Email being undelivered + Important Wingate related issues.

[salimwng]

Problem Definitions;

1. We are having too many emails that are being returned back, with error messages as below;

Example 1 ---> "Reason: No response from server - domain: iris.mg failed"
Example 2 ---> "Reason: SMTP Remote: Message 0000026626 not sent, no recipients accepted"
Example 3 ---> "Reason: No response from server - domain: sino-textile.com.cn failed"

I tried to send the same email from another Standalone PC which is off the LAN and that do not go through Wingate, and the email was successfully sent. What could be going wrong with Wingate ?


2. What is the purpose of the "Email" in System Tab ? All our users here have their email address email which is given by the Service Provider. We do not have a mail server. Is their a way of not using this Service ?


3. I have noticed in the Folder C:\Program Files\Wingate\Mail\Spool, there are many folders in it. Such as dead, domains, holding, incoming, posting and sent. I understand that mail sent ( if checked in Email --> Services Tab in Gatekeeper ) will keep a copy of all email sent. But what is the function of folder "holding" and "domains" more precisely ? There are around 275 emails in the folder "holding" ! What should I do to have the email delivered ?

4. If I do upgrade to the newest Version 6, will I have to re-download Kaspersky Antivirus again and Puresight ?

As supplementary information, please note that we have two Network cards installed on the server.
a) One network card looks after the internal LAN network ( whose IP address is 10.0.0.1) and
b) The IP address of the other card is 100.0.0.1, and is connected to a Router.
c) Workstations have IP address from IP 10..0.0.10 to 10.0.0.99
d) We are still with the old Wingate 5.2.3 (Build 901), Kaspersky Antivirus for Wingate Version 1.2.2 and Puresight for Wingate Version 1.1. Operating system is Windows NT 4, with all updates/patches so far. Internet is ADSL 51Kb

Thank you team
Salim

[adrien]

Hi

We do recommend upgrading, but yes, you would need to download new PureSight and Kaspersky AV plugins.

The email icon controls aspects of the email services in WinGate other than the socket-related settings (i.e. bindings, gateways etc). That's where you configure domains etc etc.

WinGate 6 mail is much more advanced than 5.2.3, and has a lot of bug fixes wrt delivery etc.

If you don't want to use the WinGate mail services however, you should be able to simply disable the SMTP, POP3, and IMAP servers in WinGate.

Adrien

[salimwng]

Thanks for replying Adrien, however few points are still unaswered. Please see eblow;

3. I have noticed in the Folder C:\Program Files\Wingate\Mail\Spool, there are many folders in it. Such as dead, domains, holding, incoming, posting and sent. I understand that mail sent ( if checked in Email --> Services Tab in Gatekeeper ) will keep a copy of all email sent. But what is the function of folder "holding" and "domains" more precisely ?

There are around 275 emails in the folder "holding" ! What should I do to have the email delivered ? <<--- THIS ONE IS VERY IMPORTANT !

Thanks for your input Adrien,
Regards.
Salim

[adrien]

ah ok.

Holding: This directory is where message files are held when they are queued for delivery to a remote server. For each .MSG file in this folder, there should be a corresponding .RCP file in a folder under domains.

Domains: This holds the domain jobs. Each domain job (job for delivery to a specific domain) has a folder in here, with .RCP files, and a .MRI file (for retrying etc).

Dead: This contains mail that could not be delivered or bounced for some reason.

Incoming: This folder is where mail is temporarily stored whilst it is being received by SMTP (or in Version 6 by POP3 collection). After mail is received, it is scanned by any plugin on the SMTP server, and moved into the PostIn folder.

PostIn: as above, mail is moved into this folder upon scanning. From here, the RCP file is processed (since it may contain many recipients in different domains) into domain-specific RCP files, and the MSG file is moved into the Holding folder for delivery.


Do you have corresponding RCP files for the MSG files in the Holding folder?

To get WinGate to deliver the mail, you can force the mail server to retry delivery (right-click the email icon in GateKeeper).

Adrien

[salimwng]

Adrien,

I do not have any RCP files for the MSG files in Holding folder. Also i do not have any folders listed in the Domains folder. I have seen few folders in the past, but right now there aren't. And at this moment i am writing to you, there are 314 emails ( MSG Files ) in the folder Holding.

All the guys in the company are complaining that their correspondent are not getting any email from them ! ..... now i can undertand.

How and What can i do to force these email to go. I did the Right Click on the icon Email and chosen Deliver Now. But nothing appears in the activity tab.

Thanks for guiding me.
Regards.
Salim

[adrien]

Hi

do you have any RCP files anywhere else? Like in the Dead folder? sometimes if there are delivery problems, the RCP could get moved to dead, but not the MSG file.

If you can find corresponding RCP files for the MSG files, you will need to

1. Stop WinGate
2. Move all the .MSG and .RCP files to the PostIn folder
3. Start WinGate

Then WinGate will re-process the mail for delivery.

I would recommend enabling debug logging on the SMTP server to see what the problems may be that are stopping the delivery.

If there are no .RCP files anywhere, then that is a bit more difficult. The .RCP files contain the information about the recipients of the mail. There would be a couple of options:

1. manually create RCP files for the messages. This is a fair bit of work, since you would need to open each file to see who it is from and to, then create a text file like:

Message-Id: <messagenumber@serverdomain>
Return-Path: senderemail
Recipient: recipient A
Recipient: recipient B etc

2. If the mail is going to local users on the server, you could drag the messages into their POP3 mailboxes on WinGate.

3. It may be easier to retrieve the messages with an email client, and re-send them from there. To do this, set up a POP3 mailbox in winGate, drag all the messages into there, and log in with a POP3 mail client into that account and retrieve all the mail, then re-send it. The email client will then do all the work of working out who the mail is to etc.


Adrien

[adrien]

PS, normally if the RCP file is gone, it is because the message was delivered or could not be delivered with some permanent error. It is possible for the RCP file to be deleted, but for some reason not the MSG (do you have another AV scanning product running on that machine that scans the WinGate folder?).

So I would take a look at some of the messages and make sure they weren't getting delivered - could save some work.

Regards

Adrien

[salimwng]

Hi Adrien,

1. We have Kaspersky Antivirus for Wingate and Symantec Corporate Antivirus Ver 9.03 running on the server. I checked in the Threats history of Symantec and no messages were deleted.

2. Right now we have 4 RCP files and 4 MSG files in the "Dead" folder. But in the folder "Holding", theres 377 MSG files now and not a SINGLE RCP File.

3. I have enable the Debug option properties (the check box) in the SMTP Server and performed a Saved Changes, Stopped Wingate and Re-Started it.

4. The option you gave for re-creating all the RCP files for 377 MSG files is much of a headache ! Anyway, i appreciate your advice, but it's not appropriate for 377 MESG....and god knows how much it's going to increase during the day !

5. When you said "If the mail is going to local users on the server, you could drag the messages into their POP3 mailboxes on WinGate". I didn't understand exactly what you meant. But the way we have our email configured here is as follows;

a) We uses Microsoft Mail internally ( the local postoffice stuff ..... provided by Windows NT ..... Example, my internal email box is salim, other can be nadia, albert, smith, etc, etc) and each client Outlook profile is configured in such way that it uses Microsoft Mail and Internet Mail. For the Internet Mail, all the users mailboxes are located on the ISP server, Example, salimwng@bow.intnet.mu, nadia.c@intnet.mu, etc, etc.


6. You said set up a POP3 mailbox in Wingate. Please show me how to do this.

7. Finally, i have noticed something weird, while editing an MSG file. Please see below part of the header between **** paragraph;

*******
Received: From rajivbucktowar (unverified [10.0.0.32]) by SMTP Server [10.0.0.1]
(WinGate SMTP Receiver v5.2.3 (Build 901)) with SMTP id <0000026968@AWSERVER>;
Wed, 16 Nov 2005 08:30:19 +0400
Reply-To: <rajiv.b@intnet.mu>
From: "Rajiv Bucktowar \( A & W International Ltd \)" <rajiv.b@intnet.mu>
To: "'fatlee'" <fatlee@iohk.com>
Cc: "'Ismael Essack \( A & W Wong Ltd \)'" <ismael.e@intnet.mu>
Subject: Newsprint in Ream
Date: Wed, 16 Nov 2005 08:30:17 +0400
Message-ID: <000001c5ea66$72f2b680$2000000a@rajivbucktowar>
MIME-Version: 1.0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
Importance: Normal

Dear Sally

Good Day

How you are doing.
********************


Did you notice the word unverified in the " (unverified [10.0.0.32]) by SMTP Server [10.0.0.1] " ? Why does this appear ? and how can we remove this ? Do you think this has got to do with mail being bounced or mail not deing delivered ?

