Messages to *.mail.protection.outlook.com Fail with 601 Error
Problem reported by David Jamell - May 22, 2015 at 4:00 PM
Submitted
I have had a client report two separate instances trying to send to two different domains (allscripts.com and infian.com) where a message came back Undeliverable with the error Remote host said: 601 Attempted to send the message to the following ip's:
 
Below is the Header of the Return Email and the Delivery Log File Transcript for the Original Message
 
 
From: System Administrator [mailto:System Administrator]
Sent: Thursday, May 21, 2015 6:47 PM
To: abirkhead@fsdialysis.com
Subject: Delivery Failure

Could not deliver message to the following recipient(s):
Failed Recipient: bevin.patterson@allscripts.com
Reason: Remote host said: 601 Attempted to send the message to the following
ip's:
207.46.163.247, 207.46.163.138, 207.46.163.215

-- The header and top 20 lines of the message follows --
Received: from APRILWIN7PRO (wsip-184-177-84-106.ks.ks.cox.net
[184.177.84.106]) by mail.fsdialysis.com with SMTP
(version=Tls
cipher=Aes256 bits=256);
Thu, 21 May 2015 16:31:52 -0400
From: "April Birkhead" <abirkhead@fsdialysis.com>
To: "'Patterson, Bevin'" <Bevin.Patterson@allscripts.com>
References:
<BY2PR01MB1622FB1FAB05A4E31E820EA6F4D50@BY2PR01MB1622.prod.exchangelabs.com>
<BLUPR01MB068150C674DE9BD87AF42BE84D50@BLUPR01MB068.prod.exchangelabs.com>
<!&!AAAAAAAAAAAYAAAAAAAAAHthe8z9j4tKqjxZXb1GGunCgAAAEAAAAAPMvKc1w/9KtIfglfps
3+UBAAAAAA==@fsdialysis.com>
<BLUPR01MB068DC5520E16543AC91C52F84D10@BLUPR01MB068.prod.exchangelabs.com>
<!&!AAAAAAAAAAAYAAAAAAAAAHthe8z9j4tKqjxZXb1GGunCgAAAEAAAAEu5AP3rt89Amr/6eScK
wp0BAAAAAA==@fsdialysis.com>
<CO1PR01MB079F1EA417F4379D1BC3B7A84D00@CO1PR01MB079.prod.exchangelabs.com>
<!&!AAAAAAAAAAAYAAAAAAAAAHthe8z9j4tKqjxZXb1GGunCgAAAEAAAAJcej49t4RpArhWFzx+w
wrEBAAAAAA==@fsdialysis.com>
<BLUPR01MB0689F55D09CA60B6C36BEE184C20@BLUPR01MB068.prod.exchangelabs.com>
<!&!AAAAAAAAAAAYAAAAAAAAAHthe8z9j4tKqjxZXb1GGunCgAAAEAAAAFGy3uKLL1dGiVWdCK29
TnwBAAAAAA==@fsdialysis.com>
<BLUPR01MB06807CE16B30E43A519A10484C20@BLUPR01MB068.prod.exchangelabs.com>
<!&!AAAAAAAAAAAYAAAAAAAAAHthe8z9j4tKqjxZXb1GGunCgAAAEAAAAGf8/vDepAFPpihVUwEZ
BSEBAAAAAA==@fsdialysis.com> <BLUPR01MB068D2DBB95B4A
BB4EEC666B84C10@BLUPR01MB068.prod.exchangelabs.com>
In-Reply-To:
Subject: RE: Contract Questions - 1604814
Date: Thu, 21 May 2015 15:29:50 -0500
Message-ID:
<!&!AAAAAAAAAAAYAAAAAAAAAHthe8z9j4tKqjxZXb1GGunCgAAAEAAAAM8hfsZi36pAsxcjuTr4
SJYBAAAAAA==@fsdialysis.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0022_01D093DA.FA87ECF0"
X-Mailer: Microsoft Outlook 14.0
Thread-Index:
AQJBrt6crgBcYMUj434KGRAgD6QfkAIjiPT6AzT7i/8Cr+qiRALmABqpAiZG1TEC9AX3AwJdpNM9
AYT6xcoBHnQdbgFnhJReAawSSzqb471+QIAAArpQ
Content-Language: en-us
Disposition-Notification-To: "April Birkhead" <abirkhead@fsdialysis.com>
This is a multipart message in MIME format.
 
