IronPort not delivering to SMS server

Unanswered Question
Oct 24th, 2007

Hi All,

I've just installed a C350 for a mobile operator client and they have an email to sms feature for their clients.

When IronPort delivers to the SMS server, we get a bounce message back. IronPort seems to be trying to deliver to the server but the server is rejecting the message.

When MX record is pointed directly to SMS server, it works fine. So, clearly there's a problem when IronPort is sending the message.

Here is the mail delivery error:
The following message to <2307297555> was undeliverable.
The reason for the problem:
5.1.0 - Unknown address error 552-'email size is too long'

If you send a mail to [email protected] . you should be getting the delivery error.
Do you have any idea on how we can fix it , or is IronPort modifying something ??

Looking for a prompt solution please

Thanks in advance,
Vinesh

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
jaigill Thu, 10/25/2007 - 22:11

My ironport is able to successfully deliver a message to this address.

Thu Oct 25 21:05:05 2007 Info: New SMTP ICID 2 interface Data 1 (172.19.1.210) address 10.251.0.73 reverse dns host unknown verified no
Thu Oct 25 21:05:05 2007 Info: ICID 2 RELAY SG RELAYLIST match 10.251.0.73 SBRS not enabled
Thu Oct 25 21:05:13 2007 Info: Start MID 2 ICID 2
Thu Oct 25 21:05:13 2007 Info: MID 2 ICID 2 From:
Thu Oct 25 21:05:31 2007 Info: MID 2 ICID 2 RID 0 To: <2307297555>
Thu Oct 25 21:05:57 2007 Info: MID 2 Message-ID '<6d174g>'
Thu Oct 25 21:05:57 2007 Info: MID 2 Subject 'testing'
Thu Oct 25 21:05:57 2007 Info: MID 2 ready 34 bytes from
Thu Oct 25 21:05:57 2007 Info: MID 2 matched all recipients for per-recipient policy DEFAULT in the outbound table
Thu Oct 25 21:05:57 2007 Info: MID 2 antivirus negative
Thu Oct 25 21:05:57 2007 Info: MID 2 queued for delivery
Thu Oct 25 21:06:00 2007 Info: New SMTP DCID 2 interface 172.19.0.210 address 196.192.81.95 port 25
Thu Oct 25 21:06:00 2007 Info: Delivery start DCID 2 MID 2 to RID [0]
Thu Oct 25 21:06:03 2007 Info: Message done DCID 2 MID 2 to RID [0]
Thu Oct 25 21:06:03 2007 Info: MID 2 RID [0] Response 'ok: Message 16854 accepted'
Thu Oct 25 21:06:03 2007 Info: Message finished MID 2 done


The message in this case is most likely being bounced by the remote mail server. You can setup domain debug logs and verify this.

Vinesh_ironport Fri, 10/26/2007 - 06:38

Hi,

did you send to the full address [email protected] ?
I tried to disable antispam,antivirus on incoming mail , but still this is being rejected.

Definitely, it's the receiving mail server which is rejecting the message but we don't know why.
If MX record is pointed directly to this server, it works.
They even tested this with a Symantec Appliance before and it worked.

So, i'm a bit confused on why it's not accepting from IronPort?

Please find 2 parts of a debug log.
Strangely, only mails from [email protected] are being accepted.

Another log below show the rejection and error message: message size too long.

