all groups > iis smtp nntp > july 2005 >
You're in the

iis smtp nntp

group:

Internal email being dropped


Internal email being dropped Harv013 NO[at]SPAM gmail.com
7/14/2005 9:25:59 AM
iis smtp nntp:
We have an internal SMTP server running on a Windows 2000 SP4 box.
This server is supposed to send mail to internal email address and
external internet addresses. Any externally resolved email address
sends fine. All internally resolved emails sit in the queue.

In the event log we get this error.
Event Type: Warning
Event Source: smtpsvc
Event Category: None
Event ID: 4000
Date: 7/14/2005
Time: 8:58:12 AM
User: N/A
Computer: INT-MAIL
Description:
Message delivery to the remote domain 'x.blah.edu' failed for the
following reason: The connection was dropped by the remote host.

Data:
0000: d3 02 04 c0 =D3..=C0

In reviewing the logs on the SMTP server itself, I can see that the
connection is getting stuck at the BDAT command. This command is only
issued internally. All external mail uses the DATA command. Here's
some log contents.

Good email connection.
09:46:56 128.200.yy.xx - - 0
09:46:56 128.200.yy.xx EHLO - 0
09:46:56 128.200.yy.xx - - 0
09:46:56 128.200.yy.xx MAIL - 0
09:46:56 128.200.yy.xx - - 0
09:46:56 128.200.yy.xx RCPT - 0
09:46:56 128.200.yy.xx - - 0
09:46:56 128.200.yy.xx DATA - 0
09:46:56 128.200.yy.xx - - 0
09:46:56 128.200.yy.xx - - 0
09:46:56 128.200.yy.xx QUIT - 0
09:46:56 128.200.yy.xx - - 0

And a failed connection.
17:54:21 128.200.aa.bb - - 0
17:54:21 128.200.aa.bb EHLO - 0
17:54:21 128.200.aa.bb - - 0
17:54:21 128.200.aa.bb MAIL - 0
17:54:21 128.200.aa.bb - - 0
17:54:21 128.200.aa.bb RCPT - 0
17:54:21 128.200.aa.bb - - 0
17:54:21 128.200.aa.bb BDAT - 0

Some notes of interest.
* This error started happening on 7/6.
* Patches haven't been installed for more than 2 weeks.
* All emails that are queued send when the server is restarted.
* The servers being connected to internally have the failing server
listed in the "allowed to relay" settings.
* SMTP service has been uninstalled and reinstalled at least twice to
no avail.
* This box runs a webserver and smtp server with very light load.
Nothing else is running on it.

Any thoughts would be of great help. Unfortunately, the backup has not
worked and we are at a point of having to rebuild this box. Post and
let me know if you need any more info.

Thanks,
Christopher Harvie
harv013@gmail.com
Re: Internal email being dropped Harv013 NO[at]SPAM gmail.com
7/14/2005 11:22:15 AM
This seems to have been fixed. What we did was added the local domain
as a remote and had it send a HELO instead of an EHLO. It's really
weird because we have other identical servers that can use the EHLO
command fine to talk to our Exchange server. Weird... but it works.

Chris
AddThis Social Bookmark Button