[8.980][MYTH] static_smtp defer (-53): retry time not reached for any host

Hi All

I've changed to topology of my network and I can't get access to emails .The error message I am getting is :R=static_route_hostlist T=static_smtp defer (-53): retry time not reached for any host

My UTM is connected to a router -configuration of the in interface attached

UTM (192.168.1.200/24 with gateway 192.168.1.254)-------Router(GW 192.168.1.254).

Everything else (i.e browsing the net ) works fine. However, not sure Why I can't receive/send emails.

I have flushed the DNS as suggested in previous posts. I can see my domain been blacklisted when searching against MX Lookup Tool - Check your DNS MX Records online - MxToolbox (BACKSCATTERER) but It is working fine if I connect directly to the router and not via UTM so not sure if that's the problem

2012:06:22-18:48:00 **** exim-out[8526]: 2012-06-22 18:48:00 End queue run: pid=8526

2012:06:22-18:48:03 **** exim-out[8381]: 2012-06-22 18:48:03 1Shqg4-00032y-2u 95.****.**.50 [95.**.**.50]:25 Connection timed out

2012:06:22-18:48:03 **** exim-out[8380]: 2012-06-22 18:48:03 1Shqg4-00032y-2u == ****@****.gr R=static_route_hostlist T=static_smtp defer (110): Connection timed out

2012:06:22-18:48:03 **** exim-out[8538]: 2012-06-22 18:48:03 1ShqVG-0002Na-4A == ****@****.gr R=static_route_hostlist T=static_smtp defer (-53): retry time not reached for any host

2012:06:22-18:48:03 **** exim-out[8540]: 2012-06-22 18:48:03 1ShqLQ-0001mc-4L == ****@****.gr R=static_route_hostlist T=static_smtp defer (-53): retry time not reached for any host

I have also added a static route for all internal network to use the router as a gateway.

Ports 465,25 as forwarded from router to UTM

Any help much appreciated [:)]

Thanks

0 Billybob over 13 years ago in reply to wingman
You sure your ISP doesn't block outgoing smtp without using a smarthost on astaro. You can do a simple test like I posted before.

On the UTM itself ssh in and
telnet mx.astaro.com 25

and you should get some kind of reply from astaro.com's smtp server. If it timesout then your outgoing smtp port is blocked. Its generally easy to use a smarthost provided by the ISP.

If the above test works then I guess I need a little more info on your smtp setup. Do you have a mail server or you are just using astaro as a smarthost for email relaying.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago

just did that billy and yes it seems that it blocks port 25. Trying to telnet to my ISP smtp works on port 25

Let me try set it up as smarthost and I will report back
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago

I have changed the settings and I can confirm that I can send email from my domain using my IPS as a smart host
However, I am not able to receive email for my specific domain as I am still getting

***@***.gr R=static_route_hostlist T=static_smtp defer (-53): retry time not reached for any host
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 13 years ago in reply to wingman

I am not able to receive email for my specific domain as I am still getting ....T=static_smtp defer (-53): retry time not reached for any host

Do you have an internal smtp server? What does your routing tab look like on the UTM. Email protection -->smtp--> routing
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago

is not internal. It's an external domain but the process is the same(https://community.sophos.com/products/unified-threat-management/astaroorg/f/56/t/49267). Routing is configured to allow it to act as internal (attached)
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago

changing the Host list to be my o2 ISP does work but (email will pass the UTM) but I will not receive them as the host is wrong
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 13 years ago in reply to wingman

I think you are running into the smtp port 25 problem and as far as I know there is no way around it. I am assuming this is your setup

1. Astaro is your mx for your domain since you want to catch all the bugs before sending to your mail server.
2. Your real mail server has no mx record?

