Post new topic Reply to topic  [ 18 posts ] 
Author Message
 Post subject: vtext.com
PostPosted: 2009-04-07 21:54 
Normal user

Joined: 2006-08-04 02:33
Posts: 34
I reguarly send and recieve email messages from phones on the verizon service. Just recently my email server is being blocked from sending mail to the vtext.com domain. I have no explanation and I'm pretty sure that there's nothing wrong with my configuration that would cause this. Here's the error that I get back...

Your message did not reach some or all of the intended recipients.

Sent: Tue, 7 Apr 2009 15:46:04 -0400
Subject:

The following recipient(s) could not be reached:

412592XXXX@VTEXT.COM
Error Type: SMTP
Remote server (69.78.128.213) issued an error.
hMailServer sent:
Remote server replied: 554 njbrspamp2.vtext.com



hMailServer


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-07 22:25 
Developer

Joined: 2003-11-21 01:09
Posts: 6403
Location: Sweden
Enable SMTP logging, reproduce the problem and then check the log. Post it here if you don't understand it.


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-07 22:34 
Normal user

Joined: 2008-03-31 22:13
Posts: 161
Location: NL
Quote:
Remote server replied: 554 njbrspamp2.vtext.com


I wouldn't be supprised if someone is abusing your server. But it could just be a NDR return to you cause some spammer using your from address as the envelope sender.

The logs will possibly show whats really happend.

_________________
WXP x32 - hMailServer v5.3.2 B1769 / MySQL
Horde Groupware Webmail Edition 3.3.6 / SquirrelMail 1.4.17


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-07 22:51 
Normal user

Joined: 2006-08-04 02:33
Posts: 34
Here's the log:

"SMTPD" 2908 7482 "2009-04-07 16:49:28.078" "127.0.0.1" "SENT: 220 [70.61.146.6]"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.093" "127.0.0.1" "RECEIVED: EHLO baracuda"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.109" "127.0.0.1" "SENT: 250-hmailserver[nl]250-SIZE 20480000[nl]250 AUTH LOGIN"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.125" "127.0.0.1" "RECEIVED: AUTH LOGIN"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.140" "127.0.0.1" "SENT: 334 VXNlcm5hbWU6"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.140" "127.0.0.1" "RECEIVED: cm9iYkBtaWNyb2NydWlzZXIuY29t"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.156" "127.0.0.1" "SENT: 334 UGFzc3dvcmQ6"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.171" "127.0.0.1" "RECEIVED: ***"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.187" "127.0.0.1" "SENT: 235 authenticated."
"SMTPD" 2908 7482 "2009-04-07 16:49:28.187" "127.0.0.1" "RECEIVED: MAIL FROM: <robb@microcruiser.com>"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.203" "127.0.0.1" "SENT: 250 OK"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.234" "127.0.0.1" "RECEIVED: RCPT TO: <4125923272@VTEXT.COM>"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.250" "127.0.0.1" "SENT: 250 OK"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.250" "127.0.0.1" "RECEIVED: DATA"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.265" "127.0.0.1" "SENT: 354 OK, send."
"SMTPD" 2908 7482 "2009-04-07 16:49:28.500" "127.0.0.1" "SENT: 250 Queued (0.219 seconds)"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.515" "127.0.0.1" "RECEIVED: QUIT"
"SMTPD" 2908 7482 "2009-04-07 16:49:28.515" "127.0.0.1" "SENT: 221 goodbye"
"SMTPC" 2916 7483 "2009-04-07 16:49:29.656" "69.78.67.53" "RECEIVED: 554 txslspamp1.vtext.com"
"SMTPC" 2916 7483 "2009-04-07 16:49:29.671" "69.78.67.53" "SENT: QUIT"


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-07 23:02 
Developer

Joined: 2003-11-21 01:09
Posts: 6403
Location: Sweden
Is there any more lines containing 7483? (7483 is the session ID for the session which fails).

If there is no more, than the server gives an error immediately when hMailServer connects. If that's the case, it's a problem on the recipient side.


