This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Email Error

Good Day!

We're not able to send and receive an email. While checking the logs, we found the following error

/

2021:02:11-07:28:00 lbpsc-utm exim-out[15590]: 2021-02-11 07:28:00 Start queue run: pid=15590

2021:02:11-07:28:00 lbpsc-utm exim-out[15592]: 2021-02-11 07:28:00 1l9Fk2-0004ah-G0 == **@**.**.** R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host

2021:02:11-07:28:00 lbpsc-utm exim-out[15594]: 2021-02-11 07:28:00 1l9GzI-0005n9-BD == **@**.**.** R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2021:02:11-07:28:00 lbpsc-utm exim-out[15596]: 2021-02-11 07:28:00 1l9Fmc-0004ru-Dn == **@**.**.** R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
2021:02:11-07:28:00 lbpsc-utm exim-out[15598]: 2021-02-11 07:28:00 1l9LH6-0003s5-4U == **@**.**.** R=dnslookup T=remote_smtp defer (-53): retry time not reached for any host
/
It is on live log. I think it is still trying to authenticate to something
/
Or maybe our IP Address is blocked
/
Any solutions?
/
Also where can I find these logs on ssh?
/
SOPHOS SG239 | UTM9
Regards,


This thread was automatically locked due to age.
  • Just an update. I've tried to delete my email account, still my email showing up on the logs just like the one above. 

    Thanks

  • Hi and welcome to the UTM Community!

    Those log lines represent four different emails that it's not yet time to retry delivery.  Pick one, find the last time Exim tried to deliver it and show us the relevant log lines.

    The SMTP logs can be seen in 'Logging & Reporting >> View Log Files'.  At the command line, today's log is /var/log/smtp.log and the earlier logs for February are gzipped in /var/log/smtp/2021/02.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi, Thank you! Here's the latest log and there's bunch of it like this

    Is there any way to delete those emails that are trying to resend? 

    2021:02:15-07:10:00 lbpsc-utm exim-out[28229]: 2021-02-15 07:10:00 Start queue run: pid=28229
    2021:02:15-07:10:00 lbpsc-utm exim-out[28229]: 2021-02-15 07:10:00 End queue run: pid=28229
    2021:02:15-07:11:00 lbpsc-utm exim-out[28805]: 2021-02-15 07:11:00 Start queue run: pid=28805
    2021:02:15-07:11:00 lbpsc-utm exim-out[28805]: 2021-02-15 07:11:00 End queue run: pid=28805
    2021:02:15-07:12:00 lbpsc-utm exim-out[29015]: 2021-02-15 07:12:00 Start queue run: pid=29015
    2021:02:15-07:12:00 lbpsc-utm exim-out[29015]: 2021-02-15 07:12:00 End queue run: pid=29015
    2021:02:15-07:13:00 lbpsc-utm exim-out[29280]: 2021-02-15 07:13:00 Start queue run: pid=29280
    2021:02:15-07:13:00 lbpsc-utm exim-out[29280]: 2021-02-15 07:13:00 End queue run: pid=29280
    2021:02:15-07:14:00 lbpsc-utm exim-out[29428]: 2021-02-15 07:14:00 Start queue run: pid=29428
    2021:02:15-07:14:00 lbpsc-utm exim-out[29428]: 2021-02-15 07:14:00 End queue run: pid=29428
    2021:02:15-07:15:00 lbpsc-utm exim-out[29518]: 2021-02-15 07:15:00 Start queue run: pid=29518
    2021:02:15-07:15:00 lbpsc-utm exim-out[29518]: 2021-02-15 07:15:00 End queue run: pid=29518
    2021:02:15-07:16:00 lbpsc-utm exim-out[29906]: 2021-02-15 07:16:00 Start queue run: pid=29906
    2021:02:15-07:16:00 lbpsc-utm exim-out[29906]: 2021-02-15 07:16:00 End queue run: pid=29906
    2021:02:15-07:17:00 lbpsc-utm exim-out[30175]: 2021-02-15 07:17:00 Start queue run: pid=30175
    2021:02:15-07:17:00 lbpsc-utm exim-out[30175]: 2021-02-15 07:17:00 End queue run: pid=30175
    2021:02:15-07:18:00 lbpsc-utm exim-out[30429]: 2021-02-15 07:18:00 Start queue run: pid=30429
    2021:02:15-07:18:00 lbpsc-utm exim-out[30429]: 2021-02-15 07:18:00 End queue run: pid=30429
    2021:02:15-07:19:00 lbpsc-utm exim-out[30814]: 2021-02-15 07:19:00 Start queue run: pid=30814
    2021:02:15-07:19:00 lbpsc-utm exim-out[30814]: 2021-02-15 07:19:00 End queue run: pid=30814

  • In 'Logging & Reporting >> View Log Files', on the 'Today's Log Files' tab, [view] the SMTP Proxy log.  Search for 1l9LH6-0003s5-4U or another email ID with this problem if 1l9LH6-0003s5-4U has been deleted by Exim.  We need to see the log lines related to an email with this delivery problem - in other words, what happens when delivery is retried?

    Cheers - Bob 

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Hi, 

    Upon checking, we haven't found any logs with that specific ID. 

    Here is the updated logs

    2021:02:16-00:00:02 lbpsc-utm smtpd[2917]: Reset password: Connecting to Confd was successful.
    2021:02:16-00:00:02 lbpsc-utm smtpd[2917]: Reset password: Confd returned the expected expiry period: 30 day(s).
    2021:02:16-00:00:02 lbpsc-utm smtpd[2918]: Expired letters: Removing letters from SPX Portal that are older than 30 days...
    2021:02:16-00:00:02 lbpsc-utm smtpd[2918]: Expired letters: There was an error while removing expired letters: 
    2021:02:16-00:00:03 lbpsc-utm smtpd[2917]: Reset password: Expired passwords successfully deleted.

    May I ask what does that mean?

    Also, our problem is that our mail server blocked our IP address, we cannot send and receive while connected to our network. Based on our provider, they said that there's a multiple authentication attempt on our side thats why our IP is blocked. We are trying to look for the email account whose trying to authenticate multiple times.

    Im hoping I can find help here pls.


    Thank you!
  • That has to do with standard SMTP maintenance and SPX encryption passwords - nothing to do with this issue.  Someone knowledgeable needs to login to WebAdmin on your system.  Sophos support is in Manila, so you should get a case open with them.

    Cheers - Bob

     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA