Socket error 590615
-
Mdaemon 24.5.2 :
in incoming smtp i get many Socket error 590615 sender has finished using the connection and initiated a shutdown: sometimes the message is lost, is there any timeout value to fix ?
thanks
Stefano
-
Arron Staff
If you can post a log snippet it would help us to figure out what is happening. The other reports of socket error 590615 appear to happen when the device connecting to MDaemon terminates the connection without going through the proper shutdown. For exaple, normally an SMTP session would have a QUIT command issued prior to closing the connection.
-
ok, I attach a small log
Sat 2025-01-25 01:22:31.859: 05: Session 13028351; child 0003
Sat 2025-01-25 01:22:31.859: 05: Accepting SMTP connection from 120.234.196.189:38427 to 10.0.0.8:465
Sat 2025-01-25 01:22:31.859: 07: Vaglio località ha rilevato che la connessione proviene da China, Asia
Sat 2025-01-25 01:22:33.896: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Sat 2025-01-25 01:22:33.896: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:22:33 +0100
Sat 2025-01-25 01:22:35.450: 02: <-- EHLO [120.234.196.189]
Sat 2025-01-25 01:22:35.450: 03: --> 250-mail.dental-art.it Hello [120.234.196.189] [120.234.196.189], pleased to meet you
Sat 2025-01-25 01:22:35.452: 03: --> 250-ETRN
Sat 2025-01-25 01:22:35.452: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:22:35.452: 03: --> 250-8BITMIME
Sat 2025-01-25 01:22:35.452: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:22:35.452: 03: --> 250-PIPELINING
Sat 2025-01-25 01:22:35.452: 03: --> 250-REQUIRETLS
Sat 2025-01-25 01:22:35.452: 03: --> 250 SIZE
Sat 2025-01-25 01:22:36.652: 02: <-- AUTH PLAIN
Sat 2025-01-25 01:22:36.652: 03: --> 334
Sat 2025-01-25 01:22:37.641: 02: <-- ******
Sat 2025-01-25 01:22:37.641: 01: Autenticazione info@dental-art.it...
Sat 2025-01-25 01:22:37.648: 04: Password errata
Sat 2025-01-25 01:22:37.649: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:22:38.633: 04: * Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
Sat 2025-01-25 01:22:38.633: 04: SMTP session terminated (Bytes in/out: 839/3549)
Sat 2025-01-25 01:22:38.633: 01: ----------
Sat 2025-01-25 01:22:50.200: 05: Session 13028352; child 0001
Sat 2025-01-25 01:22:50.200: 05: Accepting SMTP connection from 31.208.209.252:47742 to 10.0.0.8:465
Sat 2025-01-25 01:22:50.200: 07: Vaglio località ha rilevato che la connessione proviene da Sweden, Europe
Sat 2025-01-25 01:22:51.388: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Sat 2025-01-25 01:22:51.388: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:22:51 +0100
Sat 2025-01-25 01:22:52.134: 02: <-- EHLO [31.208.209.252]
Sat 2025-01-25 01:22:52.134: 03: --> 250-mail.dental-art.it Hello [31.208.209.252] [31.208.209.252], pleased to meet you
Sat 2025-01-25 01:22:52.136: 03: --> 250-ETRN
Sat 2025-01-25 01:22:52.136: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:22:52.136: 03: --> 250-8BITMIME
Sat 2025-01-25 01:22:52.136: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:22:52.136: 03: --> 250-PIPELINING
Sat 2025-01-25 01:22:52.136: 03: --> 250-REQUIRETLS
Sat 2025-01-25 01:22:52.136: 03: --> 250 SIZE
Sat 2025-01-25 01:22:52.610: 02: <-- AUTH PLAIN
Sat 2025-01-25 01:22:52.610: 03: --> 334
Sat 2025-01-25 01:22:53.398: 02: <-- ******
Sat 2025-01-25 01:22:53.398: 01: Autenticazione info...
Sat 2025-01-25 01:22:53.400: 04: È necessario un indirizzo e-mail completo
Sat 2025-01-25 01:22:53.401: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:22:53.878: 04: * Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
Sat 2025-01-25 01:22:53.878: 04: SMTP session terminated (Bytes in/out: 818/3547)
Sat 2025-01-25 01:22:53.879: 01: ----------
Sat 2025-01-25 01:24:56.971: 05: Session 13028356; child 0001
Sat 2025-01-25 01:24:56.971: 05: Accepting SMTP connection from 114.242.61.35:43740 to 10.0.0.8:25
Sat 2025-01-25 01:24:56.971: 07: Vaglio località ha rilevato che la connessione proviene da China, Asia
Sat 2025-01-25 01:24:56.972: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:24:56 +0100
Sat 2025-01-25 01:24:57.965: 02: <-- EHLO [114.242.61.35]
Sat 2025-01-25 01:24:57.965: 03: --> 250-mail.dental-art.it Hello [114.242.61.35] [114.242.61.35], pleased to meet you
Sat 2025-01-25 01:24:57.965: 03: --> 250-ETRN
Sat 2025-01-25 01:24:57.967: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:24:57.967: 03: --> 250-8BITMIME
Sat 2025-01-25 01:24:57.967: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:24:57.967: 03: --> 250-PIPELINING
Sat 2025-01-25 01:24:57.967: 03: --> 250-STARTTLS
Sat 2025-01-25 01:24:57.967: 03: --> 250 SIZE
Sat 2025-01-25 01:24:58.742: 02: <-- AUTH LOGIN
Sat 2025-01-25 01:24:58.742: 03: --> 334 VXNlcm5hbWU6
Sat 2025-01-25 01:24:59.679: 02: <-- ZnJhbmNlc2NvLnphbmF0dGFAcm9zc2ljYXdzLml0
Sat 2025-01-25 01:24:59.679: 03: --> 334 UGFzc3dvcmQ6
Sat 2025-01-25 01:25:00.472: 02: <-- ******
Sat 2025-01-25 01:25:00.472: 01: Autenticazione francesco.zanatta@rossicaws.it...
