I hope someone can help with this

We are having a problem sending e-mail to one site. This only started happening about 10 days ago and it appears to be a change on their side that has started the issue of our GWIA ‘QUIT’ing. Our Configuration: Groupwise 8.02 (8.01HP1 was the initial problem - We upgraded to 802) We are also using Gwava as an appliance to both send and receive e-mail. We have been in contact with Gwava and they pointed out something funny with our GWIA issuing a “QUIT” while trying to send data. Running on Newtare 65SP8 fully patched.

All logs have mostly been sanitized – by the way

We are trying to send e-mail to Queens University in Canada (queensu.ca)

We have been in contact with the destination site and they have 3 MX records listed as they are having a SPAM filtering issue and this is their work around.

Destination Sites MX records:

Pref Hostname
10 [RECIPIENT_MAILSRV01] <-- Will refuse
55 [RECIPIENT_MAILSRV02] <-- Will refuse
85 [MAIL_RECIPIENT_MAILSRV] <--Will accept



Our Gwava log showing the communication and our gwia issuing the quit ( Instructions below for the GWAVA log) The first Quit is coming from our GWIA server. Then Gwava sends a quit to the recipients server.

> This sign represents GWAVA sending a message

< This sign represents GWAVA receiving a message

= This sign indicates that GWAVA is communicating properly with an external server

- This sign indicates that GWAVA is communicating properly with the Internal server (probably a GWIA)

These marks are used in conjunction with each other. You will often see them like this:

<- This sign indicates that GWAVA is receiving a message from an internal server

<= This sign indicates that GWAVA is receiving a message from an external server

=> This sign indicates that GWAVA is sending a message to an external server

-> This sign indicates that GWAVA is sending a message to an internal server

GWAVA LOG



2qi7it0 4 2010-OCT-29 09:23:27 Proxying to server at [RECIPIENT_MAIL_SERVER] for [RECIPIENT_DOMAIN]
2qi7it0 2 2010-OCT-29 09:23:27 Connected to MX server [RECIPIENT_MAIL_SERVER] for [RECIPIENT_DOMAIN]
2qi7it0 4 2010-OCT-29 09:23:27 <= 220 [RECIPIENT_MAIL_SERVER] ESMTP (b7e821a6966e986b21ff69b35d155ce3)
2qi7it0 4 2010-OCT-29 09:23:27 => EHLO [SENDER_EXT_SMTP_PROXY_DNS_NAME]
2qi7it0 4 2010-OCT-29 09:23:27 <= 250-[RECIPIENT_MAIL_SERVER] Hello [SENDER_EXT_SMTP_PROXY_DNS_NAME] [SENDER_EXT_SMTP_PROXY_IP_ADDRESS], pleased to meet you
2qi7it0 4 2010-OCT-29 09:23:27 <= 250-SIZE 100000000
2qi7it0 4 2010-OCT-29 09:23:27 <= 250-PIPELINING
2qi7it0 4 2010-OCT-29 09:23:27 <= 250-8BITMIME
2qi7it0 4 2010-OCT-29 09:23:27 <= 250 HELP
2qi7it0 4 2010-OCT-29 09:23:27 => MAIL FROM:<sender@[SENDER.DOMAIN]>
2qi7it0 4 2010-OCT-29 09:23:27 <= 250 Sender <sender@[SENDER.DOMAIN]> OK
2qi7it0 4 2010-OCT-29 09:23:27 => RCPT TO:<recipient@[RECIPIENT_DOMAIN]>
2qi7it0 4 2010-OCT-29 09:23:27 <= 250 Recipient <recipient@[RECIPIENT_DOMAIN]> OK
2qi7it0 4 2010-OCT-29 09:23:27 -> 250 Recipient <recipient@[RECIPIENT_DOMAIN]> OK
2qi7it0 4 2010-OCT-29 09:23:27 <- QUIT
2qi7it0 4 2010-OCT-29 09:23:27 => QUIT
2qi7it0 4 2010-OCT-29 09:23:27 <= 221 [RECIPIENT_MAIL_SERVER] Goodbye [SENDER_EXT_SMTP_PROXY_DNS_NAME], closing connection
2qi7it0 4 2010-OCT-29 09:23:27 -> 221 [RECIPIENT_MAIL_SERVER] Goodbye [SENDER_EXT_SMTP_PROXY_DNS_NAME], closing connection
2qi7it0 2 2010-OCT-29 09:23:27 Client disconnected from [GWIA_IP_ADDRESS]
2qi7it0 3 2010-OCT-29 09:23:27 ---Exiting thread 5 for [GWIA_IP_ADDRESS]
2ii3it0 3 2010-OCT-29 09:23:28 -> NOOP Sent to Server.
2ii3it0 3 2010-OCT-29 09:23:28 <- NOOP response: 250 Ok





Our GWIA log

It shows the initial attempt to send plus one failed retry:
It shows a 421 TCP Error
This is a verbose which doesn't show any more than normal or debug as far as we can tell



09:16:50 0F6 MSG 12520300 File: [GWIA_SERVER]:\[GWIA_DOMAIN]\WPGATE\GWIA\wpcsout\gwi3386\4\4CCA90FA.CB0 Message Id: (4CCAF369.219:123:532) Size: 2.0 Kb
09:16:50 0F6 MSG 12520300 Sender: [SENDER_EMAIL_ADDRESS]
09:16:50 0F6 MSG 12520300 Converting message to MIME: [GWIA_SERVER]:\[GWIA_DOMAIN]\WPGATE\GWIA\send\xcca9102.626
09:16:50 0F6 MSG 12520300 Recipient: [RECIPIENT_EMAIL_ADDRESS]
09:16:50 0F6 MSG 12520300 Queuing message to daemon: [GWIA_SERVER]:\[GWIA_DOMAIN]\WPGATE\GWIA\send\scca9102.626
09:17:08 11A DMN: MSG 12520300 Connected to [SENDER_EXT_SMTP_PROXY_IP_ADDRESS] [SENDER_EXT_SMTP_PROXY_DNS_NAME]
09:17:08 0FE DMN: MSG 12520300 Sending file: GWIA_SERVER/GWIA:\[GWIA_DOMAIN]\WPGATE\GWIA\3RD\send\pCCA9102.626
09:17:08 0FE DMN: MSG 12520300 Attempting to connect to [SENDER_EXT_SMTP_PROXY_IP_ADDRESS]
09:17:08 0FE DMN: MSG 12520300 Connected to [SENDER_EXT_SMTP_PROXY_IP_ADDRESS] [SENDER_EXT_SMTP_PROXY_DNS_NAME]
09:17:14 12D DMN: MSG 12520300 Transferred
09:23:27 0FE DMN: MSG 12520300 SMTP session ended: [SENDER_EXT_SMTP_PROXY_IP_ADDRESS] [SENDER_EXT_SMTP_PROXY_DNS_NAME]
09:23:27 0FE DMN: MSG 12520300 Send Failure: 420 TCP read error
09:23:53 34A MSG 12520300 Command: [RECIPIENT_DOMAIN]
09:23:53 34A MSG 12520300 Response: 220 [SENDER_EXT_SMTP_PROXY_DNS_NAME] Ready
09:23:53 34A MSG 12520300 Command: EHLO [SENDER_EXT_SMTP_PROXY_DNS_NAME]
09:23:53 34A MSG 12520300 Response: 250 ok
09:23:53 34A MSG 12520300 Command: MAIL FROM:<[SENDER_EMAIL_ADDRESS]>
09:23:53 34A MSG 12520300 Response: 250 OK
09:23:53 34A MSG 12520300 Command: RCPT TO:<[RECIPIENT_EMAIL_ADDRESS]>
09:23:53 34A MSG 12520300 Response: 250 Recipient <[RECIPIENT_EMAIL_ADDRESS]> OK
09:23:53 34A MSG 12520300 Detected error on SMTP command
09:23:53 34A MSG 12520300 Command: DATA
09:23:53 34A MSG 12520300 Response: 420 TCP read error
09:23:53 34A MSG 12520300 Deferring message: [GWIA_SERVER]:\[GWIA_DOMAIN]\WPGATE\GWIA\defer\scca9102.626
09:44:14 141 DMN: MSG 12520300 Sending file: [GWIA_SERVER]:\[GWIA_DOMAIN]\WPGATE\GWIA\3RD\send\pCCA9102.626
09:44:14 141 DMN: MSG 12520300 Attempting to connect to [SENDER_EXT_SMTP_PROXY_IP_ADDRESS]
09:44:14 141 DMN: MSG 12520300 Connected to [SENDER_EXT_SMTP_PROXY_IP_ADDRESS] [SENDER_EXT_SMTP_PROXY_DNS_NAME]
09:50:33 141 DMN: MSG 12520300 SMTP session ended: [SENDER_EXT_SMTP_PROXY_IP_ADDRESS] [SENDER_EXT_SMTP_PROXY_DNS_NAME]
09:50:33 141 DMN: MSG 12520300 Send Failure: 420 TCP read error
09:51:04 34A MSG 12520300 Analyzing result file: [GWIA_SERVER]:\[GWIA_DOMAIN]\WPGATE\GWIA\result\rcca9102.626
09:51:04 34A MSG 12520300 Command: [RECIPIENT_DOMAIN]
09:51:04 34A MSG 12520300 Response: 220 [SENDER_EXT_SMTP_PROXY_DNS_NAME] Ready
09:51:04 34A MSG 12520300 Command: EHLO [SENDER_EXT_SMTP_PROXY_DNS_NAME]
09:51:04 34A MSG 12520300 Response: 250 ok
09:51:04 34A MSG 12520300 Command: MAIL FROM:<[SENDER_EMAIL_ADDRESS]>
09:51:04 34A MSG 12520300 Response: 250 OK
09:51:04 34A MSG 12520300 Command: RCPT TO:<[RECIPIENT_EMAIL_ADDRESS]>
09:51:04 34A MSG 12520300 Response: 250 Recipient <[RECIPIENT_EMAIL_ADDRESS]> OK
09:51:04 34A MSG 12520300 Detected error on SMTP command
09:51:04 34A MSG 12520300 Command: DATA
09:51:04 34A MSG 12520300 Response: 420 TCP read error

