IronPort not delivering to SMS server

Vinesh_ironport · ‎10-24-2007

Hi All,

I've just installed a C350 for a mobile operator client and they have an email to sms feature for their clients.

When IronPort delivers to the SMS server, we get a bounce message back. IronPort seems to be trying to deliver to the server but the server is rejecting the message.

When MX record is pointed directly to SMS server, it works fine. So, clearly there's a problem when IronPort is sending the message.

Here is the mail delivery error:
The following message to <2307297555> was undeliverable.
The reason for the problem:
5.1.0 - Unknown address error 552-'email size is too long'

If you send a mail to 2307297555@emtelworld.net . you should be getting the delivery error.
Do you have any idea on how we can fix it , or is IronPort modifying something ??

Looking for a prompt solution please

Thanks in advance,
Vinesh

jaigill · ‎10-25-2007

My ironport is able to successfully deliver a message to this address.

Thu Oct 25 21:05:05 2007 Info: New SMTP ICID 2 interface Data 1 (172.19.1.210) address 10.251.0.73 reverse dns host unknown verified no
Thu Oct 25 21:05:05 2007 Info: ICID 2 RELAY SG RELAYLIST match 10.251.0.73 SBRS not enabled
Thu Oct 25 21:05:13 2007 Info: Start MID 2 ICID 2
Thu Oct 25 21:05:13 2007 Info: MID 2 ICID 2 From:
Thu Oct 25 21:05:31 2007 Info: MID 2 ICID 2 RID 0 To: <2307297555>
Thu Oct 25 21:05:57 2007 Info: MID 2 Message-ID '<6d174g>'
Thu Oct 25 21:05:57 2007 Info: MID 2 Subject 'testing'
Thu Oct 25 21:05:57 2007 Info: MID 2 ready 34 bytes from
Thu Oct 25 21:05:57 2007 Info: MID 2 matched all recipients for per-recipient policy DEFAULT in the outbound table
Thu Oct 25 21:05:57 2007 Info: MID 2 antivirus negative
Thu Oct 25 21:05:57 2007 Info: MID 2 queued for delivery
Thu Oct 25 21:06:00 2007 Info: New SMTP DCID 2 interface 172.19.0.210 address 196.192.81.95 port 25
Thu Oct 25 21:06:00 2007 Info: Delivery start DCID 2 MID 2 to RID [0]
Thu Oct 25 21:06:03 2007 Info: Message done DCID 2 MID 2 to RID [0]
Thu Oct 25 21:06:03 2007 Info: MID 2 RID [0] Response 'ok: Message 16854 accepted'
Thu Oct 25 21:06:03 2007 Info: Message finished MID 2 done

The message in this case is most likely being bounced by the remote mail server. You can setup domain debug logs and verify this.

Vinesh_ironport · ‎10-26-2007

Hi,

did you send to the full address 2307297555@emtelworld.net ?
I tried to disable antispam,antivirus on incoming mail , but still this is being rejected.

Definitely, it's the receiving mail server which is rejecting the message but we don't know why.
If MX record is pointed directly to this server, it works.
They even tested this with a Symantec Appliance before and it worked.

So, i'm a bit confused on why it's not accepting from IronPort?

Please find 2 parts of a debug log.
Strangely, only mails from y-alerts@reply.yahoo.com are being accepted.

Another log below show the rejection and error message: message size too long.

