Rejected e-mail Any Clues ?

[mikea]

On Tue, Jul 22, 2003 at 01:21:28PM +0100, Denis Croombs wrote:
> An e-mail was rejected by 1 of my servers currently running MailScanner
> (latest version) and SpamAssassin 2.55 on a redhat 7.3 system with Sendmail,
>
> The returned e-mail is:-
>
> -----Original Message-----
> From: Info Avenue Internet Services [mailto:postmaster at InfoAve.Net]
> Sent: Monday, July 21, 2003 5:16 AM
> To: spw0082 at xxxxxx.com
> Subject: Delivery Notification: Delivery has failed
>
>
> This report relates to a message you sent with the following header fields:
>
>   Message-id:
>
> <!~!UENERkVCMDkAAQACAAAAAAAAAAAAAAAAABgAAAAAAAAAsdlzKiJ/IE+JQwjar04dEsKAAAAQ
> AAAAiwmE/lx1vUuurCT2KKM2VAEAAAAA at xxxxxx.com>
>   Date: Mon, 21 Jul 2003 06:15:49 -0400
>   From: Steve spw0082 at xxxxxx.com
>   To: Julie julie at yyyyyy.com
>   Subject: Meeting
>
> Your message cannot be delivered to the following recipients:
>
>   Recipient address: julie at yyyyyy.com
>   Reason: Server rejected MAIL FROM address.
>   Diagnostic code: smtp;550 5.7.1 Access denied
>   Remote system: dns;mail.yyyyyy.com
> (TCP|165.166.0.28|58988|217.199.181.62|25)
>
> Action: failed
> Status: 5.0.0 (Server rejected MAIL FROM address.)
> Original-recipient: rfc822;julie at yyyyyy.com
> Final-recipient: rfc822;julie at yyyyyy.com
> Remote-MTA: dns;mail.yyyyyy.com (TCP|165.166.0.28|58988|217.199.181.62|25)
> Diagnostic-code: smtp;550 5.7.1 Access denied
>
> **************End of returned message*****************
>
> In my sendmail (maillog) I have the following which are the only entries
> relating to the incoming domain & this e-mail address:-
>
> Jul 21 10:47:03 ns sendmail[22305]: h6L9l3322305: ruleset=check_relay,
> arg1=smtp03.infoave.net, arg2=165.166.0.28, relay=smtp03.infoave.net
> [165.166.0.28], reject=550 5.7.1 Access denied
> Jul 21 10:47:04 ns sendmail[22305]: NOQUEUE: smtp03.infoave.net
> [165.166.0.28] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA

[snip]

This looks *very* much like mail service being denied because of an
entry in the /etc/mail/access.db database. The maillog lines above
are pretty much diagnostic for that.

Here is a similar log line pair for rejection of an SMTP connection
because of an access.db entry here:

Jul 15 08:16:42 mikea sendmail[67639]: h6FDGSS8067639:
  from=<txv241 at canada.com>, size=4398, class=0, nrcpts=1,
  msgid=<7t--$9-3$1$x0y$r$$n$weh$6 at 9gx.6.fih>, proto=SMTP,
  daemon=MTA, relay=MG097004084.user.veloxzone.com.br [200.97.4.84]
Jul 15 14:47:10 mikea sendmail[69568]: ruleset=check_relay,
  arg1=MG020198.user.veloxzone.com.br, arg2=200.165.20.198,
  relay=MG020198.user.veloxzone.com.br [200.165.20.198],
  reject=550 5.7.1:Comite Gestor da Internet no Brasil
  not permitted to do SMTP here.

--
Mike Andrews
mikea at mikea.ath.cx
Tired old sysadmin since 1964