Re: Blocked e-mail

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Rob (Rob_at_discussions.microsoft.com)
Date: 10/25/04 

Date: Mon, 25 Oct 2004 13:07:02 -0700

It seems as though my Barracuda SPAM firewall was the problem. The Barracuda
has several different way's to stop SPAM and one of the features blocks
Spoofed e-mail address.
 These e-mails coming through were treated as spoofed e-mail because it
contained my own e-mail address. I disabled this Spoof'ed e-mail blocking and
the e-mails are coming through now.

Thanks,
Rob

"John Oliver, Jr. [MVP]" wrote:

> No problem, please post back if you find a solution as I am curious.
> Thanks.
>
> --
> John Oliver, Jr.
> MCSE, MCT, CCNA, Exchange MVP
> Microsoft Certified Partner
>
> "Rob" <Rob@discussions.microsoft.com> wrote in message
> news:04D3E711-8ECD-45F5-A424-F85EC585FEF7@microsoft.com...
> > I'll contact barracuda and see what they say.
> > Thanks, I appreciate the help.
> >
> > "John Oliver, Jr. [MVP]" wrote:
> >
> >> I was assuming you could turn off the Filtering Feature without disabling
> >> the Firewall. I have never worked with this firewall but I find it
> >> strange
> >> you cannot enable/disable the AntiSpam filter without affecting the
> >> Firewall
> >> status. Sounds like we are still at your Firewall for the culprit unless
> >> you have some outside service scanning the mail before it arrives to your
> >> Gateway. Everything I am reading on what you posted from the Debug log
> >> of
> >> Barracuda say its blocking the mail. At this point, I would call your
> >> Barracuda Tech support to see if they can help. Send them the Log that
> >> you
> >> have posted to see if they can confirm this. I do find it odd that its
> >> blocking your own address within the Firewall so you may have a
> >> configuration issue with setting up your accepting domain
> >> @pmaconsulting.com
> >> within the Firewall. Can you replicate this same issue from another
> >> site,
> >> say sending yourself a mail from Hotmail or Yahoo?
> >>
> >> --
> >> John Oliver, Jr.
> >> MCSE, MCT, CCNA, Exchange MVP
> >> Microsoft Certified Partner
> >>
> >> "Rob" <Rob@discussions.microsoft.com> wrote in message
> >> news:CDD67568-2439-4E8A-823A-4193247C04D2@microsoft.com...
> >> >I host the barracuda firewall. I
> >> > f I turn it off for 15 min mail will not be delivered since my MX
> >> > records
> >> > are pointed to it.
> >> >
> >> > Am am successfully able to telnet to the fedex server using port 25. I
> >> > do
> >> > receive the banner.
> >> >
> >> > "John Oliver, Jr. [MVP]" wrote:
> >> >
> >> >> I am not understanding the reason of disabling your Filter feature.
> >> >> Do
> >> >> you
> >> >> host the Barracuda Firewall or your ISP? I never asked how your WAN
> >> >> setup
> >> >> is configured with Exchange.
> >> >>
> >> >> Also, can you telnet from your Exchange box to 199.81.193.118 port 25
> >> >> successfully and receive a SMTP Banner ?
> >> >> --
> >> >> John Oliver, Jr.
> >> >> MCSE, MCT, CCNA, Exchange MVP
> >> >> Microsoft Certified Partner
> >> >>
> >> >> "Rob" <Rob@discussions.microsoft.com> wrote in message
> >> >> news:35FEC8D7-F107-461E-BEA0-8AA6E7CAB289@microsoft.com...
> >> >> > Unfortunately I am unable to bypass the SPAM filter unless I change
> >> >> > the
> >> >> > MX
> >> >> > record through my ISP.
> >> >> > Although the only incoming message logged is the undeliverable
> >> >> > message.
> >> >> > The
> >> >> > regular message doesnt reach the SPAM firewall. The SPAM firewall
> >> >> > isnt
> >> >> > logging a denied message to the e-mal coming through.
> >> >> >
> >> >> > Could this message be undeliverable because the message is from a
