I didn't since it was supposed to be fixed, but I tried it anyway and it 
doesn't make any difference.  The message is assigned a new MessageID 
every time so there's no way to detect a loop.  Imail sends it back to 
WebShield as a new message each time.  It appears to me that no bounce 
message is ever sent.  The message I finally receive via nobody is the 
original message.

Dan

R. Scott Perry wrote:
> 
>> Last Sunday I went live with 7.07 on a new computer.  Previously I was 
>> running 6.06 on the same computer with McAfee WebShield.  Now when I 
>> get mail for an invalid recipient it just keeps getting looped between 
>> the two.
> 
> 
> Do you have both "example.com" and "example.com." listed for all domains 
> in WebShield (once with the "." at the end, once without), to bypass the 
> infinite loop bug?
> 
>> I enabled the nobody alias to stop the loop but I can't find any 
>> setting that stops this and I really don't want to have to live 
>> without bounce messages going out.  I'm wondering if it has anything 
>> to do with the missing > in the invalid user line or if I've just 
>> misconfigured something.
> 
> 
> No, IMail's log files strip out the last ">".
> 
>> Imail log:
>> 04:23 09:40 SMTPD(060000B4) [128.128.15.14] connect 128.128.15.250 
>> port 4548
>> 04:23 09:40 SMTPD(060000B4) [128.128.15.250] HELO nampaserver.trhs.org
>> 04:23 09:40 SMTPD(060000B4) [128.128.15.250] mail from:<[EMAIL PROTECTED]>
>> 04:23 09:40 SMTPD(060000B4) [128.128.15.250] RCPT TO:<[EMAIL PROTECTED]>
>> 04:23 09:40 SMTPD(060000B4) [128.128.15.250] ERR trhs.org invalid user 
>> <[EMAIL PROTECTED]
> 
> 
> This shows that IMail rejected the E-mail to [EMAIL PROTECTED]  
> MailShield at this point should send a bounce message back to 
> [EMAIL PROTECTED]
> 
>> 04:23 09:40 SMTPD(060100B4) [128.128.15.14] connect 128.128.15.250 
>> port 4552
>> 04:23 09:40 SMTPD(060100B4) [128.128.15.250] HELO nampaserver.trhs.org
>> 04:23 09:40 SMTPD(060100B4) [128.128.15.250] mail from:<[EMAIL PROTECTED]>
>> 04:23 09:40 SMTPD(060100B4) [128.128.15.250] RCPT TO:<[EMAIL PROTECTED]>
>> 04:23 09:40 SMTPD(060100B4) [128.128.15.250] ERR trhs.org invalid user 
>> <[EMAIL PROTECTED]
> 
> 
> But, instead, it keeps trying to send that E-mail.
> 
>> WebShield log:
>> Tue Apr 23 09:39:01 2002  MAIL SENT:
>>         Sender: <[EMAIL PROTECTED]>
>>         Recipient list: <[EMAIL PROTECTED]>
>>         MessageID:  1019576291546
>>         Size: 474 bytes
>>
>> Tue Apr 23 09:39:51 2002  MAIL RECEIVED:
>>         Received from IP address: 128.128.15.250 (Internal)
>>         Sender: <[EMAIL PROTECTED]>
>>         Recipient list: <[EMAIL PROTECTED]>
>>         MessageID: 1019576391609
>>         Size: 662 bytes
> 
> 
> These are actually two different E-mails, and it appears to be 
> backwards, but it seems that WebShield thinks the E-mail was delivered 
> to IMail.
> 
>> Tue Apr 23 09:39:51 2002  Attempting to route to the mails domain via 
>> a Relay
>> Tue Apr 23 09:39:51 2002  Tried to connect relay to host 
>> relay.trhs.org and failed (code -1)
> 
> 
> That's something to note -- it seems that you have WebShield set to send 
> mail through relay.trhs.org, but it can't connect.  Unless you have a 
> reason for this, you should either tell WebShield not to send to the 
> relay server, or get the relay server set up.
> 
>> Tue Apr 23 09:39:51 2002  Attempting to route to the mails domain via DNS
>> Tue Apr 23 09:39:51 2002  MX lookup: Host imail.trhs.org found by name
>> Tue Apr 23 09:39:51 2002  MX lookup: Attempting connection to host 
>> imail.trhs.org
>> Tue Apr 23 09:39:51 2002  Connection via DNS unsuccessful
> 
> 
> Again, another problem.  It couldn't connect to imail.trhs.org -- but 
> imail.trhs.org isn't in the DNS entries.  It looks like WebShield is 
> connecting to an outdated internal DNS server.
> 
>> Tue Apr 23 09:39:51 2002  Attempting an A-Record connect
>>
>> Tue Apr 23 09:39:51 2002  MAIL SENT:
>>         Sender: <[EMAIL PROTECTED]>
>>         Recipient list: <[EMAIL PROTECTED]>
>>         MessageID:  1019576341625
>>         Size: 568 bytes
>>
>> Tue Apr 23 09:40:41 2002  MAIL RECEIVED:
>>         Received from IP address: 128.128.15.250 (Internal)
>>         Sender: <[EMAIL PROTECTED]>
>>         Recipient list: <[EMAIL PROTECTED]>
>>         MessageID: 1019576441593
>>         Size: 756 bytes
> 
> 
> It looks like WebShield is sending the mail back to itself.
> 
> So it looks like a WebShield/DNS issue.  It is set up to use a relay, 
> which it can't connect to.  Then, it gets a seemingly incorrect MX 
> record for trhs.org.
> 
>                                                    -Scott
> ---
> Declude: Anti-virus, Anti-spam and Anti-hijacking solutions for IMail.  
> http://www.declude.com
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus 
> (http://www.declude.com)]
> 
> 
> Please visit http://www.ipswitch.com/support/mailing-lists.html to be 
> removed from this list.
> 
> An Archive of this list is available at:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> 
> Please visit the Knowledge Base for answers to frequently asked
> questions:  http://www.ipswitch.com/support/IMail/



Please visit http://www.ipswitch.com/support/mailing-lists.html 
to be removed from this list.

An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/

Please visit the Knowledge Base for answers to frequently asked
questions:  http://www.ipswitch.com/support/IMail/

Reply via email to