Socket error 590615 | MDaemon Technologies, Ltd.

Socket error 590615


  • Mdaemon 24.5.2 :

    in incoming smtp i get many Socket error 590615 sender has finished using the connection and initiated a shutdown:  sometimes the message is lost, is there any timeout value to fix ?

     

    thanks

     

    Stefano



  • If you can post a log snippet it would help us to figure out what is happening.  The other reports of socket error 590615 appear to happen when the device connecting to MDaemon terminates the connection without going through the proper shutdown.  For exaple, normally an SMTP session would have a QUIT command issued prior to closing the connection.


  • ok, I attach a small log

     

    Sat 2025-01-25 01:22:31.859: 05: Session 13028351; child 0003
    Sat 2025-01-25 01:22:31.859: 05: Accepting SMTP connection from 120.234.196.189:38427 to 10.0.0.8:465
    Sat 2025-01-25 01:22:31.859: 07: Vaglio località ha rilevato che la connessione proviene da China, Asia
    Sat 2025-01-25 01:22:33.896: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Sat 2025-01-25 01:22:33.896: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:22:33 +0100
    Sat 2025-01-25 01:22:35.450: 02: <-- EHLO [120.234.196.189]
    Sat 2025-01-25 01:22:35.450: 03: --> 250-mail.dental-art.it Hello [120.234.196.189] [120.234.196.189], pleased to meet you
    Sat 2025-01-25 01:22:35.452: 03: --> 250-ETRN
    Sat 2025-01-25 01:22:35.452: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:22:35.452: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:22:35.452: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:22:35.452: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:22:35.452: 03: --> 250-REQUIRETLS
    Sat 2025-01-25 01:22:35.452: 03: --> 250 SIZE
    Sat 2025-01-25 01:22:36.652: 02: <-- AUTH PLAIN
    Sat 2025-01-25 01:22:36.652: 03: --> 334 
    Sat 2025-01-25 01:22:37.641: 02: <-- ******
    Sat 2025-01-25 01:22:37.641: 01: Autenticazione info@dental-art.it...
    Sat 2025-01-25 01:22:37.648: 04: Password errata
    Sat 2025-01-25 01:22:37.649: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:22:38.633: 04: *  Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
    Sat 2025-01-25 01:22:38.633: 04: SMTP session terminated (Bytes in/out: 839/3549)
    Sat 2025-01-25 01:22:38.633: 01: ----------
    Sat 2025-01-25 01:22:50.200: 05: Session 13028352; child 0001
    Sat 2025-01-25 01:22:50.200: 05: Accepting SMTP connection from 31.208.209.252:47742 to 10.0.0.8:465
    Sat 2025-01-25 01:22:50.200: 07: Vaglio località ha rilevato che la connessione proviene da Sweden, Europe
    Sat 2025-01-25 01:22:51.388: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Sat 2025-01-25 01:22:51.388: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:22:51 +0100
    Sat 2025-01-25 01:22:52.134: 02: <-- EHLO [31.208.209.252]
    Sat 2025-01-25 01:22:52.134: 03: --> 250-mail.dental-art.it Hello [31.208.209.252] [31.208.209.252], pleased to meet you
    Sat 2025-01-25 01:22:52.136: 03: --> 250-ETRN
    Sat 2025-01-25 01:22:52.136: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:22:52.136: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:22:52.136: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:22:52.136: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:22:52.136: 03: --> 250-REQUIRETLS
    Sat 2025-01-25 01:22:52.136: 03: --> 250 SIZE
    Sat 2025-01-25 01:22:52.610: 02: <-- AUTH PLAIN
    Sat 2025-01-25 01:22:52.610: 03: --> 334 
    Sat 2025-01-25 01:22:53.398: 02: <-- ******
    Sat 2025-01-25 01:22:53.398: 01: Autenticazione info...
    Sat 2025-01-25 01:22:53.400: 04: È necessario un indirizzo e-mail completo
    Sat 2025-01-25 01:22:53.401: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:22:53.878: 04: *  Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
    Sat 2025-01-25 01:22:53.878: 04: SMTP session terminated (Bytes in/out: 818/3547)
    Sat 2025-01-25 01:22:53.879: 01: ----------
    Sat 2025-01-25 01:24:56.971: 05: Session 13028356; child 0001
    Sat 2025-01-25 01:24:56.971: 05: Accepting SMTP connection from 114.242.61.35:43740 to 10.0.0.8:25
    Sat 2025-01-25 01:24:56.971: 07: Vaglio località ha rilevato che la connessione proviene da China, Asia
    Sat 2025-01-25 01:24:56.972: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:24:56 +0100
    Sat 2025-01-25 01:24:57.965: 02: <-- EHLO [114.242.61.35]
    Sat 2025-01-25 01:24:57.965: 03: --> 250-mail.dental-art.it Hello [114.242.61.35] [114.242.61.35], pleased to meet you
    Sat 2025-01-25 01:24:57.965: 03: --> 250-ETRN
    Sat 2025-01-25 01:24:57.967: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:24:57.967: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:24:57.967: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:24:57.967: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:24:57.967: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:24:57.967: 03: --> 250 SIZE
    Sat 2025-01-25 01:24:58.742: 02: <-- AUTH LOGIN
    Sat 2025-01-25 01:24:58.742: 03: --> 334 VXNlcm5hbWU6
    Sat 2025-01-25 01:24:59.679: 02: <-- ZnJhbmNlc2NvLnphbmF0dGFAcm9zc2ljYXdzLml0
    Sat 2025-01-25 01:24:59.679: 03: --> 334 UGFzc3dvcmQ6
    Sat 2025-01-25 01:25:00.472: 02: <-- ******
    Sat 2025-01-25 01:25:00.472: 01: Autenticazione francesco.zanatta@rossicaws.it...
    Sat 2025-01-25 01:25:00.484: 04: Password errata
    Sat 2025-01-25 01:25:00.487: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:25:01.316: 05: Connessione chiusa
    Sat 2025-01-25 01:25:01.316: 04: SMTP session terminated (Bytes in/out: 106/341)
    Sat 2025-01-25 01:25:01.316: 01: ----------
    Sat 2025-01-25 01:25:02.263: 05: Session 13028357; child 0001
    Sat 2025-01-25 01:25:02.263: 05: Accepting SMTP connection from 24.75.171.174:33242 to 10.0.0.8:25
    Sat 2025-01-25 01:25:02.263: 07: Vaglio località ha rilevato che la connessione proviene da United States, North America
    Sat 2025-01-25 01:25:02.264: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:25:02 +0100
    Sat 2025-01-25 01:25:03.285: 02: <-- EHLO 174.subnet-24-75-171.ellijay.com
    Sat 2025-01-25 01:25:03.285: 03: --> 250-mail.dental-art.it Hello 174.subnet-24-75-171.ellijay.com [24.75.171.174], pleased to meet you
    Sat 2025-01-25 01:25:03.287: 03: --> 250-ETRN
    Sat 2025-01-25 01:25:03.287: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:25:03.287: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:25:03.287: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:25:03.287: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:25:03.287: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:25:03.287: 03: --> 250 SIZE
    Sat 2025-01-25 01:25:04.072: 02: <-- AUTH LOGIN
    Sat 2025-01-25 01:25:04.073: 03: --> 334 VXNlcm5hbWU6
    Sat 2025-01-25 01:25:04.924: 02: <-- ZnJhbmNlc2NvLnphbmF0dGE=
    Sat 2025-01-25 01:25:04.924: 03: --> 334 UGFzc3dvcmQ6
    Sat 2025-01-25 01:25:05.870: 02: <-- ******
    Sat 2025-01-25 01:25:05.870: 01: Autenticazione francesco.zanatta...
    Sat 2025-01-25 01:25:05.873: 04: È necessario un indirizzo e-mail completo
    Sat 2025-01-25 01:25:05.874: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:25:06.653: 05: Connessione chiusa
    Sat 2025-01-25 01:25:06.653: 04: SMTP session terminated (Bytes in/out: 107/358)
    Sat 2025-01-25 01:25:06.653: 01: ----------
    Sat 2025-01-25 01:26:12.207: 05: Session 13028361; child 0001
    Sat 2025-01-25 01:26:12.207: 05: Accepting SMTP connection from 216.181.210.18:42058 to 10.0.0.8:465
    Sat 2025-01-25 01:26:12.208: 07: Vaglio località ha rilevato che la connessione proviene da Canada, North America
    Sat 2025-01-25 01:26:14.243: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Sat 2025-01-25 01:26:14.243: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:26:14 +0100
    Sat 2025-01-25 01:26:15.435: 02: <-- EHLO [216.181.210.18]
    Sat 2025-01-25 01:26:15.436: 03: --> 250-mail.dental-art.it Hello [216.181.210.18] [216.181.210.18], pleased to meet you
    Sat 2025-01-25 01:26:15.437: 03: --> 250-ETRN
    Sat 2025-01-25 01:26:15.437: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:26:15.437: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:26:15.437: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:26:15.437: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:26:15.437: 03: --> 250-REQUIRETLS
    Sat 2025-01-25 01:26:15.437: 03: --> 250 SIZE
    Sat 2025-01-25 01:26:16.508: 02: <-- AUTH PLAIN
    Sat 2025-01-25 01:26:16.508: 03: --> 334 
    Sat 2025-01-25 01:26:17.552: 02: <-- ******
    Sat 2025-01-25 01:26:17.552: 01: Autenticazione fabio.giaretta@dental-art.it...
    Sat 2025-01-25 01:26:17.558: 04: Password errata
    Sat 2025-01-25 01:26:17.558: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:26:18.575: 04: *  Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
    Sat 2025-01-25 01:26:18.575: 04: SMTP session terminated (Bytes in/out: 854/3547)
    Sat 2025-01-25 01:26:18.575: 01: ----------
    Sat 2025-01-25 01:26:20.006: 05: Session 13028362; child 0001
    Sat 2025-01-25 01:26:20.006: 05: Accepting SMTP connection from 136.232.73.130:41994 to 10.0.0.8:465
    Sat 2025-01-25 01:26:20.006: 07: Vaglio località ha rilevato che la connessione proviene da India, Asia
    Sat 2025-01-25 01:26:21.906: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Sat 2025-01-25 01:26:21.906: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:26:21 +0100
    Sat 2025-01-25 01:26:23.159: 02: <-- EHLO [1.7.229.162]
    Sat 2025-01-25 01:26:23.159: 03: --> 250-mail.dental-art.it Hello [1.7.229.162] [136.232.73.130], pleased to meet you
    Sat 2025-01-25 01:26:23.161: 03: --> 250-ETRN
    Sat 2025-01-25 01:26:23.161: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:26:23.161: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:26:23.161: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:26:23.161: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:26:23.161: 03: --> 250-REQUIRETLS
    Sat 2025-01-25 01:26:23.161: 03: --> 250 SIZE
    Sat 2025-01-25 01:26:24.096: 02: <-- AUTH PLAIN
    Sat 2025-01-25 01:26:24.097: 03: --> 334 
    Sat 2025-01-25 01:26:25.111: 02: <-- ******
    Sat 2025-01-25 01:26:25.111: 01: Autenticazione fabio.giaretta...
    Sat 2025-01-25 01:26:25.113: 04: È necessario un indirizzo e-mail completo
    Sat 2025-01-25 01:26:25.114: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:26:25.858: 04: *  Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
    Sat 2025-01-25 01:26:25.858: 04: SMTP session terminated (Bytes in/out: 831/3544)
    Sat 2025-01-25 01:26:25.858: 01: ----------
    Sat 2025-01-25 01:26:50.843: 05: Session 13028366; child 0001
    Sat 2025-01-25 01:26:50.843: 05: Accepting SMTP connection from 1.27.171.154:56776 to 10.0.0.8:465
    Sat 2025-01-25 01:26:50.844: 07: Vaglio località ha rilevato che la connessione proviene da China, Asia
    Sat 2025-01-25 01:26:52.515: 05: Connessione chiusa
    Sat 2025-01-25 01:26:52.515: 04: SMTP session terminated (Bytes in/out: 0/0)
    Sat 2025-01-25 01:26:52.515: 01: ----------
    Sat 2025-01-25 01:27:02.957: 05: Session 13028367; child 0001
    Sat 2025-01-25 01:27:02.957: 05: Accepting SMTP connection from 89.109.4.133:34872 to 10.0.0.8:25
    Sat 2025-01-25 01:27:02.957: 07: Vaglio località ha rilevato che la connessione proviene da Russia, Europe
    Sat 2025-01-25 01:27:02.958: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:27:02 +0100
    Sat 2025-01-25 01:27:04.155: 02: <-- EHLO 89-109-4-133.dynamic.mts-nn.ru
    Sat 2025-01-25 01:27:04.155: 03: --> 250-mail.dental-art.it Hello 89-109-4-133.dynamic.mts-nn.ru [89.109.4.133], pleased to meet you
    Sat 2025-01-25 01:27:04.156: 03: --> 250-ETRN
    Sat 2025-01-25 01:27:04.156: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:27:04.156: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:27:04.156: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:27:04.156: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:27:04.156: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:27:04.156: 03: --> 250 SIZE
    Sat 2025-01-25 01:27:04.822: 02: <-- AUTH LOGIN
    Sat 2025-01-25 01:27:04.822: 03: --> 334 VXNlcm5hbWU6
    Sat 2025-01-25 01:27:05.641: 02: <-- ZmVkZXJpY2EuZ3JvdHRvQGRlbnRhbC1hcnQuaXQ=
    Sat 2025-01-25 01:27:05.641: 03: --> 334 UGFzc3dvcmQ6
    Sat 2025-01-25 01:27:06.477: 02: <-- ******
    Sat 2025-01-25 01:27:06.477: 01: Autenticazione federica.grotto@dental-art.it...
    Sat 2025-01-25 01:27:06.481: 04: Password errata
    Sat 2025-01-25 01:27:06.482: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:27:06.986: 05: Connessione chiusa
    Sat 2025-01-25 01:27:06.987: 04: SMTP session terminated (Bytes in/out: 117/355)
    Sat 2025-01-25 01:27:06.987: 01: ----------
    Sat 2025-01-25 01:27:15.217: 05: Session 13028368; child 0001
    Sat 2025-01-25 01:27:15.217: 05: Accepting SMTP connection from 140.82.157.126:37155 to 10.0.0.8:25
    Sat 2025-01-25 01:27:15.217: 07: Vaglio località ha rilevato che la connessione proviene da United States, North America
    Sat 2025-01-25 01:27:15.217: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:27:15 +0100
    Sat 2025-01-25 01:27:16.195: 02: <-- EHLO 140.82.157.126.360broadband.net
    Sat 2025-01-25 01:27:16.195: 03: --> 250-mail.dental-art.it Hello 140.82.157.126.360broadband.net [140.82.157.126], pleased to meet you
    Sat 2025-01-25 01:27:16.197: 03: --> 250-ETRN
    Sat 2025-01-25 01:27:16.197: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:27:16.197: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:27:16.197: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:27:16.197: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:27:16.197: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:27:16.197: 03: --> 250 SIZE
    Sat 2025-01-25 01:27:16.840: 02: <-- AUTH LOGIN
    Sat 2025-01-25 01:27:16.840: 03: --> 334 VXNlcm5hbWU6
    Sat 2025-01-25 01:27:17.490: 02: <-- ZmVkZXJpY2EuZ3JvdHRv
    Sat 2025-01-25 01:27:17.490: 03: --> 334 UGFzc3dvcmQ6
    Sat 2025-01-25 01:27:18.292: 02: <-- ******
    Sat 2025-01-25 01:27:18.293: 01: Autenticazione federica.grotto...
    Sat 2025-01-25 01:27:18.295: 04: È necessario un indirizzo e-mail completo
    Sat 2025-01-25 01:27:18.296: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:27:18.775: 05: Connessione chiusa
    Sat 2025-01-25 01:27:18.775: 04: SMTP session terminated (Bytes in/out: 98/358)
    Sat 2025-01-25 01:27:18.775: 01: ----------
    Sat 2025-01-25 01:27:42.059: 05: Session 13028369; child 0001
    Sat 2025-01-25 01:27:42.059: 05: Accepting SMTP connection from 120.194.50.39:43254 to 10.0.0.8:25
    Sat 2025-01-25 01:27:42.060: 07: Vaglio località ha rilevato che la connessione proviene da China, Asia
    Sat 2025-01-25 01:27:42.060: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:27:42 +0100
    Sat 2025-01-25 01:27:43.201: 02: <-- EHLO [120.194.50.39]
    Sat 2025-01-25 01:27:43.201: 03: --> 250-mail.dental-art.it Hello [120.194.50.39] [120.194.50.39], pleased to meet you
    Sat 2025-01-25 01:27:43.201: 03: --> 250-ETRN
    Sat 2025-01-25 01:27:43.202: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:27:43.202: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:27:43.202: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:27:43.202: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:27:43.202: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:27:43.202: 03: --> 250 SIZE
    Sat 2025-01-25 01:27:44.321: 02: <-- AUTH LOGIN
    Sat 2025-01-25 01:27:44.321: 03: --> 334 VXNlcm5hbWU6
    Sat 2025-01-25 01:27:45.193: 02: <-- YnJ1bmEuY2FtcGVzZUBkZW50YWwtYXJ0Lml0
    Sat 2025-01-25 01:27:45.193: 03: --> 334 UGFzc3dvcmQ6
    Sat 2025-01-25 01:27:46.197: 02: <-- ******
    Sat 2025-01-25 01:27:46.198: 01: Autenticazione bruna.campese@dental-art.it...
    Sat 2025-01-25 01:27:46.202: 04: Password errata
    Sat 2025-01-25 01:27:46.203: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:27:47.085: 05: Connessione chiusa
    Sat 2025-01-25 01:27:47.085: 04: SMTP session terminated (Bytes in/out: 94/341)
    Sat 2025-01-25 01:27:47.085: 01: ----------
    Sat 2025-01-25 01:27:48.072: 05: Session 13028370; child 0001
    Sat 2025-01-25 01:27:48.072: 05: Accepting SMTP connection from 46.29.121.110:56124 to 10.0.0.8:25
    Sat 2025-01-25 01:27:48.072: 07: Vaglio località ha rilevato che la connessione proviene da France, Europe
    Sat 2025-01-25 01:27:48.073: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:27:48 +0100
    Sat 2025-01-25 01:27:48.971: 02: <-- EHLO [46.29.121.110]
    Sat 2025-01-25 01:27:48.971: 03: --> 250-mail.dental-art.it Hello [46.29.121.110] [46.29.121.110], pleased to meet you
    Sat 2025-01-25 01:27:48.971: 03: --> 250-ETRN
    Sat 2025-01-25 01:27:48.972: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:27:48.972: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:27:48.972: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:27:48.972: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:27:48.972: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:27:48.972: 03: --> 250 SIZE
    Sat 2025-01-25 01:27:49.593: 02: <-- AUTH LOGIN
    Sat 2025-01-25 01:27:49.593: 03: --> 334 VXNlcm5hbWU6
    Sat 2025-01-25 01:27:50.060: 02: <-- YnJ1bmEuY2FtcGVzZQ==
