Groups | Blog | Home
all groups > iis smtp nntp > april 2008 >

iis smtp nntp : Error 4006 on Virtual SMTP Server



Rubén
4/28/2008 1:43:24 PM
Hi there,

I wrote the same message in response of one topic, but was not sure if
someone could read that message so, I apologize if this re-post disturbs.

I present my doubt.

I'm getting to from my Virtual SMTP Server the same error (id: 4006) Sorry
by being in spanish, but I have the system in spanish, so.

I'v tried to se de SMTP log files, but I don't understand and don't know
what to do to see if passes the PTR-EHLO-A "roundtrip" test, help me please.

Tipo de suceso: Advertencia
Origen del suceso: smtpsvc
Categoría del suceso: Ninguno
Id. suceso: 4006
Fecha: 28/04/2008
Hora: 13:28:00
Usuario: No disponible
Equipo: EQUIP
Descripción:
No se pudo entregar un mensaje al host 'XX.XX.XX.XX' mientras se realizaba
la entrega al dominio remoto 'domain.es'', el motivo es el siguiente: Error
de protocolo SMTP.


Para obtener más información, vea el Centro de ayuda y soporte técnico en
http://go.microsoft.com/fwlink/events.asp.
Datos:
0000: d7 02 04 c0 ×..À


Best Regards.

Sanford Whiteman
4/28/2008 5:56:35 PM
[quoted text, click to view]

The key to the "roundtrip" is DNS fluency, both forward and reverse.
Passing the roundtrip test requires that DNS settings _outside_ your
SMTP server match up with factors within the mailserver config.

Your PTR is the hostname that corresponds to your mailserver's public
IP. In most setups, visiting the website whatismyip.com from a browser
on your mailserver will tell you the IP. You can then run 'nslookup
-q=3Dptr <YOUR PUBLIC IP>', which will tell you your PTR. Note this=

assumes that you are using a DNS server that either hosts, or is
querying, an authoritative copy of your reverse zone. One of the many
mistakes people can make when "verifying" they pass the roundtrip is
using a DNS server thinks it's authoritative for reverse zone, but
which has not actually been so delegated. It's therefore a
"standalone" -- read, "useless" -- version of the reverse zone that is
not actually what the general public will use.

The EHLO is what your mailserver calls itself when connecting to
remote domains, found in Properties-Delivery-Advanced-Fully Qualified
Domain Name in IIS SMTP.

The EHLO must match the PTR, and you must have a PTR.

The final part is an A record in your _forward_ zone that matches the
hostname in your PTR (which is the same as the hostname in your EHLO).
You must have this A, and it must resolve to the public IP. That
full-circle quality is why I call it the "roundtrip".

--Sandy



------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
Rubén
4/29/2008 9:57:53 AM
Hello

I took this trace of one message in my SMTP virtual server log

'domain' <> 'DOMAIN' (See DOMAIN2 in the trace)
XXX.XXX.XXX.XXX is the public IP of the server.

Can you help me with this?

2008-04-29 07:25:45 65.54.245.40 OutboundConnectionResponse SMTPSVC1 HOST -
25 - -
220+bay0-mc10-f8.bay0.hotmail.com+Sending+unsolicited+commercial+or+bulk+e-mail+to+Microsoft's+computer+network+is+prohibited.+Other+restrictions+are+found+at+http://privacy.msn.com/Anti-spam/.+Violations+will+result+in+use+of+equipment+located+in+California+and+other+states.+Tue,+29+Apr+2008+00:24:26+-0700+
0 0 309 0 203 SMTP - - - -
2008-04-29 07:25:45 65.54.245.40 OutboundConnectionCommand SMTPSVC1 HOST -
25 EHLO - host.DOMAIN2.local 0 0 4 0 203 SMTP - - - -
2008-04-29 07:25:45 65.54.245.40 OutboundConnectionResponse SMTPSVC1 HOST -
25 - - 250-bay0-mc10-f8.bay0.hotmail.com+(3.5.0.22)+Hello+[XXX.XXX.XXX.XXX]
0 0 68 0 422 SMTP - - - -
2008-04-29 07:25:45 65.54.245.40 OutboundConnectionCommand SMTPSVC1 HOST -
25 MAIL - FROM:<someone@domain.es>+SIZE=10114 0 0 4 0 422 SMTP - - - -
2008-04-29 07:25:45 65.54.245.40 OutboundConnectionResponse SMTPSVC1 HOST -
25 - - 250+someone@domain.es....Sender+OK 0 0 30 0 625 SMTP - - - -
2008-04-29 07:25:45 65.54.245.40 OutboundConnectionCommand SMTPSVC1 HOST -
25 RCPT - TO:<someone@hotmail.com> 0 0 4 0 625 SMTP - - - -
2008-04-29 07:25:45 65.54.245.40 OutboundConnectionResponse SMTPSVC1 HOST -
25 - - 250+someone@hotmail.com+ 0 0 33 0 828 SMTP - - - -
2008-04-29 07:25:45 65.54.245.40 OutboundConnectionCommand SMTPSVC1 HOST -
25 BDAT - 10114+LAST 0 0 4 0 828 SMTP - - - -
2008-04-29 07:25:46 65.54.245.40 OutboundConnectionResponse SMTPSVC1 HOST -
25 - -
250++<CDC010326F6A4D22AD9D01614DD77063@DOMAIN2.local>+Queued+mail+for+delivery
0 0 77 0 1281 SMTP - - - -
2008-04-29 07:25:46 65.54.245.40 OutboundConnectionCommand SMTPSVC1 HOST -
25 QUIT - - 0 0 4 0 1281 SMTP - - - -
2008-04-29 07:25:46 65.54.245.40 OutboundConnectionResponse SMTPSVC1 HOST -
25 - -
221+bay0-mc10-f8.bay0.hotmail.com+Service+closing+transmission+channel 0 0
70 0 1485 SMTP - - - -
2008-04-29 07:28:00 62.36.20.20 OutboundConnectionResponse SMTPSVC1 HOST -
25 - - 550+Reverse+DNS+lookup+failed+for+host+XXX.XXX.XXX.XXX. 0 0 55 0 31
SMTP - - - -

Sanford Whiteman
4/30/2008 6:08:55 PM
[quoted text, click to view]

Not if you won't provide the actual IP and the hostname of your server!
Obfuscation here doesn't help you get the answers you need.

At any rate, since you know you're missing your PTR, talk to your
connectivity provider and find out how to contact their DNS admin.

--Sandy



------------------------------------
Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
AddThis Social Bookmark Button