[exim-dev] [Bug 1832] Log reason for disconnection, as retur…

Top Page
Delete this message
Reply to this message
Author: admin
Date:  
To: exim-dev
Subject: [exim-dev] [Bug 1832] Log reason for disconnection, as returned by remote host
https://bugs.exim.org/show_bug.cgi?id=1832

--- Comment #3 from Sander Hoentjen <sander@???> ---
exim debug output:
===================
Connecting to mailin.kpnmail.nl [213.75.3.30]:25 from 195.211.73.60 ...
connected
read response data: size=79
SMTP<< 220 cpsps-ews13.kpnxchange.com kpnxchange.com Fri, 3 Jun 2016 11:53:58
+0200
213.75.3.30 in hosts_avoid_esmtp? no (option unset)
SMTP>> EHLO s165.webhostingserver.nl

read response data: size=92
SMTP<< 421 5.5.0 Your IP has been blacklisted. Please contact abuse@???
for more information.
SMTP>> HELO s165.webhostingserver.nl

ok=0 send_quit=0 send_rset=1 continue_more=0 yield=1 first_address is not NULL
LOG: MAIN
H=mailin.kpnmail.nl [213.75.3.30]: Remote host closed connection in response
to HELO s165.webhostingserver.nl
===================
So the issue seems to be that because of the 421 in reponse to the EHLO, exim
tries again with HELO. Now in this case I know the remote host closes the
connection after the EHLO. tshark output below:
===================
1 0.000000 195.211.73.60 -> 213.75.3.30 TCP 78 47646 > smtp [SYN] Seq=0
Win=14600 Len=0 MSS=1460 SACK_PERM=1 TSval=1854996 TSecr=0 WS=128
2 0.005010 213.75.3.30 -> 195.211.73.60 TCP 64 smtp > 47646 [SYN, ACK]
Seq=0 Ack=1 Win=8192 Len=0 MSS=1460
3 0.005072 195.211.73.60 -> 213.75.3.30 TCP 58 47646 > smtp [ACK] Seq=1
Ack=1 Win=14600 Len=0
4 0.010001 213.75.3.30 -> 195.211.73.60 SMTP 137 S: 220
cpsps-ews10.kpnxchange.com kpnxchange.com Fri, 3 Jun 2016 12:03:54 +0200
5 0.010044 195.211.73.60 -> 213.75.3.30 TCP 58 47646 > smtp [ACK] Seq=1
Ack=80 Win=14600 Len=0
6 0.010149 195.211.73.60 -> 213.75.3.30 SMTP 89 C: EHLO
s165.webhostingserver.nl
7 0.015718 213.75.3.30 -> 195.211.73.60 SMTP 150 S: 421 5.5.0 Your IP has
been blacklisted. Please contact abuse@??? for more information.
8 0.015792 195.211.73.60 -> 213.75.3.30 SMTP 89 C: HELO
s165.webhostingserver.nl
9 0.017513 213.75.3.30 -> 195.211.73.60 TCP 64 smtp > 47646 [FIN, ACK]
Seq=172 Ack=32 Win=64209 Len=0
10 0.017591 195.211.73.60 -> 213.75.3.30 TCP 58 47646 > smtp [FIN, ACK]
Seq=63 Ack=173 Win=14600 Len=0
11 0.020351 213.75.3.30 -> 195.211.73.60 TCP 64 smtp > 47646 [RST, ACK]
Seq=173 Ack=63 Win=0 Len=0
===================
It looks like the connection is closed too late, so exim sends the HELO before
the connection is really closed, and doesn't get a return anymore.

--
You are receiving this mail because:
You are on the CC list for the bug.