Hi,

i´ve got a problem with one special host: mail.grafschaft.de

This host is connected via an SHDSL-Modem (Bridge) to our network.

it is unable to get mail from them, if there is an attachment, or the
mail is bigger than a few kb, i get a "timeout after DATA" error.

The sender is using an Exchange 2003 Server, but with an Borderware
MXtreme Mailfirewall (as smarthost).

I already changed the MTU of my server (ratsmail.nordhorn.de) as
mentioned in a few posts a bit lower (1448)

on all routers and our firewall (on our site) (SuSE Linux based) if
applied "disable ip path mtu discovery

# echo 1 >/proc/sys/net/ipv4/ip_no_pmtu_disc

a few days ago there were no problems getting mails from
mail.grafschaft.de. i don´t know what to do....

i already added:
smtp_data_done_timeout = 1000s
lmtp_data_done_timeout = 1000s

could someone me with that problem?

some snippets of tcpdump:
tcpdump: verbose output suppressed, use -v or -vv for full protocol
decode
listening on eth0, link-type EN10MB (Ethernet), capture size 96 bytes
11:41:20.842811 IP 80.228.123.232.25 > 80.228.123.66.4706: F
1380979157:1380979157(0) ack 4223831400 win 4188 <nop,nop,timestamp
38583152 442528>
11:41:20.881384 IP 80.228.123.66.4898 > 80.228.123.232.25: S
445132058:445132058(0) win 57344 <mss 1460,nop,wscale
0,nop,nop,timestamp 470184 0,nop,nop,ccnew 206>
11:41:20.881423 IP 80.228.123.232.25 > 80.228.123.66.4898: R 0:0(0) ack
445132059 win 0
11:41:21.046742 IP 80.228.123.232.25 > 80.228.123.66.4706: F 0:0(0) ack
1 win 4188 <nop,nop,timestamp 38583203 442528>
11:41:21.454751 IP 80.228.123.232.25 > 80.228.123.66.4706: F 0:0(0) ack
1 win 4188 <nop,nop,timestamp 38583305 442528>
11:41:22.270776 IP 80.228.123.232.25 > 80.228.123.66.4706: F 0:0(0) ack
1 win 4188 <nop,nop,timestamp 38583509 442528>
11:41:23.902859 IP 80.228.123.232.25 > 80.228.123.66.4706: F 0:0(0) ack
1 win 4188 <nop,nop,timestamp 38583917 442528>
11:41:23.905702 IP 80.228.123.66.4706 > 80.228.123.232.25: . ack 1 win
58632 <nop,nop,timestamp 470487 38583917>
11:42:04.576126 IP 80.228.123.66.4706 > 80.228.123.232.25: .
1:1397(1396) ack 1 win 58632 <nop,nop,timestamp 474553 38583917>
11:42:04.576149 IP 80.228.123.232.25 > 80.228.123.66.4706: R
1380979158:1380979158(0) win 0
12:05:11.242433 IP 80.228.123.66.2260 > 80.228.123.232.25: S
3015611818:3015611818(0) win 57344 <mss 1460,nop,wscale
0,nop,nop,timestamp 613203 0,nop,nop,ccnew 276>
12:05:11.242484 IP 80.228.123.232.25 > 80.228.123.66.2260: S
3308023579:3308023579(0) ack 3015611819 win 5584 <mss
1408,nop,nop,timestamp 38940730 613203,nop,wscale 2>
12:05:11.245931 IP 80.228.123.66.2260 > 80.228.123.232.25: . ack 1 win
58632 <nop,nop,timestamp 613204 38940730>
12:05:11.255780 IP 80.228.123.232.25 > 80.228.123.66.2260: P 1:41(40)
ack 1 win 1396 <nop,nop,timestamp 38940733 613204>
12:05:11.258924 IP 80.228.123.66.2260 > 80.228.123.232.25: . ack 41 win
58592 <nop,nop,timestamp 613205 38940733>
12:05:11.271916 IP 80.228.123.66.2260 > 80.228.123.232.25: P 1:26(25)
ack 41 win 58632 <nop,nop,timestamp 613206 38940733>
12:05:11.271937 IP 80.228.123.232.25 > 80.228.123.66.2260: . ack 26 win
1396 <nop,nop,timestamp 38940737 613206>
12:05:11.272100 IP 80.228.123.232.25 > 80.228.123.66.2260: P
41:180(139) ack 26 win 1396 <nop,nop,timestamp 38940737 613206>
12:05:11.275914 IP 80.228.123.66.2260 > 80.228.123.232.25: . ack 180
win 58493 <nop,nop,timestamp 613207 38940737>
12:05:11.285909 IP 80.228.123.66.2260 > 80.228.123.232.25: P 26:122(96)
ack 180 win 58632 <nop,nop,timestamp 613208 38940737>
12:05:11.294952 IP 80.228.123.232.25 > 80.228.123.66.2260: P
180:233(53) ack 122 win 1396 <nop,nop,timestamp 38940743 613208>
12:05:11.299401 IP 80.228.123.66.2260 > 80.228.123.232.25: . ack 233
win 58579 <nop,nop,timestamp 613209 38940743>
12:05:11.307396 IP 80.228.123.66.2260 > 80.228.123.232.25: .
122:1518(1396) ack 233 win 58632 <nop,nop,timestamp 613209 38940743>
12:05:11.307432 IP 80.228.123.232.25 > 80.228.123.66.2260: . ack 1518
win 2094 <nop,nop,timestamp 38940746 613209>
12:05:11.312393 IP 80.228.123.66.2260 > 80.228.123.232.25: .
1518:2914(1396) ack 233 win 58632 <nop,nop,timestamp 613209 38940743>
12:05:11.316891 IP 80.228.123.66.2260 > 80.228.123.232.25: P
2914:4218(1304) ack 233 win 58632 <nop,nop,timestamp 613209 38940743>
12:05:11.316906 IP 80.228.123.232.25 > 80.228.123.66.2260: . ack 4218
win 3490 <nop,nop,timestamp 38940748 613209>
12:05:11.321891 IP 80.228.123.66.2260 > 80.228.123.232.25: .
4218:5614(1396) ack 233 win 58632 <nop,nop,timestamp 613210 38940746>
12:05:11.327385 IP 80.228.123.66.2260 > 80.228.123.232.25: .
5614:7010(1396) ack 233 win 58632 <nop,nop,timestamp 613210 38940746>
12:05:11.327401 IP 80.228.123.232.25 > 80.228.123.66.2260: . ack 7010
win 4886 <nop,nop,timestamp 38940751 613210>
12:05:11.424332 IP 80.228.123.66.2029 > 80.228.123.232.25: S
579454458:579454458(0) win 57344 <mss 1460,nop,wscale
0,nop,nop,timestamp 613221 0,nop,nop,ccnew 278>
12:05:11.424363 IP 80.228.123.232.25 > 80.228.123.66.2029: S
3300165204:3300165204(0) ack 579454459 win 5584 <mss
1408,nop,nop,timestamp 38940775 613221,nop,wscale 2>
12:05:14.625667 IP 80.228.123.232.25 > 80.228.123.66.2029: S
3300165204:3300165204(0) ack 579454459 win 5584 <mss
1408,nop,nop,timestamp 38941575 613221,nop,wscale 2>
12:05:16.334107 IP 80.228.123.66.3233 > 80.228.123.232.25: S
4275662206:4275662206(0) win 57344 <mss 1460,nop,wscale
0,nop,nop,timestamp 613712 0,nop,nop,ccnew 280>
12:05:16.334134 IP 80.228.123.232.25 > 80.228.123.66.3233: S
3315871425:3315871425(0) ack 4275662207 win 5584 <mss
1408,nop,nop,timestamp 38942003 613712,nop,wscale 2>
12:05:20.225922 IP 80.228.123.232.25 > 80.228.123.66.3233: S
3315871425:3315871425(0) ack 4275662207 win 5584 <mss
1408,nop,nop,timestamp 38942975 613712,nop,wscale 2>
12:05:20.625939 IP 80.228.123.232.25 > 80.228.123.66.2029: S
3300165204:3300165204(0) ack 579454459 win 5584 <mss
1408,nop,nop,timestamp 38943075 613221,nop,wscale 2>
12:05:26.226193 IP 80.228.123.232.25 > 80.228.123.66.3233: S
3315871425:3315871425(0) ack 4275662207 win 5584 <mss
1408,nop,nop,timestamp 38944475 613712,nop,wscale 2>
12:05:32.626487 IP 80.228.123.232.25 > 80.228.123.66.2029: S
3300165204:3300165204(0) ack 579454459 win 5584 <mss
1408,nop,nop,timestamp 38946075 613221,nop,wscale 2>
12:05:38.226740 IP 80.228.123.232.25 > 80.228.123.66.3233: S
