[isalist] Re: SMTP Connection Problem?
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Wed, 29 Oct 2008 10:15:11 -0500
The firewall log entries look normal to me. The connection is initiated
and closed normally. There is no Deny.
Check the SMTP log on the offending outbound SMTP relay at the other end
and see what it reports.
Tom
____________________________________________
TOM SHINDER | Sr. Consultant/Technical Writer
206.443.1117 | SHINDER@xxxxxxxxxxxxxxx
5701 Sixth Avenue South | Seattle, WA 98108
PROWESS | WWW.PROWESSCORP.COM <http://www.prowesscorp.com/>
____________________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Rob Moore
Sent: Wednesday, October 29, 2008 9:55 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SMTP Connection Problem?
And I should add, I just tried telnet on port 25 from a third network,
and it connects just fine.
So, to summarize:
1. Email flows to us normally from all sites except the
problematic one (PYM).
2. Telnet on port 25 works normally from at least one external
network, but does not work from the problematic network (PYM).
Anything else I can share?
Thanks,
Rob
From: Rob Moore
Sent: Wednesday, October 29, 2008 10:50 AM
To: 'isalist@xxxxxxxxxxxxx'
Subject: RE: [isalist] Re: SMTP Connection Problem?
Same thing.
Rob
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Ellis, John P.
Sent: Wednesday, October 29, 2008 10:46 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: SMTP Connection Problem?
How does it work if you telnet to you mail server on port 25?
Cheers
John
________________________________
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Rob Moore
Sent: 29 October 2008 14:38
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] SMTP Connection Problem?
Hello-
Using ISA 2006 Standard (Version 5.0.5723.493) on Windows Server 2003
SP2.
I have an SMTP publishing rule that seems to be working fine. It has
been chugging along normally for a couple of years. However, we have
suddenly found in the last couple of days that one site can no longer
send to us. (We know this because they are another group that's in our
building, for which we provide IT services. We manage their Exchange
server and can see the mail they've sent to us staying in the queue.)
When their server tries to connect to our ISA server, here's what I see
in the ISA log:
Action Result Code
Error Information
Initiated Connection 0x0 ERROR_SUCCESS
0x0
Closed Connection 0x80074e24 FWX_E_CONNECTION_KILLED 0x0
These two events happen at the same time in the log.
So, my questions are:
1. Is the failure of communication at the ISA server, as reflected
in these two lines? Or is the problem somewhere else?
2. If the problem is here, what can I do about it?
The entire result of the two lines above is pasted here:
Original Client IP Client Agent Authenticated Client Service
Server Name Referring Server Destination Host Name
Transport MIME Type Object Source Source Proxy
Destination Proxy Bidirectional Client Host Name Filter
Information Network Interface Raw IP Header Raw Payload
GMT Log Time Source Port Processing Time Bytes Sent Bytes
Received HTTP Status Code Cache Information Log Record
Type Authentication Server Log Time Destination IP Destination
Port Protocol Action Rule Client IP Client
Username Source Network Destination Network HTTP Method URL
Result Code Error Information
209.120.230.115 PHL-ISA3 -
TCP - -
10/29/2008 2:12:16 PM 7964 0 0 0 0x0
Firewall - 10/29/2008 10:12:16 AM 172.17.200.10 25
SMTP Server Initiated Connection SMTP Server (Inbound)
209.120.230.115 External Internal - -
0x0 ERROR_SUCCESS 0x0
Original Client IP Client Agent Authenticated Client Service
Server Name Referring Server Destination Host Name
Transport MIME Type Object Source Source Proxy
Destination Proxy Bidirectional Client Host Name Filter
Information Network Interface Raw IP Header Raw Payload
GMT Log Time Source Port Processing Time Bytes Sent Bytes
Received HTTP Status Code Cache Information Log Record
Type Authentication Server Log Time Destination IP Destination
Port Protocol Action Rule Client IP Client
Username Source Network Destination Network HTTP Method URL
Result Code Error Information
209.120.230.115 PHL-ISA3 -
TCP - -
10/29/2008 2:12:16 PM 7964 62 146 0 0x0
Firewall - 10/29/2008 10:12:16 AM 172.17.200.10 25
SMTP Server Closed Connection SMTP Server (Inbound)
209.120.230.115 External Internal - -
0x80074e24 FWX_E_CONNECTION_KILLED 0x0
Thanks!
Rob
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Rob Moore
Network Manager
215-241-7870
Help Desk: 800-500-AFSC
**********************************************************************
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.
This footnote also confirms that this email message has been swept by
MIMEsweeper for the presence of computer viruses.
www.clearswift.com
**********************************************************************
Other related posts:
