TTL Question? SMTP?

OK, here's question #2 for the mighty IronPort Nation. The nation is doing great so far.
I am trying to determine why an e-mail failed. The delivery failure is:
5.4.7 - Delivery expired (message too old) '[Errno 61] Connection refused'
The e-mail was sent while the recipient e-mail system was down. What I'm trying to determine is why didn't it queue up either on the sending e-mail system or on IronPort. I don't really understand the path when IronPort is involved. Anyway, my research has led me to believe the problem was caused by a TTL parameter that was too small. Do all e-mail systems use TTL? The sending e-mail system admin. says they don't have/use TTL.
Any thoughts on the topic?
Thanks,
Newbie IronPort/Messaging Admin.

How old was the message when it expired? There is no explicit TTL mechanism in SMTP, each server retries for however long it is configured. RFC 2821 recommends a minimum retry time of "at least 4-5 days" (interesting that it is so nonspecific).
Regarding "understand[ing] the path when IronPort is involved," that's going to be very installation-specific. Your mail system may be configured to route its outbound mail via your IronPort, or it may be configured to route its own outbound mail. The fact that you got an error from the IronPort implies the former. In this case, mail will stay on the appliance for the duration of its retry time. The default is 72 hours, but can be changed via a bounce profile.

Similar Messages

My wife has an iphone and we want it to print on new 8600hp. What is the set up on smtp servers etc.

Need the info on the server questions (smtp and htmp) stuff

Hi,
Please check if your printer is in this list
http://support.apple.com/kb/ht4356
If YES, you only need AirPrint on iPhone otherwise you have to use indirectly.
Regards.
BH
**Click the KUDOS thumb up on the left to say 'Thanks'**
Make it easier for other people to find solutions by marking a Reply 'Accept as Solution' if it solves your problem.

Question regarding SMTP on my own mail server

This might be a dumb question. I understand if I want to use os x server to run my mail server, I need to update the MX records for my domain so that all email sent to my companies domain goes to the static IP of my server. Where I'm confused is with smtp, how does that work? If I create a new message and send it to someone on the internet, how does my leopard server know how to deliver it? I haven't changed any MX settings yet, just confused how SMTP works?

