Re: [exim] SOLVED: Help me understand exigrep very short sni…

Top Page
Delete this message
Reply to this message
Author: Chip
Date:  
To: exim-users
Subject: Re: [exim] SOLVED: Help me understand exigrep very short snippet output
In Cpanel/WHM there is a setting for Exim:

"Attachments: Filter messages with dangerous attachments"

If this is turned ON only Google delivered DMARC report messages from
noreply-dmarc-support@??? are bounced back to google, all other
dmarc reporting senders are allowed through.

Solution is to to turn OFF this switch.

On 06/26/2016 10:48 AM, Heiko Schlittermann wrote:
> Hi,
>
> Chip <jeffschips@???> (So 26 Jun 2016 16:13:39 CEST):
>> Is this a frozen message FROM my server outbound to google or a frozen
>> message that has ARRIVED from google that is being bounced back and frozen
>> on my end? Or neither.
> It's an outbound message FROM your server to
> noreply-dmarc-support@???.
>
> The message that triggered that message is 1bH6AS-0006lb-Ih (seen the
> R=… tag in the log)
>
>> +++ 1bH6AZ-0006lp-QI has not completed +++
>> 2016-06-26 05:15:59 1bH6AZ-0006lp-QI <= <> R=1bH6AS-0006lb-Ih U=mailnull
>> P=local S=6567 T="Mail delivery failed: returning message to sender" for
>> noreply-dmarc-support@???
>> 2016-06-26 05:16:00 1bH6AZ-0006lp-QI ** noreply-dmarc-support@???
>> R=dkim_lookuphost T=dkim_remote_smtp H=aspmx.l.google.com [173.194.203.27]
>> X=TLSv1:AES128-SHA:128 CV=yes: SMTP error from remote mail server after RCPT
>> TO:<noreply-dmarc-support@???>: 550-5.2.1 The user you are trying to
>> contact is receiving mail at a rate that\n550-5.2.1 prevents additional
>> messages from being delivered. For more\n550-5.2.1 information, please
>> visit\n550 5.2.1 https://support.google.com/mail/answer/6592
>> d10si18506869pat.143 - gsmtp
> So, you server can't deliver the message to google and because this
> message is a bounce itself, your server can't tell where to bounce the
> bounce.
>
>> ======================================================
>> Here is the message frozen in the queue:
> …
>> From: Mail Delivery System <Mailer-Daemon@???>
>> To: noreply-dmarc-support@???
>> Content-Type: multipart/report; report-type=delivery-status;
>> boundary=1466932559-eximdsn-1804289383
>> MIME-Version: 1.0
>> Subject: Mail delivery failed: returning message to sender
>> Message-Id: <E1bH6AZ-0006lp-QI@???>
>> Date: Sun, 26 Jun 2016 05:15:59 -0400
>>
>> --1466932559-eximdsn-1804289383
>> Content-type: text/plain; charset=us-ascii
>>
>> This message was created automatically by mail delivery software.
>>
>> A message that you sent could not be delivered to one or more of its
>> recipients. This is a permanent error. The following address(es) failed:
>>
>>    dmarc@???
>>      This message has been rejected because it has
>>      potentially executable content "google.com!bla.com
>>      This form of attachment has been used by
>>      recent viruses or other malware.
>>      If you meant to send this file then please
>>      package it up as a zip file and resend it.
> Your exim created that bounce, after accepting the message first.
> You should avoid accepting messages at all, if you would bounce them later.

>
>      Best regards from Dresden/Germany
>      Viele Grüße aus Dresden
>      Heiko Schlittermann

>
>