Can anyone tell me why these emails are bouncing?
Question asked by Nick Hayer - May 8, 2015 at 6:56 AM
Unanswered
 
SMTP log
2015.05.07] 09:37:06 [192.168.254.23][42996424] rsp: 220 mail.madriveraccess.net
[2015.05.07] 09:37:06 [192.168.254.23][42996424] connected at 5/7/2015 9:37:06 AM
[2015.05.07] 09:37:06 [192.168.254.23][42996424] IP in whitelist
[2015.05.07] 09:37:06 [192.168.254.23][42996424] IP in authentication bypass
[2015.05.07] 09:37:06 [192.168.254.23][42996424] cmd: EHLO spamstar2.skywaves.net
[2015.05.07] 09:37:06 [192.168.254.23][42996424] rsp: 250-mail.madriveraccess.net Hello [192.168.254.23]250-SIZE 78643200250-AUTH LOGIN CRAM-MD5250-8BITMIME250 OK
[2015.05.07] 09:37:06 [192.168.254.23][42996424] cmd: MAIL FROM:<bmaginniss@manchesterchamber.net> SIZE=32769087
[2015.05.07] 09:37:06 [192.168.254.23][42996424] rsp: 250 OK <bmaginniss@manchesterchamber.net> Sender ok
[2015.05.07] 09:37:06 [192.168.254.23][42996424] cmd: RCPT To:<ruth@vt-summerfestival.com>
[2015.05.07] 09:37:06 [192.168.254.23][42996424] rsp: 250 OK <ruth@vt-summerfestival.com> Recipient ok
[2015.05.07] 09:37:06 [192.168.254.23][42996424] cmd: DATA
[2015.05.07] 09:37:06 [192.168.254.23][42996424] rsp: 354 Start mail input; end with <CRLF>.<CRLF>
[2015.05.07] 09:37:08 [192.168.254.23][42996424] rsp: 250 OK
[2015.05.07] 09:37:08 [192.168.254.23][42996424] Data transfer succeeded, writing mail to 29627964.eml
[2015.05.07] 09:37:08 [192.168.254.23][42996424] cmd: QUIT
[2015.05.07] 09:37:08 [192.168.254.23][42996424] rsp: 221 Service closing transmission channel
[2015.05.07] 09:37:08 [192.168.254.23][42996424] disconnected at 5/7/2015 9:37:08 AM
[2015.05.07] 09:43:38 [192.168.254.23][25907826] rsp: 220 mail.madriveraccess.net
[2015.05.07] 09:43:38 [192.168.254.23][25907826] connected at 5/7/2015 9:43:38 AM
[2015.05.07] 09:43:38 [192.168.254.23][25907826] IP in whitelist
[2015.05.07] 09:43:38 [192.168.254.23][25907826] IP in authentication bypass
[2015.05.07] 09:43:38 [192.168.254.23][25907826] cmd: EHLO spamstar2.skywaves.net
[2015.05.07] 09:43:38 [192.168.254.23][25907826] rsp: 250-mail.madriveraccess.net Hello [192.168.254.23]250-SIZE 78643200250-AUTH LOGIN CRAM-MD5250-8BITMIME250 OK
[2015.05.07] 09:43:38 [192.168.254.23][25907826] cmd: MAIL FROM:<bmaginniss@manchesterchamber.net> SIZE=32777067
[2015.05.07] 09:43:38 [192.168.254.23][25907826] rsp: 250 OK <bmaginniss@manchesterchamber.net> Sender ok
[2015.05.07] 09:43:38 [192.168.254.23][25907826] cmd: RCPT To:<info@vt-summerfestival.com>
[2015.05.07] 09:43:38 [192.168.254.23][25907826] rsp: 250 OK <info@vt-summerfestival.com> Recipient ok
[2015.05.07] 09:43:38 [192.168.254.23][25907826] cmd: DATA
[2015.05.07] 09:43:38 [192.168.254.23][25907826] rsp: 354 Start mail input; end with <CRLF>.<CRLF>
[2015.05.07] 09:43:39 [192.168.254.23][25907826] rsp: 250 OK
[2015.05.07] 09:43:39 [192.168.254.23][25907826] Data transfer succeeded, writing mail to 29628012.eml
[2015.05.07] 09:43:39 [192.168.254.23][25907826] cmd: QUIT
[2015.05.07] 09:43:39 [192.168.254.23][25907826] rsp: 221 Service closing transmission channel
[2015.05.07] 09:43:39 [192.168.254.23][25907826] disconnected at 5/7/2015 9:43:39 AM
 
