MessageLabs blocking email

[AE Admin]

We cannot email vendors and customers using message labs.  Our domain is adveng.com  One vendor is ra.rockwell.com.  

Generating server: Artemis.adveng.com
Receiving server: cluster6a.us.messagelabs.com (52.206.215.254)

[e-mail]
Remote Server at cluster6a.us.messagelabs.com (52.206.215.254) returned '400 4.4.7 Message delayed'
1/7/2019 10:39:15 PM - Remote Server at cluster6a.us.messagelabs.com (52.206.215.254) returned '451 4.4.0 Primary target IP address responded with: "421 4.4.1 Connection timed out." Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts. The last endpoint attempted was 52.206.215.254:25'

 

We are not on spam lists.

 

Thank you for your help on this matter.

[ℬrίαη]

If you haven't done so already submit a sample of an email that's blocked to:

[e-mail] 

Links for reference:

https://www.symantec.com/docs/TECH82881

https://www.symantec.com/docs/TECH250089

https://www.symantec.com/docs/TECH240145

This is the first place to start until someone from Symantec can review this thread and remediate.
 

[AE Admin]

Sent one this morning.  Thank you.

[Henderson]

Hi, 

 

We are also facing the same issue. Our mail server IP is 103.51.163.230. The error message is "Remote Server at cluster9a.us.messagelabs.com (52.73.243.182) returned '400 4.4.7 Message delayed'

Please help to unblock as we have a few customers using messagelabs and we cannot send to all of them.

I had just send an email regarding this to [e-mail]. Hope we get the reply the soonest.

[HTSE ITsupport]

OP,

 

If you were to enable logging on your send connector in Exchange and view the logs, is there anything about SSL Certificate, or invaled message/token?

 

We receive the exact same error message later in the Logs right after the STARTTLS command where we exchange certificates in the logs

 

We also have issues sending to the ra.rockwell.com domain.

 

For now we setup a free SocketLabs account and are sending to that smarthost for the domains that are using Symantec

[mginz]

We are having the same issues.  Users sending to multiple recipients all going through MessageLabs and all being delayed with response:

   421 4.4.1 Connection timed out.

 

Please advise.  We are not blacklisted on any services.  Also tried sending request to [e-mail] but that was rejected saying user doesn't exist.

[Sym_Ian_T]

Can you please let me know what IP you are connecting from so that I can check to ensure that it is not being throttled?

Regards

Ian

[Brian Hershey]

We're having this same issue.

My sending host is: remote.airbearings.com (96.88.26.65)

mail domain is: airbearings.com

Sending to corning.com and ajg.com. (MessageLabs clients)

Remote Server at cluster4a.us.messagelabs.com (50.19.165.100) returned '441 4.4.1 Error encountered while communicating with primary target IP address: "421 4.4.2 Connection dropped due to ConnectionReset." Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts.

If I create a DNS zone for corning.com and ajg.com, I can force the MX records to resolve without the "a" (cluster4.us.messagelabs.com), and get email delivered to corning.com or ajg.com. 

When I let the DNS queries resolve naturally, the messages eventually timeout, and an NDR is issued to the sending user.

Please check my IP for throttling/blocking, and assist if you can. 

Thanks!

Brian

 

[Migration User]

Hi Brain,

 

I have checked your IP address; however, no configuration that may cause slow connection to our towers was found. Could you kindly check if there is any hop causing the connection timeout by running tcptraceroute on port 25 to our MX record?

 

Jun

[HTSE ITsupport]

As Asked here is the TraceTCP on port 25.

 

The last two domains we cannot send email to without using smart host. (Rb.com, ra.rockwell.com)

[Migration User]

Hello,

 

If you can send mails using smart host, Symantec infrastrcuture is not blocking connection from the IP address. Please provide the output from tcptraceroute on port 25 to see which hop is causing the issue.

 

Jun

[Collaboration Team]

Hi All,

 

We are facing hige delay in incoming mails from different domains and as per MXTOOLBOX header analyzer, the delay is happening From messaglabs.

 

Please find below header info.

 

Hop	Delay	From	By	With	Time (UTC)	Blacklist
1	*	CTCSEXCH80A.yamani.com.cn	CTCSEXCH81A.yamani.com.cn	mapi	7/3/2019 7:45:18 AM
2	*	CTCSEXCH81A.yamani.com.cn 10.200.98.81	mail26a.yamani-united.com	ESMTP	[]
3	1 minutes	152-101-174-26.static.hk.net 152.101.174.26	server-16.tower-342.messagelabs.com	ECDHE-RSA-AES256-GCM-SHA384 encrypted SMTP	7/3/2019 7:46:37 AM
4	0 seconds	network			7/3/2019 7:46:37 AM
5	18 seconds	using 67.219.250.194	server-3.bemta.az-b.us-west-2.aws.symcld.net	cipher DHE-RSA-AES256-GCM-SHA384 (256 bits)) by server-3.bemta.az-b.us-west-2.aws.symcld.net	7/3/2019 7:46:55 AM
6	3 hour	mail1.bemta24.messagelabs.com 67.219.250.215	Symantec	cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by (Symantec Mail Security)SMTP	7/3/2019 11:08:24 AM

[Migration User]

Hello,

 

The mail header indicates that the mail was queued in the delivery tower for 3 hours. It could be any 400 error. I would be able to check the cause if you can provide me more details to locate the log. (e.g. domain, MX record)

 

Jun