3315871425:3315871425(0) ack 4275662207 win 5584 <mss
1408,nop,nop,timestamp 38947475 613712,nop,wscale 2>
12:05:56.627578 IP 80.228.123.232.25 > 80.228.123.66.2029: S
3300165204:3300165204(0) ack 579454459 win 5584 <mss
1408,nop,nop,timestamp 38952075 613221,nop,wscale 2>
12:06:02.427841 IP 80.228.123.232.25 > 80.228.123.66.3233: S
3315871425:3315871425(0) ack 4275662207 win 5584 <mss
1408,nop,nop,timestamp 38953525 613712,nop,wscale 2>
12:06:44.829813 IP 80.228.123.232.25 > 80.228.123.66.2029: S
3300165204:3300165204(0) ack 579454459 win 5584 <mss
1408,nop,nop,timestamp 38964125 613221,nop,wscale 2>
12:06:44.835993 IP 80.228.123.66.2029 > 80.228.123.232.25: . ack 1 win
58632 <nop,nop,timestamp 622561 38964125>
12:06:44.845903 IP 80.228.123.232.25 > 80.228.123.66.2029: P 1:41(40)
ack 1 win 1396 <nop,nop,timestamp 38964129 622561>
12:06:45.053813 IP 80.228.123.232.25 > 80.228.123.66.2029: P 1:41(40)
ack 1 win 1396 <nop,nop,timestamp 38964181 622561>
12:06:45.469829 IP 80.228.123.232.25 > 80.228.123.66.2029: P 1:41(40)
ack 1 win 1396 <nop,nop,timestamp 38964285 622561>
12:06:46.301892 IP 80.228.123.232.25 > 80.228.123.66.2029: P 1:41(40)
ack 1 win 1396 <nop,nop,timestamp 38964493 622561>
12:06:47.966015 IP 80.228.123.232.25 > 80.228.123.66.2029: P 1:41(40)
ack 1 win 1396 <nop,nop,timestamp 38964909 622561>
12:06:47.969254 IP 80.228.123.66.2029 > 80.228.123.232.25: . ack 41 win
58632 <nop,nop,timestamp 622875 38964909>
12:06:48.247609 IP 80.228.123.66.2029 > 80.228.123.232.25: P 1:26(25)
ack 41 win 58632 <nop,nop,timestamp 622903 38964909>
12:06:48.247634 IP 80.228.123.232.25 > 80.228.123.66.2029: . ack 26 win
1396 <nop,nop,timestamp 38964980 622903>
12:06:48.247869 IP 80.228.123.232.25 > 80.228.123.66.2029: P
41:180(139) ack 26 win 1396 <nop,nop,timestamp 38964980 622903>
12:06:48.454014 IP 80.228.123.232.25 > 80.228.123.66.2029: P
41:180(139) ack 26 win 1396 <nop,nop,timestamp 38965031 622903>
12:06:48.862033 IP 80.228.123.232.25 > 80.228.123.66.2029: P
41:180(139) ack 26 win 1396 <nop,nop,timestamp 38965133 622903>
12:06:49.678071 IP 80.228.123.232.25 > 80.228.123.66.2029: P
41:180(139) ack 26 win 1396 <nop,nop,timestamp 38965337 622903>
12:06:50.630112 IP 80.228.123.232.25 > 80.228.123.66.3233: S
3315871425:3315871425(0) ack 4275662207 win 5584 <mss
1408,nop,nop,timestamp 38965575 613712,nop,wscale 2>
12:06:51.310153 IP 80.228.123.232.25 > 80.228.123.66.2029: P
41:180(139) ack 26 win 1396 <nop,nop,timestamp 38965745 622903>
12:06:51.313898 IP 80.228.123.66.2029 > 80.228.123.232.25: . ack 180
win 58632 <nop,nop,timestamp 623209 38965745>
12:06:51.658207 IP 80.228.123.66.2029 > 80.228.123.232.25: P 26:122(96)
ack 180 win 58632 <nop,nop,timestamp 623244 38965745>
12:06:51.660721 IP 80.228.123.232.25 > 80.228.123.66.2029: P
180:233(53) ack 122 win 1396 <nop,nop,timestamp 38965833 623244>
12:06:51.866170 IP 80.228.123.232.25 > 80.228.123.66.2029: P
180:233(53) ack 122 win 1396 <nop,nop,timestamp 38965884 623244>
12:06:52.274186 IP 80.228.123.232.25 > 80.228.123.66.2029: P
180:233(53) ack 122 win 1396 <nop,nop,timestamp 38965986 623244>
12:06:53.090226 IP 80.228.123.232.25 > 80.228.123.66.2029: P
180:233(53) ack 122 win 1396 <nop,nop,timestamp 38966190 623244>
12:06:54.722312 IP 80.228.123.232.25 > 80.228.123.66.2029: P
180:233(53) ack 122 win 1396 <nop,nop,timestamp 38966598 623244>
12:06:54.725505 IP 80.228.123.66.2029 > 80.228.123.232.25: . ack 233
win 58632 <nop,nop,timestamp 623550 38966598>
12:06:55.065318 IP 80.228.123.66.2029 > 80.228.123.232.25: .
122:1518(1396) ack 233 win 58632 <nop,nop,timestamp 623584 38966598>
12:06:55.065383 IP 80.228.123.232.25 > 80.228.123.66.2029: . ack 1518
win 2094 <nop,nop,timestamp 38966684 623584>
12:06:55.075811 IP 80.228.123.66.2029 > 80.228.123.232.25: .
1518:2914(1396) ack 233 win 58632 <nop,nop,timestamp 623585 38966684>
12:06:55.080809 IP 80.228.123.66.2029 > 80.228.123.232.25: .
2914:4310(1396) ack 233 win 58632 <nop,nop,timestamp 623585 38966684>
12:06:55.080824 IP 80.228.123.232.25 > 80.228.123.66.2029: . ack 4310
win 3490 <nop,nop,timestamp 38966688 623585>
12:06:55.091302 IP 80.228.123.66.2029 > 80.228.123.232.25: .
4310:5706(1396) ack 233 win 58632 <nop,nop,timestamp 623586 38966688>
12:06:55.130315 IP 80.228.123.232.25 > 80.228.123.66.2029: . ack 5706
win 4188 <nop,nop,timestamp 38966700 623586>
12:10:11.347632 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39015751 613210>
12:10:11.347854 IP 80.228.123.232.25 > 80.228.123.66.2260: F 283:283(0)
ack 7010 win 4886 <nop,nop,timestamp 39015751 613210>
12:10:11.551595 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39015802 613210>
12:10:11.959612 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39015904 613210>
12:10:12.775650 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39016108 613210>
12:10:14.407738 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39016516 613210>
12:10:17.671926 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39017332 613210>
12:10:24.200236 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39018964 613210>
12:10:37.256814 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39022228 613210>
^[[B^[[B12:11:03.370004 IP 80.228.123.232.25 > 80.228.123.66.2260: P
233:283(50) ack 7010 win 4886 <nop,nop,timestamp 39028756 613210>
12:11:55.108396 IP 80.228.123.232.25 > 80.228.123.66.2029: P
233:283(50) ack 5706 win 4188 <nop,nop,timestamp 39041690 623586>
12:11:55.108616 IP 80.228.123.232.25 > 80.228.123.66.2029: F 283:283(0)
ack 5706 win 4188 <nop,nop,timestamp 39041690 623586>
12:11:55.312356 IP 80.228.123.232.25 > 80.228.123.66.2029: P
233:283(50) ack 5706 win 4188 <nop,nop,timestamp 39041741 623586>
12:11:55.720371 IP 80.228.123.232.25 > 80.228.123.66.2029: P
233:283(50) ack 5706 win 4188 <nop,nop,timestamp 39041843 623586>
12:11:56.536410 IP 80.228.123.232.25 > 80.228.123.66.2029: P
233:283(50) ack 5706 win 4188 <nop,nop,timestamp 39042047 623586>
12:11:58.168502 IP 80.228.123.232.25 > 80.228.123.66.2029: P
233:283(50) ack 5706 win 4188 <nop,nop,timestamp 39042455 623586>
12:12:01.432636 IP 80.228.123.232.25 > 80.228.123.66.2029: P
233:283(50) ack 5706 win 4188 <nop,nop,timestamp 39043271 623586>
12:12:07.960933 IP 80.228.123.232.25 > 80.228.123.66.2029: P
233:283(50) ack 5706 win 4188 <nop,nop,timestamp 39044903 623586>




ratsmail:~ # postconf -n
alias_maps = hash:/etc/aliases
biff = no
broken_sasl_auth_clients = yes
canonical_maps = hash:/etc/postfix/canonical
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp:127.0.0.1:10024
daemon_directory = /usr/lib/postfix
debug_peer_level = 2
defer_transports =
disable_dns_lookups = no
disable_mime_output_conversion = no
html_directory = /usr/share/doc/packages/postfix/html
inet_interfaces = all
inet_protocols = all
lmtp_data_done_timeout = 1000s
mail_owner = postfix
mail_spool_directory = /var/mail
mailbox_size_limit = 0
mailbox_transport = lmtp:unix:/var/lib/imap/socket/lmtp
mailq_path = /usr/bin/mailq
manpage_directory = /usr/share/man
masquerade_classes = envelope_sender, header_sender, header_recipient
masquerade_domains = rat.nordhorn.de
masquerade_exceptions = root
message_size_limit = 10240000
mydestination = rat.nordhorn.de
myhostname = ratsmail.nordhorn.de
mynetworks = 80.228.122.0/23, 127.0.0.0/8
newaliases_path = /usr/bin/newaliases
queue_directory = /var/spool/postfix
readme_directory = /usr/share/doc/packages/postfix/README_FILES
relayhost =
relocated_maps = hash:/etc/postfix/relocated
sample_directory = /usr/share/doc/packages/postfix/samples
sender_canonical_maps = hash:/etc/postfix/sender_canonical
sendmail_path = /usr/sbin/sendmail
setgid_group = maildrop
smtp_data_done_timeout = 1000s
smtp_sasl_auth_enable = no
smtp_use_tls = no
smtpd_client_restrictions =
smtpd_helo_required = no
smtpd_helo_restrictions =
smtpd_recipient_restrictions =
permit_sasl_authenticated,permit_mynetworks,reject _unauth_destination
smtpd_sasl_auth_enable = yes
smtpd_sender_restrictions = hash:/etc/postfix/access
smtpd_use_tls = no
strict_8bitmime = yes
strict_rfc821_envelopes = no
transport_maps = hash:/etc/postfix/transport
unknown_local_recipient_reject_code = 550

some ngrep stuff:


#######
T 80.228.123.232:25 -> 80.228.123.66:2746 [AP]
220 ratsmail.nordhorn.de ESMTP Postfix..
##
T 80.228.123.66:2746 -> 80.228.123.232:25 [AP]
EHLO mail.grafschaft.de..
##
T 80.228.123.232:25 -> 80.228.123.66:2746 [AP]
250-ratsmail.nordhorn.de..250-PIPELINING..250-SIZE
10240000..250-VRFY..250-
ETRN..250-AUTH LOGIN PLAIN..250-AUTH=LOGIN PLAIN..250 8BITMIME..
##
T 80.228.123.66:2746 -> 80.228.123.232:25 [AP]
MAIL FROM:<Bernhard.Richterink@Grafschaft.de> SIZE=82169..RCPT
TO:<ghuesema
n@rat.nordhorn.de>..RCPT TO:<Niere@rat.nordhorn.de>..RCPT
TO:<nyhuis@rat.no
rdhorn.de>..RCPT TO:<roettgers@rat.nordhorn.de>..RCPT
TO:<Will@rat.nordhorn
.de>..DATA..
#
T 80.228.123.232:25 -> 80.228.123.66:2746 [AP]
250 Ok..250 Ok..250 Ok..250 Ok..250 Ok..250 Ok..354 End data with
<CR><LF>.
<CR><LF>..
##
T 80.228.123.66:2746 -> 80.228.123.232:25 [A]
Content-class: urn:content-classes:message..MIME-Version:
1.0..Content-Type
:
multipart/mixed;...boundary="----_=_NextPart_001_01C68AD8.5DB88F56"..Subj
ect:
=?iso-8859-1?Q?Sitzungstermine_f=FCr_den_Kreisausschuss?=..X-MimeOLE:
Produced By Microsoft Exchange V6.5..Date: Thu, 8 Jun 2006 10:48:51
+0200..
Message-ID:
<AAB181BE66418E41AF9D563B95FE768A14880F@SERVER200. kreisverwaltu
ng.grafschaft.de>..X-MS-Has-Attach: ..X-MS-TNEF-Correlator:
...Thread-Topic:

=?iso-8859-1?Q?Sitzungstermine_f=FCr_den_Kreisausschuss?=..Th read-Index:
#
T 80.228.123.66:2746 -> 80.228.123.232:25 [A]
AcaK2F2m/7iBCJ/bQxOXCpEYDjCBQQ==..X-Priority: 1..Priority:
Urgent..Importan
ce: high..From: "XXXXXXX, Bernhard" <Bernhard.XXXXXXX@Grafschaft.de>.
.To: <XXXXXXbentheim@aol.com>,
<XXXXXXwever@t-online.de>,...<XXXXXerusch
ulte@web.de>, <XXXXtel@die-paebste.de>,...<dXXXXve@t-online.de>,
<Dietrich.
SXXXXX@vgh.de>,...<dkXXXXXt@t-online.de>,
<DoerenXXXXX@grafschafter-cdu.de
>,...<EXXXXXk@grafschafter-cdu.de>,
<FXXXXXk@NWN.de>,...<Friedel_XXXXX@01019
freenet.de>,
<frieXXXXXh@harland-emlichheim.de>,...<ge.XXXXXXann@freenet.
##
T 80.228.123.66:2746 -> 80.228.123.232:25 [A]
de>, <Gerhard.TXXXXXX@t-online.de>,...<GesineXXXX@aol.com>,
<ghuXXXX@rat
....
....
....
....

T 80.228.123.66:2746 -> 80.228.123.232:25 [A]
rogramms</FONT>....<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;& nbsp;
<FONT SIZ
E=3D2 =..FACE=3D"Arial">-
Kanal=F6ffnung</FONT>....<BR>&nbsp;&nbsp;&nbsp;&n
bsp;&nbsp;&nbsp;&nbsp; <FONT SIZE=3D2 =..FACE=3D"Arial">-
Jahresabschluss 2
003 des =..Abfallwirtschaftsbetriebes</FONT>....<BR><FONT SIZE=3D2
FACE=3D"
Arial">&nbsp;sowie auf Antrag der KT-Fraktion =..B=FCndnis 90 / DIE
GR=DCNE
N der TOP</FONT>....<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;& nbsp;
<FONT SI
ZE=3D2 =..FACE=3D"Arial">- Bleiberechtsregelung (Antrag ist dieser
Email =
##
T 80.228.123.66:2746 -> 80.228.123.232:25 [A]
..beigef=FCgt)</FONT>....<BR><FONT SIZE=3D2 FACE=3D"Arial">beraten
werden.<
/FONT>....<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;& nbsp;
=..&nbsp;&nbsp;&nb
sp;&nbsp;&nbsp;&nbsp;&nbsp;
=..&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
..&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;<FONT FACE=3D"Arial"
SIZE=3D2 =
..COLOR=3D"#000000"> &lt;&lt;Antrag B 90-GR=DCNE -
=..Bleiberechtsregelung.
doc&gt;&gt; </FONT>....<BR><B><FONT SIZE=3D2
FACE=3D"Arial">-</FONT></B><B>
<U> <FONT SIZE=3D2 =..FACE=3D"Arial">Mittwoch, 05. Juli 2006, 15.00
Uhr</F
##
T 80.228.123.232:25 -> 80.228.123.66:2746 [AP]
421 ratsmail.nordhorn.de Error: timeout exceeded..
##

############
/var/log/mail
Jun 9 12:06:51 ratsmail postfix/smtpd[20170]: A13B5171F4:
client=mail.grafschaft.de[80.228.123.66]
Jun 9 12:06:55 ratsmail postfix/cleanup[20162]: A13B5171F4:
message-id=<AAB181BE66418E41AF9D563B95FE768A1319C3@SERVER2 00.kreisverwaltung.grafschaft.de>

Jun 9 12:10:11 ratsmail postfix/smtpd[20156]: timeout after DATA from
mail.grafschaft.de[80.228.123.66]

some more tcpdump stuff (with -vv)

12:27:08.114976 IP (tos 0x0, ttl 64, id 44686, offset 0, flags [none],
proto: TCP (6), length: 102) 80.228.123.232.25 > 80.228.123.66.2998: P
0:50(50) ack 1 win 5154 <nop,nop,timestamp 39269927 713565>
12:27:15.241092 IP (tos 0x0, ttl 61, id 51458, offset 0, flags [DF],
proto: TCP (6), length: 1448) 80.228.123.66.2341 > 80.228.123.232.25: .
1:1397(1396) ack 51 win 58582 <nop,nop,timestamp 745587 39266642>
12:27:15.241112 IP (tos 0x0, ttl 64, id 0, offset 0, flags [DF],
proto: TCP (6), length: 40) 80.228.123.232.25 > 80.228.123.66.2341: R,
cksum 0xb033 (correct), 53828167:53828167(0) win 0
12:27:21.427576 IP (tos 0x0, ttl 64, id 44688, offset 0, flags [none],
proto: TCP (6), length: 102) 80.228.123.232.25 > 80.228.123.66.2998: P
0:50(50) ack 1 win 5154 <nop,nop,timestamp 39273255 713565>
12:27:48.052799 IP (tos 0x0, ttl 64, id 44690, offset 0, flags [none],
proto: TCP (6), length: 102) 80.228.123.232.25 > 80.228.123.66.2998: P
0:50(50) ack 1 win 5154 <nop,nop,timestamp 39279911 713565>
12:38:31.477284 IP (tos 0x0, ttl 61, id 60549, offset 0, flags [DF],
proto: TCP (6), length: 68) 80.228.123.66.1291 > 80.228.123.232.25: S,
cksum 0x02ed (correct), 2724958320:2724958320(0) win 57344 <mss
1460,nop,wscale 0,nop,nop,timestamp 813203 0,nop,nop,ccnew 377>
12:38:31.477346 IP (tos 0x0, ttl 64, id 44692, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.1291: S,
cksum 0xace1 (correct), 1116158095:1116158095(0) ack 2724958321 win
5584 <mss 1408,nop,nop,timestamp 39440757 813203,nop,wscale 2>
12:38:31.480281 IP (tos 0x0, ttl 61, id 60550, offset 0, flags [DF],
proto: TCP (6), length: 52) 80.228.123.66.1291 > 80.228.123.232.25: .,
cksum 0x093b (correct), 1:1(0) ack 1 win 58632 <nop,nop,timestamp
813203 39440757>
12:38:31.484431 IP (tos 0x0, ttl 64, id 44693, offset 0, flags [none],
proto: TCP (6), length: 92) 80.228.123.232.25 > 80.228.123.66.1291: P
1:41(40) ack 1 win 1396 <nop,nop,timestamp 39440759 813203>
12:38:31.487778 IP (tos 0x0, ttl 61, id 60552, offset 0, flags [DF],
proto: TCP (6), length: 52) 80.228.123.66.1291 > 80.228.123.232.25: .,
cksum 0x0938 (correct), 1:1(0) ack 41 win 58592 <nop,nop,timestamp
813204 39440759>
12:38:31.505268 IP (tos 0x0, ttl 61, id 60553, offset 0, flags [DF],
proto: TCP (6), length: 77) 80.228.123.66.1291 > 80.228.123.232.25: P,
cksum 0xe0cc (correct), 1:26(25) ack 41 win 58632 <nop,nop,timestamp
813206 39440759>
12:38:31.505287 IP (tos 0x0, ttl 64, id 44695, offset 0, flags [none],
proto: TCP (6), length: 52) 80.228.123.232.25 > 80.228.123.66.1291: .,
cksum 0xe884 (correct), 41:41(0) ack 26 win 1396 <nop,nop,timestamp
39440764 813206>
12:38:31.505388 IP (tos 0x0, ttl 64, id 44697, offset 0, flags [none],
proto: TCP (6), length: 191) 80.228.123.232.25 > 80.228.123.66.1291: P
41:180(139) ack 26 win 1396 <nop,nop,timestamp 39440764 813206>
12:38:31.510765 IP (tos 0x0, ttl 61, id 60554, offset 0, flags [DF],
proto: TCP (6), length: 52) 80.228.123.66.1291 > 80.228.123.232.25: .,
cksum 0x08f0 (correct), 26:26(0) ack 180 win 58493 <nop,nop,timestamp
813206 39440764>
12:38:31.520260 IP (tos 0x0, ttl 61, id 60558, offset 0, flags [DF],
proto: TCP (6), length: 148) 80.228.123.66.1291 > 80.228.123.232.25: P
26:122(96) ack 180 win 58632 <nop,nop,timestamp 813207 39440764>
12:38:31.529125 IP (tos 0x0, ttl 64, id 44699, offset 0, flags [none],
proto: TCP (6), length: 105) 80.228.123.232.25 > 80.228.123.66.1291: P
180:233(53) ack 122 win 1396 <nop,nop,timestamp 39440770 813207>
12:38:31.529754 IP (tos 0x0, ttl 61, id 60560, offset 0, flags [DF],
proto: TCP (6), length: 68) 80.228.123.66.3354 > 80.228.123.232.25: S,
cksum 0x62a1 (correct), 2267694056:2267694056(0) win 57344 <mss
1460,nop,wscale 0,nop,nop,timestamp 813208 0,nop,nop,ccnew 378>
12:38:31.529795 IP (tos 0x0, ttl 64, id 44701, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.3354: S,
cksum 0x78ea (correct), 1106824381:1106824381(0) ack 2267694057 win
5584 <mss 1408,nop,nop,timestamp 39440770 813208,nop,wscale 2>
12:38:31.533251 IP (tos 0x0, ttl 61, id 60561, offset 0, flags [DF],
proto: TCP (6), length: 52) 80.228.123.66.1291 > 80.228.123.232.25: .,
cksum 0x07fd (correct), 122:122(0) ack 233 win 58579 <nop,nop,timestamp
813208 39440770>
12:38:31.540749 IP (tos 0x0, ttl 61, id 60562, offset 0, flags [DF],
proto: TCP (6), length: 1448) 80.228.123.66.1291 > 80.228.123.232.25: .
122:1518(1396) ack 233 win 58632 <nop,nop,timestamp 813208 39440770>
12:38:31.540815 IP (tos 0x0, ttl 64, id 44702, offset 0, flags [none],
proto: TCP (6), length: 52) 80.228.123.232.25 > 80.228.123.66.1291: .,
cksum 0xdf2b (correct), 233:233(0) ack 1518 win 2094 <nop,nop,timestamp
39440773 813208>
12:38:31.545745 IP (tos 0x0, ttl 61, id 60563, offset 0, flags [DF],
proto: TCP (6), length: 1448) 80.228.123.66.1291 > 80.228.123.232.25: .
1518:2914(1396) ack 233 win 58632 <nop,nop,timestamp 813208 39440770>
12:38:31.550242 IP (tos 0x0, ttl 61, id 60564, offset 0, flags [DF],
proto: TCP (6), length: 1356) 80.228.123.66.1291 > 80.228.123.232.25: P
2914:4218(1304) ack 233 win 58632 <nop,nop,timestamp 813208 39440770>
12:38:31.550257 IP (tos 0x0, ttl 64, id 44704, offset 0, flags [none],
proto: TCP (6), length: 52) 80.228.123.232.25 > 80.228.123.66.1291: .,
cksum 0xcf29 (correct), 233:233(0) ack 4218 win 3490 <nop,nop,timestamp
39440775 813208>
12:38:31.555740 IP (tos 0x0, ttl 61, id 60567, offset 0, flags [DF],
proto: TCP (6), length: 1448) 80.228.123.66.1291 > 80.228.123.232.25: .
4218:5614(1396) ack 233 win 58632 <nop,nop,timestamp 813209 39440773>
12:38:31.560737 IP (tos 0x0, ttl 61, id 60568, offset 0, flags [DF],
proto: TCP (6), length: 1448) 80.228.123.66.1291 > 80.228.123.232.25: .
5614:7010(1396) ack 233 win 58632 <nop,nop,timestamp 813209 39440773>
12:38:31.560752 IP (tos 0x0, ttl 64, id 44706, offset 0, flags [none],
proto: TCP (6), length: 52) 80.228.123.232.25 > 80.228.123.66.1291: .,
cksum 0xbec9 (correct), 233:233(0) ack 7010 win 4886 <nop,nop,timestamp
39440778 813209>
12:38:31.600216 IP (tos 0x0, ttl 61, id 60577, offset 0, flags [DF],
proto: TCP (6), length: 68) 80.228.123.66.2564 > 80.228.123.232.25: S,
cksum 0xd684 (correct), 4196032546:4196032546(0) win 57344 <mss
1460,nop,wscale 0,nop,nop,timestamp 813215 0,nop,nop,ccnew 379>
12:38:31.600243 IP (tos 0x0, ttl 64, id 44708, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2564: S,
cksum 0x5add (correct), 1118133744:1118133744(0) ack 4196032547 win
5584 <mss 1408,nop,nop,timestamp 39440788 813215,nop,wscale 2>
12:38:31.632698 IP (tos 0x0, ttl 61, id 60581, offset 0, flags [DF],
proto: TCP (6), length: 68) 80.228.123.66.2109 > 80.228.123.232.25: S,
cksum 0xa6fe (correct), 4116616743:4116616743(0) win 57344 <mss
1460,nop,wscale 0,nop,nop,timestamp 813218 0,nop,nop,ccnew 380>
12:38:31.632719 IP (tos 0x0, ttl 64, id 44709, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2109: S,
cksum 0x0b97 (correct), 1104772725:1104772725(0) ack 4116616744 win
5584 <mss 1408,nop,nop,timestamp 39440796 813218,nop,wscale 2>
12:38:35.327398 IP (tos 0x0, ttl 64, id 44710, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.3354: S,
cksum 0x7534 (correct), 1106824381:1106824381(0) ack 2267694057 win
5584 <mss 1408,nop,nop,timestamp 39441720 813208,nop,wscale 2>
12:38:36.127427 IP (tos 0x0, ttl 64, id 44711, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2109: S,
cksum 0x0733 (correct), 1104772725:1104772725(0) ack 4116616744 win
5584 <mss 1408,nop,nop,timestamp 39441920 813218,nop,wscale 2>
12:38:36.127439 IP (tos 0x0, ttl 64, id 44712, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2564: S,
cksum 0x5671 (correct), 1118133744:1118133744(0) ack 4196032547 win
5584 <mss 1408,nop,nop,timestamp 39441920 813215,nop,wscale 2>
12:38:41.327666 IP (tos 0x0, ttl 64, id 44713, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.3354: S,
cksum 0x6f58 (correct), 1106824381:1106824381(0) ack 2267694057 win
5584 <mss 1408,nop,nop,timestamp 39443220 813208,nop,wscale 2>
12:38:42.127700 IP (tos 0x0, ttl 64, id 44714, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2109: S,
cksum 0x0157 (correct), 1104772725:1104772725(0) ack 4116616744 win
5584 <mss 1408,nop,nop,timestamp 39443420 813218,nop,wscale 2>
12:38:42.127711 IP (tos 0x0, ttl 64, id 44715, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2564: S,
cksum 0x5095 (correct), 1118133744:1118133744(0) ack 4196032547 win
5584 <mss 1408,nop,nop,timestamp 39443420 813215,nop,wscale 2>
12:38:53.528222 IP (tos 0x0, ttl 64, id 44716, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.3354: S,
cksum 0x636e (correct), 1106824381:1106824381(0) ack 2267694057 win
5584 <mss 1408,nop,nop,timestamp 39446270 813208,nop,wscale 2>
12:38:54.128246 IP (tos 0x0, ttl 64, id 44717, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2109: S,
cksum 0xf59e (correct), 1104772725:1104772725(0) ack 4116616744 win
5584 <mss 1408,nop,nop,timestamp 39446420 813218,nop,wscale 2>
12:38:54.128257 IP (tos 0x0, ttl 64, id 44718, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2564: S,
cksum 0x44dd (correct), 1118133744:1118133744(0) ack 4196032547 win
5584 <mss 1408,nop,nop,timestamp 39446420 813215,nop,wscale 2>
12:39:17.537317 IP (tos 0x0, ttl 64, id 44719, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.3354: S,
cksum 0x4bfd (correct), 1106824381:1106824381(0) ack 2267694057 win
5584 <mss 1408,nop,nop,timestamp 39452271 813208,nop,wscale 2>
12:39:18.137336 IP (tos 0x0, ttl 64, id 44720, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2109: S,
cksum 0xde2d (correct), 1104772725:1104772725(0) ack 4116616744 win
5584 <mss 1408,nop,nop,timestamp 39452421 813218,nop,wscale 2>
12:39:18.337345 IP (tos 0x0, ttl 64, id 44721, offset 0, flags [none],
proto: TCP (6), length: 60) 80.228.123.232.25 > 80.228.123.66.2564: S,
cksum 0x2d3a (correct), 1118133744:1118133744(0) ack 4196032547 win
5584 <mss 1408,nop,nop,timestamp 39452471 813215,nop,wscale 2>

holger wrote:
> Hi,
>
> i´ve got a problem with one special host:
> The sender is using an Exchange 2003 Server, but with an Borderware
> MXtreme Mailfirewall (as smarthost).

Hi Holger,

If the problem is with communicating with the MXtreme email appliance,
then you will probably need to get support directly from Borderware, because
it's an expensive proprietary system which not too many people are
familiar with.

Their online documentation appears to be written by marketing rather
than engineering.

--
Greg

i don´t think this is a problem regarding the borderware mxtreme,
because sometimes they get timeouts when they connect directly via
telnet to our mailsevers port 25 (without the mxtreme)


Greg Hackney schrieb:

> holger wrote:
> > Hi,
> >
> > i´ve got a problem with one special host:
> > The sender is using an Exchange 2003 Server, but with an Borderware
> > MXtreme Mailfirewall (as smarthost).
>
> Hi Holger,
>
> If the problem is with communicating with the MXtreme email appliance,
> then you will probably need to get support directly from Borderware, because
> it's an expensive proprietary system which not too many people are
> familiar with.
>
> Their online documentation appears to be written by marketing rather
> than engineering.
>
> --
> Greg

holger wrote:
> i don´t think this is a problem regarding the borderware mxtreme,
> because sometimes they get timeouts when they connect directly via
> telnet to our mailsevers port 25 (without the mxtreme)

This makes it sound like a networking packet/connectivity issue then,
rather than a MTA problem.

If it only happens with this one company and not others, then it's likely
a problem with networking on their end.

Greg Hackney schrieb:

> holger wrote:
> > i don´t think this is a problem regarding the borderware mxtreme,
> > because sometimes they get timeouts when they connect directly via
> > telnet to our mailsevers port 25 (without the mxtreme)
>
> This makes it sound like a networking packet/connectivity issue then,
> rather than a MTA problem.
>
> If it only happens with this one company and not others, then it's likely
> a problem with networking on their end.

the problem exists only between our host (ratsmail.nordhorn.de) and
their network.

if they connect to another host on our network (other mailserver) there
is no problem.
they have no problems with any other target-mailservers.

and we don´t have problems with any other source-mailserver.

sending mails to their network is also working well.

between our networks are 2 hdsl-modems. as we resetted the modems some
bigger mails went through - maybe there is a problem with one of the
hdsl-modems???

but why do all other hosts work?

Hi Holger, perhaps you can teach me something about networking. I need
to learn more about it.

Here's a review of some things you have said:

* This host is connected via an SHDSL-Modem (Bridge) to our network.
* i get a "timeout after DATA" error.
* The sender is using an Exchange 2003 Server, but with an
Borderware MXtreme Mailfirewall
* I changed the MTU of my server a bit lower (1448)
* on all our routers and our firewall applied "disable ip path mtu discovery
echo 1 >/proc/sys/net/ipv4/ip_no_pmtu_disc


Ok, first of all, you disabled MTU discovery. The purpose of MTU discovery as I
understand it, is to figure out the largest packet size that can be used for
both endpoints, and for every router and device in between. This value gets set
as "PMTU" (Path MTU). Then there is the MTU setting itself, which I understand to
be the overall maximum packet size that can be used. Therefore PMTU (if used) should
be equal to or less than MTU, correct? But you are not using it.

As I understand it, the MTU used by SHSDL modems is 1500. You sent your MTU to 1448.
Without using path mtu discovery, couldn't this cause problems with the modem using 1500
and your sever using 1448? Or does the other end detect that your server is 1448, and
reset it's PMTU ?

--
Greg

Hi Greg,

i´m sorry. i´m no networking geek... So i don´t think i could
answer your questions. All my informations are from group-posts... :-)

btw: my problem still does exist. some network geeks told me, that it
must be a firewall problem. and no postfix configuration error.

Holger

Greg Hackney schrieb:

> Hi Holger, perhaps you can teach me something about networking. I need
> to learn more about it.
>
> Here's a review of some things you have said:
>
> * This host is connected via an SHDSL-Modem (Bridge) to our network.
> * i get a "timeout after DATA" error.
> * The sender is using an Exchange 2003 Server, but with an
> Borderware MXtreme Mailfirewall
> * I changed the MTU of my server a bit lower (1448)
> * on all our routers and our firewall applied "disable ip path mtu discovery
> echo 1 >/proc/sys/net/ipv4/ip_no_pmtu_disc
>
>
> Ok, first of all, you disabled MTU discovery. The purpose of MTU discovery as I
> understand it, is to figure out the largest packet size that can be used for
> both endpoints, and for every router and device in between. This value gets set
> as "PMTU" (Path MTU). Then there is the MTU setting itself, which I understand to
> be the overall maximum packet size that can be used. Therefore PMTU (if used) should
> be equal to or less than MTU, correct? But you are not using it.
>
> As I understand it, the MTU used by SHSDL modems is 1500. You sent your MTU to 1448.
> Without using path mtu discovery, couldn't this cause problems with the modem using 1500
> and your sever using 1448? Or does the other end detect that your server is 1448, and
> reset it's PMTU ?
>
> --
> Greg