list when IMail Server tries to deliver a message but cannot connect to the domain/server (How could that have happened?). When in the skip list, Imail will not attempt delivery to that domain. Please consider, at least for the purpose of trouble-shooting this issue, going to Queue Manager, disabling DNS Cache and the Skip List and clearing both of them. The second (b253019900000aec) thread (which is almost simultaneous with the first thread) shows an unknown user error, despite the fact that the user was successfully looked-up in the previous and the subsequent threads. All three threads are connection (SMTPD) processes, but there is no 'connect' logged for this second thread, which is very strange. The first and third threads show RCPT TO:<[EMAIL PROTECTED]> NOTIFY=NEVER, but the second thread does not include 'NOTIFY=NEVER' That would tend to indicate that thread 2 is unique or not the same message as #1 or #3. The log shows a connection to Imail from 127.0.0.1. Is it possible to assign ASSP a different IP address than local host? If so, try it. I wonder . . . Can you tell if these three messages are from Exchange or from the Internet? WRT the user complaints, are they receiving the 550 when sending from Exchange or when sending via a foreign MTA/MUA? Is the complaint coming from one or several users? If from several, is there a connection, i.e. all the same client-firm, the same destination domain, etc.? Thanks, ---- Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364 Fax: (972) 788-5049 ---- To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
