From: Pascal Maes (pascal.maeselec.ucl.ac.be)
Date: Sat Jul 01 2006 - 11:45:05 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

Le 1 juil. 06 à 15:24, Robert Felber a écrit :

> On Sat, Jul 01, 2006 at 10:22:45AM +0200, Pascal Maes wrote:
>>> Another point of guessing:
>>> The entry dates to Jun 28th. Does the error persist?
>
>> smtp-3:~# grep "NOQUEUE.*chiltern.com" /var/log/mail.log
>> Jun 28 15:03:56 smtp-3 postfix/smtpd[23914]: NOQUEUE: reject:
>>
> [...]
> Which doesn't show that the error persists, maybe you should also
> look for
> successful deliveries from germany1.chiltern.com. If there are
> successful
> deliveries then I'd ask whether it fails only to specific
> recipients/domains,
> or whether more than one people have access to the config files. Also,
> as Victor noted, master(5).cf provides also the opportunity to mess up
> options (-o ), which aren't shown by postconf -n, so (again just to
> make sure)
> show the master.cf entries of smtp-3.

There are no successful delivery from germany2.chiltern.com
[217.7.78.26] whith an helo=<germany1.chiltern.com>
in all the logfiles still on the disk.

I have successful delivery when the connection comes from
global.chiltern.com[193.82.122.130] with helo=<global.chiltern.com>
but they tell me that these messages come from another of their sites.

We have
host global.chiltern.com -> global.chiltern.com A
193.82.122.130
host germany1.chiltern.com -> germany1.chiltern.com A
193.82.122.130

I can't say that the problem persist because I don't see any attempt
of connection now (see below).

#
========================================================================
==
# service type private unpriv chroot wakeup maxproc command + args
# (yes) (yes) (yes) (never) (100)
#
========================================================================
==
smtp inet n - n - - smtpd
         -o smtpd_proxy_filter=127.0.0.1:10025
         -o smtpd_client_connection_count_limit=100
#submission inet n - n - - smtpd
# -o smtpd_etrn_restrictions=reject
smtps inet n - n - - smtpd
   -o smtpd_proxy_filter=127.0.0.1:10025
   -o smtpd_tls_wrappermode=yes
   -o smtpd_use_tls=yes
   -o smtpd_tls_auth_only=yes
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_sasl_security_options=noanonymous
   -o
smtpd_helo_restrictions=permit_mynetworks,permit_sasl_authenticated,reje
ct
   -o
smtpd_sender_restrictions=permit_mynetworks,permit_sasl_authenticated,re
ject
submission inet n - n - - smtpd
   -o smtpd_proxy_filter=127.0.0.1:10025
   -o smtpd_etrn_restrictions=reject
   -o smtpd_use_tls=yes
   -o smtpd_tls_auth_only=yes
   -o smtpd_sasl_auth_enable=yes
   -o smtpd_sasl_security_options=noanonymous
   -o
smtpd_helo_restrictions=permit_mynetworks,permit_sasl_authenticated,reje
ct
   -o
smtpd_sender_restrictions=permit_mynetworks,permit_sasl_authenticated,re
ject

>
> You said "that there was" a problem - does the problem persist, or
> are they
> now able to deliver to your smtps. If they are now able, then the
> problem
> is solved, and the reason for the errors in the past can only be
> guessed -
> and there could be dozen of reasons.
>
>

"was" because we can't reproduce this behaviour.
I was on the phone with Sebastien Ducarme (on June 29) when he sends
me the message and he gets the return error here after. And it is the
firts time that he sends me a message.

>
>> Another problem is that I have asked then to make some test
>> with my address,
>> they receive an error message (in german) :
>>
>> ----- Weitergeleitet von Sebastien Ducarme/Chiltern am
>> 29.06.2006 11:24
>> -----
>>
>> Zustellungsfehlerbericht
>>
>> Ihr server!!
>> Dokument:
>>
>> wurde <pascal.maesuclouvain.be>
>> nicht
>> zugestellt
>> an:
>>
>> weil: Fehler beim Übertragen an smtp.dynsipr.ucl.ac.BE;
>> SMTP-Protokoll meldete einen permanenten Fehler
>> 554 5.7.1
>> <germany1.chiltern.com>: Helo command rejected:
>> Access denied
>>
>>
>> How could they say that the mail was rejected as I don't see
>> any connection on June 29 (see the first grep of this mail)
>
> The report shows only, that the message has been forwarded on 29th.
>
> --
> Robert Felber (PGP: 896CF30B)
> Munich, Germany
>

Monday I will get another call with their system administrator to try
some other tests.
I hope they have the possibility to use telnet to make some basic
tests on port 25

Thanks for your perseverance and patience.

--
Pascal

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]