09:51:04 34A MSG 12520300 Deferring message: [GWIA_SERVER]:\[GWIA_DOMAIN]\WPGATE\GWIA\defer\scca9102.626




Lastly a packet trace showing the GWIA issueing a quit.



No. Time Source Destination Protocol Info
663 81343.890889 137.82.67.155 130.15.126.72 TCP 25342 > smtp [SYN] S
675 81344.506889 130.15.126.72 137.82.67.155 SMTP S: 250 Recipient <To.user@queensu.ca> OK
676 81344.507333 137.82.67.155 130.15.126.72 SMTP C: QUIT
677 81344.573127 130.15.126.72 137.82.67.155 TCP smtp > 25342 [ACK] Seq=295 Ack=101 Win=5792 Len=0 TSV=1037713192 TSER=794229938
678 81344.573135 130.15.126.72 137.82.67.155 SMTP S: 221 bc400b.its.queensu.ca Goodbye mrl.ubc.ca, closing connection
679 81344.573138 130.15.126.72 137.82.67.155 TCP smtp > 25342 [FIN, ACK] Seq=361 Ack=101 Win=5792 Len=0 TSV=1037713192 TSER=794229938
680 81344.573474 137.82.67.155 130.15.126.72 TCP 25342 > smtp [FIN, ACK] Seq=101 Ack=362 Win=6912 Len=0 TSV=794229955 TSER=1037713192
681 81344.637744 130.15.126.72 137.82.67.155 TCP smtp > 25342 [ACK] Seq=362 Ack=102 Win=5792 Len=0 TSV=1037713198 TSER=794229955


Thanks Joe