--------------------------------------------------------------------------
 
16:47:04 [70281] Sending remote mail for abirkhead@fsdialysis.com
16:47:04 [70281] Initiating connection to 207.46.163.247
16:47:04 [70281] Connecting to 207.46.163.247:25 (Id: 1)
16:47:04 [70281] Binding to local IP 207.54.144.134:0 (Id: 1)
16:47:04 [70281] Connection to 207.46.163.247:25 from 207.54.144.134:56881 succeeded (Id: 1)
16:47:04 [70281] RSP: 220 ***************************************************************************************************************
16:47:04 [70281] CMD: EHLO mail.fsdialysis.com
16:47:04 [70281] RSP: 250-BY2FFO11FD048.mail.protection.outlook.com Hello [207.54.144.134]
16:47:04 [70281] RSP: 250-SIZE 157286400
16:47:04 [70281] RSP: 250-PIPELINING
16:47:04 [70281] RSP: 250-DSN
16:47:04 [70281] RSP: 250-ENHANCEDSTATUSCODES
16:47:04 [70281] RSP: 250-XXXXXXXA
16:47:04 [70281] RSP: 250-8BITMIME
16:47:04 [70281] RSP: 250-BINARYMIME
16:47:04 [70281] RSP: 250 XXXXXXXB
16:47:04 [70281] CMD: MAIL FROM:<abirkhead@fsdialysis.com> SIZE=86050
16:47:04 [70281] RSP: 250 2.1.0 Sender OK
16:47:04 [70281] CMD: RCPT TO:<bevin.patterson@allscripts.com>
16:47:05 [70281] RSP: 250 2.1.5 Recipient OK
16:47:05 [70281] CMD: DATA
16:47:05 [70281] RSP: 354 Start mail input; end with <CRLF>.<CRLF>
16:47:05 [70281] Exception: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.Socket.Send(Byte[] buffer)
   at RelayServer.Clients.SMTP.SmtpClientSession.SendData(StreamReader )
   at RelayServer.Clients.SMTP.SmtpClientSession.SendData()
   at RelayServer.Clients.SMTP.SmtpClientSession.#OI()
   at RelayServer.Clients.SMTP.SmtpClientSession.StartProcessing()
16:47:05 [70281] Initiating connection to 207.46.163.138
16:47:05 [70281] Connecting to 207.46.163.138:25 (Id: 2)
16:47:05 [70281] Binding to local IP 207.54.144.134:0 (Id: 2)
16:47:05 [70281] Connection to 207.46.163.138:25 from 207.54.144.134:56882 succeeded (Id: 2)
16:47:05 [70281] RSP: 220 ****************************************************************************************************************
16:47:05 [70281] CMD: EHLO mail.fsdialysis.com
16:47:05 [70281] RSP: 250-BN1AFFO11FD023.mail.protection.outlook.com Hello [207.54.144.134]
16:47:05 [70281] RSP: 250-SIZE 157286400
16:47:05 [70281] RSP: 250-PIPELINING
16:47:05 [70281] RSP: 250-DSN
16:47:05 [70281] RSP: 250-ENHANCEDSTATUSCODES
