Hello experts, I'm experiencing problems receiving emails from certain domains. I'm using a Symantec Gateway Security 1600 appliance and GFI mail essentials 14 for spam filtering on the exchange.
Here is what is happening:
I'm almost positive that is not GFI causing the problems and I'm guessing is the firewall, I've added the senders ip address and email address to the whitelist. If I monitor the GFI dashboard I don't see the emails from this senders so this tells me that is the email does not get to the GFI gateway for scanning at all.... looking at the exchange smtp virtual server logs I get the following for one of the senders:
2008-11-10 05:51:04 63.251.135.115 ccm09.constantcontact.com SMTPSVC1 KRA-MAIL 172.16.1.7 0 240 60032 319 30 SMTP -
2008-11-10 05:47:55 63.251.135.109 ccm08.constantcontact.com SMTPSVC1 KRA-MAIL 172.16.1.7 0 240 60062 319 30 SMTP -
2008-11-10 05:41:46 63.251.135.75 ccm00.constantcontact.com SMTPSVC1 KRA-MAIL 172.16.1.7 0 240 60031 318 30 SMTP -
Now, for another sender I don't show anything on the smtp virtual server logs but I do see it on the Symantec gateway logs. Here is what I get:
Time: Nov 10, 2008 12:51:07.520 AM EST
Type: Informational
Classification: Access allowed
Event: Connection completed
Component: smtpd
Process ID: 1309
Source: 216.54.20.221:53945
Destination:
Rule:
Details: Connection completed, Source IP=216.54.20.221, Source Port=53945, Detail=Call startup failure, Protocol=smtp, Duration=0.57501, ID=anS5p, Received=38, Bytes=38
--------------------------
----------
----------
----------
----------
----------
----
All other incomming emails are working but I'm afraid I'll start seeing more email problems. I've try changing the MTU setting from 1500 to 1400 but nothing.
Thanks for your help.
Start Free Trial
