Here are the pertinent log entries. It looks like the message from postmaster actually comes after the server tries to deliver to the remote user's mail server, so maybe it's not our Imail server after all.
Actual user names have been changed to protect the innocent: 04:13 16:20 SMTP-(8ce00169014e388a) processing d:\IMail\spool\Q8ce00169014e388a.SMD 04:13 16:20 SMTP-(8ce00169014e388a) [x] looking up cch.com in HOSTS and MX 04:13 16:20 SMTP-(8ce00169014e388a) Info - DNS Cache full, deleting last item (cox.net) 04:13 16:20 SMTP-(8ce00169014e388a) Info - Adding cch.com to DNS cache - TTL = 3600 04:13 16:20 SMTP-(8ce00169014e388a) ldeliver rainier.chappell.com copymail-main (1) [EMAIL PROTECTED] 1670656 04:13 16:20 SMTP-(8ce00169014e388a) Trying cch.com (0) 04:13 16:20 SMTP-(8ce00169014e388a) [x] Connecting socket to service <SMTP> on host <cch.com> using protocol <tcp> 04:13 16:20 SMTP-(8ce00169014e388a) [x] using source IP for rainier.chappell.com [69.66.60.4] 04:13 16:20 SMTP-(8ce00169014e388a) Info - Found cch.com in DNS Cache 04:13 16:20 SMTP-(8ce00169014e388a) Connect cch.com [216.183.119.109:25] (1) 04:13 16:20 SMTP-(8ce00169014e388a) 220 p03m109.mxlogic.net ESMTP mxl_mta-2.9.0-22 [1230793648.62799]; Wed, 13 Apr 2005 15:19:56 -0600 (MDT); NO UCE, INBOUND 04:13 16:20 SMTP-(8ce00169014e388a) >EHLO rainier.chappell.com 04:13 16:20 SMTP-(8ce00169014e388a) 250-p03m109.mxlogic.net 04:13 16:20 SMTP-(8ce00169014e388a) 250-SIZE 0 04:13 16:20 SMTP-(8ce00169014e388a) 250-SUBMITTER 04:13 16:20 SMTP-(8ce00169014e388a) 250 PIPELINING 04:13 16:20 SMTP-(8ce00169014e388a) >MAIL FROM:<[EMAIL PROTECTED]> 04:13 16:20 SMTP-(8ce00169014e388a) 250 Sender Ok 04:13 16:20 SMTP-(8ce00169014e388a) >RCPT To:<[EMAIL PROTECTED]> 04:13 16:20 SMTP-(8ce00169014e388a) 250 [EMAIL PROTECTED] ok (normal) 04:13 16:20 SMTP-(8ce00169014e388a) >DATA 04:13 16:20 SMTP-(8ce00169014e388a) 354 Start mail input; end with <CRLF>.<CRLF> 04:13 16:20 SMTP-(8ce00169014e388a) >. 04:13 16:20 SMTP-(8ce00169014e388a) 551 Message contains a ZIP file that is extremely compressed (97.02%) 04:13 16:20 SMTP-(8ce00169014e388a) ERR undeliverable 551 Message contains a ZIP file that is extremely compressed (97.02%) 04:13 16:20 SMTP-(8ce00169014e388a) SMTP_DELIV_FAILED 04:13 16:20 SMTP-(8ce00169014e388a) >QUIT 04:13 16:20 SMTP-(8ce00169014e388a) 221 p03m109.mxlogic.net Service closing transmission channel 04:13 16:20 SMTP-(8ce00169014e388a) [u] closing socket (u) 04:13 16:20 SMTP-(8ce00169014e388a) Creating message from Postmaster -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom [Ipswitch] Sent: Thursday, April 14, 2005 9:58 AM To: IMail_Forum@list.ipswitch.com Subject: Re: [IMail Forum] Unusual NDR IF they are doing rejections at the envelope level by checking content as it comes in this could happen. IN your logs, you should be able to tell where it got stopped. Eric S ----- Original Message ----- From: "Grant Bainbridge" <[EMAIL PROTECTED]> To: <IMail_Forum@list.ipswitch.com> Sent: Thursday, April 14, 2005 10:24 AM Subject: RE: [IMail Forum] Unusual NDR > Hmm... I would suspect that to be the case in other circumstances. But > in > this case the email originated from our user, and the NDR came from our > domain's postmaster account. It never made it outside of our server. > > I know how to get around the error; I'm trying to figure out why it was an > error at all, and what, if any, setting I can change to avoid seeing it > again. > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Christopher > Checca > Sent: Thursday, April 14, 2005 9:19 AM > To: IMail_Forum@list.ipswitch.com > Subject: RE: [IMail Forum] Unusual NDR > > Sounds like they block zip files that they can't unzip and antivirus scan > correctly. I would tell them to resend the email without being in a zip > format. > > Christopher Checca > Packard Transport, Inc. > IT Department > 24021 South Municipal Dr > PO Box 380 > Channahon, IL. 60410 > 815 467 9260 > 815 467 6939 Fax > [EMAIL PROTECTED] > www.packardtransport.com > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Grant Bainbridge > Sent: Thursday, April 14, 2005 8:03 AM > To: Imail_forum@list.ipswitch.com > Subject: [IMail Forum] Unusual NDR > > We're using Imail 8.15 with the latest patches. > > I had a user send a zipped text file to an outside client, but Imail > blocked > it and sent back the following: > >>undeliverable to <email address> > >>Body of message generated response: >>551 Message contains a ZIP file that is extremely compressed (97.02%) > > Any ideas why this happens? Is there some setting that I can change > somewhere? I checked the KB, list archives, and online discussion forum, > but came up empty-handed. > > TIA for any help. > > > Grant Bainbridge > Systems / Network Analyst > Chappell / MarathonFoto > 641.472.6892 x211 > [EMAIL PROTECTED] > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > > > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html > List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ > To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
