>Last Sunday I went live with 7.07 on a new computer.  Previously I was 
>running 6.06 on the same computer with McAfee WebShield.  Now when I get 
>mail for an invalid recipient it just keeps getting looped between the two.

Do you have both "example.com" and "example.com." listed for all domains in 
WebShield (once with the "." at the end, once without), to bypass the 
infinite loop bug?

>I enabled the nobody alias to stop the loop but I can't find any setting 
>that stops this and I really don't want to have to live without bounce 
>messages going out.  I'm wondering if it has anything to do with the 
>missing > in the invalid user line or if I've just misconfigured something.

No, IMail's log files strip out the last ">".

>Imail log:
>04:23 09:40 SMTPD(060000B4) [128.128.15.14] connect 128.128.15.250 port 4548
>04:23 09:40 SMTPD(060000B4) [128.128.15.250] HELO nampaserver.trhs.org
>04:23 09:40 SMTPD(060000B4) [128.128.15.250] mail from:<[EMAIL PROTECTED]>
>04:23 09:40 SMTPD(060000B4) [128.128.15.250] RCPT TO:<[EMAIL PROTECTED]>
>04:23 09:40 SMTPD(060000B4) [128.128.15.250] ERR trhs.org invalid user 
><[EMAIL PROTECTED]

This shows that IMail rejected the E-mail to [EMAIL PROTECTED]  MailShield 
at this point should send a bounce message back to [EMAIL PROTECTED]

>04:23 09:40 SMTPD(060100B4) [128.128.15.14] connect 128.128.15.250 port 4552
>04:23 09:40 SMTPD(060100B4) [128.128.15.250] HELO nampaserver.trhs.org
>04:23 09:40 SMTPD(060100B4) [128.128.15.250] mail from:<[EMAIL PROTECTED]>
>04:23 09:40 SMTPD(060100B4) [128.128.15.250] RCPT TO:<[EMAIL PROTECTED]>
>04:23 09:40 SMTPD(060100B4) [128.128.15.250] ERR trhs.org invalid user 
><[EMAIL PROTECTED]

But, instead, it keeps trying to send that E-mail.

>WebShield log:
>Tue Apr 23 09:39:01 2002  MAIL SENT:
>         Sender: <[EMAIL PROTECTED]>
>         Recipient list: <[EMAIL PROTECTED]>
>         MessageID:  1019576291546
>         Size: 474 bytes
>
>Tue Apr 23 09:39:51 2002  MAIL RECEIVED:
>         Received from IP address: 128.128.15.250 (Internal)
>         Sender: <[EMAIL PROTECTED]>
>         Recipient list: <[EMAIL PROTECTED]>
>         MessageID: 1019576391609
>         Size: 662 bytes

These are actually two different E-mails, and it appears to be backwards, 
but it seems that WebShield thinks the E-mail was delivered to IMail.

>Tue Apr 23 09:39:51 2002  Attempting to route to the mails domain via a Relay
>Tue Apr 23 09:39:51 2002  Tried to connect relay to host relay.trhs.org 
>and failed (code -1)

That's something to note -- it seems that you have WebShield set to send 
mail through relay.trhs.org, but it can't connect.  Unless you have a 
reason for this, you should either tell WebShield not to send to the relay 
server, or get the relay server set up.

>Tue Apr 23 09:39:51 2002  Attempting to route to the mails domain via DNS
>Tue Apr 23 09:39:51 2002  MX lookup: Host imail.trhs.org found by name
>Tue Apr 23 09:39:51 2002  MX lookup: Attempting connection to host 
>imail.trhs.org
>Tue Apr 23 09:39:51 2002  Connection via DNS unsuccessful

Again, another problem.  It couldn't connect to imail.trhs.org -- but 
imail.trhs.org isn't in the DNS entries.  It looks like WebShield is 
connecting to an outdated internal DNS server.

>Tue Apr 23 09:39:51 2002  Attempting an A-Record connect
>
>Tue Apr 23 09:39:51 2002  MAIL SENT:
>         Sender: <[EMAIL PROTECTED]>
>         Recipient list: <[EMAIL PROTECTED]>
>         MessageID:  1019576341625
>         Size: 568 bytes
>
>Tue Apr 23 09:40:41 2002  MAIL RECEIVED:
>         Received from IP address: 128.128.15.250 (Internal)
>         Sender: <[EMAIL PROTECTED]>
>         Recipient list: <[EMAIL PROTECTED]>
>         MessageID: 1019576441593
>         Size: 756 bytes

It looks like WebShield is sending the mail back to itself.

So it looks like a WebShield/DNS issue.  It is set up to use a relay, which 
it can't connect to.  Then, it gets a seemingly incorrect MX record for 
trhs.org.

                                                    -Scott
---
Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for 
IMail.  http://www.declude.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]


Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to