Thanks for your help, still having issues. My MX records for invution.com are not set up yet as I'm waiting for my static IP to be installed. I can send mail of course to local users, but I'm just testing sending externally. Does my MX records need to be set up for that? If so then this question is answered.
I'm trying to email myself at gmail.com but it never sends. Here's SMTP log:
Feb 7 08:23:29 darwin postfix/postfix-script[59769]: refreshing the Postfix mail system
Feb 7 08:23:29 darwin postfix/master[59668]: reload configuration /etc/postfix
Feb 7 08:23:29 darwin postfix/qmgr[59774]: 002D187E09: from=<[email protected]>, size=966, nrcpt=1 (queue active)
Feb 7 08:23:29 darwin postfix/qmgr[59774]: 2A5EC87F6B: from=<[email protected]>, size=925, nrcpt=1 (queue active)
Feb 7 08:23:29 darwin postfix/qmgr[59774]: 3D57287E5E: from=<[email protected]>, size=966, nrcpt=1 (queue active)
Feb 7 08:23:29 darwin postfix/qmgr[59774]: 62E7F8686B: from=<[email protected]>, size=970, nrcpt=1 (queue active)
Feb 7 08:23:29 darwin postfix/qmgr[59774]: 7172587EAF: from=<[email protected]>, size=927, nrcpt=1 (queue active)
Feb 7 08:23:29 darwin postfix/qmgr[59774]: D11CB87FAA: skipped, still being delivered
Feb 7 08:23:29 darwin postfix/smtp[59724]: connect to alt1.gmail-smtp-in.l.google.com[74.125.79.27]: Operation timed out (port 25)
Feb 7 08:23:59 darwin postfix/smtp[59724]: connect to alt2.gmail-smtp-in.l.google.com[209.85.129.27]: Operation timed out (port 25)
Feb 7 08:23:59 darwin postfix/smtp[59724]: D11CB87FAA: to=<[email protected]>, relay=none, delay=150, delays=0.06/0.04/150/0, dsn=4.4.1, status=deferred (connect to alt2.gmail-smtp-in.l.google.com[209.85.129.27]: Operation timed out)
Feb 7 08:23:59 darwin postfix/smtp[59776]: connect to gmail-smtp-in.l.google.com[72.14.205.27]: Operation timed out (port 25)
Feb 7 08:23:59 darwin postfix/smtp[59778]: connect to gmail-smtp-in.l.google.com[72.14.205.27]: Operation timed out (port 25)
Feb 7 08:23:59 darwin postfix/smtp[59777]: connect to gmail-smtp-in.l.google.com[209.85.133.114]: Operation timed out (port 25)
Feb 7 08:23:59 darwin postfix/smtp[59779]: connect to gmail-smtp-in.l.google.com[209.85.133.114]: Operation timed out (port 25)
Feb 7 08:23:59 darwin postfix/smtp[59780]: connect to gmail-smtp-in.l.google.com[209.85.133.114]: Operation timed out (port 25)
Feb 7 08:24:29 darwin postfix/postfix-script[59788]: refreshing the Postfix mail system
Feb 7 08:24:29 darwin postfix/master[59668]: reload configuration /etc/postfix
Feb 7 08:24:29 darwin postfix/qmgr[59793]: 002D187E09: skipped, still being delivered
Feb 7 08:24:29 darwin postfix/qmgr[59793]: 2A5EC87F6B: skipped, still being delivered
Feb 7 08:24:29 darwin postfix/qmgr[59793]: 3D57287E5E: skipped, still being delivered
Feb 7 08:24:29 darwin postfix/qmgr[59793]: 62E7F8686B: skipped, still being delivered
Feb 7 08:24:29 darwin postfix/qmgr[59793]: 7172587EAF: skipped, still being delivered
Feb 7 08:24:29 darwin postfix/qmgr[59793]: D11CB87FAA: from=<[email protected]>, size=925, nrcpt=1 (queue active)
Feb 7 08:24:29 darwin postfix/smtp[59776]: connect to alt1.gmail-smtp-in.l.google.com[74.125.79.27]: Operation timed out (port 25)
Feb 7 08:24:29 darwin postfix/smtp[59778]: connect to alt1.gmail-smtp-in.l.google.com[74.125.79.27]: Operation timed out (port 25)
Feb 7 08:24:29 darwin postfix/smtp[59777]: connect to alt2.gmail-smtp-in.l.google.com[209.85.129.27]: Operation timed out (port 25)
Feb 7 08:24:29 darwin postfix/smtp[59779]: connect to alt1.gmail-smtp-in.l.google.com[74.125.79.27]: Operation timed out (port 25)
Feb 7 08:24:29 darwin postfix/smtp[59780]: connect to alt1.gmail-smtp-in.l.google.com[66.249.93.27]: Operation timed out (port 25)
And then postconf -n shows:
darwin:~ admin$ postconf -n
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debugpeerlevel = 2
enableserveroptions = yes
html_directory = no
inet_interfaces = all
localrecipientmaps =
luser_relay = admin
mail_owner = _postfix
mailboxsizelimit = 0
mailbox_transport = cyrus
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
messagesizelimit = 0
mydestination = $myhostname,localhost.$mydomain,localhost,invution.com
mydomain = invution.com
mydomain_fallback = localhost
myhostname = invution.com
newaliases_path = /usr/bin/newaliases
queue_directory = /private/var/spool/postfix
readme_directory = /usr/share/doc/postfix
relayhost =
sample_directory = /usr/share/doc/postfix/examples
sendmail_path = /usr/sbin/sendmail
setgid_group = _postdrop
smtpsasl_passwordmaps =
smtpdenforcetls = no
smtpdpw_server_securityoptions = gssapi,cram-md5,login,plain
smtpdrecipientrestrictions = permitsasl_authenticated,permit_mynetworks,reject_unauthdestination,permit
smtpdsasl_authenable = yes
smtpdtls_certfile = /etc/certificates/Default.crt
smtpdtls_keyfile = /etc/certificates/Default.key
smtpdtlsloglevel = 0
smtpduse_pwserver = yes
smtpdusetls = no
unknownlocal_recipient_rejectcode = 550
Is something set up wrong or do I need MX working first? Thanks!

