Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » SMTP 599 error
  •  
azaghlool

Messages: 13
Karma: 0
Send a private message to this user
Hello,

We are having a problem where e-mail from a domain sent to our domain is being bounced back to the original sender. The bounce back appears as below:

Final-Recipient: rfc822;user<_a.t_>domain.com
Action: failed
Status: 2.1.5
Diagnostic-Code: smtp;599 2.1.5 Recipient <user<_a.t_>domain.com> ok

It looks as if everything is okay but it's failing for some reason. I'm not too sure what the 599 code means. As far as I can see, this problem is happening between us and one particular domain. To make the problem even more annoying, it happens intermittently. We are using Kerio Mailserver 6.5.2 and the sender is using MS Exchange.

Any help on resolving this matter would be greatly appreciated.

Thanks,
~Adam
  •  
talkinggoat

Messages: 49
Karma: 0
Send a private message to this user
I don't think 599 is supposed to exist. The numbers are only supposed to go up to 55x.

The first number 5 being

Mail server has encountered a fatal error. Your request can't be processed.

It may be some specific kerio thing. rfc822 is the standard for ARPA Internet Text Messages. rfc821 is for smtp. That's strange.
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
I'm sure this is not Kerio specific thing. KMS does not use this code at all. Check your antivirus/firewall or any other SMTP gateway.
  •  
azaghlool

Messages: 13
Karma: 0
Send a private message to this user
Hello,

All our antivirus/firewall/smtp configs are fine. Like I mentioned above, it happens intermittently and with only one domain. I had someone at Experts-Exchange tell me that this is related to the latest patches on Kerio Mailserver...

I dug a bit deeper and turned on "SMTP Server" messages in debug and this is what I got from a test failed message:

[19/Aug/2008 14:33:27][2436] {smtps} Command RSET
[19/Aug/2008 14:33:27][2436] {smtps} Command MAIL FROM:<sender<_a.t_>sendingdomain.com> SIZE=16786 ENVID=ADR33000000143172
[19/Aug/2008 14:33:27][2436] {smtps} Sent reply to MAIL: 250 2.1.0 Sender <sender<_a.t_>sendingdomain.com> ok
[19/Aug/2008 14:33:27][2436] {smtps} Command RCPT TO:<recipient<_a.t_>ourdomain.com> NOTIFY=FAILURE ORCPT=rfc822;recipient<_a.t_>ourdomain.com
[19/Aug/2008 14:33:27][2436] {smtps} Sent reply to RCPT: 250 2.1.5 Recipient <recipient<_a.t_>ourdomain.com> ok (alias)
[19/Aug/2008 14:33:28][2436] {smtps} Command DATA
[19/Aug/2008 14:33:28][2436] {smtps} Command DATA failed: Connection closed by remote host mail.sendingdomain.com prematurely.
[19/Aug/2008 14:33:28][2436] {smtps} SMTP server session end
  •  
talkinggoat

Messages: 49
Karma: 0
Send a private message to this user
Can you ask the other party to look at their logs?
  •  
azaghlool

Messages: 13
Karma: 0
Send a private message to this user
Unfortunately no, I can not get the logs from the other party. All I can gather is that they are using MS Exchange 5.5 at the present moment and are planning to upgrade to MS Exchange 2003 in the near future.

~Adam
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
Well, the only option then is to install Wireshark and configure it to capture SMTP (port 25) traffic from that Exchange server to find out what data the server sends and what's wrong in the SMTP stream.
The error code is not generated by KMS. All I can say from the log is that the sending server (Exchange) has terminated the connection before the data submission end (CRLF.CRLF sequence).
  •  
roly

Messages: 47
Karma: -3
Send a private message to this user
hi all
last year we had the same error on kms 6.3.x on a w2k. w're asking kerio and the forum... nore of them had an answer.
we changed the firewall (sonicwall) and testet all dns (also reverse!)...
well, then it runed.
hope this helps.

bye from ch Razz
  •  
drvwst

Messages: 4
Karma: 0
Send a private message to this user
Hello, Sir

I have the same problem, same 10060 error from only one domain, do u have resolve this problem? can you share for us?

Thanks.
  •  
freakinvibe

Messages: 1528
Karma: 60
Send a private message to this user
Quote:

[19/Aug/2008 14:33:27][2436] {smtps} Sent reply to RCPT: 250 2.1.5 Recipient <recipient<_a.t_>ourdomain.com> ok (alias)
[19/Aug/2008 14:33:28][2436] {smtps} Command DATA
[19/Aug/2008 14:33:28][2436] {smtps} Command DATA failed: Connection closed by remote host mail.sendingdomain.com prematurely.


I have checked through the mailserver.exe source with a hex editor and I can see all the error codes with explaining text, but there is no 599, so I don't think Kerio is actually giving back that error code.

What happens is that when the sending server starts to send the mail body, it gets somehow interrupted. It then takes the last status message it got from KMS (Recipient ok), because it thinks that must be the error. That explains the wrong error message. KMS doesn't give back any error code, so Exchange 5.5 probably just takes 599 as a default if it gets back a blank error code.

Interruption of mail flow can be caused by Anti-virus programs. Can you disable those on the server and your firewalls and test again?

Dexion AG - The Blackberry Specialists in Switzerland
https://dexionag.ch
  •  
Pavel Dobry (Kerio)

Messages: 5245
Karma: 251
Send a private message to this user
drvwst wrote on Wed, 25 February 2009 10:40

Hello, Sir

I have the same problem, same 10060 error from only one domain, do u have resolve this problem? can you share for us?

Thanks.


Enable SMTP Server debugging in KMS. Download and install Wireshark and get network dump of SMTP communication from that server (port 25).
Is the remote server running Exchange 5.5?
  •  
azaghlool

Messages: 13
Karma: 0
Send a private message to this user
Hello all,

To give an update on the issue...I have yet to setup Wireshark to do any troubleshooting (haven't had the time to spend on it).

However, the sending domain is in the middle of migrating his users from Exchange 5.5 to Exchange 2003 at the moment and we're noticing the problem is happening less and less.

It seems to be happening only between Kerio and Exchange 5.5.

  •  
TorW

Messages: 769
Karma: 9
Send a private message to this user
I don't know whether this is relevant or not, but I ran a mailserver behind a Cisco PIX. A short list of domains had similar problems with sending us anything. The logs told the same story as you: mail traffic stopped at various points in the SMTP conversation.

After I turned off "Inspect ESMTP" in the firewall, the problem went away.

[Updated on: Wed, 25 February 2009 17:08]

  •  
drvwst

Messages: 4
Karma: 0
Send a private message to this user
Thanks you all,

To find out what is the bottleneck, I installed only the Kerio server without any firewall/antivirus, but the problem is still there.

I will ask whether their server is exchange 5.5.

btw, yesterday I changed a new route of Cisco, and tested, seems OK, but need time to run, because 10060 error happens intermittently, I will update.
drvwst

Messages: 4
Karma: 0
Send a private message to this user
The problem is still there, Maybe I should give up for a while.
Previous Topic: Licence limitations: "number of users"
Next Topic: Spam - marked as read?
Goto Forum:
  


Disclaimer:
Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Thu Sep 21 12:36:55 CEST 2017

Total time taken to generate the page: 0.00555 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.