Video Screencast Help
Search Video Help Close Back
to help
New in the Rewards Catalog: Vouchers for "Symantec Technical Specialist" and "Symantec Certified Specialist" exams.

Reason of Message rejected by MTA Error in Message Audit Logs

Updated: 21 May 2010 | 9 comments
Frankenstein's picture
0 0 Votes
Login to vote

Hi,

probably a simple question to you...

We are missing Emails send to us.
Looking at the "Message Audit Logs" and searching the sender ip, i found several entrys: "Actions taken: Message rejected by MTA".

Maybe im blind, but where do i find why the message is rejected?
What was/is the reason?

Thanks
Frank

discussion Filed Under:

Comments

TomC 2's picture
09
Oct
2009
1 Vote +1
Login to vote

Hello Frank,

So if you haven't already, you can generally click on the hyperlink of the from address and get more information about what happened with the message. If you have already done this, you could potentially look at the mail logs to see if there is more there.

Otherwise, if this was an outbound message and the delivery MTA was giving that message, the sender might have received an NDR as to why the message was rejected.

Hope this helps!
Tom 

Frankenstein's picture
11
Oct
2009
0 Votes 0
Login to vote

Still searching the reason

Hi Tom,

Clicking the hyperlink of the to address in the Message Audit Logs shows also only "Actions taken: Message rejected by MTA" and no other important information.

How do i find these mail in the mail logs? When you mention "mail logs" do you mean Status->System->Logs?
I do not know a search option to enter a message id or something like that.

No, the email is an inbound message. I do not know if the sender gets an NDR.

Thanks
Frank

TomC 2's picture
12
Oct
2009
1 Vote +1
Login to vote

Sorry, Yes,

The mail log that I was referring to would be the MTA logs under the status - system - Logs. You may need to save this out and search the logs that way.

Could you do me a favor and send me a Personal Message with a screen shot of the Message Audit Log entry? That way you wont have to worry about posting any confidential information here on the forum.

If this is a continuing issue for you, and it's causing mail outage, you may need to call in to the support queue. I don't want to delay your resolution too much on this issue.

Thanks! 

Frankenstein's picture
14
Oct
2009
0 Votes 0
Login to vote

Screenshot Message Audit Log

Hi Tom,

you got a personal message with the complete screen shot.
All others following this thread see this:

screenshot.jpg

Laeek's picture
09
Oct
2009
0 Votes 0
Login to vote

Even we have faced the same problem

Hi Tom,

We are having two SBG appliances, due our a problem from 1 of our ISP, so we have forwarded all the emails from one appliance to other appliance & we have seen that all the mails were rejected by MTA.

We have tried to track those emails why it has been rejected but culdn't get any thing as it show everything as none except excepted from. We have done this before itself in the lower version but havent faced this kind of problem.

Regards,
Laeek

TomC 2's picture
14
Oct
2009
1 Vote +1
Login to vote

Hello,

Do either of these documents apply to what you are seeing?

 
Title: 'Message rejected by MTA due to alias transformation'
Document ID: 2009042211325354
> Web URL: http://service1.symantec.com/support/ent-gate.nsf/docid/2009042211325354?Open&seg=ent
 
Title: 'Message rejected by MTA due to Address Masquerade transformation'
Document ID: 2009092508494154
> Web URL: http://service1.symantec.com/support/ent-gate.nsf/docid/2009092508494154?Open&seg=ent

 

Laeek's picture
21
Oct
2009
0 Votes 0
Login to vote

No Alias & Masquerade

Hi Tom,

I have checked our SBG & we have not configured Alias or  Masquerading on Appliance. What will be the other possibility of those email which get rejected.

Regards,
Laeek

fferaboli's picture
21
Oct
2009
1 Vote +1
Login to vote

Hi, Now's maybe too late to

Hi,

Now's maybe too late to say but did you check the reputation for that IP address back then? You can do that via GUI Reputation -> IP Reputation Lookup.
That's another thing to check for rejections.

Regards,

Federico

 

Frankenstein's picture
16
Nov
2009
0 Votes 0
Login to vote

IP Reputation Lookup

Hi,

the IP Reputation Lookup displayed for that IP:
- not a Global Bad Sender
- not a Local Bad Sender
Local Status:
- Current Action: Filter Normally
- Connection Class: 4

I will monitor the Message Audit Logs to see if there are still these entrys after weeks.

UPDATE: It seems that there are currently no "empty" entrys with Message rejected by MTA