Sat 2025-01-25 01:25:00.484: 04: Password errata
Sat 2025-01-25 01:25:00.487: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:25:01.316: 05: Connessione chiusa
Sat 2025-01-25 01:25:01.316: 04: SMTP session terminated (Bytes in/out: 106/341)
Sat 2025-01-25 01:25:01.316: 01: ----------
Sat 2025-01-25 01:25:02.263: 05: Session 13028357; child 0001
Sat 2025-01-25 01:25:02.263: 05: Accepting SMTP connection from 24.75.171.174:33242 to 10.0.0.8:25
Sat 2025-01-25 01:25:02.263: 07: Vaglio località ha rilevato che la connessione proviene da United States, North America
Sat 2025-01-25 01:25:02.264: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:25:02 +0100
Sat 2025-01-25 01:25:03.285: 02: <-- EHLO 174.subnet-24-75-171.ellijay.com
Sat 2025-01-25 01:25:03.285: 03: --> 250-mail.dental-art.it Hello 174.subnet-24-75-171.ellijay.com [24.75.171.174], pleased to meet you
Sat 2025-01-25 01:25:03.287: 03: --> 250-ETRN
Sat 2025-01-25 01:25:03.287: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:25:03.287: 03: --> 250-8BITMIME
Sat 2025-01-25 01:25:03.287: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:25:03.287: 03: --> 250-PIPELINING
Sat 2025-01-25 01:25:03.287: 03: --> 250-STARTTLS
Sat 2025-01-25 01:25:03.287: 03: --> 250 SIZE
Sat 2025-01-25 01:25:04.072: 02: <-- AUTH LOGIN
Sat 2025-01-25 01:25:04.073: 03: --> 334 VXNlcm5hbWU6
Sat 2025-01-25 01:25:04.924: 02: <-- ZnJhbmNlc2NvLnphbmF0dGE=
Sat 2025-01-25 01:25:04.924: 03: --> 334 UGFzc3dvcmQ6
Sat 2025-01-25 01:25:05.870: 02: <-- ******
Sat 2025-01-25 01:25:05.870: 01: Autenticazione francesco.zanatta...
Sat 2025-01-25 01:25:05.873: 04: È necessario un indirizzo e-mail completo
Sat 2025-01-25 01:25:05.874: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:25:06.653: 05: Connessione chiusa
Sat 2025-01-25 01:25:06.653: 04: SMTP session terminated (Bytes in/out: 107/358)
Sat 2025-01-25 01:25:06.653: 01: ----------
Sat 2025-01-25 01:26:12.207: 05: Session 13028361; child 0001
Sat 2025-01-25 01:26:12.207: 05: Accepting SMTP connection from 216.181.210.18:42058 to 10.0.0.8:465
Sat 2025-01-25 01:26:12.208: 07: Vaglio località ha rilevato che la connessione proviene da Canada, North America
Sat 2025-01-25 01:26:14.243: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Sat 2025-01-25 01:26:14.243: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:26:14 +0100
Sat 2025-01-25 01:26:15.435: 02: <-- EHLO [216.181.210.18]
Sat 2025-01-25 01:26:15.436: 03: --> 250-mail.dental-art.it Hello [216.181.210.18] [216.181.210.18], pleased to meet you
Sat 2025-01-25 01:26:15.437: 03: --> 250-ETRN
Sat 2025-01-25 01:26:15.437: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:26:15.437: 03: --> 250-8BITMIME
Sat 2025-01-25 01:26:15.437: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:26:15.437: 03: --> 250-PIPELINING
Sat 2025-01-25 01:26:15.437: 03: --> 250-REQUIRETLS
Sat 2025-01-25 01:26:15.437: 03: --> 250 SIZE
Sat 2025-01-25 01:26:16.508: 02: <-- AUTH PLAIN
Sat 2025-01-25 01:26:16.508: 03: --> 334
Sat 2025-01-25 01:26:17.552: 02: <-- ******
Sat 2025-01-25 01:26:17.552: 01: Autenticazione fabio.giaretta@dental-art.it...
Sat 2025-01-25 01:26:17.558: 04: Password errata
Sat 2025-01-25 01:26:17.558: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:26:18.575: 04: * Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
Sat 2025-01-25 01:26:18.575: 04: SMTP session terminated (Bytes in/out: 854/3547)
Sat 2025-01-25 01:26:18.575: 01: ----------
Sat 2025-01-25 01:26:20.006: 05: Session 13028362; child 0001
Sat 2025-01-25 01:26:20.006: 05: Accepting SMTP connection from 136.232.73.130:41994 to 10.0.0.8:465
Sat 2025-01-25 01:26:20.006: 07: Vaglio località ha rilevato che la connessione proviene da India, Asia
Sat 2025-01-25 01:26:21.906: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Sat 2025-01-25 01:26:21.906: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:26:21 +0100
Sat 2025-01-25 01:26:23.159: 02: <-- EHLO [1.7.229.162]
Sat 2025-01-25 01:26:23.159: 03: --> 250-mail.dental-art.it Hello [1.7.229.162] [136.232.73.130], pleased to meet you
Sat 2025-01-25 01:26:23.161: 03: --> 250-ETRN
Sat 2025-01-25 01:26:23.161: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:26:23.161: 03: --> 250-8BITMIME
Sat 2025-01-25 01:26:23.161: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:26:23.161: 03: --> 250-PIPELINING
Sat 2025-01-25 01:26:23.161: 03: --> 250-REQUIRETLS
Sat 2025-01-25 01:26:23.161: 03: --> 250 SIZE
Sat 2025-01-25 01:26:24.096: 02: <-- AUTH PLAIN
Sat 2025-01-25 01:26:24.097: 03: --> 334
Sat 2025-01-25 01:26:25.111: 02: <-- ******
Sat 2025-01-25 01:26:25.111: 01: Autenticazione fabio.giaretta...
