RE: Website link for 207.173.187.220

"Leisher, Doug" <[email protected]> Thu, 7 Dec 2006 10:18:33 -0500
Newsgroups gmane.mail.spam.dsbl.admin
Message-ID <[email protected]>
Alexey,

Thanks for the suggestions.  I do not know of any other logs in
Exchange.  Also, I have a special email account setup so that any
spam-blocked messages go to that email account.  There is nothing from
DSBL there.

I also verified that even if a message is blocked from getting to its
original recipient, that Exchange does create a message tracking entry
for it.

So, for some reason, the DSBL message is getting hung up before Exchange
can create a tracking record for it.

It might be helpful to know what the subject line of DSBL's removal
message is - do you know this?

Also, what is the ares.penguinhosting.net website listed in the log?

Thanks!
  Doug

-----Original Message-----
From: Alexey Lobanov (dsbl) [mailto:[email protected]] 
Sent: Thursday, December 07, 2006 9:41 AM
To: Leisher, Doug
Cc: [email protected]
Subject: Re: [DSBL-Contact] Website link for 207.173.187.220

Hi Doug.

On 07/12/06 17:18, Leisher, Doug wrote:

> It's been 7 days since I last tried to remove my server from the
> blacklist.  So, I initiated another removal request.  This time, I
made
> sure all necessary logging on my Exchange 2000 server was activated.
> 
>  
> 
> The second request is the same as the first - my postmaster email
> account did not receive DSBL's email.  The status on DSBL's site shows
> "Remote host said: 250 2.6.0  <[email protected]>
Queued
> mail for delivery"
> 
>  
> 
> If I look at message tracking on my Exchange server, there is no mail
> message from DSBL.  Also, there is nothing in my BadMail folder or my
> Spam blocker (SMSMSE) showing that the message was either bad or
> blocked.
> 
>  
> 
> In my Exchange log, here's all I see:
> 
> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
WEB
> 207.173.187.220 0 HELO - +ares.penguinhosting.net 250 0 48 28 2172
SMTP
> - - - -
> 
> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
WEB
> 207.173.187.220 0 MAIL - +FROM:<> 250 0 27 12 0 SMTP - - - -
> 

[irrelevant records skipped, all the others are relevant]

> 
> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
WEB
> 207.173.187.220 0 RCPT - +TO:<[email protected]> 250 0 38 35 0
> SMTP - - - -
> 
> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
WEB
> 207.173.187.220 0 DATA - +<[email protected]> 250 0
119
> 674 157 SMTP - - - -
> 
> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
WEB
> 207.173.187.220 0 QUIT - ares.penguinhosting.net 240 2563 68 4 0 SMTP
-
> - - -
> 
>  
> 
> One thing I did notice is that the first line has "HELO".  Test
messages
> I sent from outside email accounts to my postmaster account I see has
> "EHLO" instead.
>  From what I've read, this shouldn't matter. 

Correct. HELO initiates the older (=simpler) version of SMTP dialog. You
can see that my manual test also used HELO, and the message have passed
to you successfully.

> So, it
> appears that the DSBL message is not being delivered for some reason.

It means that it had been delivered to your server but was not delivered
to any [known] mailbox inside of your server. Just an idea.. is it
possible that your mail storage subsystem has it's own, separate log?
And the spam filtering subsystem too. Unfortunately, my personal
experience in MS-Exchange ends at 3-day trainings in 2002.

> Evidently, it's being held up before Exchange's message tracking sees
> it.
> 
>  
> 
> Can anyone out there shed some light on this so I can get this fixed?

I'm afraid, the next sources of information are outside of DSBL.

http://support.microsoft.com/ - the official one
http://www.msexchange.org/ - possibly the best of unofficial ones

Alexey


> 
>  
> 
> Thanks!
> 
>   Doug Leisher
> 
>   Technology Coordinator
> 
>   Southern Fulton School District
> 
>  
> 
>