Messaging Gateway

 View Only
  • 1.  Blank Message ID

    Posted Apr 28, 2010 03:15 PM
     We are running Symantec Mail Security for SMTP version 5.0.1 (Patch 87 and 89). We have a few sites that are valid and valid users that are trying to send my company email. And this is only happening on these sites. I track the message and it looks like this:

    ID: d603dc06-a267ebb000001df9-5a-4bd885c2db55
      Message-ID:  
      Accepted From: 131.55.121.2
      Scanners: Site 1
      Time accepted: Wednesday, Apr 28, 2010 03:00:18 PM EDT
      Direction:  
      Sender: *********@tyndall.af.mil
      Original recipients: ******@*****
      Original Subject:  
    Recipient Data 
      Intended recipient: ******@*****
       
      Verdict:
    Disposition Filter Policy Group Policy
    None    
       
      Actions taken:  
       
      Delivery:
    Delivered To Delivery Time
    None    
       
      Viruses: None
      Attachments: None
       
      Other recipients: None

    There is never an action taken the message appears to be droped at the server. I've checked the message queues and the logs and found no errors.  I have no idea why this is happening. Thank you for all your help

    Mart


  • 2.  RE: Blank Message ID

    Posted Apr 28, 2010 04:08 PM

    Mart,

         The easiest way to figure out what is going on is get a packet capture on the SMTP 5 server.  If you can reliably reproduce the error I would do as follows.

    1.  prepare an email to reproduce with
    2.  Start the capture
    3.  send the email
    4.  Wait a minute
    5.  stop the capture

    You should be able to search by ip or even by sender/recipient informaiton in order to find the email and determine what is going on.  You can also set the MTA and Filter Engine logs to debug during the test for maximum coverage.


  • 3.  RE: Blank Message ID

    Posted Apr 29, 2010 01:41 PM
    This is the error that I found:

    filter-hub: [Brightmail] (ERROR:7673.2787896240): [57001] Gatekeeper module: Test message: Failed to detect Verity format.

    Now that I have the error, not sure how to fix it. Again thanks for all your help.

    Mart