Sat 2025-01-25 01:26:25.113: 04: È necessario un indirizzo e-mail completo
Sat 2025-01-25 01:26:25.114: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:26:25.858: 04: * Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
Sat 2025-01-25 01:26:25.858: 04: SMTP session terminated (Bytes in/out: 831/3544)
Sat 2025-01-25 01:26:25.858: 01: ----------
Sat 2025-01-25 01:26:50.843: 05: Session 13028366; child 0001
Sat 2025-01-25 01:26:50.843: 05: Accepting SMTP connection from 1.27.171.154:56776 to 10.0.0.8:465
Sat 2025-01-25 01:26:50.844: 07: Vaglio località ha rilevato che la connessione proviene da China, Asia
Sat 2025-01-25 01:26:52.515: 05: Connessione chiusa
Sat 2025-01-25 01:26:52.515: 04: SMTP session terminated (Bytes in/out: 0/0)
Sat 2025-01-25 01:26:52.515: 01: ----------
Sat 2025-01-25 01:27:02.957: 05: Session 13028367; child 0001
Sat 2025-01-25 01:27:02.957: 05: Accepting SMTP connection from 89.109.4.133:34872 to 10.0.0.8:25
Sat 2025-01-25 01:27:02.957: 07: Vaglio località ha rilevato che la connessione proviene da Russia, Europe
Sat 2025-01-25 01:27:02.958: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:27:02 +0100
Sat 2025-01-25 01:27:04.155: 02: <-- EHLO 89-109-4-133.dynamic.mts-nn.ru
Sat 2025-01-25 01:27:04.155: 03: --> 250-mail.dental-art.it Hello 89-109-4-133.dynamic.mts-nn.ru [89.109.4.133], pleased to meet you
Sat 2025-01-25 01:27:04.156: 03: --> 250-ETRN
Sat 2025-01-25 01:27:04.156: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:27:04.156: 03: --> 250-8BITMIME
Sat 2025-01-25 01:27:04.156: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:27:04.156: 03: --> 250-PIPELINING
Sat 2025-01-25 01:27:04.156: 03: --> 250-STARTTLS
Sat 2025-01-25 01:27:04.156: 03: --> 250 SIZE
Sat 2025-01-25 01:27:04.822: 02: <-- AUTH LOGIN
Sat 2025-01-25 01:27:04.822: 03: --> 334 VXNlcm5hbWU6
Sat 2025-01-25 01:27:05.641: 02: <-- ZmVkZXJpY2EuZ3JvdHRvQGRlbnRhbC1hcnQuaXQ=
Sat 2025-01-25 01:27:05.641: 03: --> 334 UGFzc3dvcmQ6
Sat 2025-01-25 01:27:06.477: 02: <-- ******
Sat 2025-01-25 01:27:06.477: 01: Autenticazione federica.grotto@dental-art.it...
Sat 2025-01-25 01:27:06.481: 04: Password errata
Sat 2025-01-25 01:27:06.482: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:27:06.986: 05: Connessione chiusa
Sat 2025-01-25 01:27:06.987: 04: SMTP session terminated (Bytes in/out: 117/355)
Sat 2025-01-25 01:27:06.987: 01: ----------
Sat 2025-01-25 01:27:15.217: 05: Session 13028368; child 0001
Sat 2025-01-25 01:27:15.217: 05: Accepting SMTP connection from 140.82.157.126:37155 to 10.0.0.8:25
Sat 2025-01-25 01:27:15.217: 07: Vaglio località ha rilevato che la connessione proviene da United States, North America
Sat 2025-01-25 01:27:15.217: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:27:15 +0100
Sat 2025-01-25 01:27:16.195: 02: <-- EHLO 140.82.157.126.360broadband.net
Sat 2025-01-25 01:27:16.195: 03: --> 250-mail.dental-art.it Hello 140.82.157.126.360broadband.net [140.82.157.126], pleased to meet you
Sat 2025-01-25 01:27:16.197: 03: --> 250-ETRN
Sat 2025-01-25 01:27:16.197: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:27:16.197: 03: --> 250-8BITMIME
Sat 2025-01-25 01:27:16.197: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:27:16.197: 03: --> 250-PIPELINING
Sat 2025-01-25 01:27:16.197: 03: --> 250-STARTTLS
Sat 2025-01-25 01:27:16.197: 03: --> 250 SIZE
Sat 2025-01-25 01:27:16.840: 02: <-- AUTH LOGIN
Sat 2025-01-25 01:27:16.840: 03: --> 334 VXNlcm5hbWU6
Sat 2025-01-25 01:27:17.490: 02: <-- ZmVkZXJpY2EuZ3JvdHRv
Sat 2025-01-25 01:27:17.490: 03: --> 334 UGFzc3dvcmQ6
Sat 2025-01-25 01:27:18.292: 02: <-- ******
Sat 2025-01-25 01:27:18.293: 01: Autenticazione federica.grotto...
Sat 2025-01-25 01:27:18.295: 04: È necessario un indirizzo e-mail completo
Sat 2025-01-25 01:27:18.296: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:27:18.775: 05: Connessione chiusa
Sat 2025-01-25 01:27:18.775: 04: SMTP session terminated (Bytes in/out: 98/358)
Sat 2025-01-25 01:27:18.775: 01: ----------
Sat 2025-01-25 01:27:42.059: 05: Session 13028369; child 0001
Sat 2025-01-25 01:27:42.059: 05: Accepting SMTP connection from 120.194.50.39:43254 to 10.0.0.8:25
Sat 2025-01-25 01:27:42.060: 07: Vaglio località ha rilevato che la connessione proviene da China, Asia
Sat 2025-01-25 01:27:42.060: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:27:42 +0100
Sat 2025-01-25 01:27:43.201: 02: <-- EHLO [120.194.50.39]
Sat 2025-01-25 01:27:43.201: 03: --> 250-mail.dental-art.it Hello [120.194.50.39] [120.194.50.39], pleased to meet you
Sat 2025-01-25 01:27:43.201: 03: --> 250-ETRN
Sat 2025-01-25 01:27:43.202: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:27:43.202: 03: --> 250-8BITMIME
Sat 2025-01-25 01:27:43.202: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:27:43.202: 03: --> 250-PIPELINING
Sat 2025-01-25 01:27:43.202: 03: --> 250-STARTTLS
Sat 2025-01-25 01:27:43.202: 03: --> 250 SIZE
Sat 2025-01-25 01:27:44.321: 02: <-- AUTH LOGIN
Sat 2025-01-25 01:27:44.321: 03: --> 334 VXNlcm5hbWU6
Sat 2025-01-25 01:27:45.193: 02: <-- YnJ1bmEuY2FtcGVzZUBkZW50YWwtYXJ0Lml0
Sat 2025-01-25 01:27:45.193: 03: --> 334 UGFzc3dvcmQ6
Sat 2025-01-25 01:27:46.197: 02: <-- ******
Sat 2025-01-25 01:27:46.198: 01: Autenticazione bruna.campese@dental-art.it...
Sat 2025-01-25 01:27:46.202: 04: Password errata
Sat 2025-01-25 01:27:46.203: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:27:47.085: 05: Connessione chiusa
Sat 2025-01-25 01:27:47.085: 04: SMTP session terminated (Bytes in/out: 94/341)
Sat 2025-01-25 01:27:47.085: 01: ----------
Sat 2025-01-25 01:27:48.072: 05: Session 13028370; child 0001
Sat 2025-01-25 01:27:48.072: 05: Accepting SMTP connection from 46.29.121.110:56124 to 10.0.0.8:25
Sat 2025-01-25 01:27:48.072: 07: Vaglio località ha rilevato che la connessione proviene da France, Europe
Sat 2025-01-25 01:27:48.073: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:27:48 +0100
Sat 2025-01-25 01:27:48.971: 02: <-- EHLO [46.29.121.110]
Sat 2025-01-25 01:27:48.971: 03: --> 250-mail.dental-art.it Hello [46.29.121.110] [46.29.121.110], pleased to meet you
Sat 2025-01-25 01:27:48.971: 03: --> 250-ETRN
Sat 2025-01-25 01:27:48.972: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:27:48.972: 03: --> 250-8BITMIME
Sat 2025-01-25 01:27:48.972: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:27:48.972: 03: --> 250-PIPELINING
Sat 2025-01-25 01:27:48.972: 03: --> 250-STARTTLS
Sat 2025-01-25 01:27:48.972: 03: --> 250 SIZE
Sat 2025-01-25 01:27:49.593: 02: <-- AUTH LOGIN
Sat 2025-01-25 01:27:49.593: 03: --> 334 VXNlcm5hbWU6
Sat 2025-01-25 01:27:50.060: 02: <-- YnJ1bmEuY2FtcGVzZQ==
Sat 2025-01-25 01:27:50.060: 03: --> 334 UGFzc3dvcmQ6
Sat 2025-01-25 01:27:50.691: 02: <-- ******
Sat 2025-01-25 01:27:50.691: 01: Autenticazione bruna.campese...
Sat 2025-01-25 01:27:50.693: 04: È necessario un indirizzo e-mail completo
Sat 2025-01-25 01:27:50.694: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:27:50.987: 05: Connessione chiusa
Sat 2025-01-25 01:27:50.987: 04: SMTP session terminated (Bytes in/out: 78/341)
Sat 2025-01-25 01:27:50.987: 01: ----------
Sat 2025-01-25 01:30:18.552: 05: Session 13028384; child 0001
Sat 2025-01-25 01:30:18.552: 05: Accepting SMTP connection from 203.189.124.10:53930 to 10.0.0.8:25
Sat 2025-01-25 01:30:18.553: 07: Vaglio località ha rilevato che la connessione proviene da Australia, Oceania
Sat 2025-01-25 01:30:18.553: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:30:18 +0100
Sat 2025-01-25 01:30:19.834: 02: <-- EHLO [203.189.124.10]
Sat 2025-01-25 01:30:19.834: 03: --> 250-mail.dental-art.it Hello [203.189.124.10] [203.189.124.10], pleased to meet you
Sat 2025-01-25 01:30:19.834: 03: --> 250-ETRN
Sat 2025-01-25 01:30:19.835: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:30:19.835: 03: --> 250-8BITMIME
Sat 2025-01-25 01:30:19.835: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:30:19.835: 03: --> 250-PIPELINING
Sat 2025-01-25 01:30:19.835: 03: --> 250-STARTTLS
Sat 2025-01-25 01:30:19.835: 03: --> 250 SIZE
Sat 2025-01-25 01:30:20.979: 02: <-- AUTH LOGIN
Sat 2025-01-25 01:30:20.979: 03: --> 334 VXNlcm5hbWU6
Sat 2025-01-25 01:30:22.261: 02: <-- am9obi5mYWNjaW5AZGVudGFsLWFydC5pdA==
Sat 2025-01-25 01:30:22.261: 03: --> 334 UGFzc3dvcmQ6
Sat 2025-01-25 01:30:23.284: 02: <-- ******
Sat 2025-01-25 01:30:23.284: 01: Autenticazione john.faccin@dental-art.it...
