Print Page | Close Window

Can not get message through

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
Printed Date: 11 December 2018 at 8:11am

Topic: Can not get message through
Posted By: caratking
Subject: Can not get message through
Date Posted: 01 July 2006 at 3:21am
Spamfilter setup on a Windows 2000 Professional workstation, used to
accept mail - rejecting the spam. Then it is supposed to forward the
messages along to qmail running on Fedora Core 2 server.

Problem is some email will be successful when getting forwarded along to
qmail and some will not (for the same domain).

Here are the symptoms as I have identified them so far:

1) Spamfilter accepts the message
2) Attempts to send the message along, and will try to establish a
connection to the remote server for delivery.
3) The qmail server will place an entry in its logfile upon connection:
Jul 1 10:23:02 s1 relaylock: /var/qmail/bin/relaylock: mail from

4) The two server will just sit there for a while (1 minute?), eventually
Spamfilter will record an entry that looks like this:
Socket Error #10054 Connection reset by peer. - forwarding to: - message qued -

That is it, it never gets any further than that. The qmail server never
makes mention of the connection again in its logfile.

I thought I would then use the debug view tool in spamfilter which
monitors the SMTP data between the two servers. I placed the ip address
to monitor but nothing showed.

Of course, I assume the debug tool is not working. I then changed the ip
to monitor to * and I start seeing server communications (not between the
two servers in question though).

So from debug tool I can conclude that they never establish a connection
good enough to even transfer an smtp command.

I can manually telnet into port 25 from the spamfilter machine to the
qmail server and issue the commands by hand to send a message so I
know port 25 is alive and well.

Anyone got some additional things I should be checking here?

Posted By: Marco
Date Posted: 03 July 2006 at 11:11am

could this be the cause? -

Anyone who is capable of getting himself made president, should on no account be allowed to do the job. D.Adams

Posted By: LogSat
Date Posted: 04 July 2006 at 11:50am

The debug monitor in SpamFilter will only monitor incoming connections, not the outgoing ones.

Usually outgoing communications to your SMTP server are pretty straightforward and do not cause problems, so there is very little debugging built in SpamFilter for this. The "Connection reset by peer" error indicates that the peer server (qmail in this case) has disconnected SpamFilter.

If the qmail logs do not have any additional information, I would suggest using an external monitoring tool to watch traffic from the SpamFilter server to your qmail server. If you had a server version of Windows you could have used it's Network Monitor utility. In your case, you could use Ethereal ( - ). It runs on both Windows and Linux, and it's very possible your Fedora Core distribution already has it installed.

Roberto Franceschetti" rel="nofollow - LogSat Software" rel="nofollow - Spam Filter ISP

Posted By: caratking
Date Posted: 04 July 2006 at 6:20pm

Originally posted by LogSat LogSat wrote:

The debug monitor in SpamFilter will only monitor incoming connections, not the outgoing ones.

It might be nice if in future versions you modify the note on the debug page to say it only monitors incoming connections.

I will try eartherreal, I have used it once before on the Fedora server to prove to the ISP I was not using 20gb of bandwith per day!

Posted By: LogSat
Date Posted: 05 July 2006 at 11:40pm
We had already modified it right after your first post !
It was indeed not clear as it was phrased.

Roberto Franceschetti" rel="nofollow - LogSat Software" rel="nofollow - Spam Filter ISP

Posted By: caratking
Date Posted: 25 July 2006 at 6:09pm
I thought I would post my status so far regarding this strange problem.

I got ethereal (and after some training with it), was able to see that indeed communication between my workstation that is running spamfilter and the 'real' mail server there were some serious issues.

The two were having a very rough relationship, hardly speaking.

The workstation has a Gigabyte motherboard, with built in lan card.  The card is an NIDIA nForce Networking Controller.  The card has an option to offload the ip checksum from the computer to the network card.  With this checksum offload option enabled, communication between the two computers was not good. 

I disabled it, so now the IP stack does its own checksum, and things seem to be flowing fine.

A difficult problem to resolve for sure, and while not a spamfilter problem it was the only software that seemed to be having problems (or the only one that showed signs of a problem).

Print Page | Close Window