    Sat 2025-01-25 01:27:50.060: 03: --> 334 UGFzc3dvcmQ6
    Sat 2025-01-25 01:27:50.691: 02: <-- ******
    Sat 2025-01-25 01:27:50.691: 01: Autenticazione bruna.campese...
    Sat 2025-01-25 01:27:50.693: 04: È necessario un indirizzo e-mail completo
    Sat 2025-01-25 01:27:50.694: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:27:50.987: 05: Connessione chiusa
    Sat 2025-01-25 01:27:50.987: 04: SMTP session terminated (Bytes in/out: 78/341)
    Sat 2025-01-25 01:27:50.987: 01: ----------
    Sat 2025-01-25 01:30:18.552: 05: Session 13028384; child 0001
    Sat 2025-01-25 01:30:18.552: 05: Accepting SMTP connection from 203.189.124.10:53930 to 10.0.0.8:25
    Sat 2025-01-25 01:30:18.553: 07: Vaglio località ha rilevato che la connessione proviene da Australia, Oceania
    Sat 2025-01-25 01:30:18.553: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:30:18 +0100
    Sat 2025-01-25 01:30:19.834: 02: <-- EHLO [203.189.124.10]
    Sat 2025-01-25 01:30:19.834: 03: --> 250-mail.dental-art.it Hello [203.189.124.10] [203.189.124.10], pleased to meet you
    Sat 2025-01-25 01:30:19.834: 03: --> 250-ETRN
    Sat 2025-01-25 01:30:19.835: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:30:19.835: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:30:19.835: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:30:19.835: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:30:19.835: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:30:19.835: 03: --> 250 SIZE
    Sat 2025-01-25 01:30:20.979: 02: <-- AUTH LOGIN
    Sat 2025-01-25 01:30:20.979: 03: --> 334 VXNlcm5hbWU6
    Sat 2025-01-25 01:30:22.261: 02: <-- am9obi5mYWNjaW5AZGVudGFsLWFydC5pdA==
    Sat 2025-01-25 01:30:22.261: 03: --> 334 UGFzc3dvcmQ6
    Sat 2025-01-25 01:30:23.284: 02: <-- ******
    Sat 2025-01-25 01:30:23.284: 01: Autenticazione john.faccin@dental-art.it...
    Sat 2025-01-25 01:30:23.286: 04: Account inesistente
    Sat 2025-01-25 01:30:23.287: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:30:24.408: 05: Connessione chiusa
    Sat 2025-01-25 01:30:24.408: 04: SMTP session terminated (Bytes in/out: 95/343)
    Sat 2025-01-25 01:30:24.409: 01: ----------
    Sat 2025-01-25 01:30:26.496: 05: Session 13028386; child 0002
    Sat 2025-01-25 01:30:26.496: 05: Accepting SMTP connection from 195.189.226.204:50165 to 10.0.0.8:25
    Sat 2025-01-25 01:30:26.496: 07: Vaglio località ha rilevato che la connessione proviene da Ukraine, Europe
    Sat 2025-01-25 01:30:26.497: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:30:26 +0100
    Sat 2025-01-25 01:30:26.550: 02: <-- EHLO bestofoffers.shop
    Sat 2025-01-25 01:30:26.551: 03: --> 250-mail.dental-art.it Hello bestofoffers.shop [195.189.226.204], pleased to meet you
    Sat 2025-01-25 01:30:26.551: 03: --> 250-ETRN
    Sat 2025-01-25 01:30:26.577: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:30:26.577: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:30:26.577: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:30:26.577: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:30:26.577: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:30:26.577: 03: --> 250 SIZE
    Sat 2025-01-25 01:30:26.634: 02: <-- MAIL FROM:<> BODY=8BITMIME
    Sat 2025-01-25 01:30:26.634: 05: Performing PTR lookup (204.226.189.195.IN-ADDR.ARPA)
    Sat 2025-01-25 01:30:26.652: 05: *  D=204.226.189.195.IN-ADDR.ARPA TTL=(36) PTR=[bestofoffers.shop]
    Sat 2025-01-25 01:30:26.719: 05: *  No A/AAAA records found
    Sat 2025-01-25 01:30:26.719: 05: ---- End PTR results
    Sat 2025-01-25 01:30:26.719: 05: Performing IP lookup (bestofoffers.shop)
    Sat 2025-01-25 01:30:26.720: 04: *  Il server DNS segnala un nome dominio sconosciuto
    Sat 2025-01-25 01:30:26.720: 05: ---- End IP lookup results
    Sat 2025-01-25 01:30:26.720: 03: --> 250 2.1.0 Sender OK
    Sat 2025-01-25 01:30:26.771: 02: <-- RCPT TO:<info@interprod.it>
    Sat 2025-01-25 01:30:26.772: 03: --> 250 2.1.5 Recipient OK
    Sat 2025-01-25 01:30:26.825: 02: <-- DATA
    Sat 2025-01-25 01:30:26.825: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
    Sat 2025-01-25 01:30:27.477: 05: Connessione chiusa
    Sat 2025-01-25 01:30:27.477: 04: SMTP session terminated (Bytes in/out: 87/361)
    Sat 2025-01-25 01:30:27.477: 01: ----------
    Sat 2025-01-25 01:30:25.849: 05: Session 13028385; child 0001
    Sat 2025-01-25 01:30:25.849: 05: Accepting SMTP connection from 182.76.87.90:53602 to 10.0.0.8:25
    Sat 2025-01-25 01:30:25.849: 07: Vaglio località ha rilevato che la connessione proviene da India, Asia
    Sat 2025-01-25 01:30:25.850: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:30:25 +0100
    Sat 2025-01-25 01:30:27.298: 02: <-- EHLO nsg-static-174.125.76.182-airtel.com
    Sat 2025-01-25 01:30:27.298: 03: --> 250-mail.dental-art.it Hello nsg-static-174.125.76.182-airtel.com [182.76.87.90], pleased to meet you
    Sat 2025-01-25 01:30:27.300: 03: --> 250-ETRN
    Sat 2025-01-25 01:30:27.300: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:30:27.300: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:30:27.300: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:30:27.300: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:30:27.300: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:30:27.300: 03: --> 250 SIZE
    Sat 2025-01-25 01:30:28.593: 02: <-- AUTH LOGIN
    Sat 2025-01-25 01:30:28.593: 03: --> 334 VXNlcm5hbWU6
    Sat 2025-01-25 01:30:30.000: 02: <-- am9obi5mYWNjaW4=
    Sat 2025-01-25 01:30:30.000: 03: --> 334 UGFzc3dvcmQ6
    Sat 2025-01-25 01:30:31.123: 02: <-- ******
    Sat 2025-01-25 01:30:31.123: 01: Autenticazione john.faccin...
    Sat 2025-01-25 01:30:31.126: 04: È necessario un indirizzo e-mail completo
    Sat 2025-01-25 01:30:31.127: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:30:32.107: 05: Connessione chiusa
    Sat 2025-01-25 01:30:32.107: 04: SMTP session terminated (Bytes in/out: 95/361)
    Sat 2025-01-25 01:30:32.107: 01: ----------
    Sat 2025-01-25 01:31:02.907: 05: Session 13028387; child 0001
    Sat 2025-01-25 01:31:02.907: 05: Accepting SMTP connection from 87.103.126.54:18948 to 10.0.0.8:25
    Sat 2025-01-25 01:31:02.907: 07: Vaglio località ha rilevato che la connessione proviene da Portugal, Europe
    Sat 2025-01-25 01:31:02.908: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:31:02 +0100
    Sat 2025-01-25 01:31:03.163: 02: <-- EHLO alked
    Sat 2025-01-25 01:31:03.164: 03: --> 250-mail.dental-art.it Hello alked [87.103.126.54], pleased to meet you
    Sat 2025-01-25 01:31:03.164: 03: --> 250-ETRN
    Sat 2025-01-25 01:31:03.165: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:31:03.165: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:31:03.165: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:31:03.165: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:31:03.165: 03: --> 250-STARTTLS
    Sat 2025-01-25 01:31:03.165: 03: --> 250 SIZE
    Sat 2025-01-25 01:31:03.410: 02: <-- STARTTLS
    Sat 2025-01-25 01:31:03.410: 03: --> 220 2.7.0 Ready to start TLS
    Sat 2025-01-25 01:31:03.412: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Sat 2025-01-25 01:31:04.337: 02: <-- EHLO alked
    Sat 2025-01-25 01:31:04.337: 03: --> 250-mail.dental-art.it Hello alked [87.103.126.54], pleased to meet you
    Sat 2025-01-25 01:31:04.337: 03: --> 250-ETRN
    Sat 2025-01-25 01:31:04.337: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:31:04.337: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:31:04.337: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:31:04.337: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:31:04.337: 03: --> 250-REQUIRETLS
    Sat 2025-01-25 01:31:04.337: 03: --> 250 SIZE
    Sat 2025-01-25 01:31:04.704: 02: <-- AUTH PLAIN ******
    Sat 2025-01-25 01:31:04.704: 01: Autenticazione fabio.giaretta@dental-art.it...
    Sat 2025-01-25 01:31:04.714: 04: Password errata
    Sat 2025-01-25 01:31:04.716: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:31:05.429: 02: <-- QUIT
    Sat 2025-01-25 01:31:05.429: 03: --> 221 2.0.0 See ya in cyberspace
    Sat 2025-01-25 01:31:05.429: 04: SMTP session terminated (Bytes in/out: 764/802)
    Sat 2025-01-25 01:31:05.429: 01: ----------
    Sat 2025-01-25 01:33:31.993: 05: Session 13028397; child 0001
    Sat 2025-01-25 01:33:31.993: 05: Accepting SMTP connection from 186.247.192.94:49342 to 10.0.0.8:465
    Sat 2025-01-25 01:33:31.993: 07: Vaglio località ha rilevato che la connessione proviene da Brazil, South America
    Sat 2025-01-25 01:33:34.368: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Sat 2025-01-25 01:33:34.368: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:33:34 +0100
    Sat 2025-01-25 01:33:35.812: 02: <-- EHLO [186.247.192.94]
    Sat 2025-01-25 01:33:35.812: 03: --> 250-mail.dental-art.it Hello [186.247.192.94] [186.247.192.94], pleased to meet you
    Sat 2025-01-25 01:33:35.814: 03: --> 250-ETRN
    Sat 2025-01-25 01:33:35.814: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:33:35.814: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:33:35.814: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:33:35.814: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:33:35.814: 03: --> 250-REQUIRETLS
    Sat 2025-01-25 01:33:35.814: 03: --> 250 SIZE
    Sat 2025-01-25 01:33:37.068: 02: <-- AUTH PLAIN
    Sat 2025-01-25 01:33:37.068: 03: --> 334 
    Sat 2025-01-25 01:33:38.307: 02: <-- ******
    Sat 2025-01-25 01:33:38.307: 01: Autenticazione alessandro.maggiore@dental-art.it...
    Sat 2025-01-25 01:33:38.314: 04: Password errata
    Sat 2025-01-25 01:33:38.315: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:33:39.656: 04: *  Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
    Sat 2025-01-25 01:33:39.656: 04: SMTP session terminated (Bytes in/out: 854/3547)
    Sat 2025-01-25 01:33:39.656: 01: ----------
    Sat 2025-01-25 01:33:41.348: 05: Session 13028398; child 0001
    Sat 2025-01-25 01:33:41.348: 05: Accepting SMTP connection from 121.202.153.179:64062 to 10.0.0.8:465
    Sat 2025-01-25 01:33:41.349: 07: Vaglio località ha rilevato che la connessione proviene da Hong Kong, Asia
    Sat 2025-01-25 01:33:43.593: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Sat 2025-01-25 01:33:43.593: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Sat, 25 Jan 2025 01:33:43 +0100
    Sat 2025-01-25 01:33:45.060: 02: <-- EHLO m121-202-153-179.smartone.com
    Sat 2025-01-25 01:33:45.060: 03: --> 250-mail.dental-art.it Hello m121-202-153-179.smartone.com [121.202.153.179], pleased to meet you
    Sat 2025-01-25 01:33:45.062: 03: --> 250-ETRN
    Sat 2025-01-25 01:33:45.062: 03: --> 250-AUTH LOGIN PLAIN
    Sat 2025-01-25 01:33:45.062: 03: --> 250-8BITMIME
    Sat 2025-01-25 01:33:45.062: 03: --> 250-ENHANCEDSTATUSCODES
    Sat 2025-01-25 01:33:45.062: 03: --> 250-PIPELINING
    Sat 2025-01-25 01:33:45.062: 03: --> 250-REQUIRETLS
    Sat 2025-01-25 01:33:45.062: 03: --> 250 SIZE
    Sat 2025-01-25 01:33:46.540: 02: <-- AUTH PLAIN
    Sat 2025-01-25 01:33:46.540: 03: --> 334 
    Sat 2025-01-25 01:33:47.825: 02: <-- ******
    Sat 2025-01-25 01:33:47.825: 01: Autenticazione alessandro.maggiore...
    Sat 2025-01-25 01:33:47.827: 04: È necessario un indirizzo e-mail completo
    Sat 2025-01-25 01:33:47.828: 03: --> 535 5.7.8 Authentication failed
    Sat 2025-01-25 01:33:49.157: 04: *  Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
    Sat 2025-01-25 01:33:49.157: 04: SMTP session terminated (Bytes in/out: 851/3561)
    Sat 2025-01-25 01:33:49.157: 01: ----------


  • This is occuring because the connection is not being properly shutdown. Basically the sender is just closing the connection when they are done.  "The sender has finished using the connection and has started a shutdown." 

    If this is a valid connection, you should be able to address it by fixing the authentication issue.

    If this is not a valid connection and you don't have users in the locations where the bad connections are coming from, then you could use Location Screening (Security / Screening / Location Screening) to reduce the attack surface and prevent them from connecting.  You can configure it to only allow authentication from locations where you actually have users. If you need to accept mail from other locations, make sure you use the option for "Block except SMTP, disable authentication".  This will allow inbound SMTP connections but will not allow them to authenticate. Also, I would make sure the option to require full email address for authentication is enabled (Setup / Preferences / System).


  • I tried to disable the watchguard's antivirus and antispam policies, but only if the sender sends the email in plain text format does the message arrive, otherwise reception stops. In the past few weeks it has also happened with other senders, maybe there is some timeout to change?

    thank you

    Stefano Pavan


  • I tried to disable the watchguard's antivirus and antispam policies, but only if the sender sends the email in plain text format does the message arrive, otherwise reception stops.

    Can you post a snippet from MDaemon's inbound SMTP log that shows when the message is in HTML and "reception stops"? 

    Can you post a snippet from MDaemon's inbound SMTP log that shows when the message is in plain text and the message is recevied? 

    What do the watchguard logs show is happening when the message is in HTML and "reception stops"? 