Mail server - smtp configuration questions

i'm having a bit of trouble getting clear on how mail configuration works, in particular the settings relating to smtp.
here are some questions i hope someone help with:
1. am i correct that settings made on the the settings>relay tab apply only to when my server is used as a relay - and therefore would not apply to general incoming smtp connections when another server connects to mine for delivery to locally-hosted domains?
2. there are three settings on the settings>relay tab. basically they are: "accept relays only from the specified addresses", "refuse all messsages from the specified addressses", and "use these rbl servers". the first two can seemingly each be separately enabled/disabled in addition to being configured with one or more addresses. my question is what happens if neither of the first two is checked (enabled)? does my server accept relay connections from anywhere? or does it accept no connections at all?
3 on the settings>general tab, there is a checkbox to enable smtp... one would assume that if this is unchecked, that this would disable all incoming mail AND smtp relay, yet it seems i can have this unchecked and i can still configure smtp relay on the settings>relay tab, so that seems odd - am i missing something?
4) on the same tab, it asks for a domain name and a host name. how are these used? what is the difference between the two? does it matter if my host accepts mail for multiple hosts (via host aliases - configured via settings>advanced>hosting>local host aliases)?
5) i want my server to accept mail to anywhere from authenticated users (i.e. users on my network who are sending mail to random other places). i want my server to accept inbound mail (to users on my locally-hosted domains) from any server without requiring authentication. my guess is that this is a pretty common or standard config. i am confused by the settings>advanced>security tab, where i can seemingly allow certain types of authentication.
5a) what are the semantics of the multiple check boxes for the different types of auth? if i select only one, does it mean that my server will require that specific type of auth? if i select more than one, does it mean that my server will select any of the specified types? what if nothing is checked - is that how you tell it to allow unauthenticated users to connect?
5b) do the above auth settings apply both types of incoming smtp connections i described above? how can i configure it so as require smtp authentication from clients but not from servers connecting from other networks to deliver mail to my domain?
thanks in advance.

I went to http://www.google.com and did a search for "smtp server" and the second entry it returned was this:
"PostCast Server - free outgoing SMTP e-mail server
... notifications to your customers, as well as for sending individual messages. You
can use it instead of the SMTP server of your Internet Service Provider. ...
Description: Enables you to send e-mail directly from your computer, without your Internet Service Provider's server.
Category: Computers > Software > Internet > Servers > Mail
www.postcastserver.com/ - 33k - Cached - Similar pages "
The Internet is a great resource, isn't it?

Alt-Mailhost / SMTP Routes Question...

Hi All,
I have a query on SMTP routing when using the Alt-Mailhost command in a Message Filter...
Our configuration in overview is two Ironport devices (C650's at AsyncOS 6.4) at separate sites, configured as a cluster (all config is common across sites). At each site, there also exists a 3rd party mail host.
So, I have a message filter which selects messages based on some criteria and I also know which Ironport received it. When I have a match, I want to route this message to the 3rd party mail host on the _local_ site......but if that mail host is down, I want to route it to the 3rd party mail host on the other site. Simple as that!
At the moment, my Alt-Mailhost command looks like this;
<message has been selected> {
<if "Site A" Ironport used> {
alt-mailhost('bogusdomain1.net');
<else>{
alt-mailhost('bogusdomain2.net');
...in my SMTP Routes I'd _like_ to have this;
bogusdomain1.net     <3rd-Party-Box-at-Site-A>, <3rd-Party-Box-at-Site-B>
bogusdomain2.net     <3rd-Party-Box-at-Site-B>, <3rd-Party-Box-at-Site-A>
...but this doesn't work because multiple hosts in an SMTP route are tried in numerical / alphabetical order...no matter what order you put them into the SMTP Route definition (is this a bug?)....so in reality, they both have to look like this;
bogusdomain1.net     <3rd-Party-Box-at-Site-A>, <3rd-Party-Box-at-Site-B>
bogusdomain2.net     <3rd-Party-Box-at-Site-A>, <3rd-Party-Box-at-Site-B>
..which is no use.
My only other idea is that I could just have this in the SMTP Routes for those domains;
bogusdomain1.net     USEDNS
bogusdomain2.net     USEDNS
...and configure my DNS with the above domains, such that there really _is_ a difference in the order of the MX for those domains.
So my question is, how can I do this without using 'USEDNS' and the associated DNS config...i.e. just via the Ironport devices?
Hope the collective can help!
Cheers, Chris.

