Its not Astaro causing the issue here - I have eliminated that from the equation but does anyone have any ideas as if this is what I think it is - this might become relevant to some here.
Situation:
Mail Server @ home sits behind an Astaro firewall that acts as an SMTP Relay. The ASL box sends all mail to a BT Smarthost using BT as an outbound relay (stopping problems with dynamic IP address ranges to people like AOL). Inbound email arrives directly at ASL and then is forwarded to the mail server.
The ISP I use assignes a dynamic IP address that does change from time to time so I use dyndns (DDNS) to maintain a hostname with the dynamic IP address (wan1.mine.nu)
The MX record for the domain (sendarian.co.uk) points to wan1.mine.nu
> set type=mx
> sendarian.co.uk
Server: zeus.olympus.local
Address: 192.168.38.10
Non-authoritative answer:
sendarian.co.uk canonical name = wan1.mine.nu
And wan1.mine.nu resolves to my correct IP address of the moment
Until a week or so ago - this all worked with no issues - then a couple of weeks ago some friends of mine at companies starting saying that email to me was bouncing. There seems to be two issues - probably related but I have only narrowed down one of them at the moment as follows - this can be replicated as follows:
I send an email to first.second@eds.com and firstsecond@btopenworld.com
EDS get the following headers:
--------------------------------------------------------------------------------
Microsoft Mail Internet Headers Version 2.0
Received: from defrm100.emea.corp.eds.com ([145.16.186.14]) by defrm201.emea.corp.eds.com with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 5 Sep 2009 21:39:35 +0200
Received: from usplm015.amer.corp.eds.com ([148.94.166.8]) by defrm100.emea.corp.eds.com with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 5 Sep 2009 21:39:35 +0200
Received: from usahm017.amer.corp.eds.com ([130.175.198.27]) by usplm015.amer.corp.eds.com with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 5 Sep 2009 14:39:33 -0500
Received: from ahmlir5.mail.eds.com ([205.191.24.45]) by usahm017.amer.corp.eds.com with Microsoft SMTPSVC(6.0.3790.3959);
Sat, 5 Sep 2009 15:39:32 -0400
Received: from ahmler2.mail.eds.com (ahmler2.mail.eds.com [192.85.154.72])
by ahmlir5.mail.eds.com (8.14.2/8.12.10) with ESMTP id n85JdQ8p006812
for ; Sat, 5 Sep 2009 15:39:26 -0400
Received: from ahmler2.mail.eds.com (localhost.localdomain [127.0.0.1])
by ahmler2.mail.eds.com (8.14.2/8.13.8) with ESMTP id n85JdHfV010976
for ; Sat, 5 Sep 2009 15:39:17 -0400
Received: from c2bthomr02.btconnect.com (c2bthomr02.btconnect.com [213.123.20.120])
by ahmler2.mail.eds.com (8.14.2/8.13.8) with ESMTP id n85JdFXJ010777
for ; Sat, 5 Sep 2009 15:39:16 -0400
X-EDS-Source-Ip: 213.123.20.120
X-EDS-Source-Name: c2bthomr02.btconnect.com
X-EDS-Reported-Name: c2bthomr02.btconnect.com
X-EDS-TLS-Version:
X-EDS-TLS-cipher:
X-EDS-TLS-bits:
Received: from mail.sendarian.co.uk (host86-137-214-34.range86-137.btcentralplus.com [86.137.214.34])
by c2bthomr02.btconnect.com
with ESMTP id LBI59555;
Sat, 5 Sep 2009 20:39:10 +0100 (BST)
Received: from hermes.olympus.local ([192.168.38.12]) by hermes.olympus.local
([192.168.38.12]) with mapi; Sat, 5 Sep 2009 20:39:09 +0100
From: Sean Nugent ,
"'First Second'"
Date: Sat, 5 Sep 2009 20:39:08 +0100
Subject: Test email sent to different addresses
Thread-Topic: Test email sent to different addresses
Thread-Index: AcouYIlnhCIsL+aDQC2AX7klE7WE1g==
Message-ID:
Accept-Language: en-US, en-GB
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US, en-GB
Content-Type: multipart/alternative;
boundary="_000_70118AFAD7F5B745B9E9471562CC697BAEF750F3E0hermesolympus_"
MIME-Version: 1.0
X-Junkmail-Status: score=10/50, host=c2bthomr02.btconnect.com
X-Junkmail-SD-Raw: score=unknown,
refid=str=0001.0A0B0201.4AA2BE5F.0051,ss=1,fgs=0,
ip=86.137.214.34,
so=2009-07-20 21:54:04,
dmn=5.7.1/2009-06-05,
mode=single engine
X-Junkmail-IWF: false
X-Brightmail-Flag: NO
X-Brightmail-Tracker: AAAAAA==
X-Spam-Flag: NO
X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on ahmlir5.mail.eds.com
X-Spam-Report: This mail has been scanned in order to control spam.