**************************************

Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '220 ********************************************************************'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'EHLO iron1.emtelworld.com'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 cool'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'MAIL FROM:'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 Sender OK'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'RCPT TO:<7210613>'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 7210613@EMTELWORLD.NET...Recipient OK'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'DATA'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: "354 Enter mail, end with '.' on a line by itself"
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Message-Id: <6cofuk>\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Received: from n6.bullet.scd.yahoo.com ([66.218.66.151])\r\n by iron1.emtelworld.com with SMTP; 24 Oct 2007 13:07:05 +0400\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys\r\nDomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=gcom1024; d=yahoo.com;\r\n\tb=lCb2t1qKo2WgfReOiFwGfSljS6Z0v7GmLCkmYXvzbrzRDUnWkUJWGS1CjojXA/7GBIzPYshdYoE0m/gUyb0Mh0OAco6opCRcaGQog1Lg98Jf7YCokEnAHHxzdDmIz5nmKUYEOAGaT0e8xOOc7lToxtWRwEPwV+2bhu4FgwkCxj4=;\r\nReceived: from [209.73.164.86] by n6.bullet.scd.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nReceived: from [69.147.67.83] by t8.bullet.scd.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nDate: 24 Oct 2007 02:07:04 -0700\r\nReceived: from [127.0.0.1] by qs13.mobile.sp1.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nX-yahoo-newman-expires: 1193220424\r\nFrom: "Y!"\r\nTo: 7210613@emtelworld.net\r\nX-Yahoo-Bounces: 1\r\nX-yahoo-newman-property: wireless-alerts\r\nX-yahoo-newman-id: qs1.mobile.sp1.yahoo.com.84184.234021_1193216823\r\n\r\nFr: VegasHotels@bird4warm.info S: Get your luxury trip to the Bellagio Participate Now B: ...\r\nGo to :\r\nhttp://us.m.yahoo.com/p/mail'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: '\r\n.\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 Message accepted 4 delivery'
Wed Oct 24 13:07:12 2007 Info: 9428 Sent: 'QUIT'

****************************************

2nd Log:

Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '220 ********************************************************************'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'EHLO iron1.emtelworld.com'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 cool'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'MAIL FROM:'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 Sender OK'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'RCPT TO:<7221960>'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 7221960@EMTELWORLD.NET...Recipient OK'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'DATA'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: "354 Enter mail, end with '.' on a line by itself"
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-Anti-Spam-Filtered: true\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-Anti-Spam-Result: AgAAACKnHkfPzx+Wnmdsb2JhbACCciOLRAEBAQEHBAYRGIEn\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-AV: E=Sophos;i="4.21,323,1188763200"; \r\n d="scan\'208,217";a="11828"\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'Received: from return01.manticoretechnology.com ([207.207.31.150])\r\n by iron1.emtelworld.com with ESMTP; 24 Oct 2007 13:04:57 +0400\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'Received: from MANT-MW01 ([207.207.31.144]) by return01.ManticoreTechnology.com with Microsoft SMTPSVC(6.0.3790.1830);\r\n\t Wed, 24 Oct 2007 04:04:51 -0500\r\nX-MTC-INFO: 207.207.31.150 (v2.1.070622.1): 2026.1948.28189.2\r\nX-MTC-CONTACT: 2502499\r\nX-MTC-RCPTID: 73A348B44F13FDB468A14F44407B05C3FADEEBCB82D27A3D\r\nX-MTC-BAID: 1690\r\nX-MTC-MAILID: 28189\r\nFrom: "HeartMath" \r\nTo: 7221960@emtelworld.net\r\nMessage-ID: <90309219e0b94aec89decc672cb775a7>\r\nDate: Wed, 24 Oct 2007 04:05:00 -0500\r\nSubject: HeartQuotes: Friendship\r\nMIME-Version: 1.0\r\nContent-Type: multipart/alternative; \r\n\tboundary="----=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D"\r\nReturn-Path: F8D4FE5790A155054581768FD76E3D8CD94D8EA0A4BFF803890D62614DFB0BA5F1CBF52494A521DC@return01.ManticoreTechnology.com\r\nX-OriginalArrivalTime: 24 Oct 2007 09:04:51.0823 (UTC) FILETIME=[EFCE4FF0:01C8161C]\r\n\r\n------=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D\r\nContent-type: text/plain; charset=utf-8\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\nHeartQuotes:=C2=A0Friendship\r\n\r\n\r\n"A friend is a present you give yourself=2E"\r\n\r\n- Robert Louis Stevenson\r\n\r\nYou are receiving this message because you are subscribed as 7221960@em=\r\ntelworld=2Enet to the Daily HeartQuotes=E2=84=A2=2E To unsubscribe repl=\r\ny to this email with unsubscribe in the subject line=2E=20\r\n\r\nHeartMath is a registered trade'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'mark of the Institute of HeartMath=2E He=\r\nartQuotes is a trademark of Quantum Intech, Inc=2E Copyright =C2=A9 200=\r\n7, HeartMath LLC=C2=A0All rights reserved=2E Please read the disclaimer=\r\n=2E=20\r\nHeartMath LLC=2E 14700 West Park Avenue, Boulder Creek, CA 95006\r\n------=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D\r\nContent-type: text/html; charset=utf-8\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n\r\n\r\n\r\n\r\nHeartQuotes™: Friendship\r\n\r\n\r\n