**************************************

Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '220 ********************************************************************'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'EHLO iron1.emtelworld.com'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 cool'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'MAIL FROM:'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 Sender OK'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'RCPT TO:<7210613>'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 [email protected]..Recipient OK'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'DATA'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: "354 Enter mail, end with '.' on a line by itself"
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Message-Id: <6cofuk>\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Received: from n6.bullet.scd.yahoo.com ([66.218.66.151])\r\n by iron1.emtelworld.com with SMTP; 24 Oct 2007 13:07:05 +0400\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys\r\nDomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=gcom1024; d=yahoo.com;\r\n\tb=lCb2t1qKo2WgfReOiFwGfSljS6Z0v7GmLCkmYXvzbrzRDUnWkUJWGS1CjojXA/7GBIzPYshdYoE0m/gUyb0Mh0OAco6opCRcaGQog1Lg98Jf7YCokEnAHHxzdDmIz5nmKUYEOAGaT0e8xOOc7lToxtWRwEPwV+2bhu4FgwkCxj4=;\r\nReceived: from [209.73.164.86] by n6.bullet.scd.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nReceived: from [69.147.67.83] by t8.bullet.scd.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nDate: 24 Oct 2007 02:07:04 -0700\r\nReceived: from [127.0.0.1] by qs13.mobile.sp1.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nX-yahoo-newman-expires: 1193220424\r\nFrom: "Y!"\r\nTo: [email protected]\r\nX-Yahoo-Bounces: 1\r\nX-yahoo-newman-property: wireless-alerts\r\nX-yahoo-newman-id: qs1.mobile.sp1.yahoo.com.84184.234021_1193216823\r\n\r\nFr: [email protected] S: Get your luxury trip to the Bellagio Participate Now B: ...\r\nGo to :\r\nhttp://us.m.yahoo.com/p/mail'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: '\r\n.\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 Message accepted 4 delivery'
Wed Oct 24 13:07:12 2007 Info: 9428 Sent: 'QUIT'


****************************************

2nd Log:

Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '220 ********************************************************************'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'EHLO iron1.emtelworld.com'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 cool'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'MAIL FROM:'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 Sender OK'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'RCPT TO:<7221960>'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 [email protected]..Recipient OK'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'DATA'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: "354 Enter mail, end with '.' on a line by itself"
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-Anti-Spam-Filtered: true\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-Anti-Spam-Result: AgAAACKnHkfPzx+Wnmdsb2JhbACCciOLRAEBAQEHBAYRGIEn\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-AV: E=Sophos;i="4.21,323,1188763200"; \r\n d="scan\'208,217";a="11828"\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'Received: from return01.manticoretechnology.com ([207.207.31.150])\r\n by iron1.emtelworld.com with ESMTP; 24 Oct 2007 13:04:57 +0400\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'Received: from MANT-MW01 ([207.207.31.144]) by return01.ManticoreTechnology.com with Microsoft SMTPSVC(6.0.3790.1830);\r\n\t Wed, 24 Oct 2007 04:04:51 -0500\r\nX-MTC-INFO: 207.207.31.150 (v2.1.070622.1): 2026.1948.28189.2\r\nX-MTC-CONTACT: 2502499\r\nX-MTC-RCPTID: 73A348B44F13FDB468A14F44407B05C3FADEEBCB82D27A3D\r\nX-MTC-BAID: 1690\r\nX-MTC-MAILID: 28189\r\nFrom: "HeartMath" \r\nTo: [email protected]\r\nMessage-ID: <90309219e0b94aec89decc672cb775a7>\r\nDate: Wed, 24 Oct 2007 04:05:00 -0500\r\nSubject: HeartQuotes: Friendship\r\nMIME-Version: 1.0\r\nContent-Type: multipart/alternative; \r\n\tboundary="----=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D"\r\nReturn-Path: F8D4FE5790A155054581768FD76E3D8CD94D8EA0A4BFF803890D62614DFB0BA5F1CBF524...\r\nX-OriginalArrivalTime: 24 Oct 2007 09:04:51.0823 (UTC) FILETIME=[EFCE4FF0:01C8161C]\r\n\r\n------=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D\r\nContent-type: text/plain; charset=utf-8\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\nHeartQuotes:=C2=A0Friendship\r\n\r\n\r\n"A friend is a present you give yourself=2E"\r\n\r\n- Robert Louis Stevenson\r\n\r\nYou are receiving this message because you are subscribed as [email protected]=\r\ntelworld=2Enet to the Daily HeartQuotes=E2=84=A2=2E To unsubscribe repl=\r\ny to this email with unsubscribe in the subject line=2E=20\r\n\r\nHeartMath is a registered trade'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'mark of the Institute of HeartMath=2E He=\r\nartQuotes is a trademark of Quantum Intech, Inc=2E Copyright =C2=A9 200=\r\n7, HeartMath LLC=C2=A0All rights reserved=2E Please read the disclaimer=\r\n=2E=20\r\nHeartMath LLC=2E 14700 West Park Avenue, Boulder Creek, CA 95006\r\n------=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D\r\nContent-type: text/html; charset=utf-8\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n\r\n\r\n\r\n\r\nHeartQuotes™: Friendship\r\n\r\n\r\n