The results are given below in the "Content Analysis" line.
If the number of points is greater than required,
then this mail is very probably spam.
----------------
Content Analysis: (0.8 points, 5.0 required)
----------------
0.2 HTML_ATTR_UNIQUE BODY: HTML appears to have random attributes in tags
0.0 HTML_MESSAGE BODY: HTML included in message
0.6 HTML_90_100 BODY: Message is 90% to 100% HTML
X-Spam-Status: No, hits=0.8 required=5.0 tests=HTML_90_100,HTML_ATTR_UNIQUE,
HTML_MESSAGE
X-Spam-Level:
X-Envelope-Trace: ahmlir5.n85JdQ8p006812
X-Envelope-From: chaos@wan1.mine.nu firstsecond@btopenworld.com via 87.248.114.77; Sat, 05 Sep 2009 19:39:17 +0000
X-YMailISG: 6.BQ6c8WLDsYfD0HXn0Rv0xKm4V0p6tZjmdYNcqzN.ar0nTtdbmg_NBNhMeNjpGpui5uDwTOw.zg0t.n39R2QGHv1b4kyK6cjW47H81KBlrra0Ggo2qJmwupLufQWr1O8PJGgZkCAyqhghRp9bRxWZTbMa9lnFXmvMmHn.NRWyxyv2ywRNFjkUfd70EZ3Lybyw4Z6HvAQTkM8eB_0ZiekeoxNWI6TEhBM34kOJ1m0jQyYIb8pFLYNuzODu9Rvd7DSXDM1yqmnbZCDsYYFIuiMR0kgHNpDmASihfg4PZgAPVWA.PW0BUfWoIlnkWVw7XFJtyIhHHkXs7q0hRMQcoHwfav.UxS1XU5ZE3zwSm3VMU3tn6Z5j7pPZUIDpCKl8SFyibEKTa1M9LpV8lEa5C5F2DKYVLi84u0jPdsIxVzD15qJBOoBJDBjXOYf3nRdgIR4A--
X-Originating-IP: [213.123.20.120]
Authentication-Results: mta809.mail.ird.yahoo.com from=sendarian.co.uk; domainkeys=neutral (no sig); from=sendarian.co.uk; dkim=neutral (no sig)
Received: from 213.123.20.120 (EHLO c2bthomr02.btconnect.com) (213.123.20.120)
by mta809.mail.ird.yahoo.com with SMTP; Sat, 05 Sep 2009 19:39:17 +0000
Received: from mail.sendarian.co.uk (host86-137-214-34.range86-137.btcentralplus.com [86.137.214.34])
by c2bthomr02.btconnect.com
with ESMTP id LBI59555;
Sat, 5 Sep 2009 20:39:10 +0100 (BST)
Received: from hermes.olympus.local ([192.168.38.12]) by hermes.olympus.local
([192.168.38.12]) with mapi; Sat, 5 Sep 2009 20:39:09 +0100
From: Sean Nugent ,
"'First Second'"
Date: Sat, 5 Sep 2009 20:39:08 +0100
Subject: Test email sent to different addresses
Thread-Topic: Test email sent to different addresses
Thread-Index: AcouYIlnhCIsL+aDQC2AX7klE7WE1g==
Message-ID:
Accept-Language: en-US, en-GB
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
acceptlanguage: en-US, en-GB
Content-Type: multipart/alternative;
boundary="_000_70118AFAD7F5B745B9E9471562CC697BAEF750F3E0hermesolympus_"
MIME-Version: 1.0
X-Junkmail-Status: score=10/50, host=c2bthomr02.btconnect.com
X-Junkmail-SD-Raw: score=unknown,
refid=str=0001.0A0B0201.4AA2BE5F.0051,ss=1,fgs=0,
ip=86.137.214.34,
so=2009-07-20 21:54:04,
dmn=5.7.1/2009-06-05,
mode=single engine
X-Junkmail-IWF: false
--------------------------------------------------------------------------------------
The headers from btopenworld are also confirmed when I send an email to another organisation I have an email address at. I can't get at this point the headers from Blick Rothenburg. When EDS reply to my email they reply to the address chaos@wan1.mine.nu which surprise surprise doesn't exist. I also send email to Blick Rothenburg which seems to cause the same issue. I have no idea whether they use Spam Assassin - which may be causing the issue - or it may not.
Something - probably spam assassin is changing the from: field in the internetheaders - it isn't ASL or my mail server as not only do they not know about wan1.mine.nu - although they could look it up but why would they - but the same email sent out has different headers at two different receivers which would indicate that something at the receiving end is causing the problem.
Would anyone care to comment?
Regards
Sean
This thread was automatically locked due to age.
