Skip navigation
McAfee Secure sites help keep you safe from identity theft, credit card fraud, spyware, spam, viruses and online scams
1481 Views 1 Reply Latest reply: Mar 2, 2011 10:52 AM by ijahnke RSS
huytruonghoang Newcomer 37 posts since
Aug 6, 2010
Currently Being Moderated

Mar 1, 2011 10:06 PM

delivery fail

Dear,

 

I'm testing McAfee Email Gateway,

 

first: I send 1 mail from internal mail (testmail@acbnews.com.vn) to Gmail (huy.truonghoang@gmail.com)

second: I reply the mail from gmail to internal mail

third: I continious reply from internal to gmail

fourth : When I reply the mail from gmail to internal mail,the mail cannot delivery and I receive from gmail 1 email with

Delivery to the following recipient failed permanently:

 

    testmail@abcnews.com.vn

 

Technical details of permanent failure:

Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 554 554 5.7.1 <testmail@abcnews.com.vn>: Relay access denied (state 14).

 

----- Original message -----

 

MIME-Version: 1.0

Received: by 10.100.43.11 with SMTP id q11mr409583anq.110.1299037015086; Tue,

01 Mar 2011 19:36:55 -0800 (PST)

Received: by 10.101.161.19 with HTTP; Tue, 1 Mar 2011 19:36:55 -0800 (PST)

In-Reply-To: <A47320396D2B496D9EDDFCC7A0145C08@quangbx>

References: <50919.YFNWeVYICH0=.1299035855.squirrel@mail.acbnews.com.vn>

       <AANLkTi=dom+G0J-GUDYufGkF-QwYCTbvrpFkCHtuE+M7@mail.gmail.com>

       <A47320396D2B496D9EDDFCC7A0145C08@quangbx>

Date: Wed, 2 Mar 2011 10:36:55 +0700

Message-ID: <AANLkTimo46mtP9dr4GTzjVcEwVrFP3fvyU84OAi=Eq4y@mail.gmail.com>

Subject: Re: tttttttttttt

From: huy truonghoang <huy.truonghoang@gmail.com>

To: ACB Mail test <testmail@abcnews.com.vn>

Content-Type: multipart/alternative; boundary=0016e644cb6cd59851049d779f6b


test lan 3

 

On Wed, Mar 2, 2011 at 10:36 AM, ACB Mail test <testmail@abcnews.com.vn>wrote:

 

>  ok

 

 

Please help me check the problem

Thanks and Best Regards,

Truong Hoang Huy

  • ijahnke McAfee Employee 118 posts since
    May 12, 2010
    Currently Being Moderated
    1. Mar 2, 2011 10:52 AM (in response to huytruonghoang)
    delivery fail

    Getting the relay denied error message means that you are attempting to send an email from a domain that is not in the allow relay list to a domain that is not hosted by the the ironmail. Simply put, you are attempting to send an email from external domain to another external domain using your ironmail.

     

    The first thing you want to do is search for your email address in the ironmail logs, this should be able to give you more information.

     

    From the CLI:

    show events <date yyyymmdd> | grep <email address>

     

    ex.

    [McAfee]: show events | grep myname@mydom.com

     

    20110302:10:45:11|22913235272049|9240|Command line -|rcpt to: myname@mydom.com|

    20110302:10:45:11|22913235272049|9299|The original RCPTList is -|[' myname@mydom.com']|

    20110302:10:45:11|22913235272049|9300|The stripped RCPTList is -|[' myname@mydom.com']|

    20110302:10:45:11|22913235272049|9272|Received -|<myname@mydom.com:myname:mydom.com>|

    20110302:10:45:11|22913235272049|9283|550 Cannot relay. Mailbox not available -|myname@mydom.com|

     

     

    Then search the connection id for more info:

     

    [McAfee]: show events | grep 22913235272049

     

    20110302:10:44:44|22913235272049|9235|ChannelID:ThreadID:Source IP:Port:Destination IP:Port -|0:182:10.10.130.81:49995:10.10.130.55:25|

    20110302:10:44:44|22913235272049|9233|Processing started.||

    20110302:10:44:44|22913235272049|9236|Connection accepted.||

    20110302:10:44:44|22913235272049|10772|<Channels VIP:Secure Flag> -|< id=<0>, name=<Default Virtual Host>, network_active=<1>:0>|

    20110302:10:44:44|22913235272049|9281|Relay ----> -|<0>|

    20110302:10:44:46|22913235272049|9240|Command line -|helo lcoalhost|

    20110302:10:45:01|22913235272049|9240|Command line -|mail from: test@test.com|

    20110302:10:45:01|22913235272049|9259|Trimmed a special character from MAIL FROM.||

    20110302:10:45:11|22913235272049|9240|Command line -|rcpt to: myname@mydom.com|

    20110302:10:45:11|22913235272049|9299|The original RCPTList is -|[' myname@mydom.com']|

    20110302:10:45:11|22913235272049|9300|The stripped RCPTList is -|[' myname@mydom.com']|

    20110302:10:45:11|22913235272049|9272|Received -|<myname@mydom.com:myname:mydom.com>|

    20110302:10:45:11|22913235272049|5894|No match found to masquerade domain -|<mydom.com>|

    20110302:10:45:11|22913235272049|5385|Skipping ldap due to outbound delivery.||

    20110302:10:45:11|22913235272049|9283|550 Cannot relay. Mailbox not available -|myname@mydom.com|

    20110302:10:45:14|22913235272049|9312|Socket communication failed with client. Connection dropped||

    20110302:10:45:14|22913235272049|9234|Processing completed.||

     

     

    Once you have this information, verify that the domain is hosted in Intrusion Defender -> Mail Routing -> Domain Based

     

     

    One thing to also consider is that there are two different error codes here. The error you are recieving is "

    554 554 5.7.1 <testmail@abcnews.com.vn>: Relay access denied (state 14)" while the error the ironmail sends is "550 Cannot relay. Mailbox not available myname@mydom.com".

     

    You will need to verify that the error is indeed coming from the ironmail and not another smtp device.

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • Correct Answers - 5 points
  • Helpful Answers - 3 points