So what is happening is that astaro gets the mail intended for your domain and tries to relay it to your mail server that is listening on port 25. Your ISP blocks outgoing port 25 and astaro doesn't know what to do with it. That is what I am getting from the situation[:(]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago

I think it's more complicated that this. The config applied is such so that I can use the encyption email functionality with my email server (which is mail.***.gr)- I have changes the MX record of my domain to point to my UTM

Guide on how to do it: https://community.sophos.com/products/unified-threat-management/astaroorg/f/56/t/49267

This was working fine with my previous ISP. I now changes ISP and he blocks port 25. I would assume that changing the smarthost to be the ISP will do the trick

Indeed I can send emails from other accounts via the smarthost (ISP) with no issues. I have problem only receiving emails on the specific domain address (I can send email from the domain address with no issues- I can send you the header via pm if you would like to have a look)

Desktop--UTM--Smarthost--Domain

MY UTm needs to be the last to get the email so that it can decrypt it. I think the issue is with my MX record that points to my UTM

When I send an email out my outlook is configured to talk to UTM. UTM will use the ISP (smarthost) which makes sense
However, when receiving email : Someone sends an email to my domain,There is a MX record that point to my UTM but port 25 is blocked). i THINK THAT'S THE ISSUE
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 Billybob over 13 years ago in reply to wingman

However, when receiving email : Someone sends an email to my domain,There is a MX record that point to my UTM but port 25 is blocked). i THINK THAT'S THE ISSUE
Well, your astaro receives the mail sent from other addresses right? (try sending yourself a mail from gmail etc, does it show up in astaro's queue?) That would mean your incoming port 25 is open. When astaro tries to relay it to your mail server, your ISP blocks it. You cannot put your ISP's mail server as the recipient because thats where the final host goes like you have it in the screenshot. What exactly is the error message that you get when you put your ISP as the mail server? Relay denied?... I am assuming its looking for authentication.

You are the hardware king, just setup another mail server in a vm and use your other server as a backup mx just in case your main server is offline[;)] Or better yet ditch the ISP, first the pppoe problem and now they want you on a business line so you can use port 25[8-)]
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 wingman over 13 years ago in reply to Billybob
Well, your astaro receives the mail sent from other addresses right? (try sending yourself a mail from gmail etc, does it show up in astaro's queue?) That would mean your incoming port 25 is open. When astaro tries to relay it to your mail server, your ISP blocks it. You cannot put your ISP's mail server as the recipient because thats where the final host goes like you have it in the screenshot. What exactly is the error message that you get when you put your ISP as the mail server? Relay denied?... I am assuming its looking for authentication.

You are the hardware king, just setup another mail server in a vm and use your other server as a backup mx just in case your main server is offline[;)] Or better yet ditch the ISP, first the pppoe problem and now they want you on a business line so you can use port 25[8-)]

Hi Bill

If I send email from another email account to another account (not within the domain) I have no problem receiving it (for example I have a @gmx.us account and it's configured to talk to 465 smtp which is open. port 25 is not open on gmx.us and therefore I think that my ISP is blocking it). Example :

From        |  TO                 | Result
***@gmx.us     |***@gmx.us      |works fine
***@gmx.us     |****@****.gr  |doesn't work (the domain ***.gr is configured under the routing smtp tab)
****@****.gr |***@gmx.us       |works fine
****@****.gr |****@****.gr   |doesn't work

When I use my ISP as smarthost , I can see the email leaving my Desktop client but gets stuck in the UTM ( I can verify this by checking the mail manager) with the error message:

2012:06:26-11:56:00 *** exim-out[5305]: 2012-06-26 11:56:00 1SjJR0-0004y2-Bt == **@****.gr R=static_route_hostlist T=static_smtp defer (-53): retry time not reached for any host

I get this error message only when receiving emails sent to the specific email address (the domain of which is configured under the smtp routing tab)
I don't get a relay error or authentication issues.  Interesting enough, I am able to send email via that specific email address as it uses the ISP smarthost with no issues

Mail manager shows the email as "waiting" with reason

2012-06-26 01:15:10 ******@******.gr R=static_route_hostlist T=static_smtp defer (-53): retry time not reached for any host
2012-06-26 01:19:03 95.*.**.50 [95.*.**.50]:25 Connection timed out
2012-06-26 01:19:03 ******@******.gr R=static_route_hostlist T=static_smtp defer (110): Connection timed out
2012-06-26 01:24:03 95.*.**.50 [95.*.**.50]:25 Connection timed out

Thanks
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel