The worldmail list archive ending on 10 May 2002


Topics covered in this issue include:

  1. Can't send email to some domains
       Geof Tillotson <geof at ackme dot com>
       Tue, 09 Apr 2002 15:49:55 -0400
  2. Fwd: Can't send email to some domains
       Katie Percy <katiepercy at fredfinch dot org>
       Tue, 09 Apr 2002 14:22:35 -0700
  3. Re: Can't send email to some domains
       Ferris Hall <ferris at ferrishall dot com>
       Tue, 09 Apr 2002 17:20:10 -0400
  4. RE: Can't send email to some domains
       "Ben Saren" <ben at atomicusa dot com>
       Tue, 9 Apr 2002 17:14:17 -0400
  5. RE: Can't send email to some domains
       "Ben Saren" <ben at atomicusa dot com>
       Wed, 10 Apr 2002 00:22:47 -0400
  6. Re: Can't send email to some domains
       Harry McIntosh <harry.mcintosh at cdlearning dot com>
       Tue, 09 Apr 2002 15:22:51 -0600
  7. RE: Can't send email to some domains
       William Hultman <whultman at cox dot net>
       Wed, 10 Apr 2002 14:19:27 -0700
  8. RE: Can't send email to some domains
       Steve Meyer <scmeyer at isgowi dot com>
       Wed, 10 Apr 2002 09:59:55 -0500
  9. RE: Can't send email to some domains
       "Jill Crawford" <jillc at golfpactravel dot com>
       Fri, 12 Apr 2002 10:06:45 -0400
 10. RE: Can't send email to some domains
       Harry McIntosh <harry.mcintosh at cdlearning dot com>
       Thu, 11 Apr 2002 07:00:49 -0600
 11. RE:Can't send email to some domains
       Postmaster <postmaster at smm dot org>
       Wed, 10 Apr 2002 17:57:39 -0500
 12. Re:RE: Can't send email to some domains
       rhyde at coilcraft dot com
       Fri, 12 Apr 2002 13:47:13 -0500
 13. Re: Can't send email to some domains
       "Lawyers" <lawyers at crowderscoggins dot com>
       Fri, 12 Apr 2002 14:40:39 -0500
 14. RE: random SMTPD.exe errors
       Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
       Fri, 12 Apr 2002 16:37:25 -0700
 15. RE: Can't send email to some domains
       Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
       Fri, 12 Apr 2002 16:54:22 -0700
 16. Re: Can't send email to some domains
       Seymour Joseph <sjoseph at bciu.k12.pa dot us>
       Fri, 12 Apr 2002 16:53:03 -0400
 17. RE: Can't send email to some domains
       "Ben Saren" <ben at atomicusa dot com>
       Fri, 12 Apr 2002 18:18:22 -0400
 18. RE: Can't send email to some domains
       "Tom Kemp" <KempT at presearch dot com>
       Fri, 12 Apr 2002 11:46:33 -0400
 19. RE: Can't send email to some domains
       "Jill Crawford" <jillc at golfpactravel dot com>
       Fri, 12 Apr 2002 13:21:46 -0400
 20. Re: Can't send email to some domains
       "Philip K. Dunn" <pkd at hoptechno dot com>
       Sun, 14 Apr 2002 12:22:10 -0500
 21. RE: Can't send email to some domains
       "Paul Webster" <paul at spidersweb.freeserve.co dot uk>
       Sun, 14 Apr 2002 18:31:21 +0100
 22. RE: Can't send email to some domains
       Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
       Fri, 12 Apr 2002 16:45:55 -0700
 23. False positive for open relay?
       "Fir Elf" <firelf15 at hotmail dot com>
       Sat, 13 Apr 2002 00:19:52 +0000
 24. outlook headers
       "Art Lazanoff" <art at parrotbyte dot com>
       Sun, 14 Apr 2002 10:51:13 -0700
 25. Re:RE: Can't send email to some domains
       Harry McIntosh <harry.mcintosh at cdlearning dot com>
       Sat, 13 Apr 2002 06:53:09 -0600
 26. RE: Can't send email to some domains
       "Ben Saren" <ben at atomicusa dot com>
       Sun, 14 Apr 2002 22:03:01 -0400
 27. RE: Can't send email to some domains
       "Paul Webster" <paul at spidersweb.freeserve.co dot uk>
       Tue, 16 Apr 2002 07:20:38 +0100
 28. RE: Can't send email to some domains
       "Jill Crawford" <jillc at golfpactravel dot com>
       Tue, 16 Apr 2002 10:06:23 -0400
 29. Re: False positive for open relay?
       Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
       Tue, 16 Apr 2002 17:13:15 -0700
 30. RE: Can't send email to some domains
       "Art Lazanoff" <art at parrotbyte dot com>
       Tue, 16 Apr 2002 23:10:11 -0700
 31. Worldmail behind firewall
       "Jason Davidson" <jdavidson at crousebeers dot com>
       Tue, 23 Apr 2002 16:40:01 -0700
 32. RE: Worldmail behind firewall
       "Jason Davidson" <jdavidson at crousebeers dot com>
       Tue, 23 Apr 2002 17:02:47 -0700
 33. RE: Worldmail behind firewall
       "Paul Webster" <paul at spidersweb.freeserve.co dot uk>
       Wed, 24 Apr 2002 07:31:00 +0100
 34. RE: Worldmail behind firewall
       Paul Kaler <paul at texmemsys dot com>
       Wed, 24 Apr 2002 10:37:45 -0500
 35. RE: Worldmail behind firewall
       "Jason Davidson" <jdavidson at crousebeers dot com>
       Wed, 24 Apr 2002 09:11:19 -0700
 36. Worldmail Bounce Messages
       Geof Tillotson <geof at ackme dot com>
       Wed, 24 Apr 2002 14:58:22 -0400
 37. Re: Worldmail Bounce Messages
       "Lawyers" <lawyers at crowderscoggins dot com>
       Wed, 24 Apr 2002 17:17:51 -0500
 38. Re: Worldmail Bounce Messages
       Daniel Julien <daniel.julien at thc.state.tx dot us>
       Wed, 24 Apr 2002 18:42:15 -0500
 39. Wierd happenings with Attachments
       Geof Tillotson <geof at ackme dot com>
       Wed, 24 Apr 2002 16:33:30 -0400
 40. RE: Worldmail behind firewall
       Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
       Thu, 25 Apr 2002 17:09:50 -0700
 41. I can't send mail through web
       "Georgios Chatzianastasiou *TTT Global Group S.A.*" <chatzianastasiou at ttt dot gr>
       Sat, 4 May 2002 12:14:05 +0300
 42. Re: I can't send mail through web
       Harry McIntosh <harry.mcintosh at cdlearning dot com>
       Sat, 04 May 2002 06:37:07 -0600
 43. Re: I can't send mail through web
       Geof <geof at ackme dot com>
       Sat, 04 May 2002 14:44:27 -0400
 44. Re: I can't send mail through web
       Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
       Wed, 8 May 2002 00:41:00 -0400
 45. klez & eudora
       katie percy <katiepercy at fredfinch dot org>
       Thu, 09 May 2002 18:27:01 -0700
 46. Re: klez & eudora
       LHA MIS <mis at lhaarchitects dot com>
       Thu, 09 May 2002 18:46:29 -0700
 47. Re: klez & eudora
       Garry Wiegand <squeezix at ithaca dot com>
       Thu, 09 May 2002 20:44:20 -0700
 48. Fwd: Re: klez & eudora
       katie percy <katiepercy at fredfinch dot org>
       Thu, 09 May 2002 21:23:08 -0700
 49. RE: klez & eudora
       "Paul Webster" <paul at spidersweb.freeserve.co dot uk>
       Fri, 10 May 2002 07:19:47 +0100
 50. Re: klez & eudora
       "Elliott Bujan" <ebujan at rentokil-tps dot com>
       Fri, 10 May 2002 08:09:12 -0500 (CDT)

Date: Tue, 09 Apr 2002 15:49:55 -0400
From: Geof Tillotson <geof at ackme dot com>
Subject: Can't send email to some domains

--=====================_28265723==_.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed

To All -

So, here's a head scratcher.  Our email server is unable to deliver emails 
to certain domains.  I know that the recipient email addresses are valid 
because I can send to them from other email systems.

The emails sit in the queue and fail.

When I test the mailroute, the mailroute tool returns a valid mailhost 
address, and a valid MX record lookup.

Here is a sample Non-delivery error message.

   -----  The following recipients were processed by MTA mail.cldnet.com ...

recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery time expired)

Does anyone have any idea what might be happening?

Thanks in advance.

Geof

-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
Geof Tillotson                  geof at ackme dot com
617.484.0570                    617.484.7201 fax
4 Ripley Road                   www.4ripleyroad.com
Belmont, MA 02478               www.ackme.com
--=====================_28265723==_.ALT
Content-Type: text/html; charset="us-ascii"

<html>
To All - <br>
<br>
So, here's a head scratcher.&nbsp; Our email server is unable to deliver
emails to certain domains.&nbsp; I know that the recipient email
addresses are valid because I can send to them from other email
systems.<br>
<br>
The emails sit in the queue and fail.<br>
<br>
When I test the mailroute, the mailroute tool returns a valid mailhost
address, and a valid MX record lookup.<br>
<br>
Here is a sample Non-delivery error message.<br>
<br>
<font face="Courier New, Courier">&nbsp; -----&nbsp; The following
recipients were processed by MTA mail.cldnet.com ...<br>
<br>
recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery time
expired)<br>
<br>
</font>Does anyone have any idea what might be happening?<br>
<br>
Thanks in advance.<br>
<br>
Geof<br>
<x-sigsep><p></x-sigsep>
-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-<br>
Geof
Tillotson<x-tab>&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
617.484.0570<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n
fax<br>
4 Ripley
Road<x-tab>&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&
d.com/" eudora="autourl">.4ripleyroad.com</a><br>
Belmont, MA
02478<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><a h

--=====================_28265723==_.ALT--


Date: Tue, 09 Apr 2002 14:22:35 -0700
From: Katie Percy <katiepercy at fredfinch dot org>
Subject: Fwd: Can't send email to some domains

--=====================_447407220==_.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed


>Date: Tue, 09 Apr 2002 14:21:53 -0700
>To: NPO-Techies at topica dot com
>From: Katie Percy <katiepercy at fredfinch dot org>
>Subject: Fwd: Can't send email to some domains
>
>those domains may be blocked by your ISP if they've been reported as 
>having open relays.  you can check them at
>
>http://www.ordb.org
>
>
>Katie
>
>>X-Sender: geoft at mail.earthlink dot net
>>X-Mailer: QUALCOMM Windows Eudora Version 5.0.2
>>Date: Tue, 09 Apr 2002 15:49:55 -0400
>>List-Subscribe: <mailto:worldmail-request at lists.pensive dot org?body=subscribe>
>>List-Unsubscribe: 
>><mailto:worldmail-request at lists.pensive dot org?body=unsubscribe>
>>List-Archive: <http://www.pensive.org/mailing_lists/archives/worldmail/>
>>List-Post: <mailto:worldmail at lists.pensive dot org>
>>List-Owner: Pensive Mailing List Admin <listmaster at lists.pensive dot org>
>>List-Help: http://www.pensive.org/Mailing_Lists/
>>List-Id: <WorldMail.lists.pensive.org>
>>List-Software: AutoShare 4.2.3 by Mikael Hansen
>>To: Subscribers of WorldMail <worldmail at lists.pensive dot org>
>>From: Geof Tillotson <geof at ackme dot com>
>>Subject: Can't send email to some domains
>>
>>To All -
>>
>>So, here's a head scratcher.  Our email server is unable to deliver 
>>emails to certain domains.  I know that the recipient email addresses are 
>>valid because I can send to them from other email systems.
>>
>>The emails sit in the queue and fail.
>>
>>When I test the mailroute, the mailroute tool returns a valid mailhost 
>>address, and a valid MX record lookup.
>>
>>Here is a sample Non-delivery error message.
>>
>>   -----  The following recipients were processed by MTA mail.cldnet.com ...
>>
>>recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery time 
>>expired)
>>
>>Does anyone have any idea what might be happening?
>>
>>Thanks in advance.
>>
>>Geof
>>
>>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
>>Geof Tillotson                  geof at ackme dot com
>>617.484.0570                    617.484.7201 fax
>>4 Ripley Road                   www             www.ackme.com


--=====================_447407220==_.ALT
Content-Type: text/html; charset="us-ascii"

<html>
<br>
<blockquote type=cite cite>Date: Tue, 09 Apr 2002 14:21:53 -0700<br>
To: NPO-Techies at topica dot com<br>
From: Katie Percy &lt;katiepercy at fredfinch dot org&gt;<br>
Subject: Fwd: Can't send email to some domains<br>
<br>
those domains may be blocked by your ISP if they've been reported as
having open relays.&nbsp; you can check them at <br>
<br>
<a href="http://www.ordb.org/" eudora="autourl">http://www.ordb.org</a><br>
<br>
<br>
Katie<br>
<br>
<blockquote type=cite cite>X-Sender: geoft at mail.earthlink dot net<br>
X-Mailer: QUALCOMM Windows Eudora Version 5.0.2<br>
Date: Tue, 09 Apr 2002 15:49:55 -0400<br>
List-Subscribe:
&lt;<a href="mailto:worldmail-request at lists.pensive.org%3Fbody=subscribe" eudora="autourl">mailto:worl
List-Unsubscribe:
&lt;<a href="mailto:worldmail-request at lists.pensive.org%3Fbody=unsubscribe" eudora="autourl">mailto:href="http://www.pensive.org/mailing_lists/archives/worldmail/" eudora="autourl">http://www.p
List-Post:
&lt;<a href="mailto:worldmail at lists.pensive dot org" eudora="autourl">mailto:worldmail at lists dot pensive dot org</a>&gt;<br>
List-Owner: Pensive Mailing List Admin
&lt;listmaster at lists.pensive dot org&gt;<br>
List-Help:
<a href="http://www.pensive.org/Mailing_Lists/" eudora="autourl">http://www.pensive.org/Mailing_Lists/</a><br>
List-Id: &lt;WorldMail.lists.pensive.org&gt;<br>
List-Software: AutoShare 4.2.3 by Mikael Hansen<br>
To: Subscribers of WorldMail &lt;worldmail at lists.pensive dot org&gt;<br>
From: Geof Tillotson &lt;geof at ackme dot com&gt;<br>
Subject: Can't send email to some domains<br>
<br>
To All - <br>
<br>
So, here's a head scratcher.&nbsp; Our email server is unable to deliver
emails to certain domains.&nbsp; I know that the recipient email
addresses are valid because I can send to them from other email
systems.<br>
<br>
The emails sit in the queue and fail.<br>
<br>
When I test the mailroute, the mailroute tool returns a valid mailhost
address, and a valid MX record lookup.<br>
<br>
Here is a sample Non-delivery error message.<br>
<br>
<font face="Courier New, Courier">&nbsp; -----&nbsp; The following
recipients were processed by MTA mail.cldnet.com ...<br>
<br>
recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery time
expired)<br>
<br>
</font>Does anyone have any idea what might be happening?<br>
<br>
Thanks in advance.<br>
<br>
Geof<br>
<br>
-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-<br>
Geof
Tillotson<x-tab>&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
617.484.0570<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n
fax<br>
4 Ripley
Road<x-tab>&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&
<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><a href="http://www.ackme.com/" eudora="autourl">www.ackme.com</a>
</blockquote></blockquote><br>
</html>

--=====================_447407220==_.ALT--


Date: Tue, 09 Apr 2002 17:20:10 -0400
From: Ferris Hall <ferris at ferrishall dot com>
Subject: Re: Can't send email to some domains
I immediately think of your domain being blocked at their server, only because
I block a few domains and IP blocks via firewall (black ice) that "lightly harass" the system
and via RBL+, ORDB etc (openrelay/spam databases), before they ever get to the mail server.
Seems  a long shot, but might fit the symptoms, given you can connect by other means.
Not a problem with your DNS? Flushed it?
Tried manual connection (telnet) to their mail server? Will it talk to you?
Ferris

At 03:49 PM 4/9/2002, you wrote:
To All -

So, here's a head scratcher.  Our email server is unable to deliver emails to certain domains.  I know that the recipient email addresses are valid because I can send to them from other email systems.

The emails sit in the queue and fail.

When I test the mailroute, the mailroute tool returns a valid mailhost address, and a valid MX record lookup.

Here is a sample Non-delivery error message.

  -----  The following recipients were processed by MTA mail.cldnet.com ...

recipient at techtarget.com; Action: Failed; Status: 4.4 dot 7 (delivery time expired)

Does anyone have any idea what might be happening?

Thanks in advance.

Geof

-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
Geof Tillotson                  geof at ackme dot com
617.484.0570                    617.484.7201 fax
4 Ripley Road                   www             www.ackme.com

From: "Ben Saren" <ben at atomicusa dot com>
Subject: RE: Can't send email to some domains
Date: Tue, 9 Apr 2002 17:14:17 -0400

This is a multi-part message in MIME format.

------=_NextPart_000_0088_01C1DFE9.FB7A39F0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

I have the same problem. I setup custom domains for some of them, but
yet the problem continues. Its only a handful of domains.
 

-----Original Message-----
From: Geof Tillotson [mailto:geof at ackme dot com] 
Sent: Tuesday, April 09, 2002 3:50 PM
To: Subscribers of WorldMail
Subject: Can't send email to some domains


To All - 

So, here's a head scratcher.  Our email server is unable to deliver
emails to certain domains.  I know that the recipient email addresses
are valid because I can send to them from other email systems.

The emails sit in the queue and fail.

When I test the mailroute, the mailroute tool returns a valid mailhost
address, and a valid MX record lookup.

Here is a sample Non-delivery error message.

  -----  The following recipients were processed by MTA mail.cldnet.com
...

recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery time
expired)

Does anyone have any idea what might be happening?

Thanks in advance.

Geof


-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
Geof Tillotson                  geof at ackme dot com
617.484.0570                    617.484.7201 fax
4 Ripley Road                   www <http://www.4ripleyroad.com/>
.4ripleyroad.com <http://www.4ripleyroad.com/> 
Belmont, MA 02478               www <http://www.ackme.com/> .ackme.com
<http://www.ackme.com/>  


------=_NextPart_000_0088_01C1DFE9.FB7A39F0
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; 
charset=us-ascii">
<TITLE>Message</TITLE>

<META content="MSHTML 6.00.2715.400" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class‘8451321-09042002><FONT face=Tahoma 
color=#0000ff size=2>I 
have the same problem. I setup custom domains for some of them, but yet 
the 
problem continues. Its only a handful of domains.</FONT></SPAN></DIV>
<DIV><SPAN class‘8451321-09042002></SPAN>&nbsp;</DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
  <DIV></DIV>
  <DIV class=OutlookMessageHeader lang=en-us dir=ltr 
align=left><FONT 
  face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> Geof 
Tillotson 
  [mailto:geof at ackme dot com] <BR><B>Sent:</B> Tuesday, April 09, 2002 3:50 
  PM<BR><B>To:</B> Subscribers of WorldMail<BR><B>Subject:</B> Can't 
send email 
  to some domains<BR><BR></FONT></DIV>To All - <BR><BR>So, here's a head 

  scratcher.&nbsp; Our email server is unable to deliver emails to 
certain 
  domains.&nbsp; I know that the recipient email addresses are valid 
because I 
  can send to them from other email systems.<BR><BR>The emails sit in 
the queue 
  and fail.<BR><BR>When I test the mailroute, the mailroute tool returns 
a valid 
  mailhost address, and a valid MX record lookup.<BR><BR>Here is a 
sample 
  Non-delivery error message.<BR><BR><FONT face="Courier New, 
Courier">&nbsp; 
  -----&nbsp; The following recipients were processed by MTA 
mail.cldnet.com 
  ...<BR><BR>recipient at techtarget dot com; Action: Failed; Status: 4.4.7 
(delivery 
  time expired)<BR><BR></FONT>Does anyone have any idea what might be 
  happening?<BR><BR>Thanks in advance.<BR><BR>Geof<BR><X-SIGSEP>
  
<P></X-SIGSEP>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-<B
R>Geof 
  
Tillotson<X-TAB>&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs
p;&nbsp;</X-TAB>geof at ackme dot com<BR>617.484.0570<X-TAB>&nbsp;&nbsp;&nbsp;&n
bsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TA
B><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TAB>617.484.
7201 
  fax<BR>4 Ripley 
  
Road<X-TAB>&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
;&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb
sp;&nbsp;</X-TAB><A 
  href="http://www.4ripleyroad.com/" eudora="autourl">www</A><A 
  href="http://www.4ripleyroad.com/" 
  eudora="autourl">.4ripleyroad.com</A><BR>Belmont, MA 
  
02478<X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbs
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TAB><A 
  href="http://www.ackme.com/" eudora="autourl">www</A><A 
  href="http://www.ackme.com/" eudora="autourl">.ackme.com</A> 
</P></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0088_01C1DFE9.FB7A39F0--


From: "Ben Saren" <ben at atomicusa dot com>
Subject: RE: Can't send email to some domains
Date: Wed, 10 Apr 2002 00:22:47 -0400

This is a multi-part message in MIME format.

------=_NextPart_000_00BA_01C1E025.D7D951C0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit

good suggestions, but im not on ORBS or any of those lists... for sure.
I tripple checked! Any other thoughts?
perhaps they just have mail problems? its only a very few domains and
sometimes I just think that perhaps their mail servers are down or
something. Perhaps they use worldmail!?
 

-----Original Message-----
From: Ferris Hall [mailto:ferris at ferrishall dot com] 
Sent: Tuesday, April 09, 2002 5:20 PM
To: Subscribers of WorldMail
Subject: Re: Can't send email to some domains


I immediately think of your domain being blocked at their server, only
because
I block a few domains and IP blocks via firewall (black ice) that
"lightly harass" the system
and via RBL+, ORDB etc (openrelay/spam databases), before they ever get
to the mail server. 
Seems  a long shot, but might fit the symptoms, given you can connect by
other means.
Not a problem with your DNS? Flushed it?
Tried manual connection (telnet) to their mail server? Will it talk to
you?
Ferris

At 03:49 PM 4/9/2002, you wrote:


To All - 

So, here's a head scratcher.  Our email server is unable to deliver
emails to certain domains.  I know that the recipient email addresses
are valid because I can send to them from other email systems.

The emails sit in the queue and fail.

When I test the mailroute, the mailroute tool returns a valid mailhost
address, and a valid MX record lookup.

Here is a sample Non-delivery error message.

  -----  The following recipients were processed by MTA mail.cldnet.com
...

recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery time
expired)

Does anyone have any idea what might be happening?

Thanks in advance.

Geof

-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
Geof Tillotson                  geof at ackme dot com
617.484.0570                    617.484.7201 fax
4 Ripley Road                   www             www.ackme.com
<http://www.ackme.com/>  


------=_NextPart_000_00BA_01C1E025.D7D951C0
Content-Type: text/html;
	charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; 
charset=us-ascii">
<TITLE>Message</TITLE>

<META content="MSHTML 6.00.2715.400" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=007482104-10042002><FONT face=Tahoma 
color=#0000ff size=2>good 
suggestions, but im not on ORBS or any of those lists... for sure. I 
tripple 
checked! Any other thoughts?</FONT></SPAN></DIV>
<DIV><SPAN class=007482104-10042002><FONT face=Tahoma 
color=#0000ff 
size=2>perhaps they just have mail problems? its only a very few 
domains and 
sometimes I just think that perhaps their mail servers are down or 
something. 
Perhaps they use worldmail!?</FONT></SPAN></DIV>
<DIV><SPAN class=007482104-10042002></SPAN>&nbsp;</DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
  <DIV></DIV>
  <DIV class=OutlookMessageHeader lang=en-us dir=ltr 
align=left><FONT 
  face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> 
Ferris Hall 
  [mailto:ferris at ferrishall dot com] <BR><B>Sent:</B> Tuesday, April 09, 
2002 5:20 
  PM<BR><B>To:</B> Subscribers of WorldMail<BR><B>Subject:</B> Re: Can't 
send 
  email to some domains<BR><BR></FONT></DIV>I immediately think of your 
domain 
  being blocked at their server, only because<BR>I block a few domains 
and IP 
  blocks via firewall (black ice) that "lightly harass" the 
system<BR>and via 
  RBL+, ORDB etc (openrelay/spam databases), before they ever get to the 
mail 
  server. <BR>Seems&nbsp; a long shot, but might fit the symptoms, given 
you can 
  connect by other means.<BR>Not a problem with your DNS? Flushed 
it?<BR>Tried 
  manual connection (telnet) to their mail server? Will it talk to 
  you?<BR>Ferris<BR><BR>At 03:49 PM 4/9/2002, you wrote:<BR>
  <BLOCKQUOTE class=cite cite="" type="cite">To All - <BR><BR>So, 
here's a 
    head scratcher.&nbsp; Our email server is unable to deliver emails 
to 
    certain domains.&nbsp; I know that the recipient email addresses are 
valid 
    because I can send to them from other email systems.<BR><BR>The 
emails sit 
    in the queue and fail.<BR><BR>When I test the mailroute, the 
mailroute tool 
    returns a valid mailhost address, and a valid MX record 
lookup.<BR><BR>Here 
    is a sample Non-delivery error message.<BR><BR><FONT 
    face="Courier New, Courier">&nbsp; -----&nbsp; The following 
recipients were 
    processed by MTA mail.cldnet.com 
...<BR><BR>recipient at techtarget dot com; 
    Action: Failed; Status: 4.4.7 (delivery time 
expired)<BR><BR></FONT>Does 
    anyone have any idea what might be happening?<BR><BR>Thanks in 
    
advance.<BR><BR>Geof<BR><BR>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
0-0-0-0-0-0-<BR>Geof 
    
Tillotson<X-TAB>&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs
p;&nbsp;</X-TAB>geof at ackme dot com<BR>617.484.0570<X-TAB>&nbsp;&nbsp;&nbsp;&n
bsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TA
B><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TAB>617.484.
7201 
    fax<BR>4 Ripley 
    
Road<X-TAB>&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
;&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb
sp;&nbsp;</X-TAB>www&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; 
    <X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TAB><A 
    href="http://www.ackme.com/" eudora="autourl">www.ackme.com</A> 
</BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_00BA_01C1E025.D7D951C0--


Date: Tue, 09 Apr 2002 15:22:51 -0600
From: Harry McIntosh <harry.mcintosh at cdlearning dot com>
Subject: Re: Can't send email to some domains

Hi Geof:

It looks to me as if the DNS isn't set up correctly for techtarget.com, the 
domain you're trying to reach.  It has the following MX record:

     techtarget.com  MX  10  mailhost.techtarget.com

But, I don't see an A-type record for mailhost.techtarget.com, which you 
need to have for that MX record to do any good.

Harry McIntosh

______________________________
This email sent using Mailtastic email server software.
For information visit www.Mailtastic.com.

At 01:49 PM 4/9/02, you wrote:
>To All -
>
>So, here's a head scratcher.  Our email server is unable to deliver emails 
>to certain domains.  I know that the recipient email addresses are valid 
>because I can send to them from other email systems.
>
>The emails sit in the queue and fail.
>
>When I test the mailroute, the mailroute tool returns a valid mailhost 
>address, and a valid MX record lookup.



Date: Wed, 10 Apr 2002 14:19:27 -0700
From: William Hultman <whultman at cox dot net>
Subject: RE: Can't send email to some domains

--=====================_3212970==.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed

The SMTP logs on those servers may offer an explanation. Look under 
Internet Mail>Logs>SMTP.LOG in the Management Center.

Bill

At 05:14 PM 4/9/2002 -0400, Ben Saren wrote:
>I have the same problem. I setup custom domains for some of them, but yet 
>the problem continues. Its only a handful of domains.
>
>-----Original Message-----
>From: Geof Tillotson [mailto:geof at ackme dot com]
>Sent: Tuesday, April 09, 2002 3:50 PM
>To: Subscribers of WorldMail
>Subject: Can't send email to some domains
>
>To All -
>
>So, here's a head scratcher.  Our email server is unable to deliver emails 
>to certain domains.  I know that the recipient email addresses are valid 
>because I can send to them from other email systems.
>
>The emails sit in the queue and fail.
>
>When I test the mailroute, the mailroute tool returns a valid mailhost 
>address, and a valid MX record lookup.
>
>Here is a sample Non-delivery error message.
>
>   -----  The following recipients were processed by MTA mail.cldnet.com ...
>
>recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery time 
>expired)
>
>Does anyone have any idea what might be happening?
>
>Thanks in advance.
>
>Geof
>
>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
>Geof Tillotson                  geof at ackme dot com
>617.484.0570                    617.484.7201 fax
>4 Ripley Road                   www.4ripleyroad.com
>Belmont, MA 02478               www.ackme.com

--=====================_3212970==.ALT
Content-Type: text/html; charset="us-ascii"

<html>
The SMTP logs on those servers may offer an explanation. Look under
Internet Mail&gt;Logs&gt;SMTP.LOG in the Management Center.<br><br>
Bill<br><br>
At 05:14 PM 4/9/2002 -0400, Ben Saren wrote:<br>
<blockquote type=cite class=cite cite><font face="tahoma" size=2 color="#0000FF">I
have the same problem. I setup custom domains for some of them, but yet
the problem continues. Its only a handful of domains.</font><br>
&nbsp;
<dl><font face="tahoma" size=2>
<dd>-----Original Message-----
<dd>From:</b> Geof Tillotson
[<a href="mailto:geof@ackme dot com" eudora="autourl">mailto:geof at ackme dot com</a>] 
<dd>Sent:</b> Tuesday, April 09, 2002 3:50 PM
<dd>To:</b> Subscribers of WorldMail
<dd>Subject:</b> Can't send email to some domains<br><br>
</font>
<dd>To All - <br><br>

<dd>So, here's a head scratcher.&nbsp; Our email server is unable to
deliver emails to certain domains.&nbsp; I know that the recipient email
addresses are valid because I can send to them from other email
systems.<br><br>

<dd>The emails sit in the queue and fail.<br><br>

<dd>When I test the mailroute, the mailroute tool returns a valid
mailhost address, and a valid MX record lookup.<br><br>

<dd>Here is a sample Non-delivery error message.<br><br>
<font face="Courier New, Courier">
<dd>&nbsp; -----&nbsp; The following recipients were processed by MTA
mail.cldnet.com ...<br><br>

<dd>recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery
time expired)<br><br>
</font>
<dd>Does anyone have any idea what might be happening?<br><br>

<dd>Thanks in advance.<br><br>

<dd>Geof<br><br>

<dd>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
<dd>Geof
Tillotson<x-tab>&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
<dd>617.484.0570<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&n
fax
<dd>4 Ripley
Road<x-tab>&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&
<dd>Belmont, MA
02478<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><a h
</dl></blockquote></html>

--=====================_3212970==.ALT--


Date: Wed, 10 Apr 2002 09:59:55 -0500
From: Steve Meyer <scmeyer at isgowi dot com>
Subject: RE: Can't send email to some domains

--=====================_163412359==_.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed

For what it's worth - we had a similar problem with sending mail to one 
domain.  According to their postmaster, we are the only folks having a problem.

I check the Worldmail logs to make sure the email was actually going to 
their equipment.  Then I checked THEIR mx records in their DNS tables (with 
the Name Server Utilities in Worldmail) to get the domain names and IP 
numbers of their mail server(s).  Next I used telnet to telnet into their 
primary mail server on port 25.  When their server granted the connection, 
the text welcome message was garbled.  When I entered the first mail 
command (either HELO or EHLO), the server responded perfectly.  When I 
entered the second command, the server would never respond.  This is where 
my email was timing out.  I then telnetted into their secendary mail server 
(which was a hosted machine on uunet).  This second machine accepted all 
the mail commands properly.  Their third machine was also on uunet and also 
accepted all smtp commands correctly.

I then went to the World mail log files where every smtp action is 
logged.  I sent an email to the problem email address, then watched the log 
file.  Indeed, World mail was hitting DNS, pulling up the primary mail 
server IP, hit their email server, sent the EHLO command, got a response, 
send the second command, and never got a response.

I then set up a custom domain for the problem domain, however for the IP 
number I used the IP number of their SECONDARY mail server.  From this 
point all the email to this domain works correctly.

I then contacted the postmaster of the problem domain and told them of the 
issues.  They explained that they had one email server on the outside of 
their firewall that received the email and immediately relayed it to an 
email server on the inside of the firewall.

My theory....
    * First - if there is a problem with World mail, it would seem that it 
does not try to send email to secondary or tritary servers if it makes a 
connection to the primary server and that connection  times out - the 
multiple mx records do no good in this scenario. (I sure hope someone can 
disprove my theory and show me how to fix my server).
    * Second -  I wouldn't think that having their two servers on each side 
of the their firewall accounts for their "exposed" email server not 
responding to email commands correctly, but, it's not my domain, equipment, 
etc...
    * Third - I wouldn't think that we are the only ones having problems 
send mail to this domain.
Perhaps this alternative may be of help.
Steve

  The At 04:14 PM 4/9/2002, Ben Saren wrote:
>I have the same problem. I setup custom domains for some of them, but yet 
>the problem continues. Its only a handful of domains.
>
>-----Original Message-----
>From: Geof Tillotson [mailto:geof at ackme dot com]
>Sent: Tuesday, April 09, 2002 3:50 PM
>To: Subscribers of WorldMail
>Subject: Can't send email to some domains
>
>To All -
>
>So, here's a head scratcher.  Our email server is unable to deliver emails 
>to certain domains.  I know that the recipient email addresses are valid 
>because I can send to them from other email systems.
>
>The emails sit in the queue and fail.
>
>When I test the mailroute, the mailroute tool returns a valid mailhost 
>address, and a valid MX record lookup.
>
>Here is a sample Non-delivery error message.
>
>   -----  The following recipients were processed by MTA mail.cldnet.com ...
>
>recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery time 
>expired)
>
>Does anyone have any idea what might be happening?
>
>Thanks in advance.
>
>Geof
>
>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
>Geof Tillotson                  geof at ackme dot com
>617.484.0570                    617.484.7201 fax
>4 Ripley Road                   www.4ripleyroad.com
>Belmont, MA 02478               www.ackme.com

--=====================_163412359==_.ALT
Content-Type: text/html; charset="us-ascii"

<html>
For what it's worth - we had a similar problem with sending mail to one
domain.&nbsp; According to their postmaster, we are the only folks having
a problem.<br><br>
I check the Worldmail logs to make sure the email was actually going to
their equipment.&nbsp; Then I checked THEIR mx records in their DNS
tables (with the Name Server Utilities in Worldmail) to get the domain
names and IP numbers of their mail server(s).&nbsp; Next I used telnet to
telnet into their primary mail server on port 25.&nbsp; When their server
granted the connection, the text welcome message was garbled.&nbsp; When
I entered the first mail command (either HELO or EHLO), the server
responded perfectly.&nbsp; When I entered the second command, the server
would never respond.&nbsp; This is where my email was timing out.&nbsp; I
then telnetted into their secendary mail server (which was a hosted
machine on uunet).&nbsp; This second machine accepted all the mail
commands properly.&nbsp; Their third machine was also on uunet and also
accepted all smtp commands correctly.<br><br>
I then went to the World mail log files where every smtp action is
logged.&nbsp; I sent an email to the problem email address, then watched
the log file.&nbsp; Indeed, World mail was hitting DNS, pulling up the
primary mail server IP, hit their email server, sent the EHLO command,
got a response, send the second command, and never got a
response.<br><br>
I then set up a custom domain for the problem domain, however for the IP
number I used the IP number of their SECONDARY mail server.&nbsp; From
this point all the email to this domain works correctly.<br><br>
I then contacted the postmaster of the problem domain and told them of
the issues.&nbsp; They explained that they had one email server on the
outside of their firewall that received the email and immediately relayed
it to an email server on the inside of the firewall.<br><br>
My theory....
<ul>
<li>First - if there is a problem with World mail, it would seem that it
does not try to send email to secondary or tritary servers if it makes a
connection to the primary server and that connection&nbsp; times out -
the multiple mx records do no good in this scenario. (I sure hope someone
can disprove my theory and show me how to fix my server).
<li>Second -&nbsp; I wouldn't think that having their two servers on each
side of the their firewall accounts for their &quot;exposed&quot; email
server not responding to email commands correctly, but, it's not my
domain, equipment, etc...
<li>Third - I wouldn't think that we are the only ones having problems
send mail to this domain.
</ul>Perhaps this alternative may be of help.<br>
Steve<br><br>
&nbsp;The At 04:14 PM 4/9/2002, Ben Saren wrote:<br>
<blockquote type=cite class=cite cite><font face="tahoma" size=2 color="#0000FF">I
have the same problem. I setup custom domains for some of them, but yet
the problem continues. Its only a handful of domains.</font><br>
&nbsp;
<dl><font face="tahoma" size=2>
<dd>-----Original Message-----
<dd>From:</b> Geof Tillotson
[<a href="mailto:geof@ackme dot com" eudora="autourl">mailto:geof at ackme dot com</a>] 
<dd>Sent:</b> Tuesday, April 09, 2002 3:50 PM
<dd>To:</b> Subscribers of WorldMail
<dd>Subject:</b> Can't send email to some domains<br><br>
</font>
<dd>To All - <br><br>

<dd>So, here's a head scratcher.&nbsp; Our email server is unable to
deliver emails to certain domains.&nbsp; I know that the recipient email
addresses are valid because I can send to them from other email
systems.<br><br>

<dd>The emails sit in the queue and fail.<br><br>

<dd>When I test the mailroute, the mailroute tool returns a valid
mailhost address, and a valid MX record lookup.<br><br>

<dd>Here is a sample Non-delivery error message.<br><br>
<font face="Courier New, Courier">
<dd>&nbsp; -----&nbsp; The following recipients were processed by MTA
mail.cldnet.com ...<br><br>

<dd>recipient at techtarget dot com; Action: Failed; Status: 4.4.7 (delivery
time expired)<br><br>
</font>
<dd>Does anyone have any idea what might be happening?<br><br>

<dd>Thanks in advance.<br><br>

<dd>Geof<br><br>

<dd>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
<dd>Geof
Tillotson<x-tab>&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
<dd>617.484.0570<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&n
fax
<dd>4 Ripley
Road<x-tab>&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&
<dd>Belmont, MA
02478<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><a h
</dl></blockquote></html>

--=====================_163412359==_.ALT--


From: "Jill Crawford" <jillc at golfpactravel dot com>
Subject: RE: Can't send email to some domains
Date: Fri, 12 Apr 2002 10:06:45 -0400

techtarget.com has an MX record that points to mailhost.techtarget.com
mailhost.techtarget.com has a CNAME record that points to
louie.techtarget.com
louie.techtarget.com has an A record that points to 65.214.43.155

Because of the CNAME record WorldMail needs to have a Custom Domain created
for techtarget.com that points directly to 65.214.43.155

-----Original Message-----
From: Harry McIntosh [mailto:harry.mcintosh at cdlearning dot com]
Sent: Tuesday, April 09, 2002 5:23 PM
To: Subscribers of WorldMail
Subject: Re: Can't send email to some domains


Hi Geof:

It looks to me as if the DNS isn't set up correctly for techtarget.com, the
domain you're trying to reach.  It has the following MX record:

     techtarget.com  MX  10  mailhost.techtarget.com

But, I don't see an A-type record for mailhost.techtarget.com, which you
need to have for that MX record to do any good.

Harry McIntosh

______________________________
This email sent using Mailtastic email server software.
For information visit www.Mailtastic.com.

At 01:49 PM 4/9/02, you wrote:
>To All -
>
>So, here's a head scratcher.  Our email server is unable to deliver emails
>to certain domains.  I know that the recipient email addresses are valid
>because I can send to them from other email systems.
>
>The emails sit in the queue and fail.
>
>When I test the mailroute, the mailroute tool returns a valid mailhost
>address, and a valid MX record lookup.



Date: Thu, 11 Apr 2002 07:00:49 -0600
From: Harry McIntosh <harry.mcintosh at cdlearning dot com>
Subject: RE: Can't send email to some domains
Hi Ben:

Could you give us a few examples of domains you have trouble sending mail to?

Harry McIntosh

______________________________
This email sent using Mailtastic email server software.
For information visit www.Mailtastic.com.

At 10:22 PM 4/9/02, you wrote:
good suggestions, but im not on ORBS or any of those lists... for sure. I tripple checked! Any other thoughts?
perhaps they just have mail problems? its only a very few domains and sometimes I just think that perhaps their mail servers are down or something. Perhaps they use worldmail!?
 
-----Original Message-----
From: Ferris Hall [mailto:ferris@ferrishall dot com]
Sent: Tuesday, April 09, 2002 5:20 PM
To: Subscribers of WorldMail
Subject: Re: Can't send email to some domains

I immediately think of your domain being blocked at their server, only because
I block a few domains and IP blocks via firewall (black ice) that "lightly harass" the system
and via RBL+, ORDB etc (openrelay/spam databases), before they ever get to the mail server.
Seems  a long shot, but might fit the symptoms, given you can connect by other means.
Not a problem with your DNS? Flushed it?
Tried manual connection (telnet) to their mail server? Will it talk to you?
Ferris

At 03:49 PM 4/9/2002, you wrote:
To All -

So, here's a head scratcher.  Our email server is unable to deliver emails to certain domains.  I know that the recipient email addresses are valid because I can send to them from other email systems.

The emails sit in the queue and fail.

When I test the mailroute, the mailroute tool returns a valid mailhost address, and a valid MX record lookup.

Here is a sample Non-delivery error message.

  -----  The following recipients were processed by MTA mail.cldnet.com ...

recipient at techtarget.com; Action: Failed; Status: 4.4 dot 7 (delivery time expired)

Does anyone have any idea what might be happening?

Thanks in advance.

Geof

-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
Geof Tillotson                  geof at ackme dot com
617.484.0570                    617.484.7201 fax
4 Ripley Road                   www             www.ackme.com

Date: Wed, 10 Apr 2002 17:57:39 -0500
From: Postmaster <postmaster at smm dot org>
Subject: RE:Can't send email to some domains

It is true that you need to create a custom domain for this company. 
the best way to get their current server name/ip address is to have someone
from that company send YOU an email.
once that's done: 
1. change your view to show ALL headers. (Eudora: 'blahblahbla' button)
2. find the true mail server name or ip address in the header
3. look up the MX record for that domain to find the common and MX names
associated with that domain.
4. insert those names and addresses into the 'route to host' properties of
the custom domain.  (the lower the # preference, the higher priority.
(increments should be in multiples of 10?)) all @ port 25.

you may have to play around with priorities, different addresses & names,
but the key is getting the correct info in an email header, then checking
the MX record.
i think this must happen while that company makes server /isp changes and
we have to force it to see them again. 
-(that's pure speculation, i could be wrong!)

hope this helps

cbremer
Science Museum of MN
(651)221-2576

>X-Sender: geoft at mail.earthlink dot net
>


From: rhyde at coilcraft dot com
Date: Fri, 12 Apr 2002 13:47:13 -0500
Subject: Re:RE: Can't send email to some domains

Message is sent with MIME. Attachments are base64 encoded
--TFS-with-MIME-and-DIME
Content-Type: text/plain; charset=ISO-8859-1
Content-transfer-encoding: quoted-printable

Recently I had a similar issue sending mail to a mailbox at techrepsite=2Ec
om
Until today I was unable to send messages through worldmail to that domain=2E
In order to send messages to that domain I had to create a custom domain and
specify the host to route the mail to=2E
I did some lookups and I found that the mx record pointed to an alias instead of
a host=2E
Could there be a bug in worldmail that won't allow it to send mail to domains
whos mx records point to aliases?

The below information shows how our scenarios are similar=2E

techtarget=2Ecom  mx  mailhost=2Etechtarget=2Ecom
mailhost=2Etechtarget=2Ecom  cname  louie=2Etechtarget=2Ecom
louie=2Etechtarget=2Ecom  a  65=2E214=2E43=2E155

techrepsite=2Ecom  mx  mxmail=2Eregister=2Ecom
mxmail=2Eregister=2Ecom  cname  inbound=2Eregister-admin=2Ecom=2Ecriticalpath=2En
et
inbound=2Eregister-admin=2Ecom=2Ecriticalpath=2Enet  a  209=2E228=2E32=2E104

Please let me know if this information helps at all=2E

____________________Reply Separator____________________
Subject:    RE: Can't send email to some domains
Author: MIME:scmeyer@isgowi=2Ecom
Date:       4/12/2002 11:50 AM

For what it's worth - we had a similar problem with sending mail to one 
domain=2E  According to their postmaster, we are the only folks having a 
problem=2E

I check the Worldmail logs to make sure the email was actually going to their 
equipment=2E  Then I checked THEIR mx records in their DNS tables (with the 
Name Server Utilities in Worldmail) to get the domain names and IP numbers of 
their mail server(s)=2E  Next I used telnet to telnet into their primary mail 
server on port 25=2E  When their server granted the connection, the text 
welcome message was garbled=2E  When I entered the first mail command (either 
HELO or EHLO), the server responded perfectly=2E  When I entered the second 
command, the server would never respond=2E  This is where my email was timing 
out=2E  I then telnetted into their secendary mail server (which was a hosted 
machine on uunet)=2E  This second machine accepted all the mail commands 
properly=2E  Their third machine was also on uunet and also accepted all smtp 
commands correctly=2E

I then went to the World mail log files where every smtp action is logged=2E  I 
sent an email to the problem email address, then watched the log file=2E  
Indeed, World mail was hitting DNS, pulling up the primary mail server IP, 
hit their email server, sent the EHLO command, got a response, send the 
second command, and never got a response=2E

I then set up a custom domain for the problem domain, however for the IP 
number I used the IP number of their SECONDARY mail server=2E  From this point 
all the email to this domain works correctly=2E

I then contacted the postmaster of the problem domain and told them of the 
issues=2E  They explained that they had one email server on the outside of 
their firewall that received the email and immediately relayed it to an email 
server on the inside of the firewall=2E

My theory=2E=2E=2E=2E
* First - if there is a problem with World mail, it would seem that it 
does not try to send email to secondary or tritary servers if it makes a 
connection to the primary server and that connection  times out - the 
multiple mx records do no good in this scenario=2E (I sure hope someone can 
disprove my theory and show me how to fix my server)=2E
* Second -  I wouldn't think that having their two servers on each side 
of the their firewall accounts for their "exposed" email server not 
responding to email commands correctly, but, it's not my domain, equipment, 
etc=2E=2E=2E
* Third - I wouldn't think that we are the only ones having problems send 
mail to this domain=2E
Perhaps this alternative may be of help=2E
Steve

The At 04:14 PM 4/9/2002, Ben Saren wrote:
>I have the same problem=2E I setup custom domains for some of them, but yet 
>the problem continues=2E Its only a handful of domains=2E
>
>-----Original Message-----
>From: Geof Tillotson [mailto:geof@ackme=2Ecom]
>Sent: Tuesday, April 09, 2002 3:50 PM
>To: Subscribers of WorldMail
>Subject: Can't send email to some domains
>
>To All -
>
>So, here's a head scratcher=2E  Our email server is unable to deliver emails 
>to certain domains=2E  I know that the recipient email addresses are valid 
>because I can send to them from other email systems=2E
>
>The emails sit in the queue and fail=2E
>
>When I test the mailroute, the mailroute tool returns a valid mailhost 
>address, and a valid MX record lookup=2E
>
>Here is a sample Non-delivery error message=2E
>
>   -----  The following recipients were processed by MTA mail=2Ecldnet=2Ecom =2E=2E=2E
>
>recipient@techtarget=2Ecom; Action: Failed; Status: 4=2E4=2E7 (delivery time 
>expired)
>
>Does anyone have any idea what might be happening?
>
>Thanks in advance=2E
>
>Geof
>
>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
>Geof Tillotson                  geof@ackme=2Ecom
>617=2E484=2E0570                    617=2E484=2E7201 fax
>4 Ripley Road                   www=2E4ripleyroad=2Ecom
>Belmont, MA 02478               www=2Eackme=2Ecom





     Robert Hyde
     Coilcraft, Inc=2E
     Voice: 847-516-7323
     Fax: 847-639-2370
     e-mail: rhyde@coilcraft=2Ecom


--TFS-with-MIME-and-DIME
Content-Type: TEXT/HTML; name="FILE0001.HTM"
Content-transfer-encoding: base64
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--TFS-with-MIME-and-DIME--

From: "Lawyers" <lawyers at crowderscoggins dot com>
Subject: Re: Can't send email to some domains
Date: Fri, 12 Apr 2002 14:40:39 -0500
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Date: Fri, 12 Apr 2002 16:37:25 -0700
From: Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
Subject: RE: random SMTPD.exe errors

At 2:42 PM -0500 4/4/02, Tom Kemp wrote:

>multiple SMTP-type services cannot coexist

You can't have multiple programs listening on the same port.  SMTP 
servers normally listen on the SMTP port (port 25).  If you run more 
than one, there will be problems.  You can work around this by 
disabling all but one, moving all but one to a different machine, or 
telling each to listen on a different port.  For example, one could 
be configured to listen on 25 (the default), while another listens on 
8025.
-- 
Randall Gellens
rg_public.1 at flagg.qualcomm dot com
Opinions are personal;     facts are suspect;     I speak for myself only

Date: Fri, 12 Apr 2002 16:54:22 -0700
From: Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
Subject: RE: Can't send email to some domains

At 10:06 AM -0400 4/12/02, Jill Crawford wrote:

>techtarget.com has an MX record that points to mailhost.techtarget.com
>mailhost.techtarget.com has a CNAME record that points to
>louie.techtarget.com
>louie.techtarget.com has an A record that points to 65.214.43.155

That's an invalid configuration.  MX records MUST point to A records, 
not CNAME records.
-- 
Randall Gellens
rg_public.1 at flagg.qualcomm dot com
Opinions are personal;     facts are suspect;     I speak for myself only

Date: Fri, 12 Apr 2002 16:53:03 -0400
From: Seymour Joseph <sjoseph at bciu.k12.pa dot us>
Subject: Re: Can't send email to some domains

While troubleshooting a mail problem at my own site, I ran into the
exact same garbled messages issue when I tried telnetting to my own
worldmail server.  I would telnet to port 25, get the greeting message
from worldmail partly OK and partly corrupted, enter a HELO message and
then not be able to continue further because the session would hang.

My problem turns out to have been a bug in a particual older version of
Cisco's PIX firewall OS ( PIX Version 4.4(8) to be specific).  As a
default configuration item, it has a command: "fixup protocol smtp 25". 
In this specific version of the firewall software, this command caused
corruption in mail transactions that passed through the firewall.  With
Cisco's troubleshooting assistance I ended up changing the command to:
"no fixup protocol smtp 25 " and the problem with email transaction
corruptions completely went away.

I did not have that problem with earlier Cisco Pix versions nor with
version 6 Pix IOS.  I would be curious to know whether the site Steve
wrote about uses an older Cisco Pix firewall...


Seymour
 
Seymour Joseph
Director, Technology Services
Bucks County Intermediate Unit #22
705 Shady Retreat Road
Doylestown, PA 18901

Phone (800)-770-4822 x1110
Fax: 215-489-7874
Email: sjoseph at bciu.k12.pa dot us
Web (BCIU): http://www.bciu.k12.pa.us
Web (Seymour): http://www.bciu.k12.pa.us/users/sjoseph/Welcome.htm

Steve Meyer wrote:
> 
> For what it's worth - we had a similar problem with sending mail to
> one domain.  According to their postmaster, we are the only folks
> having a problem.
> 
> I check the Worldmail logs to make sure the email was actually going
> to their equipment.  Then I checked THEIR mx records in their DNS
> tables (with the Name Server Utilities in Worldmail) to get the domain
> names and IP numbers of their mail server(s).  Next I used telnet to
> telnet into their primary mail server on port 25.  When their server
> granted the connection, the text welcome message was garbled.  When I
> entered the first mail command (either HELO or EHLO), the server
> responded perfectly.  When I entered the second command, the server
> would never respond.  This is where my email was timing out.  I then
> telnetted into their secendary mail server (which was a hosted machine
> on uunet).  This second machine accepted all the mail commands
> properly.  Their third machine was also on uunet and also accepted all
> smtp commands correctly.
> 
> I then went to the World mail log files where every smtp action is
> logged.  I sent an email to the problem email address, then watched
> the log file.  Indeed, World mail was hitting DNS, pulling up the
> primary mail server IP, hit their email server, sent the EHLO command,
> got a response, send the second command, and never got a response.
> 
> I then set up a custom domain for the problem domain, however for the
> IP number I used the IP number of their SECONDARY mail server.  From
> this point all the email to this domain works correctly.
> 
> I then contacted the postmaster of the problem domain and told them of
> the issues.  They explained that they had one email server on the
> outside of their firewall that received the email and immediately
> relayed it to an email server on the inside of the firewall.
> 
> My theory....
> 
>    * First - if there is a problem with World mail, it would seem that
>      it does not try to send email to secondary or tritary servers if
>      it makes a connection to the primary server and that connection
>      times out - the multiple mx records do no good in this scenario.
>      (I sure hope someone can disprove my theory and show me how to
>      fix my server).
>    * Second -  I wouldn't think that having their two servers on each
>      side of the their firewall accounts for their "exposed" email
>      server not responding to email commands correctly, but, it's not
>      my domain, equipment, etc...
>    * Third - I wouldn't think that we are the only ones having
>      problems send mail to this domain.
> 
> Perhaps this alternative may be of help.
> Steve
> 
>  The At 04:14 PM 4/9/2002, Ben Saren wrote:
> 
> > I have the same problem. I setup custom domains for some of them,
> > but yet the problem continues. Its only a handful of domains.
> >
> >
> >      -----Original Message-----
> >      From: Geof Tillotson [mailto:geof at ackme dot com]
> >      Sent: Tuesday, April 09, 2002 3:50 PM
> >      To: Subscribers of WorldMail
> >      Subject: Can't send email to some domains
> >
> >      To All -
> >
> >      So, here's a head scratcher.  Our email server is unable to
> >      deliver emails to certain domains.  I know that the recipient
> >      email addresses are valid because I can send to them from other
> >      email systems.
> >
> >      The emails sit in the queue and fail.
> >
> >      When I test the mailroute, the mailroute tool returns a valid
> >      mailhost address, and a valid MX record lookup.
> >
> >      Here is a sample Non-delivery error message.
> >
> >        -----  The following recipients were processed by MTA
> >      mail.cldnet.com ...
> >
> >      recipient at techtarget dot com; Action: Failed; Status: 4.4.7
> >      (delivery time expired)
> >
> >      Does anyone have any idea what might be happening?
> >
> >      Thanks in advance.
> >
> >      Geof
> >
> >      -0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
> >      Geof Tillotson                  geof at ackme dot com
> >      617.484.0570                    617.484.7201 fax
> >      4 Ripley Road                   www.4ripleyroad.com
> >      Belmont, MA 02478               www.ackme.com
> >

--

From: "Ben Saren" <ben at atomicusa dot com>
Subject: RE: Can't send email to some domains
Date: Fri, 12 Apr 2002 18:18:22 -0400

Anyone know how to view the ENTIRE header in a message received in
Outlook??? I've had trouble with this for years!


-----Original Message-----
From: Postmaster [mailto:postmaster at smm dot org] 
Sent: Wednesday, April 10, 2002 6:58 PM
To: Subscribers of WorldMail
Subject: RE:Can't send email to some domains


It is true that you need to create a custom domain for this company. 
the best way to get their current server name/ip address is to have
someone from that company send YOU an email. once that's done: 
1. change your view to show ALL headers. (Eudora: 'blahblahbla' button)
2. find the true mail server name or ip address in the header 3. look up
the MX record for that domain to find the common and MX names associated
with that domain. 4. insert those names and addresses into the 'route to
host' properties of the custom domain.  (the lower the # preference, the
higher priority. (increments should be in multiples of 10?)) all @ port
25.

you may have to play around with priorities, different addresses &
names, but the key is getting the correct info in an email header, then
checking the MX record. i think this must happen while that company
makes server /isp changes and we have to force it to see them again. 
-(that's pure speculation, i could be wrong!)

hope this helps

cbremer
Science Museum of MN
(651)221-2576

>X-Sender: geoft at mail.earthlink dot net
>



From: "Tom Kemp" <KempT at presearch dot com>
Subject: RE: Can't send email to some domains
Date: Fri, 12 Apr 2002 11:46:33 -0400

I've been experimenting with DNS configuration on www.granitecanyon.com 
and my personal home DNS server, dns1.tntkemp.com.  I have intermittent 
success from different computers, but I suspect that it has to do with 
our ISP's DNS servers here at my office, as most of the ISP's DNS 
servers resolve fine, while at least one of them doesn't resolve most of 
the time.  Take a look at mine if you will and tell me what you see.  
DNS has always been confusing to me.  When I think I understand, then I 
try to make changes, and something goes wrong!

BTW, even though I can resolve IP's to one of the domains I'm hosting at 
home and at GraniteCanyon.com (presearch.info), Worldmail's built-in 
whois capability fails almost 100% of the time on this particular 
domain.  I'm also assuming that perhaps Worldmail can't handle this 
domain extension through it's test utility.  It receives and delivers 
email fine to my test server here at the office.  I'm testing IPSwitch's 
IMail Server at mail.presearch.info.  We're finally tiring from using 
this old Worldmail product that has grown in many years.  We want more 
stability and internet browser access, but not at the expense of 
Exchange Server.

Dennis T. Kemp II (Tom)
Program Manager/MCSE/CCNA/A+

Control Concepts, Inc.
8500 Executive Park Ave.
Suite 400
Fairfax, Va.  22031

KempT at controlconceptsinc dot com 
703-876-6418
Fax# 703-876-6416

> -----Original Message-----
> From: Harry McIntosh [mailto:harry.mcintosh at cdlearning dot com]
> Sent: Tuesday, April 09, 2002 5:23 PM
> To: Subscribers of WorldMail
> Subject: Re: Can't send email to some domains
> 
> 
> Hi Geof:
> 
> It looks to me as if the DNS isn't set up correctly for 
> techtarget.com, the 
> domain you're trying to reach.  It has the following MX record:
> 
>      techtarget.com  MX  10  mailhost.techtarget.com
> 
> But, I don't see an A-type record for mailhost.techtarget.com, which 
you 
> need to have for that MX record to do any good.
> 
> Harry McIntosh
> 
> ______________________________
> This email sent using Mailtastic email server software.
> For information visit www.Mailtastic.com.
> 
> At 01:49 PM 4/9/02, you wrote:
> >To All -
> >
> >So, here's a head scratcher.  Our email server is unable to 
> deliver emails 
> >to certain domains.  I know that the recipient email addresses are 
valid 
> >because I can send to them from other email systems.
> >
> >The emails sit in the queue and fail.
> >
> >When I test the mailroute, the mailroute tool returns a valid 
mailhost 
> >address, and a valid MX record lookup.
> 
> 


From: "Jill Crawford" <jillc at golfpactravel dot com>
Subject: RE: Can't send email to some domains
Date: Fri, 12 Apr 2002 13:21:46 -0400

techtarget.com has an MX record that points to mailhost.techtarget.com
mailhost.techtarget.com has a CNAME record that points to
louie.techtarget.com
louie.techtarget.com has an A record that points to 65.214.43.155

Because of the CNAME record WorldMail needs to have a Custom Domain created
for techtarget.com that points directly to 65.214.43.155

-----Original Message-----
From: Harry McIntosh [mailto:harry.mcintosh at cdlearning dot com]
Sent: Tuesday, April 09, 2002 5:23 PM
To: Subscribers of WorldMail
Subject: Re: Can't send email to some domains


Hi Geof:

It looks to me as if the DNS isn't set up correctly for techtarget.com, the
domain you're trying to reach.  It has the following MX record:

     techtarget.com  MX  10  mailhost.techtarget.com

But, I don't see an A-type record for mailhost.techtarget.com, which you
need to have for that MX record to do any good.