> >> >> > "localhost" sender?
> >> >> >
> >> >> > "John Oliver, Jr. [MVP]" wrote:
> >> >> >
> >> >> >> This part is relevant, have you tried shutting down your SPAM
> >> >> >> Filter
> >> >> >> for
> >> >> >> say
> >> >> >> 15 minutes and then have Fedex send you an email to see if it gets
> >> >> >> through?
> >> >> >>
> >> >> >> X-Virus-Scanned: by Barracuda Spam Firewall at pmaconsultants.com
> >> >> >> X-Barracuda-Spam-Score: -4.90 X-Barracuda-Spam-Status: No,
> >> >> >> SCORE=-4.90
> >> >> >> using
> >> >> >> global scores of TAG_LEVEL=3.8 QUARANTINE_LEVEL=4.5 KILL_LEVEL=6.5
> >> >> >> tests=BAYES_00 X-Barracuda-Spam-Report: Code version 2.64, rules
> >> >> >> version
> >> >> >> 2.1.449 Rule breakdown below pts rule name
> >> >> >> description ---- ----------------------
> >> >> >> ------------------------------------------- -4.90 BAYES_00
> >> >> >> BODY: Bayesian spam probability is 0 to 1%
> >> >> >> [score: 0.0000] This is a MIME-encapsulated message
> >> >> >>
> >> >> >>
> >> >> >> --
> >> >> >> John Oliver, Jr.
> >> >> >> MCSE, MCT, CCNA, Exchange MVP
> >> >> >> Microsoft Certified Partner
> >> >> >> "Rob" <Rob@discussions.microsoft.com> wrote in message
> >> >> >> news:474FB609-5CF8-4AB8-B346-D0DC97D5069A@microsoft.com...
> >> >> >> > Yes the blocking occurs with any user on the domian
> >> >> >> > @pmaconsultants.com
> >> >> >> >
> >> >> >> > I'll created the reverse DNS entry.
> >> >> >> >
> >> >> >> > "John Oliver, Jr. [MVP]" wrote:
> >> >> >> >
> >> >> >> >> I would suggest creating a Reverse DNS Entry for your backup
> >> >> >> >> mail
> >> >> >> >> server
> >> >> >> >> since it has none currently. Does the blocking happen with
> >> >> >> >> other
> >> >> >> >> users?
> >> >> >> >>
> >> >> >> >> --
> >> >> >> >> John Oliver, Jr.
> >> >> >> >> MCSE, MCT, CCNA, Exchange MVP
> >> >> >> >> Microsoft Certified Partner
> >> >> >> >>
> >> >> >> >> "Rob" <Rob@discussions.microsoft.com> wrote in message
> >> >> >> >> news:EF6DB42F-6456-490C-975D-5C36B0BB7FF4@microsoft.com...
> >> >> >> >> >I reported this same problem a few day's ago but have
> >> >> >> >> >discovered
> >> >> >> >> >the
> >> >> >> >> >same
> >> >> >> >> > problem when Fed Ex send me an e-mail for tracking
> >> >> >> >> > notification.
> >> >> >> >> >
> >> >> >> >> > My reverse DNS resolution is working fine for my Primary
> >> >> >> >> > Exchange
> >> >> >> >> > 2003
> >> >> >> >> > system. I am not running any software that would block these
> >> >> >> >> > addresses.
> >> >> >> >> > I'm having alot of trouble figuring out what may be causing
> >> >> >> >> > this.
> >> >> >> >> >
> >> >> >> >> > here is the message.
> >> >> >> >> >
> >> >> >> >> > Your message did not reach some or all of the intended
> >> >> >> >> > recipients.
> >> >> >> >> >
> >> >> >> >> > Subject: FedEx shipment 791962248603
> >> >> >> >> > Sent: 10/22/2004 8:22 AM
> >> >> >> >> >
> >> >> >> >> > The following recipient(s) could not be reached:
> >> >> >> >> >
> >> >> >> >> > Jeremy Gross on 10/22/2004 8:22 AM
> >> >> >> >> > The e-mail account does not exist at the
> >> >> >> >> > organization
> >> >> >> >> > this
> >> >> >> >> > message was sent to. Check the e-mail address, or contact the
> >> >> >> >> > recipient
> >> >> >> >> > directly to find out the correct address.
> >> >> >> >> >
> >> >> >> >> > < mx11.sac.fedex.com #5.1.1 SMTP; 550
> >> >> >> >> > <jgross@pmaconsultants.com
> >> >> >> >> > <mailto:jgross@pmaconsultants.com>>: Sender address rejected:
> >> >> >> >> > Blocked>
> >> >> >> >> >
> >> >> >> >> >
> >> >> >> >>
> >> >> >> >>
> >> >> >> >>
> >> >> >>
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >> >>
> >>
> >>
> >>
>
>
>

Relevant Pages