Does a dns lookup for smtp.ubaight.com on the xmail machine give the =
good ip
?
If ok, see your xmail smail log to see where xmail connected to send =
the
mails ...
If bad IP, try this (clear xmail dns cache) :
stop xmail
empty xmail 'dnscache/mx'
empty xmail 'dnscache/ns'
restart xmail
if good IP : Did you change anything on the receiving machine ? or in a
firewall or nat device ?
Francis
> -----Message d'origine-----
> De : Jeffrey Laramie [mailto:[EMAIL PROTECTED]
> Envoy=E9 : mardi 18 mai 2004 15:43
> =C0 : [EMAIL PROTECTED]
> Objet : [xmail] Relaying Issue
>=20
>=20
> Morning All,
>=20
> The last 2 days it appears my mail server has incorrectly=20
> forwarded (or at=20
> least attempted to forward) a message to the wrong IP. This=20
> is on a system=20
> that had been running for months without change. Some additional =
info:
>=20
> SuSE 8.2 fully updated
> XMail 1.17
>=20
> Contents of custdomain tab file ubaight.com.tab:
> "smtprelay" "smtp.ubaight.com"
>=20
> Entry in smtp log file:
> "" "Trans-Star.net" "81.215.123.23" "2004-05-17 20:38:06"=09
> "dsl81-215-31511.adsl.ttnet.net.tr" "ubaight.com"=09
> "[EMAIL PROTECTED]"=09
> "[EMAIL PROTECTED]" "SC214" "RCPT=3DOK" "" "0"=09
> "dsl81-215-31511.adsl.ttnet.net.tr"
> "" "Trans-Star.net" "81.215.123.23" "2004-05-17 20:38:07"=09
> "dsl81-215-31511.adsl.ttnet.net.tr" "ubaight.com"=09
> "[EMAIL PROTECTED]"=09
> "[EMAIL PROTECTED]" "SC214" "RECV=3DOK" "" "1839"=09
> "dsl81-215-31511.adsl.ttnet.net.tr"
>=20
> First 3 entries in firewall log of receiving server:
> May 17 20:38:10 LServer1 kernel: Lan-Host: IN=3Deth0 OUT=3D=20
> MAC=3D00:c0:f0:57:af:cc:00:0c:76:3a:30:94:08:00 SRC=3D192.168.0.2=20
> DST=3D192.168.0.1=20
> LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D64 ID=3D4638 DF PROTO=3DTCP=20
> SPT=3D32861 DPT=3D25=20
> WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0
> May 17 20:46:12 LServer1 kernel: Lan-Host: IN=3Deth0 OUT=3D=20
> MAC=3D00:c0:f0:57:af:cc:00:0c:76:3a:30:94:08:00 SRC=3D192.168.0.2=20
> DST=3D192.168.0.1=20
> LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D64 ID=3D4909 DF PROTO=3DTCP=20
> SPT=3D32862 DPT=3D25=20
> WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0
> May 17 20:54:47 LServer1 kernel: Lan-Host: IN=3Deth0 OUT=3D=20
> MAC=3D00:c0:f0:57:af:cc:00:0c:76:3a:30:94:08:00 SRC=3D192.168.0.2=20
> DST=3D192.168.0.1=20
> LEN=3D60 TOS=3D0x00 PREC=3D0x00 TTL=3D64 ID=3D5154 DF PROTO=3DTCP=20
> SPT=3D32863 DPT=3D25=20
> WINDOW=3D5840 RES=3D0x00 SYN URGP=3D0
>=20
> This hasn't happened before and I probably wouldn't have even=20
> noticed except=20
> that it tried to send to one of my internal firewalled=20
> servers and the=20
> packets were logged and dropped. There shouldn't be a problem=20
> with DNS since=20
> the box XMail is on is also the authoritative name server for=20
> ubaight.com.=20
> The rest of the mail for this domain is forwarded without=20
> problems and has=20
> been for months. Any ideas why this is happening or any other=20
> info I can=20
> provide?
>=20
> Jeff
> -
> To unsubscribe from this list: send the line "unsubscribe xmail" in
> the body of a message to [EMAIL PROTECTED]
> For general help: send the line "help" in the body of a message to
> [EMAIL PROTECTED]
>=20
-
To unsubscribe from this list: send the line "unsubscribe xmail" in
the body of a message to [EMAIL PROTECTED]
For general help: send the line "help" in the body of a message to
[EMAIL PROTECTED]