16:47:05 [70281] RSP: 250-XXXXXXXA
16:47:05 [70281] RSP: 250-8BITMIME
16:47:05 [70281] RSP: 250-BINARYMIME
16:47:05 [70281] RSP: 250 XXXXXXXB
16:47:05 [70281] CMD: MAIL FROM:<abirkhead@fsdialysis.com> SIZE=86050
16:47:05 [70281] RSP: 250 2.1.0 Sender OK
16:47:05 [70281] CMD: RCPT TO:<bevin.patterson@allscripts.com>
16:47:05 [70281] RSP: 250 2.1.5 Recipient OK
16:47:05 [70281] CMD: DATA
16:47:05 [70281] RSP: 354 Start mail input; end with <CRLF>.<CRLF>
16:47:05 [70281] Exception: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.Socket.Send(Byte[] buffer)
   at RelayServer.Clients.SMTP.SmtpClientSession.SendData(StreamReader )
   at RelayServer.Clients.SMTP.SmtpClientSession.SendData()
   at RelayServer.Clients.SMTP.SmtpClientSession.#OI()
   at RelayServer.Clients.SMTP.SmtpClientSession.StartProcessing()
16:47:05 [70281] Initiating connection to 207.46.163.170
16:47:05 [70281] Connecting to 207.46.163.170:25 (Id: 3)
16:47:05 [70281] Binding to local IP 207.54.144.134:0 (Id: 3)
16:47:05 [70281] Connection to 207.46.163.170:25 from 207.54.144.134:56883 succeeded (Id: 3)
16:47:05 [70281] RSP: 220 ****************************************************************************************************************
16:47:05 [70281] CMD: EHLO mail.fsdialysis.com
16:47:05 [70281] RSP: 250-BN1BFFO11FD017.mail.protection.outlook.com Hello [207.54.144.134]
16:47:05 [70281] RSP: 250-SIZE 157286400
16:47:05 [70281] RSP: 250-PIPELINING
16:47:05 [70281] RSP: 250-DSN
16:47:05 [70281] RSP: 250-ENHANCEDSTATUSCODES
16:47:05 [70281] RSP: 250-XXXXXXXA
16:47:05 [70281] RSP: 250-8BITMIME
16:47:05 [70281] RSP: 250-BINARYMIME
16:47:05 [70281] RSP: 250 XXXXXXXB
16:47:05 [70281] CMD: MAIL FROM:<abirkhead@fsdialysis.com> SIZE=86050
16:47:05 [70281] RSP: 250 2.1.0 Sender OK
16:47:05 [70281] CMD: RCPT TO:<bevin.patterson@allscripts.com>
16:47:05 [70281] RSP: 250 2.1.5 Recipient OK
16:47:05 [70281] CMD: DATA
16:47:05 [70281] RSP: 354 Start mail input; end with <CRLF>.<CRLF>
16:47:05 [70281] Exception: An existing connection was forcibly closed by the remote host
   at System.Net.Sockets.Socket.Send(Byte[] buffer)
   at RelayServer.Clients.SMTP.SmtpClientSession.SendData(StreamReader )
   at RelayServer.Clients.SMTP.SmtpClientSession.SendData()
   at RelayServer.Clients.SMTP.SmtpClientSession.#OI()
   at RelayServer.Clients.SMTP.SmtpClientSession.StartProcessing()