Will wait for your comments and suggestions now,

Thanks a lot Adrien,
Kind regards.
Salim

PS: I sent you two emails yesterday, did you receive them ?

[adrien]

Hi Salim.

Couple of things.

1. Need to make sure that the Symantec Corporate AV is not scanning the WinGate folder or sub-folders. It can hold files open when WinGate needs exclusive access to them, and is generally bad for WinGate performance for things like logging, cache index updates etc.

2. You really need to find out what is stopping the mail from being delivered. Can you post some of the debug log for the smtp server? At least we need to stop this problem getting worse. An upgrade to 6.1 could well help a lot but I would like to know what is causing this.

3. OK

4. Understood.

5. What I meant was if your users were using WinGate as a POP3 server. Sounds like they aren't.

6. To do this:

a) enable the POP3 server in WinGate
b) pick a wingate user account that you will use to retrieve the mail. This user should be enabled for email (in the Email tab of the user configuration).
c) Under the WinGate\Mail\POP3 folder, create a folder with that user's name (normally if mail was delivered to them this would automatically be created, but since this won't be happening in your case, you'll need to create the folder).
d) drag all the MSG files into there. Put a copy of these MSG files somewhere else as well for safe keeping.
e) configure a new account in your Outlook to retrieve the mail with. The server will be a POP3 server, the IP address of WinGate, username the one you picked, and the password is that user's WinGate (or OS - depending on which user database you are using in WinGate) password.
f) retrieve the mail by using send/receive.

Then you will have these 377 messages in Outlook. You should be able to re-send them from there.

7. The unverified means the IP address has not been verified to be the name that was claimed by the sending mail agent. This is not a problem, and shoudn't be the cause of any non-delivery, it is for informational purposes only.

Regards

Adrien

[salimwng]

Hi Adrien,

I finally upgraded to Wingate Version 6 tonight at the office and I will have to wait till tomorrow to know how things are going. At the very beginning let me first congratulate you and team at Qbik for this wonderful piece of work you come up with in Version 6.1. It do have many more functionalities in it. WOW ! Hat's off to you guys !!!!

However, i came across some problems and i will need your help.

1. License:

Wingate notices that my license has expired, which is true in fact. When i went back to my old records, this confirm it. And this apply to Puresight also. I wanted to renew my license at that minute itself and logged to your site. [ https://commerce.qbik.com/purchase.php --> Renewals / Upgrades ]. A window appeared and i keyed in my license name and Key, and i was quite stunned with the reply i got. Please see the message below;

******
License Ineligible for upgrade
The license you provided is not eligible for an upgrade (License details do not match our database records, probable crack-generated key). If you feel there has been an error, contact sales@wingate.com with your query.
******

Please look into this issue and let me know. My Order number is Order: #31137 for a total amount US$ 235

Above error message is for license Key of Kaspersky. The one for Puresight is OK.


2. Something really bizaar is happening. I think this has something to do with the past problem of email i was having. Here's the simulation i did;

a) I sent a mail to my hotmail address. Mail gone immediately (2 seconds) , i could see it in the activity tab and when i logged in on my hotmail address the email was there. No problem at this stage.

b) I sent another email to my yahoo mail address. Mail gone after 30 seconds, i could see it in the Activity Tab tring to send mail to mx1.mail.yahoo.com, which failed, then it tried on mx2.mail.yahoo.com, which failed again and finally it was successful on mx3.mail.yahoo.com. When i logged in to my yahoo mail, the mail got in the BULK MAIL !!!

c) I sent another email to out branch office in Madagascar (awtex@iris.mg). The mail didn't go and i could see the iris.mg in the Domain Folder and the mail lying in the Holding folder. I did another test at that particular moment. I Stopped Wingate Engine and opened Outlook Express on the Server. I sent the mail and it was gone. I opened the SMTP Server log and looked at the logs generated, and though not being technical i could understand the term --> "Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96". I started the Wingate Engine, switched off the ADSL Router for 60 seconds and back on again. Went to the gatekeeper, and right clicked on mail and chose Sent Now. The mail was gone, and nothing was left in Domain and Holding Folder.

So....what could be going wrong ? Same mail when being sent through Wingate is being blocked by DSBL.ORG, and when i bypassed Wingate, DSBL.ORD do not block it. It's only when i switched off and on the ADSL Router to get a new IP, that the mail was gone !!!

I will post at the bottom of this reply, the logs in the SMTP Server Log. The post will be huge, but i have no other choice. If only you could provide an attachment Options in forums for registered users, maybe this can reduce the length of posts.....well...it's just a suggestion.

Adrien, I will wait eagerly for your reply.

Thanks again,
Salim

PS: Here's the post of SMTP Server Log below

******
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Created:
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 220 awserver.intnet.mu ESMTP Service ready
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: HELO salimpentium4
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: MAIL FROM: <salimwng@bow.intnet.mu>
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: RCPT TO: <awtex@iris.mg>
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: RCPT TO: <awinfo@iris.mg>
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: RSET
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: MAIL FROM: <salimwng@bow.intnet.mu>
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: RCPT TO: <awtex@iris.mg>
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: RCPT TO: <awinfo@iris.mg>
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: DATA
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 354 Start mail input; end with CRLF.CRLF
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 250 Requested mail action okay, completed
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Requested: SMTP In: mail from salimwng@bow.intnet.mu to 2 recipients (1576 Bytes)
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: C=>: QUIT
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Debug: <=S: 221 SMTP Server Service closing transmission channel
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Traffic 527 1586 0 0 0s
11/22/05 19:57:45 10.0.0.48 Guest 0000000026 Terminated exit code 0
11/22/05 19:58:02 127.0.0.2 <system> 0000000031 Debug: Delivery for domain iris.mg - MX lookup succeeded
11/22/05 19:58:02 127.0.0.2 <system> 0000000031 Debug: ==== Attempting connection to iris.mg[62.56.162.42]
11/22/05 19:58:06 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 220 camel.malagasy.com ESMTP Postfix (Debian/GNU)
11/22/05 19:58:06 127.0.0.2 <system> 0000000031 Debug: iris.mg C=>: EHLO awserver.intnet.mu
11/22/05 19:58:07 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 250-camel.malagasy.com
11/22/05 19:58:07 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 250-PIPELINING
11/22/05 19:58:07 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 250-SIZE 5000000
11/22/05 19:58:07 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 250-ETRN
11/22/05 19:58:07 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 250 8BITMIME
11/22/05 19:58:07 127.0.0.2 <system> 0000000031 Debug: iris.mg C=>: MAIL FROM:<salimwng@bow.intnet.mu> SIZE=1575
11/22/05 19:58:08 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 250 Ok
11/22/05 19:58:08 127.0.0.2 <system> 0000000031 Debug: iris.mg C=>: RCPT TO:<awtex@iris.mg>
11/22/05 19:58:13 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 554 Service unavailable; Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96
11/22/05 19:58:13 127.0.0.2 <system> 0000000031 Debug: iris.mg C=>: RCPT TO:<awinfo@iris.mg>
11/22/05 19:58:14 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 554 Service unavailable; Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96
11/22/05 19:58:14 127.0.0.2 <system> 0000000031 Debug: iris.mg C=>: RSET
11/22/05 19:58:14 127.0.0.2 <system> 0000000031 Debug: iris.mg <=S: 250 Ok
11/22/05 19:58:14 127.0.0.2 <system> 0000000031 Debug: iris.mg C=>: QUIT
11/22/05 19:58:15 127.0.0.2 <system> 0000000031 Debug: ==== Server iris.mg closed connection
11/22/05 19:58:15 127.0.0.2 <system> 0000000031 Debug: ==== Attempting connection to planete.malagasy.com[82.206.237.40]
11/22/05 19:59:01 127.0.0.2 <system> 0000000031 Error: ==== Connection to planete.malagasy.com failed
11/22/05 19:59:03 127.0.0.2 <system> 0000000031 Traffic 134 391 0 0 61s
11/22/05 19:59:03 127.0.0.2 <system> 0000000031 Terminated exit code 0
11/22/05 20:02:22 SMTP Server Configuration changed
11/22/05 20:02:22 SMTP Server Configuration changed
11/22/05 20:02:44 SMTP Server Debug: Domain send queue forced (ignores scheduled time and thread count)
11/22/05 20:02:44 127.0.0.2 <system> 0000000047 Debug: Delivery for domain iris.mg - MX lookup succeeded
11/22/05 20:02:44 127.0.0.2 <system> 0000000047 Debug: ==== Attempting connection to iris.mg[62.56.162.42]
11/22/05 20:02:46 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 220 camel.malagasy.com ESMTP Postfix (Debian/GNU)
11/22/05 20:02:46 127.0.0.2 <system> 0000000047 Debug: iris.mg C=>: EHLO awserver.intnet.mu
11/22/05 20:02:47 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 250-camel.malagasy.com
11/22/05 20:02:47 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 250-PIPELINING
11/22/05 20:02:47 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 250-SIZE 5000000
11/22/05 20:02:47 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 250-ETRN
11/22/05 20:02:47 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 250 8BITMIME
11/22/05 20:02:47 127.0.0.2 <system> 0000000047 Debug: iris.mg C=>: MAIL FROM:<salimwng@bow.intnet.mu> SIZE=1575
11/22/05 20:02:48 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 250 Ok
11/22/05 20:02:48 127.0.0.2 <system> 0000000047 Debug: iris.mg C=>: RCPT TO:<awtex@iris.mg>
11/22/05 20:02:49 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 554 Service unavailable; Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96
11/22/05 20:02:49 127.0.0.2 <system> 0000000047 Debug: iris.mg C=>: RCPT TO:<awinfo@iris.mg>
11/22/05 20:02:50 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 554 Service unavailable; Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96
11/22/05 20:02:50 127.0.0.2 <system> 0000000047 Debug: iris.mg C=>: RSET
11/22/05 20:02:51 127.0.0.2 <system> 0000000047 Debug: iris.mg <=S: 250 Ok
11/22/05 20:02:51 127.0.0.2 <system> 0000000047 Debug: iris.mg C=>: QUIT
11/22/05 20:02:52 127.0.0.2 <system> 0000000047 Debug: ==== Server iris.mg closed connection
11/22/05 20:02:52 127.0.0.2 <system> 0000000047 Debug: ==== Attempting connection to planete.malagasy.com[82.206.237.40]
11/22/05 20:03:37 127.0.0.2 <system> 0000000047 Error: ==== Connection to planete.malagasy.com failed
11/22/05 20:03:39 127.0.0.2 <system> 0000000047 Traffic 134 391 0 0 55s
11/22/05 20:03:39 127.0.0.2 <system> 0000000047 Terminated exit code 0
11/22/05 20:04:47 SMTP Server Configuration changed
11/22/05 20:04:47 SMTP Server Configuration changed
11/22/05 20:04:54 SMTP Server Service stopped
11/22/05 20:05:30 SMTP Server Service started successfully
11/22/05 20:05:30 SMTP Server Debug: Build DomainList took 0 milliseconds
11/22/05 20:05:37 SMTP Server Debug: Domain send queue forced (ignores scheduled time and thread count)
11/22/05 20:05:37 127.0.0.2 <system> 0000000004 Debug: Delivery for domain iris.mg - MX lookup succeeded
11/22/05 20:05:37 127.0.0.2 <system> 0000000004 Debug: ==== Attempting connection to iris.mg[62.56.162.42]
11/22/05 20:05:39 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 220 camel.malagasy.com ESMTP Postfix (Debian/GNU)
11/22/05 20:05:39 127.0.0.2 <system> 0000000004 Debug: iris.mg C=>: EHLO awserver.intnet.mu
11/22/05 20:05:40 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 250-camel.malagasy.com
11/22/05 20:05:40 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 250-PIPELINING
11/22/05 20:05:40 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 250-SIZE 5000000
11/22/05 20:05:40 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 250-ETRN
11/22/05 20:05:40 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 250 8BITMIME
11/22/05 20:05:40 127.0.0.2 <system> 0000000004 Debug: iris.mg C=>: MAIL FROM:<salimwng@bow.intnet.mu> SIZE=1575
11/22/05 20:05:41 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 250 Ok
11/22/05 20:05:41 127.0.0.2 <system> 0000000004 Debug: iris.mg C=>: RCPT TO:<awtex@iris.mg>
11/22/05 20:05:43 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 554 Service unavailable; Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96
11/22/05 20:05:43 127.0.0.2 <system> 0000000004 Debug: iris.mg C=>: RCPT TO:<awinfo@iris.mg>
11/22/05 20:05:44 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 554 Service unavailable; Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96
11/22/05 20:05:44 127.0.0.2 <system> 0000000004 Debug: iris.mg C=>: RSET
11/22/05 20:05:45 127.0.0.2 <system> 0000000004 Debug: iris.mg <=S: 250 Ok
11/22/05 20:05:45 127.0.0.2 <system> 0000000004 Debug: iris.mg C=>: QUIT
11/22/05 20:05:46 127.0.0.2 <system> 0000000004 Debug: ==== Server iris.mg closed connection
11/22/05 20:05:46 127.0.0.2 <system> 0000000004 Debug: ==== Attempting connection to planete.malagasy.com[82.206.237.40]
11/22/05 20:06:05 SMTP Server Configuration changed
11/22/05 20:06:31 127.0.0.2 <system> 0000000004 Error: ==== Connection to planete.malagasy.com failed
11/22/05 20:06:33 127.0.0.2 <system> 0000000004 Traffic 134 391 0 0 56s