Sat 2025-01-25 01:30:23.286: 04: Account inesistente
Sat 2025-01-25 01:30:23.287: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:30:24.408: 05: Connessione chiusa
Sat 2025-01-25 01:30:24.408: 04: SMTP session terminated (Bytes in/out: 95/343)
Sat 2025-01-25 01:30:24.409: 01: ----------
Sat 2025-01-25 01:30:26.496: 05: Session 13028386; child 0002
Sat 2025-01-25 01:30:26.496: 05: Accepting SMTP connection from 195.189.226.204:50165 to 10.0.0.8:25
Sat 2025-01-25 01:30:26.496: 07: Vaglio località ha rilevato che la connessione proviene da Ukraine, Europe
Sat 2025-01-25 01:30:26.497: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:30:26 +0100
Sat 2025-01-25 01:30:26.550: 02: <-- EHLO bestofoffers.shop
Sat 2025-01-25 01:30:26.551: 03: --> 250-mail.dental-art.it Hello bestofoffers.shop [195.189.226.204], pleased to meet you
Sat 2025-01-25 01:30:26.551: 03: --> 250-ETRN
Sat 2025-01-25 01:30:26.577: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:30:26.577: 03: --> 250-8BITMIME
Sat 2025-01-25 01:30:26.577: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:30:26.577: 03: --> 250-PIPELINING
Sat 2025-01-25 01:30:26.577: 03: --> 250-STARTTLS
Sat 2025-01-25 01:30:26.577: 03: --> 250 SIZE
Sat 2025-01-25 01:30:26.634: 02: <-- MAIL FROM:<> BODY=8BITMIME
Sat 2025-01-25 01:30:26.634: 05: Performing PTR lookup (204.226.189.195.IN-ADDR.ARPA)
Sat 2025-01-25 01:30:26.652: 05: * D=204.226.189.195.IN-ADDR.ARPA TTL=(36) PTR=[bestofoffers.shop]
Sat 2025-01-25 01:30:26.719: 05: * No A/AAAA records found
Sat 2025-01-25 01:30:26.719: 05: ---- End PTR results
Sat 2025-01-25 01:30:26.719: 05: Performing IP lookup (bestofoffers.shop)
Sat 2025-01-25 01:30:26.720: 04: * Il server DNS segnala un nome dominio sconosciuto
Sat 2025-01-25 01:30:26.720: 05: ---- End IP lookup results
Sat 2025-01-25 01:30:26.720: 03: --> 250 2.1.0 Sender OK
Sat 2025-01-25 01:30:26.771: 02: <-- RCPT TO:<info@interprod.it>
Sat 2025-01-25 01:30:26.772: 03: --> 250 2.1.5 Recipient OK
Sat 2025-01-25 01:30:26.825: 02: <-- DATA
Sat 2025-01-25 01:30:26.825: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
Sat 2025-01-25 01:30:27.477: 05: Connessione chiusa
Sat 2025-01-25 01:30:27.477: 04: SMTP session terminated (Bytes in/out: 87/361)
Sat 2025-01-25 01:30:27.477: 01: ----------
Sat 2025-01-25 01:30:25.849: 05: Session 13028385; child 0001
Sat 2025-01-25 01:30:25.849: 05: Accepting SMTP connection from 182.76.87.90:53602 to 10.0.0.8:25
Sat 2025-01-25 01:30:25.849: 07: Vaglio località ha rilevato che la connessione proviene da India, Asia
Sat 2025-01-25 01:30:25.850: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:30:25 +0100
Sat 2025-01-25 01:30:27.298: 02: <-- EHLO nsg-static-174.125.76.182-airtel.com
Sat 2025-01-25 01:30:27.298: 03: --> 250-mail.dental-art.it Hello nsg-static-174.125.76.182-airtel.com [182.76.87.90], pleased to meet you
Sat 2025-01-25 01:30:27.300: 03: --> 250-ETRN
Sat 2025-01-25 01:30:27.300: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:30:27.300: 03: --> 250-8BITMIME
Sat 2025-01-25 01:30:27.300: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:30:27.300: 03: --> 250-PIPELINING
Sat 2025-01-25 01:30:27.300: 03: --> 250-STARTTLS
Sat 2025-01-25 01:30:27.300: 03: --> 250 SIZE
Sat 2025-01-25 01:30:28.593: 02: <-- AUTH LOGIN
Sat 2025-01-25 01:30:28.593: 03: --> 334 VXNlcm5hbWU6
Sat 2025-01-25 01:30:30.000: 02: <-- am9obi5mYWNjaW4=
Sat 2025-01-25 01:30:30.000: 03: --> 334 UGFzc3dvcmQ6
Sat 2025-01-25 01:30:31.123: 02: <-- ******
Sat 2025-01-25 01:30:31.123: 01: Autenticazione john.faccin...
Sat 2025-01-25 01:30:31.126: 04: È necessario un indirizzo e-mail completo
Sat 2025-01-25 01:30:31.127: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:30:32.107: 05: Connessione chiusa
Sat 2025-01-25 01:30:32.107: 04: SMTP session terminated (Bytes in/out: 95/361)
Sat 2025-01-25 01:30:32.107: 01: ----------
Sat 2025-01-25 01:31:02.907: 05: Session 13028387; child 0001
Sat 2025-01-25 01:31:02.907: 05: Accepting SMTP connection from 87.103.126.54:18948 to 10.0.0.8:25
Sat 2025-01-25 01:31:02.907: 07: Vaglio località ha rilevato che la connessione proviene da Portugal, Europe
Sat 2025-01-25 01:31:02.908: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:31:02 +0100
Sat 2025-01-25 01:31:03.163: 02: <-- EHLO alked
Sat 2025-01-25 01:31:03.164: 03: --> 250-mail.dental-art.it Hello alked [87.103.126.54], pleased to meet you
Sat 2025-01-25 01:31:03.164: 03: --> 250-ETRN
Sat 2025-01-25 01:31:03.165: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:31:03.165: 03: --> 250-8BITMIME
Sat 2025-01-25 01:31:03.165: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:31:03.165: 03: --> 250-PIPELINING
Sat 2025-01-25 01:31:03.165: 03: --> 250-STARTTLS
Sat 2025-01-25 01:31:03.165: 03: --> 250 SIZE
Sat 2025-01-25 01:31:03.410: 02: <-- STARTTLS
Sat 2025-01-25 01:31:03.410: 03: --> 220 2.7.0 Ready to start TLS
Sat 2025-01-25 01:31:03.412: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Sat 2025-01-25 01:31:04.337: 02: <-- EHLO alked
Sat 2025-01-25 01:31:04.337: 03: --> 250-mail.dental-art.it Hello alked [87.103.126.54], pleased to meet you
Sat 2025-01-25 01:31:04.337: 03: --> 250-ETRN
Sat 2025-01-25 01:31:04.337: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:31:04.337: 03: --> 250-8BITMIME
Sat 2025-01-25 01:31:04.337: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:31:04.337: 03: --> 250-PIPELINING
Sat 2025-01-25 01:31:04.337: 03: --> 250-REQUIRETLS
Sat 2025-01-25 01:31:04.337: 03: --> 250 SIZE
Sat 2025-01-25 01:31:04.704: 02: <-- AUTH PLAIN ******
Sat 2025-01-25 01:31:04.704: 01: Autenticazione fabio.giaretta@dental-art.it...
Sat 2025-01-25 01:31:04.714: 04: Password errata
Sat 2025-01-25 01:31:04.716: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:31:05.429: 02: <-- QUIT
Sat 2025-01-25 01:31:05.429: 03: --> 221 2.0.0 See ya in cyberspace
Sat 2025-01-25 01:31:05.429: 04: SMTP session terminated (Bytes in/out: 764/802)
Sat 2025-01-25 01:31:05.429: 01: ----------
Sat 2025-01-25 01:33:31.993: 05: Session 13028397; child 0001
Sat 2025-01-25 01:33:31.993: 05: Accepting SMTP connection from 186.247.192.94:49342 to 10.0.0.8:465
Sat 2025-01-25 01:33:31.993: 07: Vaglio località ha rilevato che la connessione proviene da Brazil, South America
Sat 2025-01-25 01:33:34.368: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Sat 2025-01-25 01:33:34.368: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:33:34 +0100
Sat 2025-01-25 01:33:35.812: 02: <-- EHLO [186.247.192.94]
Sat 2025-01-25 01:33:35.812: 03: --> 250-mail.dental-art.it Hello [186.247.192.94] [186.247.192.94], pleased to meet you
Sat 2025-01-25 01:33:35.814: 03: --> 250-ETRN
Sat 2025-01-25 01:33:35.814: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:33:35.814: 03: --> 250-8BITMIME
Sat 2025-01-25 01:33:35.814: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:33:35.814: 03: --> 250-PIPELINING
Sat 2025-01-25 01:33:35.814: 03: --> 250-REQUIRETLS
Sat 2025-01-25 01:33:35.814: 03: --> 250 SIZE
Sat 2025-01-25 01:33:37.068: 02: <-- AUTH PLAIN
Sat 2025-01-25 01:33:37.068: 03: --> 334
Sat 2025-01-25 01:33:38.307: 02: <-- ******
Sat 2025-01-25 01:33:38.307: 01: Autenticazione alessandro.maggiore@dental-art.it...
Sat 2025-01-25 01:33:38.314: 04: Password errata
Sat 2025-01-25 01:33:38.315: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:33:39.656: 04: * Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
Sat 2025-01-25 01:33:39.656: 04: SMTP session terminated (Bytes in/out: 854/3547)
Sat 2025-01-25 01:33:39.656: 01: ----------
Sat 2025-01-25 01:33:41.348: 05: Session 13028398; child 0001
Sat 2025-01-25 01:33:41.348: 05: Accepting SMTP connection from 121.202.153.179:64062 to 10.0.0.8:465
Sat 2025-01-25 01:33:41.349: 07: Vaglio località ha rilevato che la connessione proviene da Hong Kong, Asia
Sat 2025-01-25 01:33:43.593: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Sat 2025-01-25 01:33:43.593: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:33:43 +0100
Sat 2025-01-25 01:33:45.060: 02: <-- EHLO m121-202-153-179.smartone.com
Sat 2025-01-25 01:33:45.060: 03: --> 250-mail.dental-art.it Hello m121-202-153-179.smartone.com [121.202.153.179], pleased to meet you
Sat 2025-01-25 01:33:45.062: 03: --> 250-ETRN
Sat 2025-01-25 01:33:45.062: 03: --> 250-AUTH LOGIN PLAIN
Sat 2025-01-25 01:33:45.062: 03: --> 250-8BITMIME
Sat 2025-01-25 01:33:45.062: 03: --> 250-ENHANCEDSTATUSCODES
Sat 2025-01-25 01:33:45.062: 03: --> 250-PIPELINING
Sat 2025-01-25 01:33:45.062: 03: --> 250-REQUIRETLS
Sat 2025-01-25 01:33:45.062: 03: --> 250 SIZE
Sat 2025-01-25 01:33:46.540: 02: <-- AUTH PLAIN
Sat 2025-01-25 01:33:46.540: 03: --> 334
Sat 2025-01-25 01:33:47.825: 02: <-- ******
Sat 2025-01-25 01:33:47.825: 01: Autenticazione alessandro.maggiore...
Sat 2025-01-25 01:33:47.827: 04: È necessario un indirizzo e-mail completo
Sat 2025-01-25 01:33:47.828: 03: --> 535 5.7.8 Authentication failed
Sat 2025-01-25 01:33:49.157: 04: * Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
Sat 2025-01-25 01:33:49.157: 04: SMTP session terminated (Bytes in/out: 851/3561)
Sat 2025-01-25 01:33:49.157: 01: ----------
-
Arron Staff
This is occuring because the connection is not being properly shutdown. Basically the sender is just closing the connection when they are done. "The sender has finished using the connection and has started a shutdown."
If this is a valid connection, you should be able to address it by fixing the authentication issue.
If this is not a valid connection and you don't have users in the locations where the bad connections are coming from, then you could use Location Screening (Security / Screening / Location Screening) to reduce the attack surface and prevent them from connecting. You can configure it to only allow authentication from locations where you actually have users. If you need to accept mail from other locations, make sure you use the option for "Block except SMTP, disable authentication". This will allow inbound SMTP connections but will not allow them to authenticate. Also, I would make sure the option to require full email address for authentication is enabled (Setup / Preferences / System).
-
I tried to disable the watchguard's antivirus and antispam policies, but only if the sender sends the email in plain text format does the message arrive, otherwise reception stops. In the past few weeks it has also happened with other senders, maybe there is some timeout to change?
thank you
Stefano Pavan
-
Arron Staff
I tried to disable the watchguard's antivirus and antispam policies, but only if the sender sends the email in plain text format does the message arrive, otherwise reception stops.
Can you post a snippet from MDaemon's inbound SMTP log that shows when the message is in HTML and "reception stops"?
Can you post a snippet from MDaemon's inbound SMTP log that shows when the message is in plain text and the message is recevied?
What do the watchguard logs show is happening when the message is in HTML and "reception stops"?
