Difference between revisions of "Mail notater"

From Teknologisk videncenter
Jump to: navigation, search
m (New page: = blocking of server = Suddenly I couldn't send mail from mars.tekkom.dk to mercantec.dk. To figure out why I used telnet == Finding mailserver == <source lang=cli> [root@mars etc]#<input>...)
 
m
Line 34: Line 34:
 
</source>
 
</source>
 
== Curing ==
 
== Curing ==
Filled out form [http://www.barracudacentral.org/rbl/removal-request Barracuda removal form] and wait one hour
+
Filled out form [http://www.barracudacentral.org/rbl/removal-request Barracuda removal form] and wait one hour as they notet. It took 12 hours before the IP address was removed from the black list.
  
 
Trying again
 
Trying again
 
<source lang=cli>
 
<source lang=cli>
 +
heth@heth-desktop:~/bin$ telnet 193.163.33.237 25
 +
Trying 193.163.33.237...
 +
Connected to 193.163.33.237.
 +
Escape character is '^]'.
 +
220 spa01.mercantec.dk ESMTP (793039d8cf351cb2d25552ec1fbcb273)
 +
HELO mars.tekkom.dk
 +
250 spa01.mercantec.dk Hello uvisa.eucmidt.dk [195.181.54.2], pleased to meet yo                                  u
 +
MAIL FROM:<heth@mars.tekkom.dk>
 +
250 Sender <heth@mars.tekkom.dk> OK
 +
RCPT TO:<heth@mars.tekkom.dk>
 +
550 No such domain at this location (heth@mars.tekkom.dk)
 +
RCPT TO:<heth@mercantec.dk>
 +
250 Recipient <heth@mercantec.dk> OK
 +
DATA
 +
354 Start mail input; end with <CRLF>.<CRLF>
 +
Date: 15 may 2010 07:43:54
 +
From: Henrik Thomsen <heth@mars.tekkom.dk>
 +
Subject: Vigtigt
 +
To: <heth@mercantec.dk>
 +
BLAB
 +
BLAB
 +
.
 +
250 Ok: queued as 7EEF81E9E8D
 +
QUIT
 +
221 spa01.mercantec.dk Goodbye uvisa.eucmidt.dk, closing connection
 +
Connection closed by foreign host.
 
</source>
 
</source>
 
{{source cli}}
 
{{source cli}}
 +
[[Category:Software]][[Category:Security]]

Revision as of 06:50, 15 May 2010

blocking of server

Suddenly I couldn't send mail from mars.tekkom.dk to mercantec.dk. To figure out why I used telnet

Finding mailserver

[root@mars etc]#<input>dig -t MX mercantec.dk</input>

; <<>> DiG 9.4.2-P2 <<>> -t MX mercantec.dk
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 47863
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 6, ADDITIONAL: 0

;; QUESTION SECTION:
;mercantec.dk.                  IN      MX

;; ANSWER SECTION:
mercantec.dk.           86400   IN      MX      10 <notice>spa01.mercantec.dk</notice>.

Finding reason

[heth@mars ~]$<input> telnet spa01.mercantec.dk 25</input>
Trying 193.163.33.237...
Connected to spa01.mercantec.dk.
Escape character is '^]'.
220 spa01.mercantec.dk ESMTP (793039d8cf351cb2d25552ec1fbcb273)
<input>HELO mars.tekkom.dk</input>
250 spa01.mercantec.dk Hello cpe.atm2-0-75146.vgnxx2.customer.tele.dk [83.90.47.30], pleased to meet you
<input>MAIL FROM:<heht@mars.tekkom.dk></input>
250 Sender <heht@mars.tekkom.dk> OK
<input>RCPT TO:<heth@mercantec.dk></input>
554 Service unavailable; Client host [cpe.atm2-0-75146.vgnxx2.customer.tele.dk] 
<notice>blocked using Barracuda Reputation; http://bbl.barracudacentral.com/q.cgi?ip=83.90.47.30</notice>
Connection closed by foreign host.

Curing

Filled out form Barracuda removal form and wait one hour as they notet. It took 12 hours before the IP address was removed from the black list.

Trying again

heth@heth-desktop:~/bin$ telnet 193.163.33.237 25
Trying 193.163.33.237...
Connected to 193.163.33.237.
Escape character is '^]'.
220 spa01.mercantec.dk ESMTP (793039d8cf351cb2d25552ec1fbcb273)
HELO mars.tekkom.dk
250 spa01.mercantec.dk Hello uvisa.eucmidt.dk [195.181.54.2], pleased to meet yo                                  u
MAIL FROM:<heth@mars.tekkom.dk>
250 Sender <heth@mars.tekkom.dk> OK
RCPT TO:<heth@mars.tekkom.dk>
550 No such domain at this location (heth@mars.tekkom.dk)
RCPT TO:<heth@mercantec.dk>
250 Recipient <heth@mercantec.dk> OK
DATA
354 Start mail input; end with <CRLF>.<CRLF>
Date: 15 may 2010 07:43:54
From: Henrik Thomsen <heth@mars.tekkom.dk>
Subject: Vigtigt
To: <heth@mercantec.dk>
BLAB
BLAB
.
250 Ok: queued as 7EEF81E9E8D
QUIT
221 spa01.mercantec.dk Goodbye uvisa.eucmidt.dk, closing connection
Connection closed by foreign host.