This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Why do some emails get logged in mail manager and some don't?

Hi,

We have a UTM320 v9 and our own mail server.

When users call and tell me they think an email to them got stuck in quarantine or bounced back, my first step is to check the SMTP Log in the Mail Manager to see if it even made it here.  But I sometimes find emails in the SMTP Log under Logging & Reporting->View Log Files->SMTP Proxy that do not appear at all in the mail manager.

Why would this be?  Why would there even be a log in the mail manager if it doesn't log everything?

Thanks,

Jeff



This thread was automatically locked due to age.
Parents
  • I haven't heard of this before. Can you paste the lines from the SMTP log that represent an email that was not in Mail Manager?
    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Finally found another example (this one actually came to me). It seems to think it's a problem on the sender's end, but temporarily adding there sender to a whitelist let's the email in.

    2016:01:25-10:11:23 kingarch exim-in[10293]: 2016-01-25 10:11:23 [67.231.148.255] F=<noreply.myaccountviewonline@lpl.com> R=<jcooper@kingarch.com> Verifying recipient address with callout
    2016:01:25-10:11:24 kingarch exim-in[10293]: 2016-01-25 10:11:24 1aNinb-0002g1-2X ctasd reports 'Unknown' RefID:str=0001.0A020206.56A63B1C.00BE:SCGSTAT1808257,ss=1,re=-4.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=1024
    2016:01:25-10:11:24 kingarch exim-in[10293]: 2016-01-25 10:11:24 1aNinb-0002g1-2X Greylisting: Greylisted 67.231.148.255
    2016:01:25-10:11:24 kingarch exim-in[10293]: [1\33] 2016-01-25 10:11:24 1aNinb-0002g1-2X H=mx0a-0017a501.pphosted.com [67.231.148.255]:1567 F=<noreply.myaccountviewonline@lpl.com> temporarily rejected after DATA: Temporary local problem, please try again!

    I'm happy to send you more of the log, but I'd rather not post it all in a forum. Can I somehow send you the log snippet directly?

    Thanks,

    Jeff
Reply
  • Finally found another example (this one actually came to me). It seems to think it's a problem on the sender's end, but temporarily adding there sender to a whitelist let's the email in.

    2016:01:25-10:11:23 kingarch exim-in[10293]: 2016-01-25 10:11:23 [67.231.148.255] F=<noreply.myaccountviewonline@lpl.com> R=<jcooper@kingarch.com> Verifying recipient address with callout
    2016:01:25-10:11:24 kingarch exim-in[10293]: 2016-01-25 10:11:24 1aNinb-0002g1-2X ctasd reports 'Unknown' RefID:str=0001.0A020206.56A63B1C.00BE:SCGSTAT1808257,ss=1,re=-4.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=1024
    2016:01:25-10:11:24 kingarch exim-in[10293]: 2016-01-25 10:11:24 1aNinb-0002g1-2X Greylisting: Greylisted 67.231.148.255
    2016:01:25-10:11:24 kingarch exim-in[10293]: [1\33] 2016-01-25 10:11:24 1aNinb-0002g1-2X H=mx0a-0017a501.pphosted.com [67.231.148.255]:1567 F=<noreply.myaccountviewonline@lpl.com> temporarily rejected after DATA: Temporary local problem, please try again!

    I'm happy to send you more of the log, but I'd rather not post it all in a forum. Can I somehow send you the log snippet directly?

    Thanks,

    Jeff
Children
No Data