11/22/05 20:06:33 127.0.0.2 <system> 0000000004 Terminated exit code 0
11/22/05 20:11:51 SMTP Server Service stopped
11/22/05 20:14:51 SMTP Server Service started successfully
11/22/05 20:14:51 SMTP Server Debug: Build DomainList took 0 milliseconds
11/22/05 20:15:05 127.0.0.2 <system> 0000000008 Debug: Delivery for domain iris.mg - MX lookup succeeded
11/22/05 20:15:05 127.0.0.2 <system> 0000000008 Debug: ==== Attempting connection to iris.mg[62.56.162.42]
11/22/05 20:15:07 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 220 camel.malagasy.com ESMTP Postfix (Debian/GNU)
11/22/05 20:15:07 127.0.0.2 <system> 0000000008 Debug: iris.mg C=>: EHLO awserver.intnet.mu
11/22/05 20:15:08 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 250-camel.malagasy.com
11/22/05 20:15:08 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 250-PIPELINING
11/22/05 20:15:08 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 250-SIZE 5000000
11/22/05 20:15:08 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 250-ETRN
11/22/05 20:15:08 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 250 8BITMIME
11/22/05 20:15:08 127.0.0.2 <system> 0000000008 Debug: iris.mg C=>: MAIL FROM:<salimwng@bow.intnet.mu> SIZE=1575
11/22/05 20:15:09 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 250 Ok
11/22/05 20:15:09 127.0.0.2 <system> 0000000008 Debug: iris.mg C=>: RCPT TO:<awtex@iris.mg>
11/22/05 20:15:10 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 554 Service unavailable; Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96
11/22/05 20:15:10 127.0.0.2 <system> 0000000008 Debug: iris.mg C=>: RCPT TO:<awinfo@iris.mg>
11/22/05 20:15:11 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 554 Service unavailable; Client host [202.123.15.96] blocked using list.dsbl.org; http://dsbl.org/listing?202.123.15.96
11/22/05 20:15:11 127.0.0.2 <system> 0000000008 Debug: iris.mg C=>: RSET
11/22/05 20:15:12 127.0.0.2 <system> 0000000008 Debug: iris.mg <=S: 250 Ok
11/22/05 20:15:12 127.0.0.2 <system> 0000000008 Debug: iris.mg C=>: QUIT
11/22/05 20:15:13 127.0.0.2 <system> 0000000008 Debug: ==== Server iris.mg closed connection
11/22/05 20:15:13 127.0.0.2 <system> 0000000008 Debug: ==== Attempting connection to planete.malagasy.com[82.206.237.40]
11/22/05 20:15:58 127.0.0.2 <system> 0000000008 Error: ==== Connection to planete.malagasy.com failed
11/22/05 20:16:00 127.0.0.2 <system> 0000000008 Traffic 134 391 0 0 55s
11/22/05 20:16:00 127.0.0.2 <system> 0000000008 Terminated exit code 0
11/22/05 20:17:49 SMTP Server Debug: Domain send queue forced (ignores scheduled time and thread count)
11/22/05 20:17:49 127.0.0.2 <system> 0000000023 Debug: Delivery for domain iris.mg - MX lookup succeeded
11/22/05 20:17:49 127.0.0.2 <system> 0000000023 Debug: ==== Attempting connection to iris.mg[62.56.162.42]
11/22/05 20:17:53 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 220 camel.malagasy.com ESMTP Postfix (Debian/GNU)
11/22/05 20:17:53 127.0.0.2 <system> 0000000023 Debug: iris.mg C=>: EHLO awserver.intnet.mu
11/22/05 20:17:54 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250-camel.malagasy.com
11/22/05 20:17:54 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250-PIPELINING
11/22/05 20:17:54 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250-SIZE 5000000
11/22/05 20:17:54 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250-ETRN
11/22/05 20:17:54 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250 8BITMIME
11/22/05 20:17:54 127.0.0.2 <system> 0000000023 Debug: iris.mg C=>: MAIL FROM:<salimwng@bow.intnet.mu> SIZE=1575
11/22/05 20:17:55 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250 Ok
11/22/05 20:17:55 127.0.0.2 <system> 0000000023 Debug: iris.mg C=>: RCPT TO:<awtex@iris.mg>
11/22/05 20:17:59 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250 Ok
11/22/05 20:17:59 127.0.0.2 <system> 0000000023 Debug: iris.mg C=>: RCPT TO:<awinfo@iris.mg>
11/22/05 20:18:00 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250 Ok
11/22/05 20:18:00 127.0.0.2 <system> 0000000023 Debug: iris.mg C=>: DATA
11/22/05 20:18:01 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 354 End data with <CR><LF>.<CR><LF>
11/22/05 20:18:03 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250 Ok: queued as E730416E07
11/22/05 20:18:03 127.0.0.2 <system> 0000000023 Debug: iris.mg C=>: RSET
11/22/05 20:18:04 127.0.0.2 <system> 0000000023 Debug: iris.mg <=S: 250 Ok
11/22/05 20:18:04 127.0.0.2 <system> 0000000023 Debug: iris.mg C=>: QUIT
11/22/05 20:18:04 127.0.0.2 <system> 0000000023 Debug: ==== Server iris.mg closed connection
11/22/05 20:18:06 127.0.0.2 <system> 0000000023 Traffic 1715 232 0 0 17s
11/22/05 20:18:06 127.0.0.2 <system> 0000000023 Terminated exit code 0