  • This Is plain text session

    Thu 2025-01-30 11:42:20.346: 05: Session 13072170; child 0001
    Thu 2025-01-30 11:42:20.346: 05: Accepting SMTP connection from 40.107.20.103:40193 to 10.0.0.8:25
    Thu 2025-01-30 11:42:20.347: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Thu, 30 Jan 2025 11:42:20 +0100
    Thu 2025-01-30 11:42:20.523: 02: <-- EHLO EUR05-DB8-obe.outbound.protection.outlook.com
    Thu 2025-01-30 11:42:20.525: 03: --> 250-mail.dental-art.it Hello EUR05-DB8-obe.outbound.protection.outlook.com [40.107.20.103], pleased to meet you
    Thu 2025-01-30 11:42:20.525: 03: --> 250-ETRN
    Thu 2025-01-30 11:42:20.525: 03: --> 250-AUTH LOGIN PLAIN
    Thu 2025-01-30 11:42:20.526: 03: --> 250-8BITMIME
    Thu 2025-01-30 11:42:20.526: 03: --> 250-ENHANCEDSTATUSCODES
    Thu 2025-01-30 11:42:20.526: 03: --> 250-PIPELINING
    Thu 2025-01-30 11:42:20.526: 03: --> 250-STARTTLS
    Thu 2025-01-30 11:42:20.526: 03: --> 250 SIZE
    Thu 2025-01-30 11:42:20.571: 02: <-- STARTTLS
    Thu 2025-01-30 11:42:20.572: 03: --> 220 2.7.0 Ready to start TLS
    Thu 2025-01-30 11:42:20.574: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Thu 2025-01-30 11:42:20.735: 02: <-- EHLO EUR05-DB8-obe.outbound.protection.outlook.com
    Thu 2025-01-30 11:42:20.735: 03: --> 250-mail.dental-art.it Hello EUR05-DB8-obe.outbound.protection.outlook.com [40.107.20.103], pleased to meet you
    Thu 2025-01-30 11:42:20.735: 03: --> 250-ETRN
    Thu 2025-01-30 11:42:20.735: 03: --> 250-AUTH LOGIN PLAIN
    Thu 2025-01-30 11:42:20.735: 03: --> 250-8BITMIME
    Thu 2025-01-30 11:42:20.735: 03: --> 250-ENHANCEDSTATUSCODES
    Thu 2025-01-30 11:42:20.735: 03: --> 250-PIPELINING
    Thu 2025-01-30 11:42:20.735: 03: --> 250-REQUIRETLS
    Thu 2025-01-30 11:42:20.735: 03: --> 250 SIZE
    Thu 2025-01-30 11:42:20.798: 02: <-- MAIL FROM:<massimiliano.borgno@blindgroup.com> SIZE=27909
    Thu 2025-01-30 11:42:20.798: 05: Performing PTR lookup (103.20.107.40.IN-ADDR.ARPA)
    Thu 2025-01-30 11:42:20.822: 05: *  D=103.20.107.40.IN-ADDR.ARPA TTL=(49) PTR=[mail-db8eur05on2103.outbound.protection.outlook.com]
    Thu 2025-01-30 11:42:20.842: 05: *  D=mail-db8eur05on2103.outbound.protection.outlook.com TTL=(1) A=[40.107.20.103]
    Thu 2025-01-30 11:42:20.842: 05: ---- End PTR results
    Thu 2025-01-30 11:42:20.842: 05: Performing IP lookup (EUR05-DB8-obe.outbound.protection.outlook.com)
    Thu 2025-01-30 11:42:20.866: 05: *  D=EUR05-DB8-obe.outbound.protection.outlook.com TTL=(1) A=[104.47.17.104]
    Thu 2025-01-30 11:42:20.866: 05: ---- End IP lookup results
    Thu 2025-01-30 11:42:20.866: 05: Performing IP lookup (blindgroup.com)
    Thu 2025-01-30 11:42:20.922: 05: *  D=blindgroup.com TTL=(0) A=[35.227.194.51]
    Thu 2025-01-30 11:42:20.922: 05: *  D=blindgroup.com TTL=(0) A=[35.190.31.54]
    Thu 2025-01-30 11:42:20.922: 05: *  D=blindgroup.com TTL=(0) A=[34.149.36.179]
    Thu 2025-01-30 11:42:20.922: 05: *  D=blindgroup.com TTL=(0) A=[34.120.190.48]
    Thu 2025-01-30 11:42:21.006: 05: *  P=000 S=000 D=blindgroup.com TTL=(237) MX=[blindgroup-com.mail.protection.outlook.com] {52.101.68.12}
    Thu 2025-01-30 11:42:21.006: 05: ---- End IP lookup results
    Thu 2025-01-30 11:42:21.006: 03: --> 250 2.1.0 Sender OK
    Thu 2025-01-30 11:42:21.067: 02: <-- RCPT TO:<antonio.gallio@dental-art.it>
    Thu 2025-01-30 11:42:21.068: 03: --> 250 2.1.5 Recipient OK
    Thu 2025-01-30 11:42:21.129: 02: <-- DATA
    Thu 2025-01-30 11:42:21.129: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
    Thu 2025-01-30 11:42:21.196: 01: Message size: 9809 bytes
    Thu 2025-01-30 11:42:21.199: 01: Creazione messaggio successful: c:\mdaemon\inbound\md5001006399609.msg
    Thu 2025-01-30 11:42:21.199: 03: --> 250 2.6.0 Ok, message saved <Message-ID: <DB9P191MB2099EDC3F8BE50542AD0904594E92@DB9P191MB2099.EURP191.PROD.OUTLOOK.COM>>
    Thu 2025-01-30 11:42:21.278: 02: <-- QUIT
    Thu 2025-01-30 11:42:21.279: 04: *  Socket error 10054 - Connessione reimpostata dall'altro lato.
    Thu 2025-01-30 11:42:21.279: 01: SMTP session successful (Bytes in/out: 10779/1052)

