|Email Plug-in (Reporting):||1.0.1-048|
|Email Plug-in (Encryption):||1.0.0-036|
I've just installed a C350 for a mobile operator client and they have an email to sms feature for their clients.
When IronPort delivers to the SMS server, we get a bounce message back. IronPort seems to be trying to deliver to the server but the server is rejecting the message.
When MX record is pointed directly to SMS server, it works fine. So, clearly there's a problem when IronPort is sending the message.
Here is the mail delivery error:
The following message to <2307297555> was undeliverable.
The reason for the problem:
5.1.0 - Unknown address error 552-'email size is too long'
If you send a mail to firstname.lastname@example.org . you should be getting the delivery error.
Do you have any idea on how we can fix it , or is IronPort modifying something ??
Looking for a prompt solution please
Thanks in advance,
My ironport is able to successfully deliver a message to this address.
Thu Oct 25 21:05:05 2007 Info: New SMTP ICID 2 interface Data 1 (172.19.1.210) address 10.251.0.73 reverse dns host unknown verified no
Thu Oct 25 21:05:05 2007 Info: ICID 2 RELAY SG RELAYLIST match 10.251.0.73 SBRS not enabled
Thu Oct 25 21:05:13 2007 Info: Start MID 2 ICID 2
Thu Oct 25 21:05:13 2007 Info: MID 2 ICID 2 From:
Thu Oct 25 21:05:31 2007 Info: MID 2 ICID 2 RID 0 To: <2307297555>
Thu Oct 25 21:05:57 2007 Info: MID 2 Message-ID '<6d174g>'
Thu Oct 25 21:05:57 2007 Info: MID 2 Subject 'testing'
Thu Oct 25 21:05:57 2007 Info: MID 2 ready 34 bytes from
Thu Oct 25 21:05:57 2007 Info: MID 2 matched all recipients for per-recipient policy DEFAULT in the outbound table
Thu Oct 25 21:05:57 2007 Info: MID 2 antivirus negative
Thu Oct 25 21:05:57 2007 Info: MID 2 queued for delivery
Thu Oct 25 21:06:00 2007 Info: New SMTP DCID 2 interface 172.19.0.210 address 126.96.36.199 port 25
Thu Oct 25 21:06:00 2007 Info: Delivery start DCID 2 MID 2 to RID 
Thu Oct 25 21:06:03 2007 Info: Message done DCID 2 MID 2 to RID 
Thu Oct 25 21:06:03 2007 Info: MID 2 RID  Response 'ok: Message 16854 accepted'
Thu Oct 25 21:06:03 2007 Info: Message finished MID 2 done
The message in this case is most likely being bounced by the remote mail server. You can setup domain debug logs and verify this.
did you send to the full address email@example.com ?
I tried to disable antispam,antivirus on incoming mail , but still this is being rejected.
Definitely, it's the receiving mail server which is rejecting the message but we don't know why.
If MX record is pointed directly to this server, it works.
They even tested this with a Symantec Appliance before and it worked.
So, i'm a bit confused on why it's not accepting from IronPort?
Please find 2 parts of a debug log.
Strangely, only mails from firstname.lastname@example.org are being accepted.
Another log below show the rejection and error message: message size too long.
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '220 ********************************************************************'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'EHLO iron1.emtelworld.com'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 cool'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'MAIL FROM:
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 Sender OK'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'RCPT TO:<7210613>'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 7210613@EMTELWORLD.NET...Recipient OK'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'DATA'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: "354 Enter mail, end with '.' on a line by itself"
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Message-Id: <6cofuk>\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Received: from n6.bullet.scd.yahoo.com ([188.8.131.52])\r\n by iron1.emtelworld.com with SMTP; 24 Oct 2007 13:07:05 +0400\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: 'Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys\r\nDomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=gcom1024; d=yahoo.com;\r\n\tb=lCb2t1qKo2WgfReOiFwGfSljS6Z0v7GmLCkmYXvzbrzRDUnWkUJWGS1CjojXA/7GBIzPYshdYoE0m/gUyb0Mh0OAco6opCRcaGQog1Lg98Jf7YCokEnAHHxzdDmIz5nmKUYEOAGaT0e8xOOc7lToxtWRwEPwV+2bhu4FgwkCxj4=;\r\nReceived: from [184.108.40.206] by n6.bullet.scd.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nReceived: from [220.127.116.11] by t8.bullet.scd.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nDate: 24 Oct 2007 02:07:04 -0700\r\nReceived: from [127.0.0.1] by qs13.mobile.sp1.yahoo.com with NNFMP; 24 Oct 2007 09:07:04 -0000\r\nX-yahoo-newman-expires: 1193220424\r\nFrom: "Y!"