Check out the latest release notes...
Enhanced: Prioritized SMTP Routes
AsyncOS 7.0 allows you to prioritize the destination hosts for your SMTP routes. AsyncOS will attempt to deliver the message to a destination host in order based on priority. Destinations with identical priority will be used in a “round-robin” fashion.

Questions about message logging and topic TTL

We're in the final stages of testing our application. Basically a producer application is sending small, non-persistent messages once every 10 seconds and once every second to an auto-created topic. The consumer application(s) listening are then doing data display of this 1 second and 10 second data.
Testing the client we noticed it complained of a single 10 second message not being received. We verified that the message was sent by the producer. My question is whether there is a logging setting on the IMQ server that could be used to log the receipt and delivery of every message, perhaps by JMSMessageID to a particular topic? The only idea we could think of is to use 'imqcmd metrics' to track the number of messages in/out, but this isn't as useful for us.
Any ideas you could provide would be greatly appreciated.

imqbrokerd does not support tracing at this level, so metrics is probably the best approach for now.
If a subscriber is not getting a message it is usually because of one of the following:
1. The message is expiring. If you are using message expiration make sure the clocks are synchronized between the clients and the server. imqbrokerd will log a message when it has expired messages.
2. The subscriber was down when the message was produced (and it is not a durable subscriber).
3. You have set a size limit on the destination or system wide that is resulting in messages being shedded as specified by the limit behavior.
With non-persistent messages you can get an additional level of reliability by setting the following ConnectionFactory property to true:
ConnectionConfiguration.imqAckOnProducethis adds a handshake between the server and client when a message is sent and provides a mechanism for imqbrokerd to propogate additional message production errors back to the client.
The following document at sunsolve.sun.com provides more details:
ID70117 Sun Java[TM] System Message Queue: Tuning 3.0.1 and 3.5 For Robustness
Joe
http://wwws.sun.com/software/products/message_queue/

SMTP in iFS question

I installed iFS 1.1 on Oracle 8.1.7. Setup the SMTP server on the default port. Did NOT setup IMAP (port conflict). If I understand correctly, this should allow inbound mail to be stored into iFS (and maybe even forwarded?), but would not allow the iFS folder to be used by a mail client. How do I actually try this? How do I send a mail message to the SCOTT user?

You might try using 'mail' on UNIX to generate a message to a user account in Oracle iFS via SendMail.

SMTP + Uber-goober Question

I would like to download SIM files and I registered 3 times with different users but I didn't find any download option to download SIM file, some time getting an error you are not authz. or you are bonded someting like that...
http://uber-goober.com/forums/showthread.php?t=110249
2nd. in NW 2004s do I need to create SMTP for create CCMS alerts ?
please advised
Thanks

You might try using 'mail' on UNIX to generate a message to a user account in Oracle iFS via SendMail.

