spool / recipients: Attempted to send the message to the following ip's

Discussion in 'SmarterMail' started by sdi, Nov 10, 2008.

  1. sdi

    sdi New Member

    Hello,

    I have had 1 msg. waiting to be delivered. When I clicked on the "recipients" tab I got this:

    elu@zp.ukrtel.net: Pending
    601 Attempted to send the message to the following ip's:
    195.5.46.61, 195.5.46.62, 195.5.46.26, 195.5.46.27,
    195.5.46.28, 195.5.46.29

    This is the relative delivery log:
    11:24:41 [91312] Delivery started for elu@zp.ukrtel.net at 11:24:41
    11:24:56 [91312] Skipping spam checks: No local recipients
    11:24:59 [91312] Sending remote mail for elu@zp.ukrtel.net
    11:24:59 [91312] Connecting to 213.21.x.x
    11:24:59 [91312] Connection to 213.21.x.x succeeded
    11:24:59 [91312] RSP: 220 mail.x.x Microsoft ESMTP MAIL Service, Version: 6.0.3790.3959 ready at Mon, 10 Nov 2008 11:25:00 +0100
    ...
    11:24:59 [91312] CMD: MAIL FROM:<elu@zp.ukrtel.net> SIZE=4946
    11:24:59 [91312] RSP: 250 2.1.0 elu@zp.ukrtel.net....Sender OK
    11:24:59 [91312] CMD: RCPT TO:<hzimagine@x.x>
    11:24:59 [91312] RSP: 550 5.1.1 User unknown
    11:24:59 [91312] CMD: QUIT
    11:24:59 [91312] RSP: 221 2.0.0 mail.x.x Service closing transmission channel
    11:24:59 [91312] Bounce email written to 67891313.eml
    11:24:59 [91312] Delivery for elu@zp.ukrtel.net to hzimagine@x.x has completed (Bounced)
    11:25:02 [91313] Delivery started for at 11:25:02
    11:25:02 [91312] Delivery finished for elu@zp.ukrtel.net at 11:25:02 [id:67891312]
    11:25:18 [91313] Skipping spam checks: No local recipients
    11:25:21 [91313] Sending remote mail for
    11:25:22 [91313] Connecting to 195.5.46.61
    11:25:43 [91313] Connection to 195.5.46.61 failed
    11:25:43 [91313] Connecting to 195.5.46.62
    11:26:03 [91313] Connection to 195.5.46.62 failed
    11:26:03 [91313] Connecting to 195.5.46.26
    11:26:26 [91313] Connection to 195.5.46.26 failed
    11:26:26 [91313] Connecting to 195.5.46.27
    11:26:47 [91313] Connection to 195.5.46.27 failed
    11:26:47 [91313] Connecting to 195.5.46.28
    11:27:08 [91313] Connection to 195.5.46.28 failed
    11:27:08 [91313] Connecting to 195.5.46.29
    11:27:30 [91313] Connection to 195.5.46.29 failed
    11:32:32 [91313] Sending remote mail for
    11:32:32 [91313] Connecting to 195.5.46.61
    11:32:53 [91313] Connection to 195.5.46.61 failed
    11:32:53 [91313] Connecting to 195.5.46.62
    11:33:14 [91313] Connection to 195.5.46.62 failed
    11:33:14 [91313] Connecting to 195.5.46.26
    11:33:36 [91313] Connection to 195.5.46.26 failed
    11:33:36 [91313] Connecting to 195.5.46.27
    11:33:57 [91313] Connection to 195.5.46.27 failed
    11:33:57 [91313] Connecting to 195.5.46.28
    11:34:18 [91313] Connection to 195.5.46.28 failed
    11:34:18 [91313] Connecting to 195.5.46.29
    11:34:40 [91313] Connection to 195.5.46.29 failed
    11:36:40 [91313] Delivery finished for at 11:36:40 [id:67891313]

    A DNS-Lookup gives this results:
    zp.ukrtel.net 195.5.16.4
    ukrtel.net 195.5.46.19

    So that mail got bounced as the recipient adress was invalid.
    But what's it with these lines/ip's?
    11:32:32 [91313] Sending remote mail for

    11:32:32 [91313] Connecting to 195.5.46.61

    11:32:53 [91313] Connection to 195.5.46.61 failed

    11:32:53 [91313] Connecting to 195.5.46.62

    11:33:14 [91313] Connection to 195.5.46.62 failed

    11:33:14 [91313] Connecting to 195.5.46.26

    11:33:36 [91313] Connection to 195.5.46.26 failed

    11:33:36 [91313] Connecting to 195.5.46.27

    11:33:57 [91313] Connection to 195.5.46.27 failed

    11:33:57 [91313] Connecting to 195.5.46.28

    11:34:18 [91313] Connection to 195.5.46.28 failed

    11:34:18 [91313] Connecting to 195.5.46.29

    11:34:40 [91313] Connection to 195.5.46.29 failed
    zp.ukrtel.net resolves to: 195.5.16.4 and to none of above ip's. Why has smartermail tried to send to those ip's?
    Where did smartermail get them from? A DNS-Lookup gives another Ip (195.5.16.4).

    Any idea what's been going on in this case?
  2. pdecker

    pdecker Member

    I did an NSLOOKUP to find the MX records for the domain you listed and received the following output. There are several IP's listed that will receive email for the domain. That's why it tries different IP's.

    H:\>nslookup
    Default Server: ybcdrdc02.corp.ybusa.net
    Address: 10.5.17.255

    > set type=mx
    > zp.ukrtel.net
    Server: ybcdrdc02.corp.ybusa.net
    Address: 10.5.17.255

    Non-authoritative answer:
    zp.ukrtel.net MX preference = 50, mail exchanger = mail.ukrpost.ua

    mail.ukrpost.ua internet address = 195.5.46.29
    mail.ukrpost.ua internet address = 195.5.46.61
    mail.ukrpost.ua internet address = 195.5.46.62
    mail.ukrpost.ua internet address = 195.5.46.26
    mail.ukrpost.ua internet address = 195.5.46.27
    mail.ukrpost.ua internet address = 195.5.46.28
    >
  3. sdi

    sdi New Member

    You are right. Sorry, I did an a-record lookup, instead an mx-lookup (it was too early this morning).