Wed Oct 24 13:07:07 2007 Info: 9428 Sent: '\r\n.\r\n'
Wed Oct 24 13:07:07 2007 Info: 9428 Rcvd: '250 Message accepted 4 delivery'
Wed Oct 24 13:07:12 2007 Info: 9428 Sent: 'QUIT'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '220 ********************************************************************'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'EHLO iron1.emtelworld.com'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 cool'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'MAIL FROM:
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 Sender OK'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'RCPT TO:<7221960>'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: '250 7221960@EMTELWORLD.NET...Recipient OK'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'DATA'
Wed Oct 24 13:05:02 2007 Info: 9420 Rcvd: "354 Enter mail, end with '.' on a line by itself"
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-Anti-Spam-Filtered: true\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-Anti-Spam-Result: AgAAACKnHkfPzx+Wnmdsb2JhbACCciOLRAEBAQEHBAYRGIEn\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'X-IronPort-AV: E=Sophos;i="4.21,323,1188763200"; \r\n d="scan\'208,217";a="11828"\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'Received: from return01.manticoretechnology.com ([18.104.22.168])\r\n by iron1.emtelworld.com with ESMTP; 24 Oct 2007 13:04:57 +0400\r\n'
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'Received: from MANT-MW01 ([22.214.171.124]) by return01.ManticoreTechnology.com with Microsoft SMTPSVC(6.0.3790.1830);\r\n\t Wed, 24 Oct 2007 04:04:51 -0500\r\nX-MTC-INFO: 126.96.36.199 (v2.1.070622.1): 2026.1948.28189.2\r\nX-MTC-CONTACT: 2502499\r\nX-MTC-RCPTID: 73A348B44F13FDB468A14F44407B05C3FADEEBCB82D27A3D\r\nX-MTC-BAID: 1690\r\nX-MTC-MAILID: 28189\r\nFrom: "HeartMath"
Wed Oct 24 13:05:02 2007 Info: 9420 Sent: 'mark of the Institute of HeartMath=2E He=\r\nartQuotes is a trademark of Quantum Intech, Inc=2E Copyright =C2=A9 200=\r\n7, HeartMath LLC=C2=A0All rights reserved=2E Please read the disclaimer=\r\n=2E=20\r\nHeartMath LLC=2E 14700 West Park Avenue, Boulder Creek, CA 95006\r\n------=_NextPart_76CD639C_A306_4B69_BE9C_CB8772C4000D\r\nContent-type: text/html; charset=utf-8\r\nContent-Transfer-Encoding: quoted-printable\r\n\r\n
"A friend is a present you give yours=\r\nelf=2E"
\r\n- Robert Louis Stevenson
\r\n=09 You are receiving this message because you are subscribed as\r\n\r\n =20\r\n
=\r\n from the HeartQuotes list=2E\r\n\r\n\r\n
\r\n=09 email :info@heartmath=2E=\r\ncom\r\n=09=09
When I send a testmessage I received the following error
email@example.com on 26-10-2007 9:37
The e-mail system was unable to deliver the message, but did not report a specific reason. Check the address and try again. If it still fails, contact your system administrator.
iron1.emtelworld.com #5.0.0 smtp; 5.1.0 - Unknown address error 552-'email size is too long' (delivery attempts: 0)
Can you do a telnet from the Ironport to the receiving server ?
If you have a connection can you send mail via that telnet session?
Yes, that's what i see as strange.
I can telnet from the IronPort to the receiving server which are on the same subnet and i can even send a message to that email address and they get it.
It's accepted and delivered without any problem.
So, i don't know why it's rejecting when we sent a normal mail through the IronPort.
There are 4 other domains in smtproutes and the others are working fine, i guess it's not a configuration problem.
I even tested with AS and AV turned off in incoming mail policies ,but same issue.
You cab try to quarantine the messages to that specific emailaddress.
If there are messages quarantined send these messages to that mailaddress and anothoter address. See what happens.
i just got this from the client . this is config from the Unix receiving mail server. In fact, once it receives the mail, it breaks in in parts and send it as sms. But that's another process and we don;t touch anything on this side.
Please check with Ironport for the compatibility with Email system on unix
EMAIL.text_spam_return_string=250 Text-Spamming detected
EMAIL.queue_management=0 15 0
EMAIL.text_spam_return_string=250 Text-Spamming detected
###black list - added By Nirit ##
After thorough testing at customer site, we finally found out that the message were rejected because of the size which eventually came with the addition of the headers.
We disable IPAS and Sophos and tested and the mail were accepted.Although i disabled IPAS and Sophos earlier, it wasn't working. But now it's working with AS and AV OFF.
I can disable the addition of Sophos header, but can you please give me a message filter to remove IronPort Antispam headers?
We configured a specific listener to accept mail for @emtelworld.net. So, can you help on the filter specific for the listerner?