Re: Website link for 207.173.187.220

Hi Doug,

On 07/12/06 18:18, Leisher, Doug wrote:

> Alexey,
> 
> Thanks for the suggestions.  I do not know of any other logs in
> Exchange.  Also, I have a special email account setup so that any
> spam-blocked messages go to that email account.  There is nothing from
> DSBL there.
> 
> I also verified that even if a message is blocked from getting to its
> original recipient, that Exchange does create a message tracking entry
> for it.
> 
> So, for some reason, the DSBL message is getting hung up before Exchange
> can create a tracking record for it.

So, it is possible that you have found a bug in MS-Exchange. Seriously,
I believe that you may need the vendor support at this stage. The log
shows very bad thing: it confirms that the message has been completely
accepted (client said "QUIT"), and the rest is silence.

> 
> It might be helpful to know what the subject line of DSBL's removal
> message is - do you know this?

"Removal Confirmation for 207.173.187.220".

> 
> Also, what is the ares.penguinhosting.net website listed in the log?

I have no idea why Exchange mentions "WEB" in SMTP logs; "ask microsoft".

"ares.penguinhosting.net" is the name of the mailserver delivering
messages from DSBL. So, it is recorded properly.

Just an opinion. Many corporate admins believe that MS-Exchange is a
good and even unique corporate collaboration suite, but it should not be
used as an Internet mail server. A very standard configuration is
MS-Exchange for internal use only and another regular mailserver as an
external front-end responsible for all filtering, security, etc.

Alexey


> 
> Thanks!
>   Doug
> 
> -----Original Message-----
> From: Alexey Lobanov (dsbl) [mailto:[email protected]] 
> Sent: Thursday, December 07, 2006 9:41 AM
> To: Leisher, Doug
> Cc: [email protected]
> Subject: Re: [DSBL-Contact] Website link for 207.173.187.220
> 
> Hi Doug.
> 
> On 07/12/06 17:18, Leisher, Doug wrote:
> 
>> It's been 7 days since I last tried to remove my server from the
>> blacklist.  So, I initiated another removal request.  This time, I
> made
>> sure all necessary logging on my Exchange 2000 server was activated.
>>
>>  
>>
>> The second request is the same as the first - my postmaster email
>> account did not receive DSBL's email.  The status on DSBL's site shows
>> "Remote host said: 250 2.6.0  <[email protected]>
> Queued
>> mail for delivery"
>>
>>  
>>
>> If I look at message tracking on my Exchange server, there is no mail
>> message from DSBL.  Also, there is nothing in my BadMail folder or my
>> Spam blocker (SMSMSE) showing that the message was either bad or
>> blocked.
>>
>>  
>>
>> In my Exchange log, here's all I see:
>>
>> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
> WEB
>> 207.173.187.220 0 HELO - +ares.penguinhosting.net 250 0 48 28 2172
> SMTP
>> - - - -
>>
>> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
> WEB
>> 207.173.187.220 0 MAIL - +FROM:<> 250 0 27 12 0 SMTP - - - -
>>
> 
> [irrelevant records skipped, all the others are relevant]
> 
>> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
> WEB
>> 207.173.187.220 0 RCPT - +TO:<[email protected]> 250 0 38 35 0
>> SMTP - - - -
>>
>> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
> WEB
>> 207.173.187.220 0 DATA - +<[email protected]> 250 0
> 119
>> 674 157 SMTP - - - -
>>
>> 2006-12-07 13:07:22 205.231.149.48 ares.penguinhosting.net SMTPSVC1
> WEB
>> 207.173.187.220 0 QUIT - ares.penguinhosting.net 240 2563 68 4 0 SMTP
> -
>> - - -
>>
>>  
>>
>> One thing I did notice is that the first line has "HELO".  Test
> messages
>> I sent from outside email accounts to my postmaster account I see has
>> "EHLO" instead.
>>  From what I've read, this shouldn't matter. 
> 
> Correct. HELO initiates the older (=simpler) version of SMTP dialog. You
> can see that my manual test also used HELO, and the message have passed
> to you successfully.
> 
>> So, it
>> appears that the DSBL message is not being delivered for some reason.
> 
> It means that it had been delivered to your server but was not delivered
> to any [known] mailbox inside of your server. Just an idea.. is it
> possible that your mail storage subsystem has it's own, separate log?
> And the spam filtering subsystem too. Unfortunately, my personal
> experience in MS-Exchange ends at 3-day trainings in 2002.
> 
>> Evidently, it's being held up before Exchange's message tracking sees
>> it.
>>
>>  
>>
>> Can anyone out there shed some light on this so I can get this fixed?
> 
> I'm afraid, the next sources of information are outside of DSBL.
> 
> http://support.microsoft.com/ - the official one
> http://www.msexchange.org/ - possibly the best of unofficial ones
> 
> Alexey
> 
> 
>>  
>>
>> Thanks!
>>
>>   Doug Leisher
>>
>>   Technology Coordinator
>>
>>   Southern Fulton School District
>>
>>  
>>
>>
>