When I'm sending mail with the "eicar-test string". This is used to check if the virusscan is working.And I'm using sendmail as
mailserver and use in V7 also transparant mode for smtp,
The following things happens:
In SMTPPROXY logfile:
2006:10:29-16:33:40 (none) cffd[10946]: id="1004" severity="info" sys="SecureMail" sub="smtp" name="email delivered"
srcip="127.0.0.1" from="fobe@mydomain.com" dstip="127.0.0.1" to="dude@outsidedomain.com"
subject="Eicar test string" message_id="370" size="3645" encrypted="0"
2006:10:29-16:33:40 (none) cffd[10946]: id="1003" severity="error" sys="SecureMail" sub="smtp" name="DeliveryThread error"
info="Error while releasing a message" messageid="348" error="Could not pass message to BSMTP process"
2006:10:29-16:34:20 (none) cffd[10946]: id="1003" severity="error" sys="SecureMail" sub="smtp" name="DeliveryThread error"
info="Error while releasing a message" messageid="341" error="Could not pass message to BSMTP process"
2006:10:29-16:34:30 (none) cffd[10946]: id="1003" severity="error" sys="SecureMail" sub="smtp" name="DeliveryThread error"
info="Error while releasing a message" messageid="342" error="Could not pass message to BSMTP process"
2006:10:29-16:34:40 (none) cffd[10946]: id="1003" severity="error" sys="SecureMail" sub="smtp" name="DeliveryThread error"
info="Error while releasing a message" messageid="344" error="Could not pass message to BSMTP process"
In SMTPENGINE logfile:
2006:10:29-16:33:37 (none) exim[10925]: 2006-10-29 16:33:37 SMTP connection from [192.168.xxx.xxx]:52153 (TCP/IP connection count = 1)
2006:10:29-16:33:37 (none) exim[11406]: 2006-10-29 16:33:37 [pid 11406] [192.168.xxx.xxx] F= Trusted (sent from relay or localhost)
2006:10:29-16:33:37 (none) exim[11406]: 2006-10-29 16:33:37 [pid 11406] [192.168.xxx.xxx] F= R= Accepted: from relay
2006:10:29-16:33:37 (none) exim[11406]: 2006-10-29 16:33:37 1GeCfJ-0002xy-AT fobe@mydomain.com H=(mail.internalserver.com) [192.168.xxx.xxx]:52153
P=esmtps X=TLSv1:AES256-SHA:256 S=3505 id=4544C9D2.9010402@mydomain.con
2006:10:29-16:33:37 (none) exim[11406]: 2006-10-29 16:33:37 SMTP connection from (mail.internalserver.com) [192.168.xxx.xxx]:52153 closed by QUIT
2006:10:29-16:33:37 (none) exim[11407]: 2006-10-29 16:33:37 1GeCfJ-0002xy-AT => dude@outsidedomain.com F= P= R=cff_route T=cff_smtp H=127.0.0.1
[127.0.0.1]:1234
2006:10:29-16:33:37 (none) exim[11407]: 2006-10-29 16:33:37 1GeCfJ-0002xy-AT Completed
2006:10:29-16:33:40 (none) exim[11413]: 2006-10-29 16:33:40 SMTP connection from MailerDaemon
2006:10:29-16:33:40 (none) exim[11413]: 2006-10-29 16:33:40 1GeCfM-0002y5-RR fobe@mydomain.com U=MailerDaemon P=local-bsmtp S=3748
id=4544C9D2.9010402@mydomain.com
2006:10:29-16:33:40 (none) exim[11416]: 2006-10-29 16:33:40 SMTP connection from MailerDaemon
2006:10:29-16:33:43 (none) exim[11414]: 2006-10-29 16:33:43 1GeCfM-0002y5-RR ** dude@outsidedomain.com F= P= R=dnslookup T=remote_smtp:
SMTP error from remote mail server after end of data: host mx3.outsidemailserver.com
[194.109.xxx.xxx]: 554 5.7.1 Virus EICAR-AV-Test| EICAR_Test_File|Eicar-Test-Signature
found
2006:10:29-16:33:43 (none) exim[11420]: 2006-10-29 16:33:43 1GeCfP-0002yC-3N <> R=1GeCfM-0002y5-RR U=exim P=local S=4683
2006:10:29-16:33:43 (none) exim[11421]: 2006-10-29 16:33:43 1GeCfP-0002yC-3N => fobe@mydomain.com F=<> P=<> R=cff_route T=cff_smtp H=127.0.0.1
[127.0.0.1]:1234
2006:10:29-16:33:43 (none) exim[11414]: 2006-10-29 16:33:43 1GeCfM-0002y5-RR Completed
2006:10:29-16:33:43 (none) exim[11421]: 2006-10-29 16:33:43 1GeCfP-0002yC-3N Completed
2006:10:29-16:34:20 (none) exim[11427]: 2006-10-29 16:34:20 SMTP connection from MailerDaemon
2006:10:29-16:34:30 (none) exim[11429]: 2006-10-29 16:34:30 SMTP connection from MailerDaemon
2006:10:29-16:34:40 (none) exim[11432]: 2006-10-29 16:34:40 SMTP connection from MailerDaemon
2006:10:29-16:35:41 (none) exim[11494]: 2006-10-29 16:35:41 SMTP connection from MailerDaemon
2006:10:29-16:35:51 (none) exim[11496]: 2006-10-29 16:35:51 SMTP connection from MailerDaemon
2006:10:29-16:36:01 (none) exim[11503]: 2006-10-29 16:36:01 SMTP connection from MailerDaemon
2006:10:29-16:36:21 (none) exim[11506]: 2006-10-29 16:36:21 SMTP connection from MailerDaemon
2006:10:29-16:36:31 (none) exim[11508]: 2006-10-29 16:36:31 SMTP connection from MailerDaemon
2006:10:29-16:36:41 (none) exim[11511]: 2006-10-29 16:36:41 SMTP connection from MailerDaemon
When I send normal mails form outside to inside en vice versa everythings works fine at least, Incoming mail is scanned but Outgoing mail NOT.
When I send the test string I don't receive the mail back it's dropped. What I only understand is that the mail that is sended back wants to go
127.0.0.1 and can't find this address.... In V6 the mail is sended to quarantine and I see the mail in proxy content managerBut in V7 I look
in the admin user protal and see nothing. When I disable Transparant mode voor SMTP and then send the test file in V6 i get the mail back that
it was bounced by the external mail server (ISP) and in V7 It won't come back sended to 127.0.0.1 SMTP connection from MailerDaemon.
Did I made a configuration fault or is this not working properly yet?