Socket error 10054 - Connection was reset by the other side! | MDaemon Technologies, Ltd.

Socket error 10054 - Connection was reset by the other side!


  • I cannot received email from parragonpaper.com. Here is the snippet SMTP (in) log :

    Thu 2025-11-27 15:05:00.715: 05: Accepting SMTP connection from xx.xx.xx.xx:61331 to xx.xx.xx.xx:25
    Thu 2025-11-27 15:05:00.716: 03: --> 220 webmail.wwglobalservice.com ESMTP MDaemon 25.0.2; Thu, 27 Nov 2025 15:05:00 +0800
    Thu 2025-11-27 15:05:00.725: 02: <-- EHLO mail.parragonpaper.com
    Thu 2025-11-27 15:05:00.732: 03: --> 250-webmail.wwglobalservice.com Hello mail.parragonpaper.com [xx.xx.xx.xx], pleased to meet you
    Thu 2025-11-27 15:05:00.732: 03: --> 250-ETRN
    Thu 2025-11-27 15:05:00.732: 03: --> 250-AUTH LOGIN CRAM-MD5 PLAIN
    Thu 2025-11-27 15:05:00.732: 03: --> 250-8BITMIME
    Thu 2025-11-27 15:05:00.732: 03: --> 250-ENHANCEDSTATUSCODES
    Thu 2025-11-27 15:05:00.732: 03: --> 250-PIPELINING
    Thu 2025-11-27 15:05:00.732: 03: --> 250-CHUNKING
    Thu 2025-11-27 15:05:00.732: 03: --> 250-STARTTLS
    Thu 2025-11-27 15:05:00.732: 03: --> 250-RKEY
    Thu 2025-11-27 15:05:00.732: 03: --> 250 SIZE
    Thu 2025-11-27 15:05:00.738: 02: <-- MAIL From:<prvs=1423e4af95=trade@parragonpaper.com> SIZE=556544
    Thu 2025-11-27 15:05:00.740: 03: --> 250 2.1.0 Sender OK
    Thu 2025-11-27 15:05:00.740: 02: <-- RCPT To:<pkristiani@wwglobalsales.com>
    Thu 2025-11-27 15:05:00.750: 03: --> 250 2.1.5 Recipient OK
    Thu 2025-11-27 15:05:00.750: 02: <-- DATA
    Thu 2025-11-27 15:05:00.752: 03: --> 354 Enter mail, end with <CRLF>.<CRLF>
    Thu 2025-11-27 15:05:00.778: 04: *  Socket error 10054 - Connection was reset by the other side!
    Thu 2025-11-27 15:05:00.779: 04: SMTP session terminated (Bytes in/out: 1518/416)
    Thu 2025-11-27 15:05:00.789: 01: ----------

    Is the cause internal or external?

    thanks



  • Are you having the issue with any other senders?

    Is parragonpaper.com able to send other messages to your server?  What if they send a very small email with just the word "test" in the body, do you receive it?  

    What does the sending servers SMTP log show happened?

    Are there any errors in your firewall about the session?  Do you have SMTP inspection enabled in your firewall?  Do you have an AV engine scanning the email before it gets to MDaemon?  Do you have an antispam tools in front of MDaemon that could be causing the issue?

    I suspect there is something like a firewall, AV gateway, or Proxy, either in your network or the senders network that is causing the connection to be dropped.  If the network device that is causing the issue is on your network, I would expect to see the same thing from other senders.  

    You'll notice in the log provided it only took 6 milliseconds for the connection to be dropped after MDaemon said it was ready to accept the message.  This seems like a very short time frame for a an error to have occurred from sending the data, which is why I'm suspecting a network device is intentionally dropping the connection.  

     


Please login to reply this topic!