-
This Is plain text session
Thu 2025-01-30 11:42:20.346: 05: Session 13072170; child 0001
Thu 2025-01-30 11:42:20.346: 05: Accepting SMTP connection from 40.107.20.103:40193 to 10.0.0.8:25
Thu 2025-01-30 11:42:20.347: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Thu, 30 Jan 2025 11:42:20 +0100
Thu 2025-01-30 11:42:20.523: 02: <-- EHLO EUR05-DB8-obe.outbound.protection.outlook.com
Thu 2025-01-30 11:42:20.525: 03: --> 250-mail.dental-art.it Hello EUR05-DB8-obe.outbound.protection.outlook.com [40.107.20.103], pleased to meet you
Thu 2025-01-30 11:42:20.525: 03: --> 250-ETRN
Thu 2025-01-30 11:42:20.525: 03: --> 250-AUTH LOGIN PLAIN
Thu 2025-01-30 11:42:20.526: 03: --> 250-8BITMIME
Thu 2025-01-30 11:42:20.526: 03: --> 250-ENHANCEDSTATUSCODES
Thu 2025-01-30 11:42:20.526: 03: --> 250-PIPELINING
Thu 2025-01-30 11:42:20.526: 03: --> 250-STARTTLS
Thu 2025-01-30 11:42:20.526: 03: --> 250 SIZE
Thu 2025-01-30 11:42:20.571: 02: <-- STARTTLS
Thu 2025-01-30 11:42:20.572: 03: --> 220 2.7.0 Ready to start TLS
Thu 2025-01-30 11:42:20.574: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Thu 2025-01-30 11:42:20.735: 02: <-- EHLO EUR05-DB8-obe.outbound.protection.outlook.com
Thu 2025-01-30 11:42:20.735: 03: --> 250-mail.dental-art.it Hello EUR05-DB8-obe.outbound.protection.outlook.com [40.107.20.103], pleased to meet you
Thu 2025-01-30 11:42:20.735: 03: --> 250-ETRN
Thu 2025-01-30 11:42:20.735: 03: --> 250-AUTH LOGIN PLAIN
Thu 2025-01-30 11:42:20.735: 03: --> 250-8BITMIME
Thu 2025-01-30 11:42:20.735: 03: --> 250-ENHANCEDSTATUSCODES
Thu 2025-01-30 11:42:20.735: 03: --> 250-PIPELINING
Thu 2025-01-30 11:42:20.735: 03: --> 250-REQUIRETLS
Thu 2025-01-30 11:42:20.735: 03: --> 250 SIZE
Thu 2025-01-30 11:42:20.798: 02: <-- MAIL FROM:<massimiliano.borgno@blindgroup.com> SIZE=27909
Thu 2025-01-30 11:42:20.798: 05: Performing PTR lookup (103.20.107.40.IN-ADDR.ARPA)
Thu 2025-01-30 11:42:20.822: 05: * D=103.20.107.40.IN-ADDR.ARPA TTL=(49) PTR=[mail-db8eur05on2103.outbound.protection.outlook.com]
Thu 2025-01-30 11:42:20.842: 05: * D=mail-db8eur05on2103.outbound.protection.outlook.com TTL=(1) A=[40.107.20.103]
Thu 2025-01-30 11:42:20.842: 05: ---- End PTR results
Thu 2025-01-30 11:42:20.842: 05: Performing IP lookup (EUR05-DB8-obe.outbound.protection.outlook.com)
Thu 2025-01-30 11:42:20.866: 05: * D=EUR05-DB8-obe.outbound.protection.outlook.com TTL=(1) A=[104.47.17.104]
Thu 2025-01-30 11:42:20.866: 05: ---- End IP lookup results
Thu 2025-01-30 11:42:20.866: 05: Performing IP lookup (blindgroup.com)
Thu 2025-01-30 11:42:20.922: 05: * D=blindgroup.com TTL=(0) A=[35.227.194.51]
Thu 2025-01-30 11:42:20.922: 05: * D=blindgroup.com TTL=(0) A=[35.190.31.54]
Thu 2025-01-30 11:42:20.922: 05: * D=blindgroup.com TTL=(0) A=[34.149.36.179]
Thu 2025-01-30 11:42:20.922: 05: * D=blindgroup.com TTL=(0) A=[34.120.190.48]
Thu 2025-01-30 11:42:21.006: 05: * P=000 S=000 D=blindgroup.com TTL=(237) MX=[blindgroup-com.mail.protection.outlook.com] {52.101.68.12}
Thu 2025-01-30 11:42:21.006: 05: ---- End IP lookup results
Thu 2025-01-30 11:42:21.006: 03: --> 250 2.1.0 Sender OK
Thu 2025-01-30 11:42:21.067: 02: <-- RCPT TO:<antonio.gallio@dental-art.it>
Thu 2025-01-30 11:42:21.068: 03: --> 250 2.1.5 Recipient OK
Thu 2025-01-30 11:42:21.129: 02: <-- DATA
Thu 2025-01-30 11:42:21.129: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2025-01-30 11:42:21.196: 01: Message size: 9809 bytes
Thu 2025-01-30 11:42:21.199: 01: Creazione messaggio successful: c:\mdaemon\inbound\md5001006399609.msg
Thu 2025-01-30 11:42:21.199: 03: --> 250 2.6.0 Ok, message saved <Message-ID: <DB9P191MB2099EDC3F8BE50542AD0904594E92@DB9P191MB2099.EURP191.PROD.OUTLOOK.COM>>
Thu 2025-01-30 11:42:21.278: 02: <-- QUIT
Thu 2025-01-30 11:42:21.279: 04: * Socket error 10054 - Connessione reimpostata dall'altro lato.
Thu 2025-01-30 11:42:21.279: 01: SMTP session successful (Bytes in/out: 10779/1052)This is the Html session
Thu 2025-01-30 16:55:56.325: 05: Session 13075777; child 0002
Thu 2025-01-30 16:55:56.325: 05: Accepting SMTP connection from 40.107.20.101:54688 to 10.0.0.8:25
Thu 2025-01-30 16:55:56.326: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Thu, 30 Jan 2025 16:55:56 +0100
Thu 2025-01-30 16:55:56.374: 02: <-- EHLO EUR05-DB8-obe.outbound.protection.outlook.com
Thu 2025-01-30 16:55:56.374: 03: --> 250-mail.dental-art.it Hello EUR05-DB8-obe.outbound.protection.outlook.com [40.107.20.101], pleased to meet you
Thu 2025-01-30 16:55:56.374: 03: --> 250-ETRN
Thu 2025-01-30 16:55:56.374: 03: --> 250-AUTH LOGIN PLAIN
Thu 2025-01-30 16:55:56.376: 03: --> 250-8BITMIME
Thu 2025-01-30 16:55:56.376: 03: --> 250-ENHANCEDSTATUSCODES
Thu 2025-01-30 16:55:56.376: 03: --> 250-PIPELINING
Thu 2025-01-30 16:55:56.376: 03: --> 250-STARTTLS
Thu 2025-01-30 16:55:56.376: 03: --> 250 SIZE
Thu 2025-01-30 16:55:56.426: 02: <-- STARTTLS
Thu 2025-01-30 16:55:56.426: 03: --> 220 2.7.0 Ready to start TLS
Thu 2025-01-30 16:55:56.428: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
Thu 2025-01-30 16:55:56.598: 02: <-- EHLO EUR05-DB8-obe.outbound.protection.outlook.com
Thu 2025-01-30 16:55:56.598: 03: --> 250-mail.dental-art.it Hello EUR05-DB8-obe.outbound.protection.outlook.com [40.107.20.101], pleased to meet you
Thu 2025-01-30 16:55:56.598: 03: --> 250-ETRN
Thu 2025-01-30 16:55:56.598: 03: --> 250-AUTH LOGIN PLAIN
Thu 2025-01-30 16:55:56.598: 03: --> 250-8BITMIME
Thu 2025-01-30 16:55:56.598: 03: --> 250-ENHANCEDSTATUSCODES
Thu 2025-01-30 16:55:56.598: 03: --> 250-PIPELINING
Thu 2025-01-30 16:55:56.598: 03: --> 250-REQUIRETLS
Thu 2025-01-30 16:55:56.598: 03: --> 250 SIZE
Thu 2025-01-30 16:55:56.662: 02: <-- MAIL FROM:<massimiliano.borgno@blindgroup.com> SIZE=72982
Thu 2025-01-30 16:55:56.662: 05: Performing PTR lookup (101.20.107.40.IN-ADDR.ARPA)
Thu 2025-01-30 16:55:56.682: 05: * D=101.20.107.40.IN-ADDR.ARPA TTL=(43) PTR=[mail-db8eur05on2101.outbound.protection.outlook.com]
Thu 2025-01-30 16:55:56.710: 05: * D=mail-db8eur05on2101.outbound.protection.outlook.com TTL=(5) A=[40.107.20.101]
Thu 2025-01-30 16:55:56.710: 05: ---- End PTR results
Thu 2025-01-30 16:55:56.710: 05: Performing IP lookup (EUR05-DB8-obe.outbound.protection.outlook.com)
Thu 2025-01-30 16:55:56.710: 05: * D=EUR05-DB8-obe.outbound.protection.outlook.com TTL=(0) A=[104.47.17.104]
Thu 2025-01-30 16:55:56.710: 05: ---- End IP lookup results
Thu 2025-01-30 16:55:56.710: 05: Performing IP lookup (blindgroup.com)
Thu 2025-01-30 16:55:56.753: 05: * D=blindgroup.com TTL=(0) A=[35.190.31.54]
Thu 2025-01-30 16:55:56.753: 05: * D=blindgroup.com TTL=(0) A=[35.244.153.44]
Thu 2025-01-30 16:55:56.753: 05: * D=blindgroup.com TTL=(0) A=[34.160.17.71]
Thu 2025-01-30 16:55:56.753: 05: * D=blindgroup.com TTL=(0) A=[34.120.190.48]
Thu 2025-01-30 16:55:56.883: 05: * P=000 S=000 D=blindgroup.com TTL=(360) MX=[blindgroup-com.mail.protection.outlook.com] {52.101.73.16}
Thu 2025-01-30 16:55:56.883: 05: ---- End IP lookup results
Thu 2025-01-30 16:55:56.883: 03: --> 250 2.1.0 Sender OK
Thu 2025-01-30 16:55:56.947: 02: <-- RCPT TO:<lucia.mantovani@dental-art.it>
Thu 2025-01-30 16:55:56.948: 03: --> 250 2.1.5 Recipient OK
Thu 2025-01-30 16:55:57.011: 02: <-- DATA
Thu 2025-01-30 16:55:57.011: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
Thu 2025-01-30 16:55:57.778: 04: * Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
Thu 2025-01-30 16:55:57.779: 04: SMTP session terminated (Bytes in/out: 935/931)in the watchguard log there are no differences, the messages pass without problems
-
Arron Staff
The error is still showing the sending server simply disconnecting. I do not know why the sending server is disconnecting. MDaemon is not telling it to disconnect nor is it ending the session. There is not a timeout in MDaemon that can be increased to fix this issue. If we compare this to a phone call, it is like MDaemon is being hung up on.
If you have access to the Microsoft 365 logs for the outbound message, what do they show is happening?
Does the same thing happen from senders other than Microsoft 365?
Please try configuring the watchguard firewall to not inspect the SMTP traffic at all. Does the problem continue? I do not know anything about watchgaurd firewalls but according to google:
"To configure your WatchGuard firewall to "not inspect" SMTP traffic, navigate to the SMTP-Proxy settings within your firewall policy and disable the "Content Inspection" option; this will prevent the firewall from examining the content of emails passing through, effectively bypassing any email filtering or scanning features. "
-
Resolved: as suggested I created a policy to set exception in smtp-proxy watchguard to *.outbound.protection.outlook.com and so it works; it was not enough to disable the "Content Inspection" . it was difficult to understand beacause with other 365 users the problem does not occur. thanks for the support
Stefano Pavan
-
Arron Staff
I'm glad you were able to figure it out, thank you for letting us know.