funsec mailing list archives

Re: Your mail server is a mess!! WAS: Re: Graphics for presentation


From: "Marc" <marc () marcd org>
Date: Mon, 6 Jul 2009 10:59:24 -0400

Unfortunately, it's a hosted mail sever at Hostrocket.com that I use for one
of my personal accounts. (if it were my server, this wouldn't happen :-) ).
I have limited admin capability on this one.  I have opened a support
ticket.

-----Original Message-----
From: Gadi Evron [mailto:ge () linuxbox org] 
Sent: Monday, July 06, 2009 08:17
To: Jon.Kibler () aset com
Cc: Marc; Sean Kendall Schneyer
Subject: Re: Your mail server is a mess!! WAS: Re: [funsec] Graphics for
presentation

I'm CC:ing Sean who may have a clue on what's going on with Marc's 
server from our end, but he is extremely busy these days.

        Gadi.


Jon Kibler wrote:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Marc,

Your mail server is all screwed up!! I just received something like the
11th and
12th copy of your posting!! (Well, maybe not quite that many, but I have
lost
track, having deleted the duplicates.)

Looking at the mail headers from the two most recent messages, I see the
problem:

Received: from relay2.hrnoc.net (relay2.hrnoc.net [216.120.237.254])
     by linuxbox.org (8.13.8/8.13.8/Debian-3) with ESMTP id
n664OTiH014606
     (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
     for <funsec () linuxbox org>; Sun, 5 Jul 2009 23:24:30 -0500
Received: from smtp-1.hrnoc.net ([216.120.225.37])
     by relay2.hrnoc.net with esmtp (Exim 4.63)
     (envelope-from <marc () marcd org>) id 1MMkFu-0005kH-LQ
     for funsec () linuxbox org; Fri, 03 Jul 2009 11:00:50 -0400


Received: from relay2.hrnoc.net (relay2.hrnoc.net [216.120.237.254])
     by linuxbox.org (8.13.8/8.13.8/Debian-3) with ESMTP id
n664gRVQ015691
     (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT)
     for <funsec () linuxbox org>; Sun, 5 Jul 2009 23:42:28 -0500
Received: from smtp-1.hrnoc.net ([216.120.225.37])
     by relay2.hrnoc.net with esmtp (Exim 4.63)
     (envelope-from <marc () marcd org>) id 1MMkFu-0005kH-LQ
     for funsec () linuxbox org; Fri, 03 Jul 2009 11:00:50 -0400


If you look at the line "Received: from smtp-1.hrnoc.net", you will see
that
both messages claim to have been received on "Fri, 03 Jul 2009 11:00:50
-0400".
However, that system (apparently dual homed) repeated sending the same
message
at two completely different times:
   Sun, 5 Jul 2009 23:24:30 -0500
   Sun, 5 Jul 2009 23:42:28 -0500

I suspect that the message is actually being sent, but for some reason the
Exim
on your end does not think that the message was received by the other end
(linuxbox.org) and keeps trying to resend it. You need to contact whoever
runs
relay2.hrnoc.net and whack them with a clue bat.

Gadi, do you see anything in your sendmail logs that may give him a clue
what is
going bad on his end?

I hope this helps!

Jon Kibler
- --
Jon R. Kibler
Chief Technical Officer
Advanced Systems Engineering Technology, Inc.
Charleston, SC  USA
o: 843-849-8214
c: 843-813-2924       (NEW!)
s: 843-564-4224
http://www.linkedin.com/in/jonrkibler

My PGP Fingerprint is:
BAA2 1F2C 5543 5D25 4636 A392 515C 5045 CF39 4253


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.8 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iEYEARECAAYFAkpR6yMACgkQUVxQRc85QlPywACghnb64FDVejCy/XwZPphMKQFs
yrUAnRH8xbeCtFjCVSAFvHqQ0zvsoqu5
=DM3V
-----END PGP SIGNATURE-----




==================================================
Filtered by: TRUSTEM.COM's Email Filtering Service
http://www.trustem.com/
No Spam. No Viruses. Just Good Clean Email.



-- 
Gadi Evron,
ge () linuxbox org.

Blog: http://gevron.livejournal.com/

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: