Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Can not get message through
  FAQ FAQ  Forum Search   Register Register  Login Login

Can not get message through

 Post Reply Post Reply
Author
caratking View Drop Down
Groupie
Groupie


Joined: 13 March 2006
Location: United States
Status: Offline
Points: 79
Post Options Post Options   Thanks (0) Thanks(0)   Quote caratking Quote  Post ReplyReply Direct Link To This Post Topic: Can not get message through
    Posted: 01 July 2006 at 3:21am
Spamfilter setup on a Windows 2000 Professional workstation, used to
accept mail - rejecting the spam. Then it is supposed to forward the
messages along to qmail running on Fedora Core 2 server.

Problem is some email will be successful when getting forwarded along to
qmail and some will not (for the same domain).

Here are the symptoms as I have identified them so far:

1) Spamfilter accepts the message
2) Attempts to send the message along, and will try to establish a
connection to the remote server for delivery.
3) The qmail server will place an entry in its logfile upon connection:
Jul 1 10:23:02 s1 relaylock: /var/qmail/bin/relaylock: mail from
60.115.247.75:1225

4) The two server will just sit there for a while (1 minute?), eventually
Spamfilter will record an entry that looks like this:
Socket Error #10054 Connection reset by peer. - forwarding to:
116.69.165.64 - message qued - email@email.com


That is it, it never gets any further than that. The qmail server never
makes mention of the connection again in its logfile.

I thought I would then use the debug view tool in spamfilter which
monitors the SMTP data between the two servers. I placed the ip address
to monitor but nothing showed.

Of course, I assume the debug tool is not working. I then changed the ip
to monitor to * and I start seeing server communications (not between the
two servers in question though).

So from debug tool I can conclude that they never establish a connection
good enough to even transfer an smtp command.

I can manually telnet into port 25 from the spamfilter machine to the
qmail server and issue the commands by hand to send a message so I
know port 25 is alive and well.

Anyone got some additional things I should be checking here?
Back to Top
Marco View Drop Down
Senior Member
Senior Member
Avatar

Joined: 07 June 2005
Location: Netherlands
Status: Offline
Points: 137
Post Options Post Options   Thanks (0) Thanks(0)   Quote Marco Quote  Post ReplyReply Direct Link To This Post Posted: 03 July 2006 at 11:11am
Anyone who is capable of getting himself made president, should on no account be allowed to do the job. D.Adams
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 04 July 2006 at 11:50am
caratking,

The debug monitor in SpamFilter will only monitor incoming connections, not the outgoing ones.

Usually outgoing communications to your SMTP server are pretty straightforward and do not cause problems, so there is very little debugging built in SpamFilter for this. The "Connection reset by peer" error indicates that the peer server (qmail in this case) has disconnected SpamFilter.

If the qmail logs do not have any additional information, I would suggest using an external monitoring tool to watch traffic from the SpamFilter server to your qmail server. If you had a server version of Windows you could have used it's Network Monitor utility. In your case, you could use Ethereal (www.ethereal.com). It runs on both Windows and Linux, and it's very possible your Fedora Core distribution already has it installed.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
caratking View Drop Down
Groupie
Groupie


Joined: 13 March 2006
Location: United States
Status: Offline
Points: 79
Post Options Post Options   Thanks (0) Thanks(0)   Quote caratking Quote  Post ReplyReply Direct Link To This Post Posted: 04 July 2006 at 6:20pm

Originally posted by LogSat LogSat wrote:

The debug monitor in SpamFilter will only monitor incoming connections, not the outgoing ones.

It might be nice if in future versions you modify the note on the debug page to say it only monitors incoming connections.

I will try eartherreal, I have used it once before on the Fedora server to prove to the ISP I was not using 20gb of bandwith per day!

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 05 July 2006 at 11:40pm
We had already modified it right after your first post !
It was indeed not clear as it was phrased.
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
caratking View Drop Down
Groupie
Groupie


Joined: 13 March 2006
Location: United States
Status: Offline
Points: 79
Post Options Post Options   Thanks (0) Thanks(0)   Quote caratking Quote  Post ReplyReply Direct Link To This Post Posted: 25 July 2006 at 6:09pm
I thought I would post my status so far regarding this strange problem.

I got ethereal (and after some training with it), was able to see that indeed communication between my workstation that is running spamfilter and the 'real' mail server there were some serious issues.

The two were having a very rough relationship, hardly speaking.

The workstation has a Gigabyte motherboard, with built in lan card.  The card is an NIDIA nForce Networking Controller.  The card has an option to offload the ip checksum from the computer to the network card.  With this checksum offload option enabled, communication between the two computers was not good. 

I disabled it, so now the IP stack does its own checksum, and things seem to be flowing fine.

A difficult problem to resolve for sure, and while not a spamfilter problem it was the only software that seemed to be having problems (or the only one that showed signs of a problem).
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.125 seconds.