lyndonje,

The error appears in your logs when SpamFilter is attempting to forward email to your destination SMTP server, and your SMTP server rejects the connection. The logs for your SMTP server may contain info on why it rejected the connection. If you only have one destination SMTP server, you'll know right away what the server is.
If you have several domains and several destination SMTP servers, the server rejecting the connections may not be simple to find. The version of SpamFilter you're running does not provide in the logs info on what SMTP server it's forwarding emails to. However if you upgrade to version 2.7.1.531 or higher, that info is being logged:

// New to VersionNumber = '2.7.1.531';
{TODO -cNew : Prevented problems if the "Allowed Domains" list mistakenly contained duplicate domains}
{TODO -cNew : Added the destination SMTP server used when logging errors occurring while forwarding emails to dest. SMTP server}

If you do not wish to upgeade, you can find the server in question by looking at the recipient of the email. The email domain will then tell you which server it was sent to. Just look for the previous thread ID (bolded) in the logs:

03/01/06 08:39:11:795 -- (3520) Sending email from MAILER-DAEMON@*domain-deleted*..com to czvpzflzqxeeo@*domain-deleted*.co.uk
03/01/06 08:39:14:030 -- (3520) Socket Error # 10061 Connection refused. - message queued - MAILER-DAEMON@*domain-deleted*.



The socket error is a Microsoft socket error, and its description is:

Connection refused.

No connection could be made because the target computer actively refused it. This usually results from trying to connect to a service that is inactive on the foreign host—that is, one with no server application running.

Edited by LogSat

Hi,

Just to cover a question again:

> Also, I've noticed emails in the queue directory. What factors effect
> whether an email is forward direct to the server specified in the
> localdomains file, and which are then forward onto the main
> destination server?

IE, a message has ended up in the badmail queue. Looks as though a postmaster NDR was generated. The NDR was forward to the main destination server for delivery. How come SF didn't pass the original email onto the main destination server to re-attempt delivery. Is my understanding of this incorrect? Basically I'd like to know under what circumstances SF generates an NDR, sticks in the queue directory to retry later, or lastly forwards to the main destination server for further delivery attempts?

Thanks.