\r\n

"A friend is a present you give yours=\r\nelf=2E"
\r\n

\r\n- Robert Louis Stevenson
\r\n

\r\n
\r\n\r\n
if you cann=\r\not view the images check the online version
\r\n\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n
\r\n=09
\r\n=09=20\r\n=09=09
\r\n\r\n \r\n \r\n \r\n
\r\n=09
\r\n=09\r\n=09\r\n\r\n =20\r\n

=\r\n from the HeartQuotes list=2E\r\n

\r\n\r\n

from all H=\r\neartMath lists=2E

\r\n=09=09=09 \r\n=09
\r\n\r\n=09
\r\n=09 email :[email protected]=2E=\r\ncom
\r\n=09=09
\r\n=09=09
\r\n=09=09


\r\nHeartMath is a registered trademark of the Institute of HeartMath=2E\r\n=09=09 HeartQuotes is a trademark of Quantum Intech, Inc=2E Copyrigh=\r\nt © 2007, HeartMath LLC  All rights reserved=2E Please read t=\r\nhe disclaime=\r\nr=2E
\r\nHeartMath LLC=2E 14700 West Park Avenue, Boulder Creek, CA 95006
=\r\n

\r\n=09
\r\n
\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n------=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D--\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: '.\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '552 email size is too long'
Wed Oct 24 13:05:07 2007 Info: 9420 Sent: 'QUIT'



Any help would be most welcomed.

Thanks,
pvdberg00 Fri, 10/26/2007 - 08:40

When I send a testmessage I received the following error

[email protected] on 26-10-2007 9:37
The e-mail system was unable to deliver the message, but did not report a specific reason. Check the address and try again. If it still fails, contact your system administrator.
iron1.emtelworld.com #5.0.0 smtp; 5.1.0 - Unknown address error 552-'email size is too long' (delivery attempts: 0)


Can you do a telnet from the Ironport to the receiving server ?
If you have a connection can you send mail via that telnet session?

Regards Peter

Vinesh_ironport Fri, 10/26/2007 - 08:50

Hello,

Yes, that's what i see as strange.

I can telnet from the IronPort to the receiving server which are on the same subnet and i can even send a message to that email address and they get it.
It's accepted and delivered without any problem.

So, i don't know why it's rejecting when we sent a normal mail through the IronPort.
There are 4 other domains in smtproutes and the others are working fine, i guess it's not a configuration problem.
I even tested with AS and AV turned off in incoming mail policies ,but same issue.

thanks,
Vinesh

pvdberg00 Fri, 10/26/2007 - 09:20

You cab try to quarantine the messages to that specific emailaddress.
If there are messages quarantined send these messages to that mailaddress and anothoter address. See what happens.

Peter.

Vinesh_ironport Fri, 10/26/2007 - 11:56

Hi again,

i just got this from the client . this is config from the Unix receiving mail server. In fact, once it receives the mail, it breaks in in parts and send it as sms. But that's another process and we don;t touch anything on this side.


Please check with Ironport for the compatibility with Email system on unix


EMAIL.max_email_text_size=580
EMAIL.max_attachment_size=20
EMAIL.max_message_length=160
EMAIL.incoming_smtp_request_command_timeout_interval=60
EMAIL.reject_text_reg_exp=
EMAIL.text_spam_return_string=250 Text-Spamming detected
EMAIL.debug.generations=1
EMAIL.debug.size=25000000
EMAIL.incomming_smtp_request_session_timeout=180
EMAIL.debug_on=yes
EMAIL.debug_names=EMAIL.debug_names
EMAIL.debug_instructions=EMAIL.debug_instructions
EMAIL.use_throttler=yes
EMAIL.duration=1
EMAIL.bssm=30
EMAIL.default_source_address=EMAIL
EMAIL.operator_logo_file_name=
EMAIL.send_outgoing_emails_as_html=no
EMAIL.outgoing_text_banner_file_name=
EMAIL.operator_text_banner_iso_charset=ISO-8859-1
EMAIL.notification_events=3
EMAIL.max_opened_connections=250
EMAIL.need_to_check_ip=no
EMAIL.accepted_host_names=192.168.0.30,172.17.80.32,172.17.80.33
EMAIL.domain_names=emtelworld.net
EMAIL.listening_port=25
EMAIL.incomming_email_pattern=%e(%s:20)%a%t
EMAIL.target_number_reg_exp=[0-9]*,1,20
EMAIL.max_allowed_recipients=1
EMAIL.active_isp_server=192.168.0.30
EMAIL.standby_isp_server=
EMAIL.replace_empty_subject=no
EMAIL.outgoing_smtp_port_number=25
EMAIL.max_queue_size=100
EMAIL.unblock_queue_size=80
EMAIL.queue_management=0 15 0
EMAIL.outgoing_email_pattern=%A1,9%S0,1%M1,1
EMAIL.outgoing_email_address_pattern=%A
EMAIL.outgoing_email_subject_pattern=(%S)
EMAIL.outgoing_email_message_pattern=%M
EMAIL.outgoing_email_address_delimter=,
EMAIL.default_validity_period=1440
EMAIL.max_attachment_amount=3
EMAIL.use_alarms=no
EMAIL.ump_hostname=
EMAIL.ump_port_number=8052
EMAIL.alarms_id_range=4000
EMAIL.long_message_supported_by_sfe=no
EMAIL.outgoing_email_at_sign=*
EMAIL.outgoing_email_underscore=$
EMAIL.gsm_standard=yes
EMAIL.saved_msg_id_file=saved_msg_id_file
EMAIL.use_esmtp_in_outgoing_emails=no
EMAIL.isp_command_timeout=30
EMAIL.text_spam_return_string=250 Text-Spamming detected
EMAIL.reject_text_reg_exp=
EMAIL.number_of_sfes=2
EMAIL.sfe.1=2401;sfe1a;sfe1b
EMAIL.sfe.1.prefix=[0-9]*,50
EMAIL.sfe.2=2402;sfe1a;sfe1b
EMAIL.sfe.2.prefix=[0-9]*,50
RETURN_SMTP_SERVER_EXISTS=Yes
RETURN_SMTP_SERVER_NAME=emtelworld.net
RETURN_SMTP_SERVER_IP=192.168.0.30
EMAIL.max_header_size=2000
EMAIL.send_outgoing_emails_as_html=no
###black list - added By Nirit ##
EMAIL.black_list_data=MMMONLINE.ORG,mmmonline.org,LEMMM.ORG,WISECARE.INFO,wisecare.info,MAURITIUS.NAME,mauritius.name,BERENGER.INFO
49 [email protected]:~/site/config>

Vinesh_ironport Fri, 10/26/2007 - 17:53

Hi,

After thorough testing at customer site, we finally found out that the message were rejected because of the size which eventually came with the addition of the headers.

We disable IPAS and Sophos and tested and the mail were accepted.Although i disabled IPAS and Sophos earlier, it wasn't working. But now it's working with AS and AV OFF.

I can disable the addition of Sophos header, but can you please give me a message filter to remove IronPort Antispam headers?
We configured a specific listener to accept mail for @emtelworld.net. So, can you help on the filter specific for the listerner?

Thanks,
Vinesh

Actions

This Discussion