Xymon Mailing List Archive search

smtp check

17 messages in this thread

list Stef Coene · Thu, 1 Dec 2005 10:12:14 +0100 ·
Hi,

I get this when I check a smtp server:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863, 
totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)

Other smtp servers are working fine.  This is the smtp server of the ISP.

How can I find out what the exact conversation is between my hobbit server and 
the smtp server ?

Stef
list Asif Iqbal · Thu, 1 Dec 2005 04:15:08 -0500 ·
quoted from Stef Coene
On Thu, Dec 01, 2005 at 10:12:14AM, Stef Coene wrote:
Hi,

I get this when I check a smtp server:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863, totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)
Telnet to port 25 of the smtp server
quoted from Stef Coene
Other smtp servers are working fine.  This is the smtp server of the ISP.

How can I find out what the exact conversation is between my hobbit server and the smtp server ?

Stef

-- 

Asif Iqbal
PGP Key: 0xE62693C5 KeyServer: pgp.mit.edu
"..there are two kinds of people: those who work and those who take the credit...try
 to be in the first group;...less competition there."  - Indira Gandhi
list Frédéric Mangeant · Thu, 01 Dec 2005 10:22:45 +0100 ·
quoted from Stef Coene
Stef Coene a écrit :
Hi,

I get this when I check a smtp server:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863, 
totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)

Other smtp servers are working fine.  This is the smtp server of the ISP.

How can I find out what the exact conversation is between my hobbit server and 
the smtp server ?
Hi Stef

the default SMTP test sequence is in ~server/etc/bb-services :

[smtp]
   send "mail\r\nquit\r\n"
   expect "220"
   options banner
   port 25

-- 

Frédéric Mangeant

Steria EDC Sophia-Antipolis
list Stef Coene · Thu, 1 Dec 2005 10:24:48 +0100 ·
quoted from Asif Iqbal
On Thursday 01 December 2005 10:15, Asif Iqbal wrote:
On Thu, Dec 01, 2005 at 10:12:14AM, Stef Coene wrote:
Hi,

I get this when I check a smtp server:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863,
totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)
Telnet to port 25 of the smtp server
Please read the full post ...........
quoted from Frédéric Mangeant
Other smtp servers are working fine.  This is the smtp server of the ISP.

How can I find out what the exact conversation is between my hobbit
server and the smtp server ?

Stef
list Stef Coene · Thu, 1 Dec 2005 10:42:25 +0100 ·
quoted from Frédéric Mangeant
On Thursday 01 December 2005 10:22, Frédéric Mangeant wrote:
Stef Coene a écrit :
Hi,

I get this when I check a smtp server:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863,
totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)

Other smtp servers are working fine.  This is the smtp server of the ISP.

How can I find out what the exact conversation is between my hobbit
server and the smtp server ?
Hi Stef

the default SMTP test sequence is in ~server/etc/bb-services :

[smtp]
   send "mail\r\nquit\r\n"
   expect "220"
   options banner
   port 25
I know, but that does not help me.  Connecting to port 25 of the telnet server 
is working.  The commands mail and quit are giving an error on all smtp 
servers I tried.  Even on the ones that are green in hobbit.
I just want to know if I can find out exactly what's the communication between 
the smtp server and the hobbit server so I can see what's going wrong.


Stef
list Figaro Nicolas · Thu, 1 Dec 2005 11:00:03 +0100 ·
-----Message d'origine-----
De : Stef Coene [mailto:user-dbffe946c0f4@xymon.invalid] Envoyé : jeudi 1 décembre 2005 10:12
À : user-ae9b8668bcde@xymon.invalid
Objet : [hobbit] smtp check


Hi,
quoted from Stef Coene
Hi, 
I get this when I check a smtp server: Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863, totaltime=1.153169, banner='501 Syntax error in parameters or arguments ' (45 bytes)

Other smtp servers are working fine.  This is the smtp server of the ISP.

How can I find out what the exact conversation is between my hobbit server and the smtp server ?
I don't know if the --debug flag will help this time, otherwise you can use any sniffing software (tcpdump, tethereal) for the complete conversation. 
Hope this'll help 
Nicolas Figaro 
Stef
list Lars Ebeling · Thu, 1 Dec 2005 13:34:15 +0100 ·
Perhaps the mailserver neeed a Helo/ehlo first?

This is what I have in my bb.services:

[smtp]
   send "ehlo\r\nquit\r\n"
   expect "220"
   options banner
   port 25

Regards
Lars
quoted from Stef Coene


----- Original Message ----- 
From: "Stef Coene" <user-dbffe946c0f4@xymon.invalid>
To: <user-ae9b8668bcde@xymon.invalid>
Sent: Thursday, December 01, 2005 10:12 AM
Subject: [hobbit] smtp check

Hi,

I get this when I check a smtp server:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863,
totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)

Other smtp servers are working fine.  This is the smtp server of the ISP.