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-07 23:04 
Site Admin
User avatar

Joined: 2005-07-29 16:18
Posts: 13792
Location: UK
Quote:
Address and Port: 70.61.146.6
Record Created: Thu Jan 8 08:10:36 2009 GMT
Record Updated: Thu Jan 8 08:10:36 2009 GMT
Additional Information: Spam Sending Trojan or Proxy attempted to send mail from/to from=<admin@queenbbw.com> to=<haimbpepmiz@paticipating.domain> helo=<[70.61.146.6]>


Quote:
Oooops 70.61.146.6 is currently listed in APEWS :-(
Entry matching your Query: E-297697
70.61.128.0/19CASE: C-1010
Dynamic IP space, generic DNS/rDNS, no PTR
Direct connections to MX not permitted, you
need to use your ISP servers or smarthostSpecial Reason:
Dynamic IP, generic DNS, missing rDNS/PTR not permitted for direct email connection. You must use correctly configured [with registered working abuse contact] static IP / ISP mail servers / smarthost service


Read this http://www.hmailserver.com/documentatio ... fic_server

_________________
If at first you don't succeed, bomb disposal probably isn't for you! ヅ


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-07 23:22 
Normal user

Joined: 2006-08-04 02:33
Posts: 34
I have a valid ptr......the only thing I'm worried about is in hmailserver admin under my computer I have external to external enabled because smf forum wouldn't send emails unless I did......Robb


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-07 23:46 
Normal user

Joined: 2008-03-31 22:13
Posts: 161
Location: NL
The rest of your IP/MX is ok too. The only thing I can see is that your mailserver does not accept postmaster and abuse. Perhaps this is the reason why you blacklisted in APEWS. Spamhaus.org and uceprotect.net say your IP is fine.

But it still looks like a blacklisting issue. Need to see more of your logs like Martin ask.

_________________
WXP x32 - hMailServer v5.3.2 B1769 / MySQL
Horde Groupware Webmail Edition 3.3.6 / SquirrelMail 1.4.17


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-08 01:54 
Site Admin
User avatar

Joined: 2005-07-29 16:18
Posts: 13792
Location: UK
That apews list are possible reasons not specific reasons.

_________________
If at first you don't succeed, bomb disposal probably isn't for you! ヅ


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-08 02:07 
Normal user

Joined: 2006-08-04 02:33
Posts: 34
does anyone have any suggestions on why smf forum wouldn't send email properly without external to external enabled?............Robb


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-08 11:03 
Site Admin
User avatar

Joined: 2005-07-29 16:18
Posts: 13792
Location: UK
Yes, you have not set it up properly. I use SMF with hMail and it works perfectly fine.

Are you using the full username@domain.com to login with?

_________________
If at first you don't succeed, bomb disposal probably isn't for you! ヅ


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-09 09:12 
Normal user

Joined: 2006-08-04 02:33
Posts: 34
I'm not sure what you mean.....you shouldn't need to login to anything when you use php mail. All my other scripts that send mail work just fine but smf wouldn't work til I enabled external to external....Robb


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-09 11:31 
Site Admin
User avatar

Joined: 2005-07-29 16:18
Posts: 13792
Location: UK
Ok so what is this then?

Attachment:
smtp login.JPG
smtp login.JPG [ 25.06 KiB | Viewed 2729 times ]


enabling external to external for no reason is a bad idea. Which IP range did you enable it on?

_________________
If at first you don't succeed, bomb disposal probably isn't for you! ヅ


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-10 19:00 
Normal user

Joined: 2006-08-04 02:33
Posts: 34
Your not using php mail......I'd much rather use php mail......your using smtp mail.........Robb


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-10 19:13 
Site Admin
User avatar

Joined: 2005-07-29 16:18
Posts: 13792
Location: UK
I fail to see your logic in that statement? That's like saying i don't want to use a lock with my front door because if i take the lock off i can open it with a screwdriver (but then so can everyone else).

SMTP mail authenticates and is 100% more secure than opening your server up to spammers using external to external and no authentication with standard PHP mail.

So please explain if you would why you would prefer to use a less secure method when you have a choice to use a more secure method?

_________________
If at first you don't succeed, bomb disposal probably isn't for you! ヅ


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-10 19:19 
Normal user

Joined: 2006-08-04 02:33
Posts: 34
If your not able to use php mail either, then there is either a flaw in smf or hmailserver. At least I know I'm not alone in this........Robb


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-10 19:45 
Site Admin
User avatar

Joined: 2005-07-29 16:18
Posts: 13792
Location: UK
No there is nothing wrong with either implementations. PHP's mail(); function does NOT authenticate and never has. You do what you want but please do not come back here when a spammer starts sending thousands of emails through your server.

_________________
If at first you don't succeed, bomb disposal probably isn't for you! ヅ


Top
 Profile  
 
 Post subject: Re: vtext.com
PostPosted: 2009-04-11 00:11 
Normal user

Joined: 2006-08-04 02:33
Posts: 34
thanks......I'll do my best to remember that


Top
 Profile  
 
Display posts from previous:  Sort by  
Post new topic Reply to topic  [ 18 posts ] 


Who is online

Users browsing this forum: No registered users and 2 guests



Search for:
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group