DELIVERY
[2015.05.07] 09:38:41 [27964] Delivery started for bmaginniss@manchesterchamber.net at 9:38:41 AM
[2015.05.07] 09:38:41 [27964] Bounce email written to 29627974.eml
[2015.05.07] 09:38:41 [27964] Delivery for bmaginniss@manchesterchamber.net to ruth@vt-summerfestival.com has completed (Bounced)
[2015.05.07] 09:45:22 [28012] Delivery started for bmaginniss@manchesterchamber.net at 9:45:22 AM
[2015.05.07] 09:45:22 [28012] Bounce email written to 29628026.eml
[2015.05.07] 09:45:22 [28012] Delivery for bmaginniss@manchesterchamber.net to info@vt-summerfestival.com has completed (Bounced)
[2015.05.07] 09:45:25 [28012] Delivery finished for bmaginniss@manchesterchamber.net at 9:45:25 AM    [id:x29628012]
 
Thank you
 
-Nick
 
 

8 Replies

Reply to Thread
2
Bruce Barnes Replied
The most likely cause for the non-delivery is that about half of your MX servers have bad rDNS entries: IE: they don't match the IP address announced in your MX server's connection header:
 

       SERVER                   IP ADDRESS            MAPS BACK TO
 mx.spamexperts.com.        103.254.154.3    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        82.192.64.142    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        46.165.222.180   delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        82.192.64.145    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        207.244.83.249   delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        94.75.244.163    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        46.165.209.232   delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        198.7.58.152     delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        82.192.90.130    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        198.7.58.155     delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        188.138.56.27    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        108.59.11.79     delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        85.17.178.207    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        188.138.56.29    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        199.115.117.7    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        198.7.58.153     delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        46.165.223.16    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        46.165.197.238   delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        94.75.244.176    delivery.antispamcloud.com. ? 
 mx.spamexperts.com.        46.165.223.3     delivery.antispamcloud.com. ? 
 fallbackmx.spamexperts.eu. 207.244.83.250   delivery.antispamcloud.com. ? 
 
 
Bruce Barnes
ChicagoNetTech Inc
brucecnt@comcast.net

Phonr: (773) 491-9019
Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting
0
Nick Hayer Replied
nice try. Wrong answer.
0
Bruce Barnes Replied
Whether you like the answer or not, it is a valid reason. If a message from you hit one of our servers, we would bounce it, unceremoniously, for not having valid rDNS - just like AOL, OUTLOOK.COM, YAHOO! and GMAIL.
Bruce Barnes
ChicagoNetTech Inc
brucecnt@comcast.net

Phonr: (773) 491-9019
Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting
0
Steve Reid Replied
If you expect any help here you are going to have to give up these kind of answers and respond with something of some value. Bruces info seems correct to me too.
0
Nick Hayer Replied
Help would be nice.
 
Thank you
0
Matt Petty Replied
Employee Post
Did you look further into Bruce's response and check your DNS.
Matt Petty
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
1
Scarab Replied
Are your Delivery Logs set to "Detailed"? (SETTINGS > LOG SETTINGS) The reason I ask is because if they are set to "Detailed" then Smartermail isn't attempting delivery at all before bouncing them. The only reasons this would happen is if:
 
A.) Your Mail Server could not do a DNS lookup for the recipient's MX Servers (the recipient's DNS Servers may have been temporarily unavailable or unreachable at the time) 
B.) the message is blocked as Outgoing due to SMTP Blocking rule (SECURITY > ADVANCED SETTINGS > SMTP BLOCKING)...I'd check for use of a wildcard rule.
 
Otherwise your Delivery Logs are set to Normal or Exceptions Only which doesn't help troubleshooting what went wrong (the recipient's MX Server could have rejected it for a number of reasons and without "Detailed" Delivery Logs anyone's guess is going to be a guess). Do you know what the NDR (Non-deliverable Response) of the bounce-back stated?
0
SmarterUser Replied
A pleasant attitude would be nice, too.

Reply to Thread