Hi!
I am having this issue with newly installed virtual Ironport ESA. Before Ironport virtual appliance was installed (without any anti SPAM solution). Incoming/outgoing emails are sent to intended recipients as well as a lot of SPAM emails which results to being blacklisted. Lotus Domino is being use as the mail server.
Now with Ironport in place, all incoming emails are rejected with this error:
554', ['Mail from xxx@yyy.com rejected for policy reasons.'])
Below is the complete mail logs for the single incoming email. Hope you could direct me on how to solve this issue.
Thanks in advance!
Ursulo
Protocol SMTP interface Management (IP 192.168.9.100) on incoming connection (ICID 105) from sender IP x.x.xx. Reverse DNS host mail.ics.com.ph verified yes.
17 Dec 2015 15:05:18 (GMT +08:00) (ICID 105) ACCEPT sender group UNKNOWNLIST match sbrs[-1.0:10.0] SBRS 5.6
17 Dec 2015 15:05:19 (GMT +08:00) Start message 367 on incoming connection (ICID 105).
17 Dec 2015 15:05:19 (GMT +08:00) Message 367 enqueued on incoming connection (ICID 105) from xxx@yyy.com
17 Dec 2015 15:05:19 (GMT +08:00) Message 367 on incoming connection (ICID 105) added recipient (zzz@zzzz.com).
17 Dec 2015 15:05:20 (GMT +08:00) Message 367 contains message ID header '<OF23E9B834.6FBA2D88-ON48257F1E.00201596-48257F1E.0026EAD2@____.com>'.
17 Dec 2015 15:05:20 (GMT +08:00) Message 367 original subject on injection: ------------------
17 Dec 2015 15:05:20 (GMT +08:00) Message 367 (4270 bytes) from xxx@yyy.com ready.
17 Dec 2015 15:05:20 (GMT +08:00) Message 367 matched per-recipient policy DEFAULT for inbound mail policies.
17 Dec 2015 15:05:21 (GMT +08:00) Message 367 scanned by Anti-Spam engine: CASE. Interim verdict: Negative
17 Dec 2015 15:05:21 (GMT +08:00) Message 367 scanned by Anti-Spam engine CASE. Interim verdict: definitely negative.
17 Dec 2015 15:05:21 (GMT +08:00) Message 367 scanned by Anti-Spam engine: CASE. Final verdict: Negative
17 Dec 2015 15:05:21 (GMT +08:00) Message 367 scanned by Anti-Virus engine Sophos. Interim verdict: CLEAN
17 Dec 2015 15:05:21 (GMT +08:00) Message 367 scanned by Anti-Virus engine. Final verdict: Negative
17 Dec 2015 15:05:21 (GMT +08:00) Message 367 scanned by Outbreak Filters. Verdict: Negative
17 Dec 2015 15:05:21 (GMT +08:00) Message 367 queued for delivery.
17 Dec 2015 15:05:21 (GMT +08:00) SMTP delivery connection (DCID 11804) opened from Cisco IronPort interface 192.168.9.100 to IP address 192.168.9.14 on port 25.
17 Dec 2015 15:05:25 (GMT +08:00) (DCID 11804) Delivery started for message 367 to zzz@zzzz.com.
17 Dec 2015 15:05:25 (GMT +08:00) (DCID 11804) Message 367 to zzz@zzzz.com bounced by destination server. Reason: 5.1.0 - Unknown address error ('554', ['Mail from xxx@yyy.com rejected for policy reasons.'])
17 Dec 2015 15:05:25 (GMT +08:00) Start message 368 on incoming connection (ICID 0).
17 Dec 2015 15:05:25 (GMT +08:00) A new message 368 was generated to handle bounce of message 367.
17 Dec 2015 15:05:25 (GMT +08:00) Message 368 enqueued on incoming connection (ICID 0) from .
17 Dec 2015 15:05:25 (GMT +08:00) Message 368 on incoming connection (ICID 0) added recipient (xxx@yyy.com).
17 Dec 2015 15:05:25 (GMT +08:00) Message 368 (5975 bytes) from ready.
17 Dec 2015 15:05:25 (GMT +08:00) Message 368 queued for delivery.
17 Dec 2015 15:05:27 (GMT +08:00) SMTP delivery connection (DCID 11806) opened from Cisco IronPort interface 192.168.9.100 to IP address 58.71.17.164 on port 25.
17 Dec 2015 15:05:55 (GMT +08:00) (DCID 11806) Delivery started for message 368 to xxx@yyy.com.
17 Dec 2015 15:06:05 (GMT +08:00) (DCID 11806) Delivery details: Message 368 sent to xxx@yyy.com
17 Dec 2015 15:06:05 (GMT +08:00) Message 368 to xxx@yyy.com received remote SMTP response '2.0.0 tBH75SlJ028659 Message accepted for delivery'.
