On Wed, Sep 11, 2013 at 12:12:16PM -0600, The Doctor wrote: > A tcpdump produces
>
> 12:07:46.513744 208.118.93.81.49407 > 204.209.81.3.25: S 4063503133:4063503133(0) win 8192 <mss 1460,nop,wscale 2,nop,nop,sackOK> (DF) [... skip ...] > Why is their an early termination?
Look into the SMTP session data and server logs, and you'll get the answer.
Use "tcpdump -X" and/or "exim -d+...".
--
Eugene Berdnikov