ATTN: Network Gurus > General Discussion

Posted: 7/22/2005 7:14:29 AM EDT

I manage the network and computer stuff for a small organization in Cleveland...the Cleveland Orchestra.

I got notification from a user that emails from one domain, wclv.com, were not arriving at our server. I checked with their IS guy, and he says that everything was fine until he installed a new server. After this, he says, mail.clevelandorchestra.com is "not allowing" connections from his server.

We've had no other complaints.
We don't restrict connections to the SMTP port on that machine for any reason.
We don't filter.
We don't insist on security.
etc etc.

He now alleges that this problem has been replicated by some of his pals, but I've never had any complaints.

Your advice?
I don't know why this is my problem, but now it's to the point where I just want to give the guy a cup of STFU.

Scott

Posted: 7/22/2005 7:26:19 AM EDT

[#1]

[astrawinski@eagle ~]$ telnet mail.clevelandorchestra.com 25
Trying 198.30.150.3...
Connected to mail.clevelandorchestra.com (198.30.150.3).
Escape character is '^]'.
220 colt.tco.corp Microsoft ESMTP MAIL Service, Version: 6.0.3790.211 ready at Fri, 22 Jul 2005 11:17:48 -0400
helo strawinski.net
250 colt.tco.corp Hello [208.202.125.52]
mail from:<removed>@strawinski.net
250 2.1.0 <removed>@strawinski.net....Sender OK
rcpt to:[email protected]
250 2.1.5 [email protected]
data
354 Start mail input; end with <CRLF>.<CRLF>
This here is a test from your old buddy SubnetMask
.
250 2.6.0 <[email protected]> Queued mail for delivery

^]
telnet> quit
Connection closed.
[astrawinski@eagle ~]

Tell him to STFU.

Posted: 7/22/2005 7:46:00 AM EDT

[#2]

Does the guy have a new public facing IP for his new server? Is DNS Forwarded? Reversed?

Was it before? Sounds like it's on his end.

Posted: 7/22/2005 7:51:23 AM EDT

[#3]

BTW - your mail server never bounced my email back. Did I actually guess a valid email address?

Posted: 7/22/2005 7:53:33 AM EDT

[#4]

MX record in DNS?

Posted: 7/22/2005 7:56:19 AM EDT

[#5]

Did I actually guess a valid email address?

smtp spammer.

Posted: 7/22/2005 7:57:40 AM EDT

[#6]

Quoted:
MX record in DNS?

I checked this from my end, as well. It's fine.


[astrawinski@eagle ~]$ dig mx clevelandorchestra.com


; <<>> DiG 9.2.5 <<>> mx clevelandorchestra.com
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 54902
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 4, ADDITIONAL: 1

;; QUESTION SECTION:
;clevelandorchestra.com.                IN      MX

;; ANSWER SECTION:
clevelandorchestra.com. 3600    IN      MX      10 mail.clevelandorchestra.com.

;; AUTHORITY SECTION:
clevelandorchestra.com. 3600    IN      NS      ns2.ideastar.com.
clevelandorchestra.com. 3600    IN      NS      ns3.ideastar.com.
clevelandorchestra.com. 3600    IN      NS      ns4.ideastar.com.
clevelandorchestra.com. 3600    IN      NS      ns1.ideastar.com.

;; ADDITIONAL SECTION:
mail.clevelandorchestra.com. 3600 IN    A       198.30.150.3

;; Query time: 116 msec
;; SERVER: 127.0.0.1#53(localhost)
;; WHEN: Fri Jul 22 08:53:14 2005
;; MSG SIZE  rcvd: 158

[astrawinski@eagle ~]$

Posted: 7/22/2005 8:57:18 AM EDT

[#7]

Quoted:
BTW - your mail server never bounced my email back. Did I actually guess a valid email address?

No...but we have automatic replies to the internet turned off.

I did the telnet session myself last week. Told my own mailserver that I was a member of the non-working domain.... Everything worked fine.

Thanks for checkin it out.
Scott

Posted: 7/22/2005 8:58:57 AM EDT

[#8]

Quoted:
Did I actually guess a valid email address?

smtp spammer.

Posted: 7/22/2005 9:02:19 AM EDT

[#9]

Quoted:
Quoted:
BTW - your mail server never bounced my email back. Did I actually guess a valid email address?

No...but we have automatic replies to the internet turned off.

I did the telnet session myself last week. Told my own mailserver that I was a member of the non-working domain.... Everything worked fine.

Thanks for checkin it out.
Scott

If you opt to continue troubleshooting it - as opposed to telling him to STFU - have him do a dig for your MX record, in case the name servers he's using are screwed up. Next, he needs to telnet to port 25 just like you and I did, and let you know what happens.

It's certainly not on your side, though.

Posted: 7/22/2005 2:19:42 PM EDT

[#10]

He says when he does a telnet, the packets leave his firewall, but never return.

His name server resolves the correct IP, but as soon as his telnet progam says "trying 198..." it doesn't go any further.

He's using linux, fwiw.

Scott

Warning

Confirm Action

[ARCHIVED THREAD] - ATTN: Network Gurus

[ARCHIVED THREAD] - ATTN: Network Gurus