Smtp sender restrictions question

I have the following in my main.cf file for sender restrictions. permitsasl_authenticated,permit_mynetworks,rejectn onfqdnsender,permit
Seems pretty standard, but I have had some students in my district send emails to teachers as [email protected] Now the first thing I am going to do is take the building ip ranges out of the mynetworks and require sasl on all email clients. I think this will stop this from happening.
My question is can a student send an email as a bogus user to someone from mydomain if they don't have some way of sasl authentication? I remember in the past that when my teachers were at home and they would send emails they could send to each other mydomain to mydomain but not outside, mydomain to yahoo.com for example.
So they were not using sasl or mynetworks because they were using their home ip. If that would still be allowed, what can I do.
Thanks for any clarifications!
JL
Mac OS X (10.4.8)

I was a little confused by your question, so this may
sound like more of a "buck-shot" approach to your
problem than you would like. I apologize if this
doesn't answer your question directly. However, if I
were you, I would implement Pterobyte's "Frontline
spam defense for Mac OS X Server" located at
http://osx.topicdesk.com/downloads
I have enabled this, it is excellent.
In this PDF file, Pterobyte provides a set of
restrictions for main.cf that optimizes Postfix's
abilities to deal with unwanted mail up-front before
it reaches your content filter.
Concerning your question specifically, are you saying
that a student can send mail using your mail server
without authenticating as long as they are sending to
another user on the server and claiming to have an
email address originating from your TLD?
I believe the student is using terminal or something similar on some of our less restricted osx laptops, he is then sending emails to users in my domain. If I remove the ip range from the building he is in, will it stop him from sending emails? He is making up a return address like [email protected] and sending to [email protected] He might even be using php, but I only want email to go to any user local or not, from the district, if they have set my server requires authentication in an email client.
Will removing the ip be enough to stop this?
Thanks!
JL

Dictamus smtp mail server question - help!

I'm just wondering if anyone else is having trouble using Dictamus on their iphone for sending dictations via email.
I recently put OS 5 on my iphone and I have upgraded to Lion on my imac. I recorded a dictation the other day on my phone and I tell it to send and it looks like it does but no one is getting my dictations in their email. I have tried troubleshooting and checked my SMTP settings and they seem to be correct.
I used to be able to send dictations no problem before I uprgraded - is anyone else having this problem of their emails not being sent?
I use a me.com account and would like to use that to send the emails. I have the smtp sever set to smtp.me.com and I have also tried smtp.mail.me.com and still my emails will not go thru.
Any suggestions or help is much appreciated.

We have been getting reports from quite a few MobileMe customers who cannot send mails from Dictamus. According to our investigations, Dictamus does send those mails correctly, and the me.com SMTP server acknowledges having accepted them for delivery. This is as far as anyone can track outgoing e-mail over SMTP, so Dictamus flags the respective dictation as "shared successfully". The problem is that after that initial acknowledgement, MobileMe silently discards some Dictamus mails (not all) without notification to either sender or recipient. This can happen if either recipient or sender are on MobileMe, so sending from a MobileMe address to another mail provider is subject to this issue as well as sending from another provider to MobileMe. Therefore, we currently recommend against using MobileMe accounts for sending mails from Dictamus. We are unaware of similar problems with any of the other large e-mail providers.
Michael Nagel
JOTOMI

#no mpls ip propagate-ttl cmd question-?

Hi:
When this cmd. is enabled both on PE1 and PE2 across a MPLS core, why does the trace output show the egress PE2 router in the output?
I have CE1->PE1->P->PE2->CE2.
I am tracing to the lo0 of CE2 10.1.8.8
PE1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
PE1(config)#no mpls ip propagate-ttl
PE1(config)#end
PE2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
PE2(config)#no mpls ip propagate-ttl
PE2(config)#end
CE1#tr ip 10.1.8.8
Type escape sequence to abort.
Tracing the route to 10.1.8.8
1 10.1.17.1 28 msec 28 msec 28 msec
2 10.1.58.5 168 msec 180 msec 168 msec
3 10.1.58.8 112 msec * 112 msec
CE1#
As you can see, 10.1.58.5 is the PE2 intf. to CE2. I was hoping to see only 2 hops.
Now the doc for this cmd does say that it sometimes shows the egress provider router.
Is this based on IOS or router model?
Or just another bug ;->
Thx.

Thanks Harold!!
I was going by the example shown in the pdf for MPLS Technology Essentials where they only showed 2 hops, the 1st PE and then CE2 and thus....(they did state that sometimes the egress PE would also show up)....

Non-SMTP Session Start Question

I'm getting hundreds of triggers on signature 5748 Non-SMTP Session Start. When I put a block host on this signature I stop getting e-mail. Should this be considered normal traffic.

Hi,
Regarding signature 5748 firing SMTP session initiation with something other than HELO or EHLO. See below for MySDN link on this
signature
http://tools.cisco.com/MySDN/Intelligence/viewSignature.x?signatureId=5748&signatureSubId=0
I'm assuming subsig 0. Is this true?
This is likely a type of reconnaissance attack to see if you are running
an smtp service at this IP address and what type and version number of
smtp software you're running (i.e., Sendmail, Postfix, Microsoft
Exchange, etc.) as they'll get the smtp banner after their initial
connect.
When you see the signature alert, who's the attacker?
You can turn on 'produce verbose alert' to see more information.
Thank you.
Edward

Question about SMTP...!!!

Hi everyone. I just want to know about SMTP HOST Name. I know little about SMTP i-e Simple Mail Transfer Protocol but can you plz give me a simple example ummmmm for example if I am using Yahoo to send e-mail from my Java application then what I have to do with mail code.
I thankyou all.
..DW

Hello
The smtp server for Yahoo is:
smtp.mail.yahoo.com
eg.
(where p is your properties object)
p.put("mail.smtp.host", "smtp.mail.yahoo.com");

Question related to SMTP.

Hi all, when i try to send a mail through peoplecode, it gives a error box with the message as follows
SMTP SendMail failed (server :25). Can not send email to [email protected](this is not the original one, i have the correct one).
What could be the reason for this. Do we need to do any settings?

Hi,
Did you configure as well the SMTP settings, including a SMTP server into the psappsrv.cfg file of your domain ?
Does your server is allowed to connect to the SMTP server ? You can see it by the following command to be run on the app server box (it should return you "connected to..."):
telnet smtp_ip_address 25Nicolas.

SMTP Authentication questions

Hi there.
Currently moving from a FreeBSD server using sendmail to SL 10.6 server.
I'm having difficulty figuring out on how to do it from the Server Admin interface.
What I would like to achieve is:
*People on local network (e.g. from 192.168.0.0/24) can send email without authentication (so mail server act has an open relay for local machines).
*When using a non encrypted connection , only accept the CRAM-MD5 and Kerberos authentication method
*When using encrypted connection (via TLS or SSL), accept LOGIN, PLAIN, Kerberos and CRAM-MD5.
Is there a GUI to configure this, or do I have to manually edit configuration files?
I'm expecting a very curious behaviour, if I configure mail to accept a given security/authentication mode, if I unselect it, then click save. When I check any options again then save, 2-3s later, the option unchecks itself automatically... Very weird.
Any help greatly appreciated.
Jean-Yves

in particular squirrel mail refuses to send email once I set SSL to "require".
Correct. Squirrelmail is typically on the same box as the mail server and uses the localhost address (127.0.0.1). No authentication required. You need to set SSL to "Use" not "require" (no SMTP from unknown Internet hosts will use SSL anyway, so it cannot be "require")
There are plenty of dumb clients that do not support smtp via authentication.
Outside of squirelmail, virtually all modern e-mail clients do support smtp authentication. Some might not support SSL, or SSL with self-signed keys. But they should all should support basic SMTP auth.
Too late for 192.168.x, been using it for over 10 years and there are easy way to get
around the VPN issue, I just allocate an IP in 192.168.100.x and route that subnet.
I thought I was cool by using 172.22.1.0 /24 at home... until my employer started using 172.22.0.0 /16 and shipped a policy forcing all the /16 traffic to use the tunnel. Whenever the VPN was up I could no longer print at home. I ended up using another otherwise unused class A network (yes there are a few left). It will work fine, until you need other local resources when the tunnel is up and there is an address conflict.

TTL Question? SMTP?

Similar Messages

Maybe you are looking for