Harry McIntosh

______________________________
This email sent using Mailtastic email server software.
For information visit www.Mailtastic.com.

At 01:49 PM 4/9/02, you wrote:
>To All -
>
>So, here's a head scratcher.  Our email server is unable to deliver emails
>to certain domains.  I know that the recipient email addresses are valid
>because I can send to them from other email systems.
>
>The emails sit in the queue and fail.
>
>When I test the mailroute, the mailroute tool returns a valid mailhost
>address, and a valid MX record lookup.



From: "Philip K. Dunn" <pkd at hoptechno dot com>
Subject: Re: Can't send email to some domains
Date: Sun, 14 Apr 2002 12:22:10 -0500

In Outlook Express I right click the message, Properties, Details, Message
Source.

Is this not the entire header?

----- Original Message -----
From: "Ben Saren" <ben at atomicusa dot com>
To: "'Postmaster'" <postmaster at smm dot org>; "'Subscribers of WorldMail'"
<worldmail at lists.pensive dot org>
Sent: Friday, April 12, 2002 5:18 PM
Subject: RE: Can't send email to some domains


> Anyone know how to view the ENTIRE header in a message received in
> Outlook??? I've had trouble with this for years!
>
>
> -----Original Message-----
> From: Postmaster [mailto:postmaster at smm dot org]
> Sent: Wednesday, April 10, 2002 6:58 PM
> To: Subscribers of WorldMail
> Subject: RE:Can't send email to some domains
>
>
> It is true that you need to create a custom domain for this company.
> the best way to get their current server name/ip address is to have
> someone from that company send YOU an email. once that's done:
> 1. change your view to show ALL headers. (Eudora: 'blahblahbla' button)
> 2. find the true mail server name or ip address in the header 3. look up
> the MX record for that domain to find the common and MX names associated
> with that domain. 4. insert those names and addresses into the 'route to
> host' properties of the custom domain.  (the lower the # preference, the
> higher priority. (increments should be in multiples of 10?)) all @ port
> 25.
>
> you may have to play around with priorities, different addresses &
> names, but the key is getting the correct info in an email header, then
> checking the MX record. i think this must happen while that company
> makes server /isp changes and we have to force it to see them again.
> -(that's pure speculation, i could be wrong!)
>
> hope this helps
>
> cbremer
> Science Museum of MN
> (651)221-2576
>
> >X-Sender: geoft at mail.earthlink dot net
> >
>
>
>


From: "Paul Webster" <paul at spidersweb.freeserve.co dot uk>
Subject: RE: Can't send email to some domains
Date: Sun, 14 Apr 2002 18:31:21 +0100

AFAIK you need version of Outlook newer than 98.
If so - then File/Properties etc seems to work.
Outlook Express does a fair job of showing it.

Paul
> -----Original Message-----
> From: Ben Saren [mailto:ben at atomicusa dot com]
> Sent: 12 April 2002 23:18
> To: 'Postmaster'; 'Subscribers of WorldMail'
> Subject: RE: Can't send email to some domains
> 
> 
> Anyone know how to view the ENTIRE header in a message received in
> Outlook??? I've had trouble with this for years!
> 
> 
> -----Original Message-----
> From: Postmaster [mailto:postmaster at smm dot org] 
> Sent: Wednesday, April 10, 2002 6:58 PM
> To: Subscribers of WorldMail
> Subject: RE:Can't send email to some domains
> 
> 
> It is true that you need to create a custom domain for this company. 
> the best way to get their current server name/ip address is to have
> someone from that company send YOU an email. once that's done: 
> 1. change your view to show ALL headers. (Eudora: 'blahblahbla' button)
> 2. find the true mail server name or ip address in the header 3. look up
> the MX record for that domain to find the common and MX names associated
> with that domain. 4. insert those names and addresses into the 'route to
> host' properties of the custom domain.  (the lower the # preference, the
> higher priority. (increments should be in multiples of 10?)) all @ port
> 25.
> 
> you may have to play around with priorities, different addresses &
> names, but the key is getting the correct info in an email header, then
> checking the MX record. i think this must happen while that company
> makes server /isp changes and we have to force it to see them again. 
> -(that's pure speculation, i could be wrong!)
> 
> hope this helps
> 
> cbremer
> Science Museum of MN
> (651)221-2576
> 
> >X-Sender: geoft at mail.earthlink dot net
> >
> 
> 
> 

Date: Fri, 12 Apr 2002 16:45:55 -0700
From: Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
Subject: RE: Can't send email to some domains
RE: Can't send email to some domains
At 9:59 AM -0500 4/10/02, Steve Meyer wrote:


Normally, alternate MX records are used when unable to connect to the primary server at all, or when a negative response is received in the banner.  If the connection succeeds, a success banner is given, and the mail transaction starts, and then there is a problem (it subsequently hangs or gives a failure response to a command), the usual reaction is to try again later (for timeouts or temporary failure codes) or bounce the message (for permanent failure codes).


Seems an odd thing to me, too.

Third - I wouldn't think that we are the only ones having problems send mail to this domain.

Maybe they don't get much mail?


-- 
Randall Gellens
rg_public.1 at flagg.qualcomm dot com
Opinions are personal;     facts are suspect;     I speak for myself only

From: "Fir Elf" <firelf15 at hotmail dot com>
Subject: False positive for open relay?
Date: Sat, 13 Apr 2002 00:19:52 +0000

Following is the result from a telnet session conducted from my mail server. 
  [I edited the domain name and IP address with global search and replace.]  
Tests 1-16 look ok, but I'm not sure about test #17 at the end of the log.  
I think the firewall/router allows in all SMTP traffic and the mail server 
disallows anything originating from an IP outside the 192.168.0.0 
255.255.255.0 block.  Under these conditions, would test 17 be an indication 
of a true positive or a false positive?  If true, how else do I close it?

TIA - I have already learned a lot by reading your archives!

S.K. Harris

Connecting to My.IP.Address ...
                               <<< 220 mailserver.mydomain.com ESMTP Ser
<<< 220 mailserver.mydomain.com ESMTP Service (Worldmail 1.3.167) ready
>>>HELO cygnus.mail-abuse.org
<<< 250 mailserver.mydomain.com
:Relay test: #Quote test
                        >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 1
                    >>> mail from: <nobody at mail-abuse dot org>
<<< 250 MAIL FROM:<nobody at mail-abuse dot org> OK
>>>rcpt to: <nobody at mail-abuse dot org>
<<< 553 RCPT TO:<nobody at mail-abuse dot org> Relaying not allowed
>>>rset
<<< 250 RSET
:Relay test: #Test 2
                    >>> mail from: <spamtest at maps1.pa.vix dot com>
<<< 250 MAIL FROM:<spamtest at maps1.pa.vix dot com> OK
>>>rcpt to: <nobody at mail-abuse dot org>
<<< 553 RCPT TO:<nobody at mail-abuse dot org> Relaying not allowed
>>>rset
<<< 250 RSET
:Relay test: #test 3
                    >>> mail from: <spamtest@localhost>
<<< 501 <spamtest@localhost> Invalid mail address, must be fully qualified 
domai
<<< 501 <spamtest@localhost> Invalid mail address, must be fully qualified 
domai
n
>>>rset
<<< 250 RSET
:Relay test: #Test 4
                    >>> mail from: <spamtest>
<<< 501 <spamtest> Invalid mail address, must have a domain part
>>>rset
<<< 250 RSET
:Relay test: #Test 5
                    >>> mail from: <>
<<< 250 MAIL FROM:<> OK
>>>rcpt to: <nobody at mail-abuse dot org>
<<< 553 RCPT TO:<nobody at mail-abuse dot org> Relaying not allowed
>>>rset
<<< 250 RSET
:Relay test: #Test 6
                    >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 7
                    >>> mail from: <spamtest at [My.IP dot Address]>
<<< 250 MAIL FROM:<spamtest at [My.IP dot Address]> OK
>>>rcpt to: <nobody at mail-abuse dot org>
<<< 553 RCPT TO:<nobody at mail-abuse dot org> Relaying not allowed
>>>rset
<<< 250 RSET
:Relay test: #Test 8
                    >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 9
                    >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 10
                     >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 11
                     >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 12
                     >>> mail from: <spamtest at [My.IP dot Address]>
<<< 250 MAIL FROM:<spamtest at [My.IP dot Address]> OK
>>>rcpt to: <nobody@mail-abuse dot org@">
<<< 501 Syntax error in parameters or arguments to RCPT command
>>>rset
<<< 250 RSET
:Relay test: #Test 13
                     >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 14
                     >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 15
                     >>> mail from: <spamtest at [My.IP dot Address]>
<<< 250 MAIL FROM:<spamtest at [My.IP dot Address]> OK
>>>rcpt to: <@:nobody at mail-abuse dot org>
<<< 501 RCPT Invalid source route address syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 16
                     >>> mail from: <spamtest@>
<<< 501 FROM Invalid mail address, invalid domain name syntax
>>>rset
<<< 250 RSET
:Relay test: #Test 17
                     >>> mail from: <spamtest at [My.IP dot Address]>
<<< 250 MAIL FROM:<spamtest at [My.IP dot Address]> OK
>>>rcpt to: <mail-abuse.org!nobody>
<<< 250 RCPT TO:<mail-abuse.org!nobody at mydomain dot com> OK
>>>QUIT
<<< 221 mailserver.mydomain.com QUIT
Tested host banner: 220 mailserver.mydomain.com ESMTP Service (Worldmail
1.3.167) ready
System appeared to accept 1 relay attempts.



_________________________________________________________________
Chat with friends online, try MSN Messenger: http://messenger.msn.com


From: "Art Lazanoff" <art at parrotbyte dot com>
Subject: outlook headers
Date: Sun, 14 Apr 2002 10:51:13 -0700

If the mail is unopened, right click on the item and then select
'options'.
If the mail is open, select 'view' and then 'options'.

You can do ctrl-a to select all of the header or select something
specific using the mouse. Here's that the Pensive mail list header looks
like using ctrl-a:

Return-Path: <WorldMail-errors at lists.pensive dot org>
Received: from turing.pensive.org (204.210.11.246) by
bubbles.parrotbyte.com (Worldmail 1.3.167) for art at parrotbyte dot com; 5 Jul
2000 23:44:42 -0700
Mime-Version: 1.0
Content-Type: text/plain
To: art at parrotbyte dot com (Art Lazanoff)
From: autoshare at lists.pensive dot org (Pensive Mailing Lists)
Errors-To: WorldMail-errors at lists.pensive dot org (List Administrator)
Precedence: bulk
Subject: sub worldmail
Date: Wed, 5 Jul 2000 23:44:02 -0700
List-Software: AutoShare 4.2b4d1 by Mikael Hansen
Message-Id: <144037331227413049402 at lists.pensive dot org>


~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Art Lazanoff
E-mail: art at parrotbyte dot com
Web: http://www.parrotbyte.com/art
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~


Date: Sat, 13 Apr 2002 06:53:09 -0600
From: Harry McIntosh <harry.mcintosh at cdlearning dot com>
Subject: Re:RE: Can't send email to some domains

Hi:

The way you describe techtarget.com and techrepsite.com being configured 
doesn't follow the rules for how DNS entries are supposed to be set 
up.  You're only supposed to point MX records to A records, not to CNAME 
records.

Even so, that's not an unreasonable or uncommon way for people to set up 
their DNS, and Worldmail really should handle it.  (Most other email 
packages handle DNS that's configured that way.)  I'm not sure I would call 
it a "bug", but it's certainly a weakness in Worldmail.

Harry McIntosh

________________________________________
This email sent using Mailtastic email server software.
For details, visit www.mailtastic.com.

At 12:47 PM 4/12/02, you wrote:
>Recently I had a similar issue sending mail to a mailbox at techrepsite.com
>Until today I was unable to send messages through worldmail to that domain.
>In order to send messages to that domain I had to create a custom domain and
>specify the host to route the mail to.
>I did some lookups and I found that the mx record pointed to an alias 
>instead of
>a host.
>Could there be a bug in worldmail that won't allow it to send mail to domains
>whos mx records point to aliases?
>
>The below information shows how our scenarios are similar.
>
>techtarget.com  mx  mailhost.techtarget.com
>mailhost.techtarget.com  cname  louie.techtarget.com
>louie.techtarget.com  a  65.214.43.155
>
>techrepsite.com  mx  mxmail.register.com
>mxmail.register.com  cname  inbound.register-admin.com.criticalpath.net
>inbound.register-admin.com.criticalpath.net  a  209.228.32.104
>
>Please let me know if this information helps at all.



From: "Ben Saren" <ben at atomicusa dot com>
Subject: RE: Can't send email to some domains
Date: Sun, 14 Apr 2002 22:03:01 -0400

My god! I cant believe that deceived me for so long! Duhh! Thanks!


-----Original Message-----
From: Tom Kemp [mailto:DTKempII at speakeasy dot net] 
Sent: Sunday, April 14, 2002 9:35 PM
To: 'Ben Saren'
Cc: 'Subscribers of WorldMail' (E-mail)
Subject: RE: Can't send email to some domains


In Outlook, simply open the email, then select 'View' and 'Options'.

-----Original Message-----
From: Ben Saren [mailto:ben at atomicusa dot com]
Sent: Friday, April 12, 2002 6:18 PM
To: 'Postmaster'; 'Subscribers of WorldMail'
Subject: RE: Can't send email to some domains


Anyone know how to view the ENTIRE header in a message received in
Outlook??? I've had trouble with this for years!


-----Original Message-----
From: Postmaster [mailto:postmaster at smm dot org] 
Sent: Wednesday, April 10, 2002 6:58 PM
To: Subscribers of WorldMail
Subject: RE:Can't send email to some domains


It is true that you need to create a custom domain for this company. 
the best way to get their current server name/ip address is to have
someone from that company send YOU an email. once that's done: 
1. change your view to show ALL headers. (Eudora: 'blahblahbla' button)
2. find the true mail server name or ip address in the header 3. look up
the MX record for that domain to find the common and MX names associated
with that domain. 4. insert those names and addresses into the 'route to
host' properties of the custom domain.  (the lower the # preference, the
higher priority. (increments should be in multiples of 10?)) all @ port
25.

you may have to play around with priorities, different addresses &
names, but the key is getting the correct info in an email header, then
checking the MX record. i think this must happen while that company
makes server /isp changes and we have to force it to see them again. 
-(that's pure speculation, i could be wrong!)

hope this helps

cbremer
Science Museum of MN
(651)221-2576

>X-Sender: geoft at mail.earthlink dot net
>





From: "Paul Webster" <paul at spidersweb.freeserve.co dot uk>
Subject: RE: Can't send email to some domains
Date: Tue, 16 Apr 2002 07:20:38 +0100

Me too!
I still run Outlook 98 at home (from the days that it was free) and had
always seen this as one of the annoying limitations ... and it isn't.
I can now start the day with a spring in my step ;-> OK not that
significant, but good news.

Paul
> -----Original Message-----
> From: Ben Saren [mailto:ben at atomicusa dot com]
> Sent: 15 April 2002 03:03
> To: 'Tom Kemp'
> Cc: ''Subscribers of WorldMail' (E-mail)'
> Subject: RE: Can't send email to some domains
>
>
> My god! I cant believe that deceived me for so long! Duhh! Thanks!
>
>
> -----Original Message-----
> From: Tom Kemp [mailto:DTKempII at speakeasy dot net]
> Sent: Sunday, April 14, 2002 9:35 PM
> To: 'Ben Saren'
> Cc: 'Subscribers of WorldMail' (E-mail)
> Subject: RE: Can't send email to some domains
>
>
> In Outlook, simply open the email, then select 'View' and 'Options'.
>
> -----Original Message-----
> From: Ben Saren [mailto:ben at atomicusa dot com]
> Sent: Friday, April 12, 2002 6:18 PM
> To: 'Postmaster'; 'Subscribers of WorldMail'
> Subject: RE: Can't send email to some domains
>
>
> Anyone know how to view the ENTIRE header in a message received in
> Outlook??? I've had trouble with this for years!
>
>
> -----Original Message-----
> From: Postmaster [mailto:postmaster at smm dot org]
> Sent: Wednesday, April 10, 2002 6:58 PM
> To: Subscribers of WorldMail
> Subject: RE:Can't send email to some domains
>
>
> It is true that you need to create a custom domain for this company.
> the best way to get their current server name/ip address is to have
> someone from that company send YOU an email. once that's done:
> 1. change your view to show ALL headers. (Eudora: 'blahblahbla' button)
> 2. find the true mail server name or ip address in the header 3. look up
> the MX record for that domain to find the common and MX names associated
> with that domain. 4. insert those names and addresses into the 'route to
> host' properties of the custom domain.  (the lower the # preference, the
> higher priority. (increments should be in multiples of 10?)) all @ port
> 25.
>
> you may have to play around with priorities, different addresses &
> names, but the key is getting the correct info in an email header, then
> checking the MX record. i think this must happen while that company
> makes server /isp changes and we have to force it to see them again.
> -(that's pure speculation, i could be wrong!)
>
> hope this helps
>
> cbremer
> Science Museum of MN
> (651)221-2576
>
> >X-Sender: geoft at mail.earthlink dot net
> >
>
>
>
>
>


From: "Jill Crawford" <jillc at golfpactravel dot com>
Subject: RE: Can't send email to some domains
Date: Tue, 16 Apr 2002 10:06:23 -0400

See Document ID: 1236HQ at http://www.eudora.com/techsupport/kb/1236hq.html

"If WorldMail is able to resolve hostnames, verify the MX record of the
domain that is not being sent. If the MX record points to a Cname, this is
contrary to RFC 1912, http://www.ietf.org/rfc/rfc1912.txt, and may not work
with most mail servers, including WorldMail."


-----Original Message-----
From: Harry McIntosh [mailto:harry.mcintosh at cdlearning dot com]
Sent: Saturday, April 13, 2002 8:53 AM
To: Subscribers of WorldMail
Subject: Re:RE: Can't send email to some domains


Hi:

The way you describe techtarget.com and techrepsite.com being configured
doesn't follow the rules for how DNS entries are supposed to be set
up.  You're only supposed to point MX records to A records, not to CNAME
records.

Even so, that's not an unreasonable or uncommon way for people to set up
their DNS, and Worldmail really should handle it.  (Most other email
packages handle DNS that's configured that way.)  I'm not sure I would call
it a "bug", but it's certainly a weakness in Worldmail.

Harry McIntosh

________________________________________
This email sent using Mailtastic email server software.
For details, visit www.mailtastic.com.

At 12:47 PM 4/12/02, you wrote:
>Recently I had a similar issue sending mail to a mailbox at techrepsite.com
>Until today I was unable to send messages through worldmail to that domain.
>In order to send messages to that domain I had to create a custom domain
and
>specify the host to route the mail to.
>I did some lookups and I found that the mx record pointed to an alias
>instead of
>a host.
>Could there be a bug in worldmail that won't allow it to send mail to
domains
>whos mx records point to aliases?
>
>The below information shows how our scenarios are similar.
>
>techtarget.com  mx  mailhost.techtarget.com
>mailhost.techtarget.com  cname  louie.techtarget.com
>louie.techtarget.com  a  65.214.43.155
>
>techrepsite.com  mx  mxmail.register.com
>mxmail.register.com  cname  inbound.register-admin.com.criticalpath.net
>inbound.register-admin.com.criticalpath.net  a  209.228.32.104
>
>Please let me know if this information helps at all.



Date: Tue, 16 Apr 2002 17:13:15 -0700
From: Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
Subject: Re: False positive for open relay?

At 12:19 AM +0000 4/13/02, Fir Elf wrote:

>:Relay test: #Test 17
>                     >>> mail from: <spamtest at [My.IP dot Address]>
><<< 250 MAIL FROM:<spamtest at [My.IP dot Address]> OK
>>>>rcpt to: <mail-abuse.org!nobody>
><<< 250 RCPT TO:<mail-abuse.org!nobody at mydomain dot com> OK

This should have generated an error '501 <mail-abuse.org!nobody> 
Invalid mail address, must have a domain part'.

Have you set a default domain?  Do you have more than one domain defined?

Do you have a mailbox set up for unknown user addresses?

At any rate, mere acceptance of the mail doesn't mean that it was 
relayed.  It's easy enough to try this yourself and see what happens 
to it.  (Use an address such as 'mail to:<hotmail.com!firelf15>' so 
that if it does get relayed you'd see it.)

I'm surprised that the test didn't include percent-hacked addresses. 
You might try that as well, for example, 'mail 
to:<firelf15%hotmail.com>'.

(Be sure to try all tests from an external address.)
-- 
Randall Gellens
rg_public.1 at flagg.qualcomm dot com
Opinions are personal;     facts are suspect;     I speak for myself only

From: "Art Lazanoff" <art at parrotbyte dot com>
Subject: RE: Can't send email to some domains
Date: Tue, 16 Apr 2002 23:10:11 -0700

Hi,

I've seen two other circumstances involving undelivered mail. In one
case I changed WorldMail internal DNS search order from internal to
external and flushed its DNS cache.

The other case involved AOL doing reverse lookup of inbound mail. Their
servers accepted mail but did not deliver it nor did they return any
error codes. In this instance my ISP had not correctly configured the
canonical name of my mail server. Fixing this resolved the problem.

Art

> -----Original Message-----
> From: Jill Crawford [mailto:jillc at golfpactravel dot com] 
> Sent: Tuesday, April 16, 2002 7:06 AM
> To: Subscribers of WorldMail
> Subject: RE: Can't send email to some domains
> 
> 
> See Document ID: 1236HQ at 
> http://www.eudora.com/techsupport/kb/1236hq.html
> 
> "If WorldMail is able to resolve hostnames, verify the MX 
> record of the domain that is not being sent. If the MX record 
> points to a Cname, this is contrary to RFC 1912, 
> http://www.ietf.org/rfc/rfc1912.txt, and may not work with 
> most mail servers, including WorldMail."
> 
> 
> -----Original Message-----
> From: Harry McIntosh [mailto:harry.mcintosh at cdlearning dot com]
> Sent: Saturday, April 13, 2002 8:53 AM
> To: Subscribers of WorldMail
> Subject: Re:RE: Can't send email to some domains
> 
> 
> Hi:
> 
> The way you describe techtarget.com and techrepsite.com being 
> configured doesn't follow the rules for how DNS entries are 
> supposed to be set up.  You're only supposed to point MX 
> records to A records, not to CNAME records.
> 
> Even so, that's not an unreasonable or uncommon way for 
> people to set up their DNS, and Worldmail really should 
> handle it.  (Most other email packages handle DNS that's 
> configured that way.)  I'm not sure I would call it a "bug", 
> but it's certainly a weakness in Worldmail.
> 
> Harry McIntosh
> 
> ________________________________________
> This email sent using Mailtastic email server software.
> For details, visit www.mailtastic.com.
> 
> At 12:47 PM 4/12/02, you wrote:
> >Recently I had a similar issue sending mail to a mailbox at 
> >techrepsite.com Until today I was unable to send messages through 
> >worldmail to that domain. In order to send messages to that domain I 
> >had to create a custom domain
> and
> >specify the host to route the mail to.
> >I did some lookups and I found that the mx record pointed to 
> an alias 
> >instead of a host.
> >Could there be a bug in worldmail that won't allow it to send mail to
> domains
> >whos mx records point to aliases?
> >
> >The below information shows how our scenarios are similar.
> >
> >techtarget.com  mx  mailhost.techtarget.com mailhost.techtarget.com  
> >cname  louie.techtarget.com louie.techtarget.com  a  65.214.43.155
> >
> >techrepsite.com  mx  mxmail.register.com
> >mxmail.register.com  cname  
> inbound.register-admin.com.criticalpath.net
> >inbound.register-admin.com.criticalpath.net  a  209.228.32.104
> >
> >Please let me know if this information helps at all.
> 
> 


From: "Jason Davidson" <jdavidson at crousebeers dot com>
Subject: Worldmail behind firewall
Date: Tue, 23 Apr 2002 16:40:01 -0700

Dear list:

Does anyone know if Worldmail can properly function behind a firewall??

I've got WorldMail behind a firewall and it seems it is having problems with
DNS resolution.  It works for a while, but it doesn't seem that Worldmail
always makes a DNS request on port 53, i.e., sometimes it expects a response
on a different port.  Anyone have any experience on this?

Thanks in advance.
JD

Jason Davidson    <mailto:jdavidson at crousebeers dot com>
Crouse Beers and Associates


From: "Jason Davidson" <jdavidson at crousebeers dot com>
Subject: RE: Worldmail behind firewall
Date: Tue, 23 Apr 2002 17:02:47 -0700

So it seems!  Unless I'm crazy.

From what I'm reading in the firewall logs, it makes the request on port 53,
but expects the return request on a different port.  It seems pretty random.

This is what I see in the log files....

Worldmail makes a DNS request.
Firewall logs the DNS request.
Firewall blocks a return packet from our ISP's DNS server destined to a
blocked TCP port 4155
Worldmail logs a DNS resolution error.
Worldmail tries another DNS request.
Firewall logs the DNS request.
Firewall blocks a return packet from our ISP's DNS server destined to a
blocked TCP port 4156
...
...

Ports on the return keep incrementing.  Either I'm missing something simple,
or I have the firewall or DNS configured incorrectly.

Thanks
JD

-----Original Message-----
From: Ben Saren [mailto:ben at atomicusa dot com]
Sent: Tuesday, April 23, 2002 4:54 PM
To: 'Jason Davidson'
Subject: RE: Worldmail behind firewall


You mean its port number requests change??


-----Original Message-----
From: Jason Davidson [mailto:jdavidson at crousebeers dot com]
Sent: Tuesday, April 23, 2002 7:40 PM
To: Subscribers of WorldMail
Subject: Worldmail behind firewall


Dear list:

Does anyone know if Worldmail can properly function behind a firewall??

I've got WorldMail behind a firewall and it seems it is having problems
with DNS resolution.  It works for a while, but it doesn't seem that
Worldmail always makes a DNS request on port 53, i.e., sometimes it
expects a response on a different port.  Anyone have any experience on
this?

Thanks in advance.
JD

Jason Davidson    <mailto:jdavidson at crousebeers dot com>
Crouse Beers and Associates



From: "Paul Webster" <paul at spidersweb.freeserve.co dot uk>
Subject: RE: Worldmail behind firewall
Date: Wed, 24 Apr 2002 07:31:00 +0100

Sounds like a firewall problem to me.
I might get this wrong because I haven't checked this out for DNS look-up in
particular, but in general ... the requestor (Worldmail) sends to the
listeners port (53 in this case) but it sends from its own port (Worldmail
can't be listening on port 53 because it is not your local DNS).
The port that requestor is sending "from" varies.
When the responder comes back with an answer .... it to the senders
listening port (the variable one) and From the original port sent to (53).
So your firewall should allow response packets to flow through if they are
From port 53 on the outside rather than checking if they are To port 53 on
the inside.

Paul
> -----Original Message-----
> From: Jason Davidson [mailto:jdavidson at crousebeers dot com]
> Sent: 24 April 2002 01:03
> To: ben at atomicusa dot com
> Cc: Subscribers of WorldMail
> Subject: RE: Worldmail behind firewall
>
>
> So it seems!  Unless I'm crazy.
>
> From what I'm reading in the firewall logs, it makes the request
> on port 53,
> but expects the return request on a different port.  It seems
> pretty random.
>
> This is what I see in the log files....
>
> Worldmail makes a DNS request.
> Firewall logs the DNS request.
> Firewall blocks a return packet from our ISP's DNS server destined to a
> blocked TCP port 4155
> Worldmail logs a DNS resolution error.
> Worldmail tries another DNS request.
> Firewall logs the DNS request.
> Firewall blocks a return packet from our ISP's DNS server destined to a
> blocked TCP port 4156
> ...
> ...
>
> Ports on the return keep incrementing.  Either I'm missing
> something simple,
> or I have the firewall or DNS configured incorrectly.
>
> Thanks
> JD
>
> -----Original Message-----
> From: Ben Saren [mailto:ben at atomicusa dot com]
> Sent: Tuesday, April 23, 2002 4:54 PM
> To: 'Jason Davidson'
> Subject: RE: Worldmail behind firewall
>
>
> You mean its port number requests change??
>
>
> -----Original Message-----
> From: Jason Davidson [mailto:jdavidson at crousebeers dot com]
> Sent: Tuesday, April 23, 2002 7:40 PM
> To: Subscribers of WorldMail
> Subject: Worldmail behind firewall
>
>
> Dear list:
>
> Does anyone know if Worldmail can properly function behind a firewall??
>
> I've got WorldMail behind a firewall and it seems it is having problems
> with DNS resolution.  It works for a while, but it doesn't seem that
> Worldmail always makes a DNS request on port 53, i.e., sometimes it
> expects a response on a different port.  Anyone have any experience on
> this?
>
> Thanks in advance.
> JD
>
> Jason Davidson    <mailto:jdavidson at crousebeers dot com>
> Crouse Beers and Associates
>
>
>


Date: Wed, 24 Apr 2002 10:37:45 -0500
From: Paul Kaler <paul at texmemsys dot com>
Subject: RE: Worldmail behind firewall

Sounds like your firewall is not configured correctly.  The behavior you 
described is typical of how most internet applications operate.  They issue 
a DNS request using a source port above 1024, port 53 is the port they are 
sending the request to, typically only a DNS server would use a source port 
of 53 for initiating a DNS request.  So the DNS server on the outside of 
your firewall sends the info back to your worldmail server and the source 
port from the originating request, your firewall should be able to track 
the source port used and allow a connection back to that machine at that 
source port, which will be different for every DNS request.

-Paul


From: "Jason Davidson" <jdavidson at crousebeers dot com>
Subject: RE: Worldmail behind firewall
Date: Wed, 24 Apr 2002 09:11:19 -0700

Mr. Kaler and Mr. Webster:

Thank you for the informative replies.  Sometimes someone out there just
needs to remind you of how things _really_ work.  This is the problem and I
think you guys hit the nail on the head here.

Unfortunately, the firewall software I'm using doesn't keep track of the
originating ports, it is a rule based system.  The problem really comes down
to the fact WorldMail is sitting on top of the bridge making connections for
itself.

In previous configurations with a mail server behind a firewall I opened up
a proxy on port 53 on the firewall.  I then directed the mail server to send
DNS requests to the firewall proxy, which handled the outgoing request to
the Internet and the reply coming back.

This works pretty well.  The problem is WorldMail sits on the fence and
makes DNS lookups itself, and doesn't use the proxy through the firewall.
Therefore Worldmail's variable ports it is listening on get subject to the
firewall rules along with the rest of the incoming traffic.

I have a gateway configured with two lan cards, one an internal NIC, and the
other an external NIC.  The firewall software and WorldMail both reside on
this machine.  WorldMail uses the DNS addresses listed in the TCP/IP
properties.  The workstations use the IP of the internal NIC for external
DNS (and therefore the DNS proxy on the firewall).

Hope I haven't confused everyone, but the simplest way out of this is to
tell WorldMail to use the DNS proxy through the firewall instead.

Thanks for your help.
Jason Davidson



-----Original Message-----
From: Paul Kaler [mailto:paul at texmemsys dot com]
Sent: Wednesday, April 24, 2002 8:38 AM
To: Subscribers of WorldMail
Cc: jdavidson at crousebeers dot com
Subject: RE: Worldmail behind firewall


Sounds like your firewall is not configured correctly.  The behavior you
described is typical of how most internet applications operate.  They issue
a DNS request using a source port above 1024, port 53 is the port they are
sending the request to, typically only a DNS server would use a source port
of 53 for initiating a DNS request.  So the DNS server on the outside of
your firewall sends the info back to your worldmail server and the source
port from the originating request, your firewall should be able to track
the source port used and allow a connection back to that machine at that
source port, which will be different for every DNS request.

-Paul



Date: Wed, 24 Apr 2002 14:58:22 -0400
From: Geof Tillotson <geof at ackme dot com>
Subject: Worldmail Bounce Messages

--=====================_23376583==_.ALT
Content-Type: text/plain; charset="us-ascii"; format=flowed

To All -

I've got users who absolutely need to know why the emails that they are 
sending don't get through.  I'm having a hard time finding a compendium of 
Worldmail bounced message messages.   I've looked through the manual and 
support files I have, no luck yet.

In particular, I'm looking for a list that includes the following bounce 
messages and what they mean:

Action: Failed; Status: 4.4.7 (delivery time expired)

Action: Failed; Status: 5.6.5 (conversion failed)
         Remote MTA m.dnsix.com: network error

and any other error messages that Worldmail so happily returns with bounces.

Thanks -

Geof

-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
Geof Tillotson                  geof at ackme dot com
617.484.0570                    617.484.7201 fax
4 Ripley Road                   www.4ripleyroad.com
Belmont, MA 02478               www.ackme.com
--=====================_23376583==_.ALT
Content-Type: text/html; charset="us-ascii"

<html>
To All - <br>
<br>
I've got users who absolutely need to know why the emails that they are
sending don't get through.&nbsp; I'm having a hard time finding a
compendium of Worldmail bounced message messages.&nbsp;&nbsp; I've looked
through the manual and support files I have, no luck yet. <br>
<br>
In particular, I'm looking for a list that includes the following bounce
messages and what they mean:<br>
<br>
<font face="Courier New, Courier">Action: Failed; Status: 4.4.7 (delivery
time expired)<br>
<br>
Action: Failed; Status: 5.6.5 (conversion failed)<br>
&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Remote MTA m.dnsix.com:
network error<br>
<br>
</font>and any other error messages that Worldmail so happily returns
with bounces.<br>
<br>
Thanks - <br>
<br>
Geof<br>
<x-sigsep><p></x-sigsep>
-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-<br>
Geof
Tillotson<x-tab>&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
617.484.0570<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&n
fax<br>
4 Ripley
Road<x-tab>&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&
d.com/" eudora="autourl">.4ripleyroad.com</a><br>
Belmont, MA
02478<x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><x-tab>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</x-tab><a h

--=====================_23376583==_.ALT--


From: "Lawyers" <lawyers at crowderscoggins dot com>
Subject: Re: Worldmail Bounce Messages
Date: Wed, 24 Apr 2002 17:17:51 -0500

This is a multi-part message in MIME format.

------=_NextPart_000_0056_01C1EBB3.F6CC6BF0
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

My understanding is that these are standard across e-mail servers.  You 
might want to take a look at RFC 1893 which you can find at: 
http://www.rfc-editor.org/rfc/rfc1893.txt

Hope this helps!

Greg Hickel
ghickel at crowderscoggins dot com

  ----- Original Message ----- 
  From: Geof Tillotson 
  To: Subscribers of WorldMail 
  Sent: Wednesday, April 24, 2002 1:58 PM
  Subject: Worldmail Bounce Messages


  To All - 

  I've got users who absolutely need to know why the emails that they 
are sending don't get through.  I'm having a hard time finding a 
compendium of Worldmail bounced message messages.   I've looked through 
the manual and support files I have, no luck yet. 

  In particular, I'm looking for a list that includes the following 
bounce messages and what they mean:

  Action: Failed; Status: 4.4.7 (delivery time expired)

  Action: Failed; Status: 5.6.5 (conversion failed)
          Remote MTA m.dnsix.com: network error

  and any other error messages that Worldmail so happily returns with 
bounces.

  Thanks - 

  Geof

  -0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
  Geof Tillotson                  geof at ackme dot com
  617.484.0570                    617.484.7201 fax
  4 Ripley Road                   www.4ripleyroad.com
  Belmont, MA 02478               www.ackme.com 


------=_NextPart_000_0056_01C1EBB3.F6CC6BF0
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; 
charset=iso-8859-1">
<META content="MSHTML 6.00.2712.300" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT face=Arial size=2>My understanding is that these are 
standard across 
e-mail servers.&nbsp; You might want to take a look at RFC 1893 which 
you can 
find at:&nbsp;<A 
href="http://www.rfc-editor.org/rfc/rfc1893.txt">http://www.rfc-editor.
org/rfc/rfc1893.txt</A></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>Hope this helps!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV>
<DIV><FONT face=Arial size=2>Greg Hickel</FONT></DIV>
<DIV><FONT face=Arial size=2><A 
href="mailto:ghickel at crowderscoggins dot com">ghickel@crowderscoggins dot com</
A></FONT></DIV>
<DIV>&nbsp;</DIV>
<BLOCKQUOTE dir=ltr 
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; 
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
  <DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
  <DIV 
  style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: 
black"><B>From:</B> 
  <A title=geof at ackme dot com href="mailto:geof at ackme dot com">Geof 
Tillotson</A> </DIV>
  <DIV style="FONT: 10pt arial"><B>To:</B> <A 
title=worldmail at lists.pensive dot org 
  href="mailto:worldmail at lists dot pensive dot org">Subscribers of 
WorldMail</A> </DIV>
  <DIV style="FONT: 10pt arial"><B>Sent:</B> Wednesday, April 24, 2002 
1:58 
  PM</DIV>
  <DIV style="FONT: 10pt arial"><B>Subject:</B> Worldmail Bounce 
Messages</DIV>
  <DIV><BR></DIV>To All - <BR><BR>I've got users who absolutely need to 
know why 
  the emails that they are sending don't get through.&nbsp; I'm having a 
hard 
  time finding a compendium of Worldmail bounced message 
messages.&nbsp;&nbsp; 
  I've looked through the manual and support files I have, no luck yet. 
  <BR><BR>In particular, I'm looking for a list that includes the 
following 
  bounce messages and what they mean:<BR><BR><FONT 
  face="Courier New, Courier">Action: Failed; Status: 4.4.7 (delivery 
time 
  expired)<BR><BR>Action: Failed; Status: 5.6.5 (conversion 
  failed)<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; Remote MTA 
m.dnsix.com: 
  network error<BR><BR></FONT>and any other error messages that 
Worldmail so 
  happily returns with bounces.<BR><BR>Thanks - 
<BR><BR>Geof<BR><X-SIGSEP>
  
<P></X-SIGSEP>-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-<B
R>Geof 
  
Tillotson<X-TAB>&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;
&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs
p;&nbsp;</X-TAB>geof at ackme dot com<BR>617.484.0570<X-TAB>&nbsp;&nbsp;&nbsp;&n
bsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TA
B><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TAB>617.484.
7201 
  fax<BR>4 Ripley 
  
Road<X-TAB>&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp
;&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb
sp;&nbsp;</X-TAB><A 
  href="http://www.4ripleyroad.com/" eudora="autourl">www</A><A 
  href="http://www.4ripleyroad.com/" 
  eudora="autourl">.4ripleyroad.com</A><BR>Belmont, MA 
  
02478<X-TAB>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TAB><X-TAB>&nbs
p;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;</X-TAB><A 
  href="http://www.ackme.com/" eudora="autourl">www</A><A 
  href="http://www.ackme.com/" eudora="autourl">.ackme.com</A> 
</P></BLOCKQUOTE></BODY></HTML>

------=_NextPart_000_0056_01C1EBB3.F6CC6BF0--


Date: Wed, 24 Apr 2002 18:42:15 -0500
From: Daniel Julien <daniel.julien at thc.state.tx dot us>
Subject: Re: Worldmail Bounce Messages
At 02:58 PM 4/24/2002 -0400, Geof Tillotson wrote:
In particular, I'm looking for a list that includes the following bounce messages and what they mean:

Action: Failed; Status: 4.4.7 (delivery time expired)

Action: Failed; Status: 5.6.5 (conversion failed)
        Remote MTA m.dnsix.com: network error

For the last one, there is a Worldmail Knowledge Base article. See <http://www.eudora.com/techsupport/kb/1941hq.html>.

--Dan

Date: Wed, 24 Apr 2002 16:33:30 -0400
From: Geof Tillotson <geof at ackme dot com>
Subject: Wierd happenings with Attachments

So, all of a sudden today I'm seeing a bunch of email bounces on the 
server.  They all have a common thread, they each have attachments.   The 
error messages say that the receiving server doesn't support 8bitmime and 
that's why they were being denied.

What's interesting is that the bounces are showing up instantaneously, 
almost as if it's the internal WM server that's giving me the message.

I rebooted the server and the emails with attachments mysteriously started 
to go through again.

Has anyone else seen this behavior?

TIA -

Geof

-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
Geof Tillotson                  geof at ackme dot com
617.484.0570                    617.484.7201 fax
4 Ripley Road                   www.4ripleyroad.com
Belmont, MA 02478               www.ackme.com


Date: Thu, 25 Apr 2002 17:09:50 -0700
From: Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
Subject: RE: Worldmail behind firewall

You could try setting up a caching DNS server inside the firewall, 
and have it talk to a DNS server outside when it needs to.  It might 
get around the immediate problem, and it might be faster (since 
common DNS queries would get answered by the internal resolver).
-- 
Randall Gellens
rg_public.1 at flagg.qualcomm dot com
Opinions are personal;     facts are suspect;     I speak for myself only

From: "Georgios Chatzianastasiou *TTT Global Group S.A.*" <chatzianastasiou at ttt dot gr>
Subject: I can't send mail through web
Date: Sat, 4 May 2002 12:14:05 +0300

Dear friends

We have a server which is used as web and mail server. It runs win 2000
server std edition. As web server we use the iis 5.0 and as mail server
the eudora worldmail server. We have some sites that have contact pages
and in these pages we try to send mail by using command
Server.CreateObject("CDONTS.NewMail") but it doesn't work because the
SMTP service of IIS is stopped because the eudora worldmail server uses
the smtp service.

Is there any object of the worldmail server that we can use to send mail
through our sites?

thanx



Date: Sat, 04 May 2002 06:37:07 -0600
From: Harry McIntosh <harry.mcintosh at cdlearning dot com>
Subject: Re: I can't send mail through web

Hi Georgios:

I don't know of an object that's part of Worldmail that you can use, but 
we've had good luck with a product called AspEmail.  It's inexpensive (it's 
free if you only want basic functions) and does a good job.  For 
information, visit http://persits.com.

Harry McIntosh
Mailtastic

______________________
This email sent using Mailtastic server software.
For information visit http://mailtastic.com.


At 03:14 AM 5/4/02, you wrote:
>Dear friends
>
>We have a server which is used as web and mail server. It runs win 2000
>server std edition. As web server we use the iis 5.0 and as mail server
>the eudora worldmail server. We have some sites that have contact pages
>and in these pages we try to send mail by using command
>Server.CreateObject("CDONTS.NewMail") but it doesn't work because the
>SMTP service of IIS is stopped because the eudora worldmail server uses
>the smtp service.
>
>Is there any object of the worldmail server that we can use to send mail
>through our sites?
>
>thanx



Date: Sat, 04 May 2002 14:44:27 -0400
From: Geof <geof at ackme dot com>
Subject: Re: I can't send mail through web

We also use ASPMail - great little program.

Geof

At 06:37 AM 5/4/2002 -0600, Harry McIntosh wrote:
>Hi Georgios:
>
>I don't know of an object that's part of Worldmail that you can use, but 
>we've had good luck with a product called AspEmail.  It's inexpensive 
>(it's free if you only want basic functions) and does a good job.  For 
>information, visit http://persits.com.
>
>Harry McIntosh
>Mailtastic
>
>______________________
>This email sent using Mailtastic server software.
>For information visit http://mailtastic.com.
>
>
>At 03:14 AM 5/4/02, you wrote:
>>Dear friends
>>
>>We have a server which is used as web and mail server. It runs win 2000
>>server std edition. As web server we use the iis 5.0 and as mail server
>>the eudora worldmail server. We have some sites that have contact pages
>>and in these pages we try to send mail by using command
>>Server.CreateObject("CDONTS.NewMail") but it doesn't work because the
>>SMTP service of IIS is stopped because the eudora worldmail server uses
>>the smtp service.
>>
>>Is there any object of the worldmail server that we can use to send mail
>>through our sites?
>>
>>thanx
>

-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-0-
Geof Tillotson                  geof at ackme dot com
617.484.0570                    617.484.2335 fax


Date: Wed, 8 May 2002 00:41:00 -0400
From: Randall Gellens <rg_public.1 at flagg.qualcomm dot com>
Subject: Re: I can't send mail through web

At 12:14 PM +0300 5/4/02, Georgios Chatzianastasiou *TTT Global Group 
S.A.* wrote:

>  Dear friends
>
>  We have a server which is used as web and mail server. It runs win 2000
>  server std edition. As web server we use the iis 5.0 and as mail server
>  the eudora worldmail server. We have some sites that have contact pages
>  and in these pages we try to send mail by using command
>  Server.CreateObject("CDONTS.NewMail") but it doesn't work because the
>  SMTP service of IIS is stopped because the eudora worldmail server uses
>  the smtp service.
>
>  Is there any object of the worldmail server that we can use to send mail
>  through our sites?
>
>  thanx

WorldMail comes with a command-line utility that can be used to send mail.

Also, you may be able to run IIS SMTP on a different port.

-- 
Randall Gellens
rg_public.1 at flagg.qualcomm dot com
Opinions are personal;     facts are suspect;     I speak for myself only

Date: Thu, 09 May 2002 18:27:01 -0700
From: katie percy <katiepercy at fredfinch dot org>
Subject: klez & eudora

Hi --

I may have missed a thread on this, but are other folks finding that Eudora 
is more vulnerable to klez virus than it has been to other viruses?  We're 
finding that it reads our address book in a way that Melissa et al 
didn't.  I've heard it suggested that this may be due to the "use MS 
viewer" setting -- any ideas on that?  Also, where does that setting live 
in the INI file?  I didn't see anything obvious on a cursory search.

We're having a hard time stopping this little varmint which seems to be 
spreading thru our email and also our network shares.  Our mail server is 
outside the firewall, with a gateway that handles incoming; we're setting 
up a gateway for internal traffic as well, but the mutability of subject 
line & attachment name make it hard to snag.

Anyone have similar experiences/great ideas?

Cheers,

Katie Percy
Fred Finch Youth Center

Date: Thu, 09 May 2002 18:46:29 -0700
From: LHA MIS <mis at lhaarchitects dot com>
Subject: Re: klez & eudora

Katie,

You mentioned that you have a firewall setup, but didn't say anything about 
virus protection.
You have to have a virus shield setup on your Email server, File server and 
all workstations in order to prevent virus caused disasters. I would not 
mess with firewall in this case.

We use McAffee Virus shield on our servers, McAffee Webshield on our email 
server and McAffee virusscan for Workstation on all workstation. All PCs 
get weekly update from the Mcaffee website, the email server checks for 
update once every day!

Also, don't assume, that all of your employees use Eudora for email, I 
"caught" several employees of ours in the past for using Outlook and 
Outlook Express, without my permission. It's enough if only the computer 
that gets infected with a virus have outlook on it, that single computer 
can cause the disaster, that's happening right now at your firm. (let's 
hope, that the user of the infected computer does not have domain admin 
rights!!!) based on your decription though, the originator user probably 
had some admin rights.

This is why usage of Outlook or Ooutlook express is not allowed at our 
firm. Our network hasn't got infected since I know my brain, (60 computer 
users) actually I do receive at least 5-6 warning pop-up windows on my 
monitor screen daily, because the webshield on the email server reports all 
virus infected emails to me that it caught (including the email address of 
the sender and the recepients)

I don't know the answer to your question about the MS viewer setting in 
Eudora, but there is one more thing I would check: make sure that none of 
your employees use outside email servers to send or receive for e.g. 
private email messages.) Who knows if your network got infected by an email 
virus that didn't even go through your email server?

Geza


Geza Levai
LAN Administrator
Leidenfrost/Horowitz & Associates
818-246-6050 ext.62
Glendale, CA



From: Garry Wiegand <squeezix at ithaca dot com>
Subject: Re: klez & eudora
Date: Thu, 09 May 2002 20:44:20 -0700

Katie Percy wrote:
>I may have missed a thread on this, but are other folks finding that 
Eudora 
>is more vulnerable to klez virus than it has been to other viruses?  
We're 
>finding that it reads our address book in a way that Melissa et al 
>didn't.  I've heard it suggested that this may be due to the "use MS 
>viewer" setting -- any ideas on that?  Also, where does that setting 
live 
>in the INI file?  I didn't see anything obvious on a cursory search.

Yes, we got badly infected, with three different versions of Klez, and we
also have no earthly idea how. Everyone (all of two of us) were 
definitely
using only Eudora, and definitely not clicking on any attachments. And 
for
good measure, I have Spamcop scrubbing all of my mail *before* it arrives
 in
my Pop box, and I have Norton Antivirus scrubbing everyone's mail as it
leaves any of the Worldmail Pop boxes. Nonetheless, infection occurred. 

All I could come up with was that "Microsoft viewer" idea. Which doesn't 
make
sense either, because Klez is not published as being triggerable on that 
bad
Microsoft MIME defect.

Anyhow. Turn off "use Microsoft viewer" in Eudora. Eudora's viewer is 
fine
for anything I ever receive. The switch is in 
Eudora/Tools/Options/Viewing.

Hm. Is there *any* chance that Worldmail itself could be triggering this
little gem of a virus? ...I've seen hints that Worldmail interprets Mime
attachments as they go by. Though I never could figure out any reason why
 it
should want to do so. (Um, no, we're not making use of Worldmail's IMAP
handling.)

Garry

Date: Thu, 09 May 2002 21:23:08 -0700
From: katie percy <katiepercy at fredfinch dot org>
Subject: Fwd: Re: klez & eudora

Hi all --

More detail on our setup, fwiw.  Worldmail on own server outside firewall, 
was running NAV 2000 standalone (we've since made it a client of NAV Corp 
which works faster & less freezes).  Gateway is Symantec Enterprise Gateway 
(which has nav built in); we've excluded all but .xls, .doc and .rtf mail 
attachments for now (logs show a lot of folks are not getting jpg's which I 
assume are the usual humor or non-work related stuff).  Inside the firewall 
we have NAV Corp Edition running, which has each workstation as a 
client.  We use SonicWall as a firewall.  We are trying to (just took a few 
days off, not sure where it's at) set up an internal gateway & change our 
NT login script to edit the Eudora.ini file to change SMTP address to this 
gateway so that we keep virus from spreading inside our domain.  I'll try 
the line suggested in this script also to see if we can change viewer at 
the same time -- but where is that in the ini?

I dunno about Worldmail interpreting mime attachments, but I have had 
random cases of users having attachments try to "embed" rather than attach, 
even tho settings were correct.

We don't allow Outlook or OE either -- I did let 2 power-users have it for 
a while, people I knew would practice "safe mail" but then we got Nimda... 
I've become a real Nazi about unauthorized programs that can cause security 
breaches & delete every copy of OE and WAB that I find.

I've talked to other folks who have McAfee on their networks with Eudora 
that don't have problems with Klez either.  I kind of hate McAfee, but I 
wonder if there's something there.  Or perhaps like someone said it's a 
vulnerability in Worldmail rather than Eudora.

Our various flavors of virus protection seem to be catching most 
infections, but I'm concerned that we can't stop the ping-pong'ing of this 
virus long enough to get a sense of who might really be infected as some 
folks certainly opened the attachments if they got them.  (An executive who 
shall remain nameless got an email she thought was a virus & forwarded it 
to me to check out... drum roll please...).

I'll try the viewer thing & see if it makes any diff & will post back.

Thanks!


>X-NAV-TimeoutProtection0: X
>X-NAV-TimeoutProtection1: X
>X-NAV-TimeoutProtection2: X
>X-NAV-TimeoutProtection3: X
>X-NAV-TimeoutProtection4: X
>X-NAV-TimeoutProtection5: X
>X-NAV-TimeoutProtection6: X
>From: Garry Wiegand <squeezix at ithaca dot com>
>To: Subscribers of WorldMail <worldmail at lists.pensive dot org>
>Subject: Re: klez & eudora
>Date: Thu, 09 May 2002 20:44:20 -0700
>List-Subscribe: <mailto:worldmail-request at lists.pensive dot org?body=subscribe>
>List-Unsubscribe: 
><mailto:worldmail-request at lists.pensive dot org?body=unsubscribe>
>List-Archive: <http://www.pensive.org/mailing_lists/archives/worldmail/>
>List-Post: <mailto:worldmail at lists.pensive dot org>
>List-Owner: Pensive Mailing List Admin <listmaster at lists.pensive dot org>
>List-Help: http://www.pensive.org/Mailing_Lists/
>List-Id: <WorldMail.lists.pensive.org>
>List-Software: AutoShare 4.2.3 by Mikael Hansen
>X-Mailer: Forte Agent 1.9/32.560
>
>Katie Percy wrote:
> >I may have missed a thread on this, but are other folks finding that Eudora
> >is more vulnerable to klez virus than it has been to other viruses?  We're
> >finding that it reads our address book in a way that Melissa et al
> >didn't.  I've heard it suggested that this may be due to the "use MS
> >viewer" setting -- any ideas on that?  Also, where does that setting live
> >in the INI file?  I didn't see anything obvious on a cursory search.
>
>Yes, we got badly infected, with three different versions of Klez, and we
>also have no earthly idea how. Everyone (all of two of us) were definitely
>using only Eudora, and definitely not clicking on any attachments. And for
>good measure, I have Spamcop scrubbing all of my mail *before* it arrives in
>my Pop box, and I have Norton Antivirus scrubbing everyone's mail as it
>leaves any of the Worldmail Pop boxes. Nonetheless, infection occurred.
>
>All I could come up with was that "Microsoft viewer" idea. Which doesn't make
>sense either, because Klez is not published as being triggerable on that bad
>Microsoft MIME defect.
>
>Anyhow. Turn off "use Microsoft viewer" in Eudora. Eudora's viewer is fine
>for anything I ever receive. The switch is in Eudora/Tools/Options/Viewing.
>
>Hm. Is there *any* chance that Worldmail itself could be triggering this
>little gem of a virus? ...I've seen hints that Worldmail interprets Mime
>attachments as they go by. Though I never could figure out any reason why it
>should want to do so. (Um, no, we're not making use of Worldmail's IMAP
>handling.)
>
>Garry


From: "Paul Webster" <paul at spidersweb.freeserve.co dot uk>
Subject: RE: klez & eudora
Date: Fri, 10 May 2002 07:19:47 +0100

> From: Garry Wiegand [mailto:squeezix at ithaca dot com]
> Sent: 10 May 2002 04:44
> To: Subscribers of WorldMail
> Subject: Re: klez & eudora
<snip>
> Hm. Is there *any* chance that Worldmail itself could be triggering this
> little gem of a virus? ...I've seen hints that Worldmail interprets Mime
> attachments as they go by. Though I never could figure out any
> reason why it
> should want to do so. (Um, no, we're not making use of Worldmail's IMAP
> handling.)
I cannot think of any way that Worldmail could itself execute a virus found
in an email.
Worldmail could not execute a virus within the context of a desktop users
remote PC, not does it execute attachments that it finds in
in-bound/outbound mail.  It does not use any 3rd-party "viewer" to look
wihtin attachments.

One thing that I did see ... for those users that know that the virus is
around and that know that they run Symantec ... then perhaps they could be
vulnerable to one way that the virus is reported as being ditributed ... as
a fake message from Symantec.  To quote:
"It has been reported that W32.Klez dot E@mm may arrive in the following email
message promoting a Symantec removal tool. Symantec never sends unsolicited
email; the attachment should be deleted.

Subject: W32.Elkern removal tools
"
Perhaps a user would feel that they didn't launch any attachments (except
the one with the virus cleaner attached ...).

Paul


Date: Fri, 10 May 2002 08:09:12 -0500 (CDT)
Subject: Re: klez & eudora
From: "Elliott Bujan" <ebujan at rentokil-tps dot com>

We only rely on Eudora software for our server.  Although we use MS
Outlook Express for email clients, we have a double antivirus shield: we
use MessageLabs virus scanning service for all of our outgoing/incoming
mail and McAfee (shortly Trend) antivirus client software for all of our
PCs.
Everyday I get notifications from Messagelabs that potentially
Klez/??infected messages were sent to one of my users.
We do try to keep the preview pane off from all of the e-mail clients,
because of previous security holes and I don't know if this is an issue
w/Eudora clients.




-- 
========
Elliott Bujan
MIS Support /\ 6am - 2:30pm CST
Rentokil, TPS  *:* www.rentokil-tps.com
847 634 4250 .x281
=========

<quote who="Garry Wiegand">
> Katie Percy wrote:
>>I may have missed a thread on this, but are other folks finding that
>>Eudora  is more vulnerable to klez virus than it has been to other
>>viruses?  We're  finding that it reads our address book in a way that
>>Melissa et al  didn't.  I've heard it suggested that this may be due to
>>the "use MS  viewer" setting -- any ideas on that?  Also, where does
>>that setting live  in the INI file?  I didn't see anything obvious on a
>>cursory search.
>
> Yes, we got badly infected, with three different versions of Klez, and
> we also have no earthly idea how. Everyone (all of two of us) were
> definitely using only Eudora, and definitely not clicking on any
> attachments. And for good measure, I have Spamcop scrubbing all of my
> mail *before* it arrives in my Pop box, and I have Norton Antivirus
> scrubbing everyone's mail as it leaves any of the Worldmail Pop boxes.
> Nonetheless, infection occurred.
>
> All I could come up with was that "Microsoft viewer" idea. Which
> doesn't make sense either, because Klez is not published as being
> triggerable on that bad Microsoft MIME defect.
>
> Anyhow. Turn off "use Microsoft viewer" in Eudora. Eudora's viewer is
> fine for anything I ever receive. The switch is in
> Eudora/Tools/Options/Viewing.
>
> Hm. Is there *any* chance that Worldmail itself could be triggering
> this little gem of a virus? ...I've seen hints that Worldmail
> interprets Mime attachments as they go by. Though I never could figure
> out any reason why it should want to do so. (Um, no, we're not making
> use of Worldmail's IMAP handling.)
>
> Garry
>
> ________________________________________________________________________
> This email has been scanned for all viruses by the MessageLabs SkyScan
> service. For more information on a proactive anti-virus service working
> around the clock, around the globe, visit http://www.messagelabs.com
> ________________________________________________________________________




________________________________________________________________________
This email has been scanned for all viruses by the MessageLabs SkyScan
service. For more information on a proactive anti-virus service working
around the clock, around the globe, visit http://www.messagelabs.com
________________________________________________________________________

Last updated on 10 May 2002 by Pensive Mailing List Admin