Can not get message through
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5695
Printed Date: 12 March 2025 at 7:51am
Topic: Can not get message through
Posted By: caratking
Subject: Can not get message through
Date Posted: 01 July 2006 at 3:21am
|
Spamfilter setup on a Windows 2000 Professional workstation, used to
accept mail - rejecting the spam. Then it is supposed to forward the messages along to qmail running on Fedora Core 2 server. Problem is some email will be successful when getting forwarded along to qmail and some will not (for the same domain). Here are the symptoms as I have identified them so far: 1) Spamfilter accepts the message 2) Attempts to send the message along, and will try to establish a connection to the remote server for delivery. 3) The qmail server will place an entry in its logfile upon connection: Jul 1 10:23:02 s1 relaylock: /var/qmail/bin/relaylock: mail from 60.115.247.75:1225 4) The two server will just sit there for a while (1 minute?), eventually Spamfilter will record an entry that looks like this: Socket Error #10054 Connection reset by peer. - forwarding to: 116.69.165.64 - message qued - email@email.com That is it, it never gets any further than that. The qmail server never makes mention of the connection again in its logfile. I thought I would then use the debug view tool in spamfilter which monitors the SMTP data between the two servers. I placed the ip address to monitor but nothing showed. Of course, I assume the debug tool is not working. I then changed the ip to monitor to * and I start seeing server communications (not between the two servers in question though). So from debug tool I can conclude that they never establish a connection good enough to even transfer an smtp command. I can manually telnet into port 25 from the spamfilter machine to the qmail server and issue the commands by hand to send a message so I know port 25 is alive and well. Anyone got some additional things I should be checking here? |
Replies:
Posted By: Marco
Date Posted: 03 July 2006 at 11:11am
|
could this be the cause?
http://www.hp-eloquence.com/sdb/html/998559406.html - http://www.hp-eloquence.com/sdb/html/998559406.html ------------- Anyone who is capable of getting himself made president, should on no account be allowed to do the job. D.Adams |
Posted By: LogSat
Date Posted: 04 July 2006 at 11:50am
|
caratking, The debug monitor in SpamFilter will only monitor incoming connections, not the outgoing ones. Usually outgoing communications to your SMTP server are pretty straightforward and do not cause problems, so there is very little debugging built in SpamFilter for this. The "Connection reset by peer" error indicates that the peer server (qmail in this case) has disconnected SpamFilter. If the qmail logs do not have any additional information, I would suggest using an external monitoring tool to watch traffic from the SpamFilter server to your qmail server. If you had a server version of Windows you could have used it's Network Monitor utility. In your case, you could use Ethereal ( http://www.ethereal.com - www.ethereal.com ). It runs on both Windows and Linux, and it's very possible your Fedora Core distribution already has it installed. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: caratking
Date Posted: 04 July 2006 at 6:20pm
|
It might be nice if in future versions you modify the note on the debug page to say it only monitors incoming connections. I will try eartherreal, I have used it once before on the Fedora server to prove to the ISP I was not using 20gb of bandwith per day! |
LogSat wrote:Posted By: LogSat
Date Posted: 05 July 2006 at 11:40pm
We had already modified it right after your first post  ! It was indeed not clear as it was phrased. ------------- Roberto Franceschetti http://www.logsat.com" rel="nofollow - LogSat Software http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP |
Posted By: caratking
Date Posted: 25 July 2006 at 6:09pm
|
I thought I would post my status so far regarding this strange problem. I got ethereal (and after some training with it), was able to see that indeed communication between my workstation that is running spamfilter and the 'real' mail server there were some serious issues. The two were having a very rough relationship, hardly speaking. The workstation has a Gigabyte motherboard, with built in lan card. The card is an NIDIA nForce Networking Controller. The card has an option to offload the ip checksum from the computer to the network card. With this checksum offload option enabled, communication between the two computers was not good. I disabled it, so now the IP stack does its own checksum, and things seem to be flowing fine. A difficult problem to resolve for sure, and while not a spamfilter problem it was the only software that seemed to be having problems (or the only one that showed signs of a problem). |