'Abort Message' Status in SMG ver 9.5.1

[Migration User]

Hi there,

i am ecounter an issue as 'Abort Message' Status in SMG ver 9.5.1. Few workarround and found this article http://www.symantec.com/business/support/index?page=content&id=TECH85536&locale=en_US that almost related to.

 

situation

1. there only ONE domain that effected when they sent mail with attachment ( without attachment mail delivered as usual) . others are ok. really need to solve this issue and hopefully someone can help through.

 

Thanks

Denny Arf

[Migration User]

addtional info that i already increase the time out to 5minutes but still doesnt solve the issue.

 

thanks

[SSE-JDavis]

The issue is most likely on their end and there is not a whole lot you can do. Do you have a firewall doing any filtering on port 25? If so, you'll want to turn that off.

[Migration User]

thanks tse-jdavis,

its become headache how to point the root cause. yes we are having firewall filtering on our smtp. that particular domain are not having any issue sending out email + attachments to others mail server except us.

do you have any idea? our company policy that all the smtp content need to be filter. so that i cant off the firewall filtering.

[Migration User]

I encountered smaller to this issue when “Bounce Attacks validation” is enabled . , after I disable it aborted message disappeared.

Currently I’m using version 9.5.1 I will enable it again and see if I get the message again or not.

[Migration User]

khalid a

thanks for your info. looking forward ur news soon.

[SSE-JDavis]

Denny,

 

You already have us filtering mail, why do you need to the firewall to be filtering port 25 traffic as well?

You should at least considering turning it off as a test, if you get different results then you can work with the people who support the firewall product in analyzing the logs to determine why there is an issue. Often times firewalls will mask or block certain commands that will cause the sending SMTP server to fail and give up sending the message.

[Migration User]

hi tse-jdavis,

thanks for your reply. i did off the filtering and bypass the firewall filtering for the particular domain name. for now the testing still show the fail result whereby all emails currently are tried atleast 5 time bfore the abort message disappear.

the sender are hcl-axon.com and now its a bit weird where the smtp resolve are not the same with the succesfull email that we received. i can see from the mail header that none of below smtp sent us the mail.

 

Non-authoritative answer:

hcl-axon.com    MX preference = 20, mail exchanger = smtp.axonglobal.com

hcl-axon.com    MX preference = 50, mail exchanger = my.smtp.axonglobal.com

hcl-axon.com    MX preference = 50, mail exchanger = us.smtp.axonglobal.com

hcl-axon.com    MX preference = 10, mail exchanger = gws01.hcl.in

hcl-axon.com    MX preference = 10, mail exchanger = gws02.hcl.in

hcl-axon.com    MX preference = 10, mail exchanger = gws03.hcl.in

hcl-axon.com    MX preference = 10, mail exchanger = gws04.hcl.in

 

smtp.axonglobal.com     internet address = 195.153.131.9

my.smtp.axonglobal.com  internet address = 211.24.239.58

us.smtp.axonglobal.com  internet address = 209.67.184.200

gws01.hcl.in    internet address = 203.105.185.19

gws02.hcl.in    internet address = 203.105.185.20

gws03.hcl.in    internet address = 203.105.186.19

gws04.hcl.in    internet address = 203.105.186.20

 

need help.

 

successfull email header show that received from another smtp even with the same domain name.

 

Received: from eng.hcltech.com (eng.hcltech.com [192.8.65.10])

[Migration User]

I have a strange problem with inbound mail.
I can see a lot of messages insight of Message Audit Logs with "Abort message".
All messages came from different senders via different SMTP servers, to different recipients.
But when I use the Ironport product, these problem did not appear.
I have used the SMG that the version is 9.5.1-6.

If the problem is network or firewall, I wonder why the Ironport product do not have any problem.
What is the difference between the Ironport and SMG?

[Subhani]

Hi Kim , You should be checking how you have configured the SMTP Protocol.Once you log in to Symantec Messaging Gateway ,go to Protocols ,SMTP ,Settings and note every thing .Another Part where you can see is under Host Configuration | SMTP | SMTP Advanced .

Once you note down the values from SMG ,Than see how these things are configured in Ironport .

It could be that you have some default checks and low timeout value which is causing this .