How can I find out what the exact conversation is between my hobbit server 
and
the smtp server ?

Stef

list Lars Ebeling · Thu, 1 Dec 2005 13:51:44 +0100 ·
This is what the conversation looks like when I run telnet:

# telnet xxx.xxx.xxx.xxx 25
Trying...
Connected to xxx.xxx.xxx.xxx.
Escape character is 'ÜÅ'.
ehlo
220-Welcome to mailserver.domain.tld
220 mailserver.domain.tld (NT0234.04.fdc0aadd) ready for ESMTP transfer
501 Hostname expected.
quit
221 Goodbye Ä62.119.162.107Å
Connection closed by foreign host.

Regards
Lars
quoted from Lars Ebeling


----- Original Message ----- 
From: "lars ebeling" <user-1fecd3eafd52@xymon.invalid>
To: <user-ae9b8668bcde@xymon.invalid>
Sent: Thursday, December 01, 2005 1:34 PM
Subject: Re: [hobbit] smtp check

Perhaps the mailserver neeed a Helo/ehlo first?

This is what I have in my bb.services:

[smtp]
  send "ehlo\r\nquit\r\n"
  expect "220"
  options banner
  port 25

Regards
Lars


----- Original Message ----- 
From: "Stef Coene" <user-dbffe946c0f4@xymon.invalid>
To: <user-ae9b8668bcde@xymon.invalid>
Sent: Thursday, December 01, 2005 10:12 AM
Subject: [hobbit] smtp check

Hi,

I get this when I check a smtp server:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863,
totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)

Other smtp servers are working fine.  This is the smtp server of the ISP.

How can I find out what the exact conversation is between my hobbit 
server and
the smtp server ?

Stef

list Stef Coene · Thu, 1 Dec 2005 13:52:57 +0100 ·
quoted from Lars Ebeling
On Thursday 01 December 2005 13:34, lars ebeling wrote:
Perhaps the mailserver neeed a Helo/ehlo first?

This is what I have in my bb.services:

[smtp]
   send "ehlo\r\nquit\r\n"
   expect "220"
   options banner
   port 25
This time I get an other error:

Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.013304, 
totaltime=1.204438, banner='554 SMTP synchronization error' (32 bytes)

Remember, this was the "old" error:
quoted from Lars Ebeling
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863,
totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)

Stef
list Henrik Størner · Thu, 1 Dec 2005 13:59:04 +0100 ·
quoted from Stef Coene
On Thu, Dec 01, 2005 at 01:52:57PM +0100, Stef Coene wrote:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.013304, 
totaltime=1.204438, banner='554 SMTP synchronization error' (32 bytes)

Remember, this was the "old" error:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863,
totaltime=1.153169, banner='501 Syntax error in parameters or arguments
' (45 bytes)
Most likely, it complains because Hobbit fires off SMTP commands before
waiting for the SMTP server's greeting. Technically, this is in
violation of the SMTP protocol, and some newer servers complain about
this.

Try removing the "send" part from the [smtp] section in
~hobbit/server/etc/bb-services


Henrik
list Stef Coene · Thu, 1 Dec 2005 14:41:32 +0100 ·
quoted from Henrik Størner
On Thursday 01 December 2005 13:59, Henrik Stoerner wrote:
On Thu, Dec 01, 2005 at 01:52:57PM +0100, Stef Coene wrote:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.013304,
totaltime=1.204438, banner='554 SMTP synchronization error' (32 bytes)

Remember, this was the "old" error:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.002863,
totaltime=1.153169, banner='501 Syntax error in parameters or
arguments ' (45 bytes)
Most likely, it complains because Hobbit fires off SMTP commands before
waiting for the SMTP server's greeting. Technically, this is in
violation of the SMTP protocol, and some newer servers complain about
this.

Try removing the "send" part from the [smtp] section in
~hobbit/server/etc/bb-services
That's working.  But isn't that the same as just a port check ?


Stef
list Stef Coene · Thu, 1 Dec 2005 14:41:33 +0100 ·
quoted from Lars Ebeling
On Thursday 01 December 2005 13:51, lars ebeling wrote:
This is what the conversation looks like when I run telnet:

# telnet xxx.xxx.xxx.xxx 25
Trying...
Connected to xxx.xxx.xxx.xxx.
Escape character is 'ÜÅ'.
ehlo
220-Welcome to mailserver.domain.tld
220 mailserver.domain.tld (NT0234.04.fdc0aadd) ready for ESMTP transfer
501 Hostname expected.
quit
221 Goodbye Ä62.119.162.107Å
Connection closed by foreign host.
This is my "conversation":

Trying 195.86.128.62...
Connected to mail1.enrtd.nl.easynet.net.
Escape character is '^]'.
220 SMTP
ehlo
250-Requested mail action okay, completed
250-SIZE 5242880
250 HELP

As you can see, the mail server returns 250 and not 220.
Also, it takes a few seconds before the 220 SMTP appears.
Maybe hobbit is too fast ??


Stef
list Lars Ebeling · Thu, 1 Dec 2005 15:27:29 +0100 ·
If you get the

220 SMTP

back, that means that the mailserver on the other side is running.
quoted from Stef Coene

Lars

----- Original Message ----- 
From: "Stef Coene" <user-dbffe946c0f4@xymon.invalid>
To: <user-ae9b8668bcde@xymon.invalid>
Sent: Thursday, December 01, 2005 2:41 PM
Subject: Re: [hobbit] smtp check

On Thursday 01 December 2005 13:59, Henrik Stoerner wrote:
On Thu, Dec 01, 2005 at 01:52:57PM +0100, Stef Coene wrote:
Address=195.86.128.62:25, open=1, res=0, err=0, connecttime=0.013304,
totaltime=1.204438, banner='554 SMTP synchronization error' (32 bytes)

Remember, this was the "old" error:
Address=195.86.128.62:25, open=1, res=0, err=0, 
connecttime=0.002863,
totaltime=1.153169, banner='501 Syntax error in parameters or
arguments ' (45 bytes)
Most likely, it complains because Hobbit fires off SMTP commands before
waiting for the SMTP server's greeting. Technically, this is in
violation of the SMTP protocol, and some newer servers complain about
this.

Try removing the "send" part from the [smtp] section in
~hobbit/server/etc/bb-services
That's working.  But isn't that the same as just a port check ?


Stef

list Stef Coene · Thu, 1 Dec 2005 15:57:02 +0100 ·
quoted from Lars Ebeling
On Thursday 01 December 2005 15:27, lars ebeling wrote:
If you get the

220 SMTP

back, that means that the mailserver on the other side is running.
I get it back manually, but hobbit still report this service with an error.
Is it possible that hobbit is too fast in sending the commands for the server?  If I check it manually, I have to wait some time before I get a reponse from the server.
Is there a timeout value I can specify so hobbit waits some seconds before issuing a command to the smtp server?


Stef
list Henrik Størner · Thu, 1 Dec 2005 16:20:32 +0100 ·
quoted from Stef Coene
On Thu, Dec 01, 2005 at 02:41:32PM +0100, Stef Coene wrote:
On Thursday 01 December 2005 13:59, Henrik Stoerner wrote:
Most likely, it complains because Hobbit fires off SMTP commands before
waiting for the SMTP server's greeting. Technically, this is in
violation of the SMTP protocol, and some newer servers complain about
this.

Try removing the "send" part from the [smtp] section in
~hobbit/server/etc/bb-services
That's working.  But isn't that the same as just a port check ?
No. If you just remove the "send" bit, Hobbit will still use the
"expect" definition and check that the SMTP server sends back a
"220" OK-message that it is ready.

The only reason Hobbit sends the "MAIL\r\nQUIT\r\n" string is 
because sendmail complains if you connect to it, but don't send
anything.


Henrik
list Henrik Størner · Thu, 1 Dec 2005 16:22:19 +0100 ·
quoted from Stef Coene
On Thu, Dec 01, 2005 at 03:57:02PM +0100, Stef Coene wrote:
If I check it manually, I have to wait some time before I get a reponse from the server.
Is there a timeout value I can specify so hobbit waits some seconds before issuing a command to the smtp server?
No. Ideally, you would configure a series of "expect-send" strings,
and have Hobbit wait for one string before sending the next. That would require some restructuring of the network tester, though.


Henrik
list Lars Ebeling · Thu, 1 Dec 2005 16:22:46 +0100 ·
You are probably right, but I don't know about any parameter to specify a timeout in this case .

Lars
----- Original Message ----- From: "Stef Coene" <user-dbffe946c0f4@xymon.invalid>
To: <user-ae9b8668bcde@xymon.invalid>
Sent: Thursday, December 01, 2005 3:57 PM
quoted from Stef Coene
Subject: Re: [hobbit] smtp check

On Thursday 01 December 2005 15:27, lars ebeling wrote:
If you get the

220 SMTP

back, that means that the mailserver on the other side is running.
I get it back manually, but hobbit still report this service with an error.
Is it possible that hobbit is too fast in sending the commands for the server?
If I check it manually, I have to wait some time before I get a reponse from
the server.
Is there a timeout value I can specify so hobbit waits some seconds before
issuing a command to the smtp server?


Stef