4 Replies

Reply to Thread
0
I'm seeing this with other domains in different SmarterMail Installs.  Any ideas?
 
-----Original Message-----
From: System Administrator [mailto:System Administrator]
Sent: Wednesday, June 03, 2015 2:59 PM
To: cynde@capitalabstracttitle.com
Subject: Delivery Failure


Could not deliver message to the following recipient(s):

Failed Recipient: tina@hajattorneys.com
Reason: Remote host said: 601 Attempted to send the message to the following
ip's:
192.185.190.26

Failed Recipient: john@hajattorneys.com
Reason: Remote host said: 601 Attempted to send the message to the following
ip's:
192.185.190.26


-- The header and top 20 lines of the message follows --

Received: from brookewin7pro (wsip-70-182-30-202.fv.ks.cox.net
[70.182.30.202]) by mail.capitalabstracttitle.com with SMTP
(version=Tls
cipher=Aes256 bits=256);
Wed, 3 Jun 2015 12:43:23 -0400
Return-Receipt-To: "Cynde Berry" <cynde@capitalabstracttitle.com>
From: "Cynde Berry" <cynde@capitalabstracttitle.com>
To: "John Alford" <john@hajattorneys.com>
Cc: "Tina Nelke" <tina@hajattorneys.com>
References:
<!&!AAAAAAAAAAAYAAAAAAAAAPW7Ct1TRkVGryaHu/tS7XjCgAAAEAAAAD17whYP3tFKi2f7hEDz
1CsBAAAAAA==@capitalabstracttitle.com>
<036a01d09d54$0692ebd0$13b8c370$@hajattorneys.com>
<!&!AAAAAAAAAAAYAAAAAAAAAPW7Ct1TRkVGryaHu/tS7XjCgAAAEAAAABcbpb5twkBAnsmm1xD5
4mwBAAAAAA==@capitalabstracttitle.com>
<038801d09d55$409b3980$c1d1ac80$@hajattorneys.com>
<!&!AAAAAAAAAAAYAAAAAAAAAPW7Ct1TRkVGryaHu/tS7XjCgAAAEAAAAPdFFGo4YM1OmHylZOLb
kXgBAAAAAA==@capitalabstracttitle.com>
<03f201d09d5a$7760bb70$66223250$@hajattorneys.com>
<!&!AAAAAAAAAAAYAAAAAAAAAPW7Ct1TRkVGryaHu/tS7XjCgAAAEAAAAF+jDLnY2hFJoK5aLcxj
GoMBAAAAAA==@capitalabstracttitle.com>
<!&!AAAAAAAAAAAYAAAAAAAAAHl7oD3XPCJLsRdcgNkWn0bCgAAAEAAAAKUfGnpXV2VJmFsrzPqV
oDIBAAAAAA==@capitalabstracttitle.com>
<651bdb1c214545278ab2bd9d7f17d119@BLUPR94MB0098.063d.mgd.msft.net>
<!&!AAAAAAAAAAAYAAAAAAAAAHl7oD3XPCJLsRdcgNkWn0bCgAAAEAAAACs/MJz4l3RBvL6gyKgE
gkkBAAAAAA==@capitalabstracttitle.com>
<!&!AAAAAAAAAAAYAAAAAAAAAPW7Ct1TRkVGryaHu/tS7XjCgAAAEAAAAGTieKsqcApPjgodN4yu
GKgBAAAAAA==@c
apitalabstracttitle.com>
<BN3PR0701MB1653B079D50068E982FF584B9DB40@BN3PR0701MB1653.namprd07.prod.outl
ook.com>
In-Reply-To:
<BN3PR0701MB1653B079D50068E982FF584B9DB40@BN3PR0701MB1653.namprd07.prod.outl
ook.com>
Subject: Zero Mountain Rates
Date: Wed, 3 Jun 2015 11:42:00 -0500
Message-ID:
<!&!AAAAAAAAAAAYAAAAAAAAAPW7Ct1TRkVGryaHu/tS7XjCgAAAEAAAAFxITpTiIOBEn2QVkaCz
eYEBAAAAAA==@capitalabstracttitle.com>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_003F_01D09DF2.4E43B150"
X-Mailer: Microsoft Outlook 14.0
Thread-Index:
AQNpwn+o3nBigVom/cdBdtbfwEy0rQGkM6rCApk1xYwCNv57fQJBPuOyAwJndu4CSJiBwwGanYQF
AT4bnY4B0CXC1AH086hIAsb0qMWZrYJs4A==
Content-Language: en-us
Disposition-Notification-To: "Cynde Berry" <cynde@capitalabstracttitle.com>

This is a multipart message in MIME format.