*****

[adrien]

Hi Salim

Thanks for your comments!

As for the license, there were some KAV keys that were issued between November 2003, and January 2004 that had a problem, which meant that we re-issued new keys. If for some reason you didn't receive your new key, then your old key wouldn't match the one in our database. I'll resend you the key you need to use for the upgrade (sorry about the inconvenience).

On the mail issue, there are several possible reasons why Outlook Express was able to send where WinGate didn't to your branch office. This could be if Outlook Express was configured to authenticate to the server, or if it was sending to another server (i.e. your ISP mail server). I think if Outlook Express was configured to connect directly to the branch office mail server, it would probably have had the same result WinGate did.

Sounds like the IP address that your ISP assigned you had been placed on a black-list at dsbl.org. Sometimes these RBLs have dialup addresses on them (not neccessarily anyone that has ever spammed), and it is up to the system admin to decide which RBLs to use.

So for options, there are several. You could

a) if the branch office mail server supports authentication, you could configure WinGate to authenticate whenever it delivers to iris.mg. To do this:
* Open GateKeeper, go to Email -> Servers
* Click Add
* enter "iris.mg" as server, give a description, check "Server requires authentication", enter a username and password that the server will accept, and if necessary choose an authentication method that the server supports (WinGate will try and determine the supported methods and use the most secure one by default).
* click ok, then ok.