    This is the Html session

    Thu 2025-01-30 16:55:56.325: 05: Session 13075777; child 0002
    Thu 2025-01-30 16:55:56.325: 05: Accepting SMTP connection from 40.107.20.101:54688 to 10.0.0.8:25
    Thu 2025-01-30 16:55:56.326: 03: --> 220 mail.dental-art.it ESMTP MDaemon 24.5.2; Thu, 30 Jan 2025 16:55:56 +0100
    Thu 2025-01-30 16:55:56.374: 02: <-- EHLO EUR05-DB8-obe.outbound.protection.outlook.com
    Thu 2025-01-30 16:55:56.374: 03: --> 250-mail.dental-art.it Hello EUR05-DB8-obe.outbound.protection.outlook.com [40.107.20.101], pleased to meet you
    Thu 2025-01-30 16:55:56.374: 03: --> 250-ETRN
    Thu 2025-01-30 16:55:56.374: 03: --> 250-AUTH LOGIN PLAIN
    Thu 2025-01-30 16:55:56.376: 03: --> 250-8BITMIME
    Thu 2025-01-30 16:55:56.376: 03: --> 250-ENHANCEDSTATUSCODES
    Thu 2025-01-30 16:55:56.376: 03: --> 250-PIPELINING
    Thu 2025-01-30 16:55:56.376: 03: --> 250-STARTTLS
    Thu 2025-01-30 16:55:56.376: 03: --> 250 SIZE
    Thu 2025-01-30 16:55:56.426: 02: <-- STARTTLS
    Thu 2025-01-30 16:55:56.426: 03: --> 220 2.7.0 Ready to start TLS
    Thu 2025-01-30 16:55:56.428: 01: Negoziazione SSL riuscita (TLS 1.2, TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384)
    Thu 2025-01-30 16:55:56.598: 02: <-- EHLO EUR05-DB8-obe.outbound.protection.outlook.com
    Thu 2025-01-30 16:55:56.598: 03: --> 250-mail.dental-art.it Hello EUR05-DB8-obe.outbound.protection.outlook.com [40.107.20.101], pleased to meet you
    Thu 2025-01-30 16:55:56.598: 03: --> 250-ETRN
    Thu 2025-01-30 16:55:56.598: 03: --> 250-AUTH LOGIN PLAIN
    Thu 2025-01-30 16:55:56.598: 03: --> 250-8BITMIME
    Thu 2025-01-30 16:55:56.598: 03: --> 250-ENHANCEDSTATUSCODES
    Thu 2025-01-30 16:55:56.598: 03: --> 250-PIPELINING
    Thu 2025-01-30 16:55:56.598: 03: --> 250-REQUIRETLS
    Thu 2025-01-30 16:55:56.598: 03: --> 250 SIZE
    Thu 2025-01-30 16:55:56.662: 02: <-- MAIL FROM:<massimiliano.borgno@blindgroup.com> SIZE=72982
    Thu 2025-01-30 16:55:56.662: 05: Performing PTR lookup (101.20.107.40.IN-ADDR.ARPA)
    Thu 2025-01-30 16:55:56.682: 05: *  D=101.20.107.40.IN-ADDR.ARPA TTL=(43) PTR=[mail-db8eur05on2101.outbound.protection.outlook.com]
    Thu 2025-01-30 16:55:56.710: 05: *  D=mail-db8eur05on2101.outbound.protection.outlook.com TTL=(5) A=[40.107.20.101]
    Thu 2025-01-30 16:55:56.710: 05: ---- End PTR results
    Thu 2025-01-30 16:55:56.710: 05: Performing IP lookup (EUR05-DB8-obe.outbound.protection.outlook.com)
    Thu 2025-01-30 16:55:56.710: 05: *  D=EUR05-DB8-obe.outbound.protection.outlook.com TTL=(0) A=[104.47.17.104]
    Thu 2025-01-30 16:55:56.710: 05: ---- End IP lookup results
    Thu 2025-01-30 16:55:56.710: 05: Performing IP lookup (blindgroup.com)
    Thu 2025-01-30 16:55:56.753: 05: *  D=blindgroup.com TTL=(0) A=[35.190.31.54]
    Thu 2025-01-30 16:55:56.753: 05: *  D=blindgroup.com TTL=(0) A=[35.244.153.44]
    Thu 2025-01-30 16:55:56.753: 05: *  D=blindgroup.com TTL=(0) A=[34.160.17.71]
    Thu 2025-01-30 16:55:56.753: 05: *  D=blindgroup.com TTL=(0) A=[34.120.190.48]
    Thu 2025-01-30 16:55:56.883: 05: *  P=000 S=000 D=blindgroup.com TTL=(360) MX=[blindgroup-com.mail.protection.outlook.com] {52.101.73.16}
    Thu 2025-01-30 16:55:56.883: 05: ---- End IP lookup results
    Thu 2025-01-30 16:55:56.883: 03: --> 250 2.1.0 Sender OK
    Thu 2025-01-30 16:55:56.947: 02: <-- RCPT TO:<lucia.mantovani@dental-art.it>
    Thu 2025-01-30 16:55:56.948: 03: --> 250 2.1.5 Recipient OK
    Thu 2025-01-30 16:55:57.011: 02: <-- DATA
    Thu 2025-01-30 16:55:57.011: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
    Thu 2025-01-30 16:55:57.778: 04: *  Socket error 590615 - Il mittente ha terminato di utilizzare la connessione e ha avviato un arresto.
    Thu 2025-01-30 16:55:57.779: 04: SMTP session terminated (Bytes in/out: 935/931)

     

    in the watchguard log there are no differences, the messages pass without problems


  • The error is still showing the sending server simply disconnecting.  I do not know why the sending server is disconnecting.  MDaemon is not telling it to disconnect nor is it ending the session.  There is not a timeout in MDaemon that can be increased to fix this issue.  If we compare this to a phone call, it is like MDaemon is being hung up on. 

    If you have access to the Microsoft 365 logs for the outbound message, what do they show is happening?

    Does the same thing happen from senders other than Microsoft 365?

    Please try configuring the watchguard firewall to not inspect the SMTP traffic at all.  Does the problem continue?  I do not know anything about watchgaurd firewalls but according to google:

    "To configure your WatchGuard firewall to "not inspect" SMTP traffic, navigate to the SMTP-Proxy settings within your firewall policy and disable the "Content Inspection" option; this will prevent the firewall from examining the content of emails passing through, effectively bypassing any email filtering or scanning features. "

     

     


  • Resolved: as suggested I created a policy to set exception in smtp-proxy watchguard to *.outbound.protection.outlook.com and so it works; it was not enough to disable the "Content Inspection" . it was difficult to understand beacause with other 365 users the problem does not occur. thanks for the support

    Stefano Pavan


  • I'm glad you were able to figure it out, thank you for letting us know.


Please login to reply this topic!