[afnog] Frozen emails

[Ryta Kashemire]

Hi Chris
Thank you for the timely and very clear response
So my inbound server is running courier.
I have checked the mail.warn logs and i get something similar to whats on
my outbound server.

----------------------
Jan 14 17:14:31 pop courieresmtpd: error,relay=::ffff:41.190.128.53,from=<
declan at travelcare.co.ug>,to=<fred at travelcare.co.ug>: 511 Blocked - see
http://www.spamcop.net/bl.shtml?41.190.128.53
----------------------
Correct me if am wrong but this looks like a spamming issue...so i checked
our spam-ips list but  the ip in question doesnt exist
I have also run the "courier show all" command* which lists* all E-mail
addresses currently blacklisted but no ip comes up.

Any pointers on were else i can look??

eagerly waiting your response

Thank you
Ritah



On Tue, Jan 14, 2014 at 6:11 PM, Chris Wilson <chris+afnog at aptivate.org>wrote:

> Hi Ryta,
>
>
> On Tue, 14 Jan 2014, Ryta Kashemire wrote:
>
>  And when i run less /var/log/exim/main.log, the error message i get is:
>> -------------
>> 1W1zAt-0005LY-7T ** xxx at xxxxxx.co.ug R=dnslookup T=remote_smtp: SMTP
>> error from remote mail server after RCPT
>> TO:<xxx at xxxxxx.co.ug>: host pop.imul.com [41.190.128.29]: 511 Blocked -
>> see http://www.spamcop.net/bl.shtml?41.190.128.53
>>
>> I have checked the site and none of the above ips are on their blacklist..
>>
>
> It's possible that the receiving server (pop.imul.com) has its block list
> configured incorrectly, and it's claiming that your mail is blocked when in
> fact it's not.
>
> Am I to assume that the sending and receiving mail server are both under
> your control, since 41.190.128.29 and 41.190.128.53 are in the same Class C
> network?
>
> Because you removed some details from the log message, I cannot tell if
> the sender and recipient address are the same, or they are in the same
> domain. If they are, then Exim will generate a bounce message, but it
> probably won't be able to deliver that message either, because it needs to
> deliver it to the same server (pop.imul.com) which is refusing your mail.
> In this case there's nothing that Exim can do except freeze the message for
> you to inspect later, or throw it away (which will happen anyway to
> messages that remain frozen for a week).
>
> The problem is clearly on the receiving mail server, pop.imul.com. That's
> where you need to continue investigation, not on the sender side.
>
> Cheers, Chris.
> --
> Aptivate | http://www.aptivate.org | Phone: +44 1223 967 838
> Citylife House, Sturton Street, Cambridge, CB1 2QF, UK
>
> Aptivate is a not-for-profit company registered in England and Wales
> with company number 04980791.
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://afnog.org/pipermail/afnog/attachments/20140114/b9cbbede/attachment.html>