Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - EmailTO is not in AuthorizedTOEmail list.
  FAQ FAQ  Forum Search   Register Register  Login Login

EmailTO is not in AuthorizedTOEmail list.

 Post Reply Post Reply
Author
mbrusl View Drop Down
Groupie
Groupie
Avatar

Joined: 05 December 2005
Location: Thunder Bay Ont
Status: Offline
Points: 61
Post Options Post Options   Thanks (0) Thanks(0)   Quote mbrusl Quote  Post ReplyReply Direct Link To This Post Topic: EmailTO is not in AuthorizedTOEmail list.
    Posted: 07 June 2007 at 9:11pm
If the name was not in the to/from list, then why was the message passed to the mail server?  DNS error resolved, but should not have caused this.  Any ideas?


06/07/07 09:06:15:846 -- (2492) Connection from: 72.55.153.17  -  Originating country : Canada
06/07/07 09:06:16:467 -- (2492) Resolving 72.55.153.17 - queen.sibername.com
06/07/07 09:06:17:408 -- (2492) - SPF analysis for wappmc.com done: - none
06/07/07 09:06:17:408 -- (2492) - SPF DNS error: - DNS Server Reports Query Name Error
06/07/07 09:06:17:408 -- (2492) Mail from: paulrichard@wappmc.com
06/07/07 09:06:18:109 -- (2492) - MAPS search done...
06/07/07 09:06:18:119 -- (2492) RCPT TO: mbrusl@spacequad.com accepted
06/07/07 09:06:18:489 -- (2492) Checking SURBL
06/07/07 09:06:18:499 -- (2492) Starting queueing procedures
06/07/07 09:06:18:519 -- (2492) EMail from paulrichard@wappmc.com to mbrusl@spacequad.com was queued. Size: 3 KB, 3072 bytes
06/07/07 09:06:18:549 -- (1996) Sending email from paulrichard@wappmc.com to mbrusl@spacequad.com --
06/07/07 09:06:18:750 -- (1996) EMail from paulrichard@wappmc.com to mbrusl@spacequad.com --  was forwarded to mail.spacequad.com
06/07/07 09:06:22:865 -- (2492) - EmailTO is not in AuthorizedTOEmail list...
06/07/07 09:06:22:865 -- (2492) 72.55.153.17 - Mail from: paulrichard@wappmc.com To: newman@spacequad.com will be disconnected
06/07/07 09:06:22:875 -- (2492) Blacklist cache - Added 72.55.153.17 to limbo
06/07/07 09:06:23:106 -- (2492) SFDB - Added 72.55.153.17 - Response: Error=0
06/07/07 09:06:23:106 -- (2492) Disconnect



Edited by mbrusl
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 07 June 2007 at 9:39pm
From the logs it appears that 2 separate emails were sent during the same SMTP transaction. The first was to:

RCPT TO: mbrusl@spacequad.com accepted

which was delivered.

Without looking at your configurations we can't be 100% sure, but it looks as "mbrusl@spacequad.com" is indeed in your authorizedTO list.

The second email was initiated after the one above, and sent to:
newman@spacequad.com

Now here the log is pretty specific, and indicates that newman@spacequad.com is not in the AuthorizedTO list, so that recipient was rejected and the second email was thus refused.



Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
WebGuyz View Drop Down
Senior Member
Senior Member


Joined: 09 May 2005
Location: United States
Status: Offline
Points: 348
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebGuyz Quote  Post ReplyReply Direct Link To This Post Posted: 07 June 2007 at 10:13pm

Roberto,

   On a related AuthorizedTo note, I had a customers customer email me and ask why his emails were rejected after working fine for months. I checked and determined that the error he was getting was that the recipient not in AuthorizedTo list. But he was!!  

What was suspicous is that this occured around the time SFI was reloading my valid users text file . I think that this particular email happened to come in as SFI was reloading the list and in that brief instance 2 emails were rejected for not being in AuthorizedTo list. but it was incorrect.  We reload our list every 10 minutes to pick up new users or deleted users. Could this happen? A timing issue while a list is being reloaded?

Thanks!

 

http://www.webguyz.net
Back to Top
mbrusl View Drop Down
Groupie
Groupie
Avatar

Joined: 05 December 2005
Location: Thunder Bay Ont
Status: Offline
Points: 61
Post Options Post Options   Thanks (0) Thanks(0)   Quote mbrusl Quote  Post ReplyReply Direct Link To This Post Posted: 08 June 2007 at 12:56am
Roberto,

I just sent you the entire email and all supporting info on the problem.  I think there is more going on here than what I can see off hand.  Here's the log of what I just sent during that email to you.  I don't believe I had these issues before.

06/08/07 00:44:25:075 -- (4236) Connection from: 192.168.0.254  -  Originating country : N/A
06/08/07 00:44:35:129 -- (4236) DNS Error:TimedOut
06/08/07 00:44:35:149 -- (4236) DNS Server will rotate after query. New server will be 192.168.0.250
06/08/07 00:44:35:149 -- (4236) Resolving 192.168.0.254 - Error resolving IP address (TimedOut)
06/08/07 00:44:35:189 -- (4236) Bypassed all rules for: support@logsat.com from admin@spacequad.com ( Whitelisted Peer IP)
06/08/07 00:44:36:100 -- (4236) Bypassed all rules for: support@logsat.com from admin@spacequad.com ( Whitelisted Peer IP)
06/08/07 00:44:36:140 -- (4236) Starting queueing procedures
06/08/07 00:44:36:160 -- (4236) EMail from admin@spacequad.com to support@logsat.com was queued. Size: 25 KB, 25600 bytes
06/08/07 00:44:36:170 -- (4024) Sending email from admin@spacequad.com to support@logsat.com --
06/08/07 00:44:36:440 -- (4024) EMail from admin@spacequad.com to support@logsat.com --  was forwarded to mail.spacequad.com
06/08/07 00:44:36:530 -- (4236) Disconnect

Back to Top
WebGuyz View Drop Down
Senior Member
Senior Member


Joined: 09 May 2005
Location: United States
Status: Offline
Points: 348
Post Options Post Options   Thanks (0) Thanks(0)   Quote WebGuyz Quote  Post ReplyReply Direct Link To This Post Posted: 08 June 2007 at 8:26am

Roberto,

  Please ignore my previous email, I may have spoken too soon. The two rejections that were because of AuthorizedTo emails I thought were bogus may in fact be true. I have a new update log in place now that show the rejections occured at 10:00am but my new log shows those entries were inerted at 11:55. When I checked the valid users table at 4:00pm they were there. Didn't check the update log until this morning.

Sorry for the red herring...

http://www.webguyz.net
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.270 seconds.