------=_NextPart_000_003F_01D09DF2.4E43B150
Content-Type: multipart/alternative;
boundary="----=_NextPart_001_0040_01D09DF2.4E43B150"


------=_NextPart_001_0040_01D09DF2.4E43B150
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
 
-------------------------------------------------------------------------
 
Relevent SMTP Log Entries
 
[2015.06.03] 12:43:23 [28241] Delivery started for cynde@capitalabstracttitle.com at 12:43:23 PM
[2015.06.03] 12:43:26 [28241] Skipping spam checks: No local recipients
[2015.06.03] 12:43:30 [28241] Sending remote mail for cynde@capitalabstracttitle.com
[2015.06.03] 12:43:30 [28241] Initiating connection to 192.185.190.26
[2015.06.03] 12:43:30 [28241] Connecting to 192.185.190.26:25 (Id: 1)
[2015.06.03] 12:43:30 [28241] Binding to local IP 207.54.144.135:0 (Id: 1)
[2015.06.03] 12:43:30 [28241] Connection to 192.185.190.26:25 from 207.54.144.135:50441 succeeded (Id: 1)
[2015.06.03] 12:43:30 [28241] RSP: 220-****************************************************************************
[2015.06.03] 12:43:30 [28241] RSP: 220-*********************************************************************
[2015.06.03] 12:43:30 [28241] RSP: 220 *******************
[2015.06.03] 12:43:30 [28241] CMD: EHLO mail.capitalabstracttitle.com
[2015.06.03] 12:43:30 [28241] RSP: 250-fuson.websitewelcome.com Hello mail.capitalabstracttitle.com [207.54.144.135]
[2015.06.03] 12:43:30 [28241] RSP: 250-SIZE 52428800
[2015.06.03] 12:43:30 [28241] RSP: 250-8BITMIME
[2015.06.03] 12:43:30 [28241] RSP: 250-PIPELINING
[2015.06.03] 12:43:30 [28241] RSP: 250-AUTH PLAIN LOGIN
[2015.06.03] 12:43:30 [28241] RSP: 250-XXXXXXXA
[2015.06.03] 12:43:30 [28241] RSP: 250 XXXB
[2015.06.03] 12:43:30 [28241] CMD: MAIL FROM:<cynde@capitalabstracttitle.com> SIZE=43631
[2015.06.03] 12:43:31 [28241] RSP: 250 OK
[2015.06.03] 12:43:31 [28241] CMD: RCPT TO:<tina@hajattorneys.com>
[2015.06.03] 12:43:31 [28241] RSP: 250 Accepted
[2015.06.03] 12:43:31 [28241] CMD: RCPT TO:<john@hajattorneys.com>
[2015.06.03] 12:43:31 [28241] RSP: 250 Accepted
[2015.06.03] 12:43:31 [28241] CMD: DATA
[2015.06.03] 12:43:31 [28241] RSP: 354 Enter message, ending with "." on a line by itself
[2015.06.03] 12:43:31 [28241] Exception: An existing connection was forcibly closed by the remote host
0
Employee Replied
Employee Post
Are you replacing the 220 information with asterisks or is that what the logs show?
 
I've seen firewalls that asterisk out the 220 and those generally have some rule that interferes with the SMTP traffic.  So if those asterisks are in the SmarterMail logs, then I'm fairly certain a firewall is the causing the issue you are seeing.
0
No, I didn't change a thing.
 
I have SSL/TLS setup and after checking MXToolbox.com and CheckTLS I think I may have an issue there.
 
The odd thing is that it doesn't fail every time.
0
This appears to be an intermittent failure on the receiver's end:
EDIT:  We noticed intermittent issues with domains hosted on outlook.com this past weekend - with outlook.com's servers accepting the message, our SmarterMail server's logs clearly showing that the message was accepted for delivery to the intended mailbox, but never being delivered.

Trying to get information from them is almost impossible and there are zero logs which can be checked in situations like this.
Bruce Barnes
ChicagoNetTech Inc
brucecnt@comcast.net

Phonr: (773) 491-9019
Phone: (224) 444-0169

E-Mail and DNS Security Specialist
Network Security Specialist

Customer Service Portal: https://portal.chicagonettech.com
Website: https://www.ChicagoNetTech.com
Security Blog: http://networkbastion.blogspot.com/

Web and E-Mail Hosting, E-Mail Security and Consulting

Reply to Thread