\r\n

"A friend is a present you give yours=\r\nelf=2E"
\r\n
\r\n- Robert Louis Stevenson
\r\n

\r\n

\r\n\r\n

if you cann=\r\not view the images check the online version

\r\n\r\n\r\n \r\n \r\n \r\n \r\n \r\n \r\n

\r\n=09

\r\n=09=20\r\n=09=09

\r\n\r\n \r\n \r\n \r\n

\r\n=09

\r\n=09\r\n=09

\r\n=09 You are receiving this message because you are subscribed as 7221960@emtelworld=2Enet\r\n=09 to the Daily HeartQuotes™=2E

\r\n\r\n =20\r\n

=\r\n from the HeartQuotes list=2E\r\n

\r\n\r\n

from all H=\r\neartMath lists=2E

\r\n=09=09=09 \r\n=09

\r\n\r\n=09
\r\n=09 email :info@heartmath=2E=\r\ncom\r\n=09=09

\r\n=09=09

\r\nHeartMath is a registered trademark of the Institute of HeartMath=2E\r\n=09=09 HeartQuotes is a trademark of Quantum Intech, Inc=2E Copyrigh=\r\nt © 2007, HeartMath LLC All rights reserved=2E Please read t=\r\nhe disclaime=\r\nr=2E
\r\nHeartMath LLC=2E 14700 West Park Avenue, Boulder Creek, CA 95006=\r\n

\r\n=09

\r\n

\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n\r\n------=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D--\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: '.\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '552 email size is too long'
Wed Oct 24 13:05:07 2007 Info: 9420 Sent: 'QUIT'

Any help would be most welcomed.

Thanks,

pvdberg00 · ‎10-26-2007

When I send a testmessage I received the following error

2307297555@emtelworld.net on 26-10-2007 9:37
The e-mail system was unable to deliver the message, but did not report a specific reason. Check the address and try again. If it still fails, contact your system administrator.
iron1.emtelworld.com #5.0.0 smtp; 5.1.0 - Unknown address error 552-'email size is too long' (delivery attempts: 0)

Can you do a telnet from the Ironport to the receiving server ?
If you have a connection can you send mail via that telnet session?

Regards Peter

Vinesh_ironport · ‎10-26-2007

Hello,

Yes, that's what i see as strange.

I can telnet from the IronPort to the receiving server which are on the same subnet and i can even send a message to that email address and they get it.
It's accepted and delivered without any problem.

So, i don't know why it's rejecting when we sent a normal mail through the IronPort.
There are 4 other domains in smtproutes and the others are working fine, i guess it's not a configuration problem.
I even tested with AS and AV turned off in incoming mail policies ,but same issue.

thanks,
Vinesh

pvdberg00 · ‎10-26-2007

You cab try to quarantine the messages to that specific emailaddress.
If there are messages quarantined send these messages to that mailaddress and anothoter address. See what happens.

Peter.

Vinesh_ironport · ‎10-26-2007

Hi again,

i just got this from the client . this is config from the Unix receiving mail server. In fact, once it receives the mail, it breaks in in parts and send it as sms. But that's another process and we don;t touch anything on this side.

