Mail Transmission Missing After Sent Action Processing
Question asked by Network Exabytes - August 16, 2017 at 10:51 PM
Unanswered
Recently there is encountered multiple of email missing report from user with found the mail sending action is actually detected and processing but the fact is the mail transmission didn't manage to reach the final local recipient. Is anybody encountered and could advice the scenario below.
 
Through the observation.
- No spool is detected.
- Server have no highload symptom or suspicious action from the event logs.
- Smartermail service is not restarted or recycling during the time.
- All recipient account is exist under server and only random transmission facing email not reach intended recipient after processing.
- The tracked delivery logs have no significant error but only showed queue 2 hours.
 
Below is captured logs for delivery session.
================================================================================
[2017.08.10] 17:06:27 [19397] Delivery started for dcheong@domain.name at 5:06:27 PM
[2017.08.10] 19:06:29 [19397] Delivery finished for dcheong@domain.name at 7:06:29 PM   [id:183841819397]
================================================================================
 
Captured logs for SMTP session.
================================================================================
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 220 mailserver.smartermail.com
[2017.08.10] 17:06:26 [115.x.x.x][15995210] connected at 8/10/2017 5:06:26 PM
[2017.08.10] 17:06:26 [115.x.x.x][15995210] cmd: EHLO ECV006
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 250-mailserver.smartermail.com Hello [115.x.x.x]250-SIZE 52428800250-AUTH LOGIN CRAM-MD5250-8BITMIME250 OK
[2017.08.10] 17:06:26 [115.x.x.x][15995210] cmd: AUTH LOGIN
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 334 VXNlcm5hbWU6
[2017.08.10] 17:06:26 [115.x.x.x][15995210] Authenticating as dcheong@domain.name
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 334 UGFzc3dvcmQ6
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 235 Authentication successful
[2017.08.10] 17:06:26 [115.x.x.x][15995210] Authenticated as dcheong@domain.name
[2017.08.10] 17:06:26 [115.x.x.x][15995210] cmd: MAIL FROM: <dcheong@domain.name>
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 250 OK <dcheong@domain.name> Sender ok
[2017.08.10] 17:06:26 [115.x.x.x][15995210] cmd: RCPT TO: <aizuddin@domain.name>
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 250 OK <aizuddin@domain.name> Recipient ok
[2017.08.10] 17:06:26 [115.x.x.x][15995210] cmd: RCPT TO: <asiah@domain.name>
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 250 OK <asiah@domain.name> Recipient ok
[2017.08.10] 17:06:26 [115.x.x.x][15995210] cmd: RCPT TO: <aziza@domain.name>
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 250 OK <aziza@domain.name> Recipient ok
[2017.08.10] 17:06:26 [115.x.x.x][15995210] cmd: RCPT TO: <azril@domain.name>
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 250 OK <azril@domain.name> Recipient ok
[2017.08.10] 17:06:26 [115.x.x.x][15995210] cmd: RCPT TO: <cylim@domain.name>
[2017.08.10] 17:06:26 [115.x.x.x][15995210] rsp: 250 OK <cylim@domain.name> Recipient ok
[2017.08.10] 17:06:27 [115.x.x.x][15995210] cmd: RCPT TO: <debbie@domain.name>
[2017.08.10] 17:06:27 [115.x.x.x][15995210] rsp: 250 OK <debbie@domain.name> Recipient ok
[2017.08.10] 17:06:27 [115.x.x.x][15995210] cmd: RCPT TO: <management@domain.name>
[2017.08.10] 17:06:27 [115.x.x.x][15995210] rsp: 250 OK <management@domain.name> Recipient ok
[2017.08.10] 17:06:27 [115.x.x.x][15995210] cmd: RCPT TO: <sfwong@domain.name>
[2017.08.10] 17:06:27 [115.x.x.x][15995210] rsp: 250 OK <sfwong@domain.name> Recipient ok
[2017.08.10] 17:06:27 [115.x.x.x][15995210] cmd: RCPT TO: <spchan@domain.name>
[2017.08.10] 17:06:27 [115.x.x.x][15995210] rsp: 250 OK <spchan@domain.name> Recipient ok
[2017.08.10] 17:06:27 [115.x.x.x][15995210] cmd: DATA
[2017.08.10] 17:06:27 [115.x.x.x][15995210] rsp: 354 Start mail input; end with <CRLF>.<CRLF>
[2017.08.10] 17:06:27 [115.x.x.x][15995210] rsp: 250 OK
[2017.08.10] 17:06:27 [115.x.x.x][15995210] Data transfer succeeded, writing mail to 183841819397.eml
[2017.08.10] 17:06:30 [115.x.x.x][15995210] cmd: QUIT
[2017.08.10] 17:06:30 [115.x.x.x][15995210] rsp: 221 Service closing transmission channel
[2017.08.10] 17:06:30 [115.x.x.x][15995210] disconnected at 8/10/2017 5:06:30 PM
================================================================================

1 Reply

Reply to Thread
0
Patrick Mattson Replied
I have been experiencing a similar issue. I am trying to track down missing emails. I see them in the SMTP log, but they never show up in the delivery log.
 
The error I am trying to find more information on is the line in the SMTP log: rsp: 221 Service closing transmission channel
 
It appears my SmarterMail server is ending the conversation, the rsp should be my server
So far I have whitelisted the entire IP range
Increased the threshold for my IDS
Increased SMTP timeouts
 
This is happening from a few other customers

Reply to Thread