Hi First time to the forum. I seem to be getting a lot of server disconnections from people attempting to send email. The senders get messages saying the connection to the server was rejected. It looks to be attempting to resend a couple times then times out.
Any Ideas
Gene
Server Disconnections
- nick.bolton
- The Big Cheese
Post
Re: Server Disconnections
Hi Gene
MWES is only for incoming email, but I'd say they need to turn on email authentication in their email clients to send email which I'm assuming is via port 25.
MWES is only for incoming email, but I'd say they need to turn on email authentication in their email clients to send email which I'm assuming is via port 25.
- gene_acres
- Travelling Tuatara
Post
Re: Server Disconnections
ok Sorry I do not think I posted this well. The problem is not the clients sending email. The problem is outside domains sending email to the clients gets refused by our mail server. But it is not all mail servers. In the past it was mail servers without reverse dns records. But this new one has a valid reverse dns record.
- nick.bolton
- The Big Cheese
Post
Re: Server Disconnections
What setup are you running MWES on? I know we have some issues like this with Exchange 2013 and so we haven't included it in our lists of MTA's yet.
- gene_acres
- Travelling Tuatara
Post
Re: Server Disconnections
I am running mail enable 6.85.
It is like Mail washer is getting taxed and dropping connections. Is it possible? Could it be a Mail Enable Issue. It seems to be random. But what I cannot figure out is why it would continnouly drop the same connection. If I look at my log file it looks as though the email is resent and dropped again maybe 3 total times. Then a message is returned to sender saying they cannot connect to this mail server. I disabled grey listing but I think I am now getting a lot more spam. The spam coming thru today was very high. The only difference is a disabled the grey listing this am.
It is like Mail washer is getting taxed and dropping connections. Is it possible? Could it be a Mail Enable Issue. It seems to be random. But what I cannot figure out is why it would continnouly drop the same connection. If I look at my log file it looks as though the email is resent and dropped again maybe 3 total times. Then a message is returned to sender saying they cannot connect to this mail server. I disabled grey listing but I think I am now getting a lot more spam. The spam coming thru today was very high. The only difference is a disabled the grey listing this am.
- nick.bolton
- The Big Cheese
Post
Re: Server Disconnections
Ok, what greylisting does is send back a 'Please try again' to the originating server, then when the server resends the email, it is let through. It's a way of only letting email through from legitimate senders. I'm wondering if the sending server is properly setup to handle retries? They should be as greylisting is a fairly common technique these days.
I'd also add in bl.score.senderscore.com as an IP RBL in Filters (Black)>>RBLs
If you go to Settings>>Action, and switch the logging to 'HIgh', then send us the logs the next time is happens to nick.bolton@firetrust.com
The logs are in c:\Program Files\MailWasher Enterprise Server\Logs
Nick
I'd also add in bl.score.senderscore.com as an IP RBL in Filters (Black)>>RBLs
If you go to Settings>>Action, and switch the logging to 'HIgh', then send us the logs the next time is happens to nick.bolton@firetrust.com
The logs are in c:\Program Files\MailWasher Enterprise Server\Logs
Nick
- gene_acres
- Travelling Tuatara
Post
Re: Server Disconnections
Will Do I added the email address to the white list for now. That usually takes care of it. I also saw in the Mailenable logs a dns 1460 error but it said mail was sent. I did a lookup of there domain and mail server and it all looked ok to me. Every time this happens I usually find they do not have a valid reverse dns entry or none.
- gene_acres
- Travelling Tuatara
Post
Re: Server Disconnections
OK it is happening today. There is no mail washer entry in the program files directory. The other thing I have noticed is when you do a telnet to the mail server you will get disconnected with in 15 seconds.
- nick.bolton
- The Big Cheese
Post
Re: Server Disconnections
MWES will drop the connection after 5s when you telnet to it because there's no point in keeping the connection open otherwise it takes up resources.
You can change this 5 seconds in the registry HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Firetrust Limited\mwes
client_read_timeout=5000
you can change this value to more seconds but you'll tie up more resources.
Restart MWES.
If you think MWES is getting taxed, it's more likely that it's the mail server not handling the incoming volume and so MWES throttles back the connection so the mail server doesn't get flooded. Is the server not particularly powerful?
It would be good to get the logs, they should be in the 'Logs' directory where you installed it.
c:\Program Files\MailWasher Enterprise Server\Logs
Not c:\Program Files (x86)\MailWasher Enterprise Server\Logs
You can change this 5 seconds in the registry HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Firetrust Limited\mwes
client_read_timeout=5000
you can change this value to more seconds but you'll tie up more resources.
Restart MWES.
If you think MWES is getting taxed, it's more likely that it's the mail server not handling the incoming volume and so MWES throttles back the connection so the mail server doesn't get flooded. Is the server not particularly powerful?
It would be good to get the logs, they should be in the 'Logs' directory where you installed it.
c:\Program Files\MailWasher Enterprise Server\Logs
Not c:\Program Files (x86)\MailWasher Enterprise Server\Logs
- gene_acres
- Travelling Tuatara
Post
Re: Server Disconnections
I sent the logs but they are 17meg they got bounced back to big. I cut them in two pieces same issue. What is your max in file size? Do you need the complete log? This server is fast. 4 cpu 8 gig ram. Windows 2008 standard. What about anti virus could it be slowing down mailwasher do I need to make an exception for mailwasher?
Thanks
Gene
Thanks
Gene
- nick.bolton
- The Big Cheese
Post
Re: Server Disconnections
Even zipped up, that's pretty big. Our max size seems to be now 10MB, which is odd as it used to be 20MB but I'll check it out. We only need the most recent days log where this problem happened. The AV could be a factor, but it would be premature to say until I see the logs.
- gene_acres
- Travelling Tuatara
Post
Re: Server Disconnections
Following is another example sorry for the delay Gene This is supposed to be about a 1 page pdf doc
2014-11-14 14:29:10 [3352] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /styles/styles.css HTTP/1.1
2014-11-14 14:29:10 [2720] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /styles/navigation.css HTTP/1.1
2014-11-14 14:29:10 [2720] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/containerBottom.gif HTTP/1.1
2014-11-14 14:29:10 [2720] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/subNavArrow.gif HTTP/1.1
2014-11-14 14:29:10 [3352] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/subNav.gif HTTP/1.1
2014-11-14 14:29:10 [4028] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/mainNav.gif HTTP/1.1
2014-11-14 14:29:10 [3848] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/mainNavArrow.gif HTTP/1.1
2014-11-14 14:29:12 [3352] Debug: WebChannel::ObjectThreadMethod -TCPSocketTimeoutException - TCPSocket::SelectReadWrite - timed out (2000) while reading from the socket on (127.0.0.1)() failed with code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2014-11-14 14:29:12 [2720] Debug: WebChannel::ObjectThreadMethod -TCPSocketTimeoutException - TCPSocket::SelectReadWrite - timed out (2000) while reading from the socket on (127.0.0.1)() failed with code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2014-11-14 14:29:12 [3848] Debug: WebChannel::ObjectThreadMethod -TCPSocketTimeoutException - TCPSocket::SelectReadWrite - timed out (2000) while reading from the socket on (127.0.0.1)() failed with code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2014-11-14 14:29:12 [4028] Debug: WebChannel::ObjectThreadMethod -TCPSocketTimeoutException - TCPSocket::SelectReadWrite - timed out (2000) while reading from the socket on (127.0.0.1)() failed with code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2014-11-14 14:29:17 [2172] Debug: SMTPChannel::Create - new 1
2014-11-14 14:29:10 [3352] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /styles/styles.css HTTP/1.1
2014-11-14 14:29:10 [2720] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /styles/navigation.css HTTP/1.1
2014-11-14 14:29:10 [2720] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/containerBottom.gif HTTP/1.1
2014-11-14 14:29:10 [2720] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/subNavArrow.gif HTTP/1.1
2014-11-14 14:29:10 [3352] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/subNav.gif HTTP/1.1
2014-11-14 14:29:10 [4028] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/mainNav.gif HTTP/1.1
2014-11-14 14:29:10 [3848] Debug: WebRequest::WebRequest - start request(127.0.0.1) - GET /images/mainNavArrow.gif HTTP/1.1
2014-11-14 14:29:12 [3352] Debug: WebChannel::ObjectThreadMethod -TCPSocketTimeoutException - TCPSocket::SelectReadWrite - timed out (2000) while reading from the socket on (127.0.0.1)() failed with code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2014-11-14 14:29:12 [2720] Debug: WebChannel::ObjectThreadMethod -TCPSocketTimeoutException - TCPSocket::SelectReadWrite - timed out (2000) while reading from the socket on (127.0.0.1)() failed with code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2014-11-14 14:29:12 [3848] Debug: WebChannel::ObjectThreadMethod -TCPSocketTimeoutException - TCPSocket::SelectReadWrite - timed out (2000) while reading from the socket on (127.0.0.1)() failed with code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2014-11-14 14:29:12 [4028] Debug: WebChannel::ObjectThreadMethod -TCPSocketTimeoutException - TCPSocket::SelectReadWrite - timed out (2000) while reading from the socket on (127.0.0.1)() failed with code 10060: A connection attempt failed because the connected party did not properly respond after a period of time, or established connection failed because connected host has failed to respond.
2014-11-14 14:29:17 [2172] Debug: SMTPChannel::Create - new 1
- nick.bolton
- The Big Cheese
Post
Re: Server Disconnections
Sorry about this, it was over the weekend then I forgot to chase this up. I never did get the full logs from you, are you able to try and re-send them?
- nick.bolton
- The Big Cheese
Post
Re: Server Disconnections
If you're still having issues sending large email, can you please send it to me at nickbolton@fastmail.fm (edit we've increased it to 20mb for nick.bolton@firetrust.com)
Thanks
Thanks