Now mail sent to your branch office should go through an authenticated connection, which should mean that the mail server there should not perform RBL verification on it.

b) configure WinGate to deliver mail to your ISP mail server if it could not deliver it directly. Your ISP mail server is likely to not be on a RBL list, so wouldn't be banned by your branch office (or other sites that use RBLs). To do this:
* open GateKeeper, go to Email -> Delivery
* Under How to deliver, select "Use Gateway for undeliverable mail".
* enter the name of your ISP's smtp server. If your ISP requires authentication, click the "..." button, and this will create another server config for your ISP's server as in (a) above.
* click OK.

Now, if WinGate can't deliver a mail directly to a server, it will try sending it to your ISP. If you still have trouble with this, you could configure WinGate to deliver all mail directly to your ISP, by selecting "Use Gateway" instead of "Use gateway for undeliverable mail" above.

c) modify the configuration on your branch office to accept mail from your server. This isn't the recommended option, since your IP address may change etc.

Adrien

[salimwng]

Hi Adrien,

Am back.

1. I tried the last paragraph in Option b, that is configuring Wingate to deliver all mail directly to our ISP, which smtp.intnet.mu by selecting "Use Gateway". I monitored the Folder Domains and Holdings for the whole day, and in the evening, there were no files in any of them. During the day i could notice that at times, a folder was created, but after 3/6 minutes, the mail was gone. Well i hope now that mail is going. We did not receive any mail returned neither. It's too good to be true, and i wish now that our correspondent did got the mail. by the way is there a way of traking this ?

2. I have renewed both licenses, Kaspersky and Puresight. And it's working like a charm ! Gosh.....Puresight has changed considerably. I've noticed a toolbal (%) in Sex related contents, as well as Gambling. But why aren't there any in the other categories.

Let's say i wanted to allow people to use Category Web Mail for only Yahoo mail and not hotmail. Is there a way to do this ?


3. Another issue, when you say "iris.mg or my ISP SMTP server require authentication and i need to enter a username and password, where can i get that ? So far they (Mauritius ISP) have given me only the DNS IP's and the Gateway.

4. In the Enterprise version of Wingate, is there any option in the parameters that will allow all Emails ( with a predetermined criterion) to sent to bcc directly ? Am asking you this, because though we have an IT policy that forbids employees to forward chain letters/jokes/bla bla bla, some people still use this, and sometimes, these mails are of size 5 Meg carrying avi or mpg !

5. Last question. Does wingate, provide an interface to generate reports on Web Sites visited ? I know there are third parties software that does this, like Proxy Inspector, but the data generated are not that to the level expected. I have purchased Proxy Inspector 2 years back, and the analysis it does, is not that useful.

Well, i think that will be all....for the moment. I would like to thank you again for all your help. My system is running great, and i will keep up the monitoring in the days/weeks to come.

My kind regards,
Salim

[adrien]

Hi Salim

1. Basically the only way to really know if the mail was delivered would be to check through the SMTP server log files, it should indicate any errors. If you enable debug logging, you get the whole conversation between the servers, so you can spot pretty much any problem if there is one.

2. PureSight 2.0 now has 2 ways of operating - it has a large database which is regularly updated, and also the previous ACR (automatic content recognition) system. The list categorises sites into many categories, but the ACR system only handle Sex and Gambling categories. This is why there are percentage based thresholds for these categories as opposed to the others which are either blocked or not.

If you want to block webmail but allow yahoo mail, you would add a manual classification for the yahoo site, and make it allowed - these are checked first so they override the PureSight list and ACR engine.

3. Any username and password for sending mail would need to be provided by the administrator of the mail server you are sending to. If your ISP doesn't require you to authenticate to send mail, there isn't really a need to do so.

4. Not exactly. You can keep a copy of all mail that has gone through the system (it is put in the WinGate\Mail\Sent folder). Alternatively for each email address handler you can copy the mail to another recipient, but this is based on the destination address of the mail rather than say the sender address.

5. WinGate itself doesn't do reports from the log files. Have you tried the latest version of ProxyInspector? It has probably changed a lot in the last 2 years.

Regards

Adrien