Please check with Ironport for the compatibility with Email system on unix

EMAIL.max_email_text_size=580
EMAIL.max_attachment_size=20
EMAIL.max_message_length=160
EMAIL.incoming_smtp_request_command_timeout_interval=60
EMAIL.reject_text_reg_exp=
EMAIL.text_spam_return_string=250 Text-Spamming detected
EMAIL.debug.generations=1
EMAIL.debug.size=25000000
EMAIL.incomming_smtp_request_session_timeout=180
EMAIL.debug_on=yes
EMAIL.debug_names=EMAIL.debug_names
EMAIL.debug_instructions=EMAIL.debug_instructions
EMAIL.use_throttler=yes
EMAIL.duration=1
EMAIL.bssm=30
EMAIL.default_source_address=EMAIL
EMAIL.operator_logo_file_name=
EMAIL.send_outgoing_emails_as_html=no
EMAIL.outgoing_text_banner_file_name=
EMAIL.operator_text_banner_iso_charset=ISO-8859-1
EMAIL.notification_events=3
EMAIL.max_opened_connections=250
EMAIL.need_to_check_ip=no
EMAIL.accepted_host_names=192.168.0.30,172.17.80.32,172.17.80.33
EMAIL.domain_names=emtelworld.net
EMAIL.listening_port=25
EMAIL.incomming_email_pattern=%e(%s:20)%a%t
EMAIL.target_number_reg_exp=[0-9]*,1,20
EMAIL.max_allowed_recipients=1
EMAIL.active_isp_server=192.168.0.30
EMAIL.standby_isp_server=
EMAIL.replace_empty_subject=no
EMAIL.outgoing_smtp_port_number=25
EMAIL.max_queue_size=100
EMAIL.unblock_queue_size=80
EMAIL.queue_management=0 15 0
EMAIL.outgoing_email_pattern=%A1,9%S0,1%M1,1
EMAIL.outgoing_email_address_pattern=%A
EMAIL.outgoing_email_subject_pattern=(%S)
EMAIL.outgoing_email_message_pattern=%M
EMAIL.outgoing_email_address_delimter=,
EMAIL.default_validity_period=1440
EMAIL.max_attachment_amount=3
EMAIL.use_alarms=no
EMAIL.ump_hostname=
EMAIL.ump_port_number=8052
EMAIL.alarms_id_range=4000
EMAIL.long_message_supported_by_sfe=no
EMAIL.outgoing_email_at_sign=*
EMAIL.outgoing_email_underscore=$
EMAIL.gsm_standard=yes
EMAIL.saved_msg_id_file=saved_msg_id_file
EMAIL.use_esmtp_in_outgoing_emails=no
EMAIL.isp_command_timeout=30
EMAIL.text_spam_return_string=250 Text-Spamming detected
EMAIL.reject_text_reg_exp=
EMAIL.number_of_sfes=2
EMAIL.sfe.1=2401;sfe1a;sfe1b
EMAIL.sfe.1.prefix=[0-9]*,50
EMAIL.sfe.2=2402;sfe1a;sfe1b
EMAIL.sfe.2.prefix=[0-9]*,50
RETURN_SMTP_SERVER_EXISTS=Yes
RETURN_SMTP_SERVER_NAME=emtelworld.net
RETURN_SMTP_SERVER_IP=192.168.0.30
EMAIL.max_header_size=2000
EMAIL.send_outgoing_emails_as_html=no
###black list - added By Nirit ##
EMAIL.black_list_data=MMMONLINE.ORG,mmmonline.org,LEMMM.ORG,WISECARE.INFO,wisecare.info,MAURITIUS.NAME,mauritius.name,BERENGER.INFO
49 smsc@imu1:~/site/config>

Vinesh_ironport · ‎10-26-2007

Hi,

After thorough testing at customer site, we finally found out that the message were rejected because of the size which eventually came with the addition of the headers.

We disable IPAS and Sophos and tested and the mail were accepted.Although i disabled IPAS and Sophos earlier, it wasn't working. But now it's working with AS and AV OFF.

I can disable the addition of Sophos header, but can you please give me a message filter to remove IronPort Antispam headers?
We configured a specific listener to accept mail for @emtelworld.net. So, can you help on the filter specific for the listerner?

Thanks,
Vinesh