Timeout after DATA problem

classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

Timeout after DATA problem

Ralf Hildebrandt
I'm having a "Timeout after DATA problem" on mail.charite.de

tcpdump recording can be found here:
http://www.arschkrebs.de/194.74.154.66.dump

From my logs:
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 220 mail.charite.de ESMTP
Jun  6 15:33:35 mail postfix/smtpd[28428]: < mail.pharm-olam.co.uk[194.74.154.66]: EHLO mail.pharm-olam.co.uk
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250-mail.charite.de
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250-PIPELINING
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250-SIZE 20971520
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250-ETRN
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250-STARTTLS
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250-ENHANCEDSTATUSCODES
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250-8BITMIME
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250 DSN
Jun  6 15:33:35 mail postfix/smtpd[28428]: < mail.pharm-olam.co.uk[194.74.154.66]: MAIL FROM:<[hidden email]> SIZE=2265
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250 2.1.0 Ok
Jun  6 15:33:35 mail postfix/smtpd[28428]: < mail.pharm-olam.co.uk[194.74.154.66]: RCPT TO:<[hidden email]>
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 250 2.1.5 Ok
Jun  6 15:33:35 mail postfix/smtpd[28428]: < mail.pharm-olam.co.uk[194.74.154.66]: DATA
Jun  6 15:33:35 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 354 End data with <CR><LF>.<CR><LF>
Jun  6 15:38:36 mail postfix/smtpd[28428]: > mail.pharm-olam.co.uk[194.74.154.66]: 421 4.4.2 mail.charite.de Error: timeout exceeded

What I tried:

* reduce the MTU on my end to 1000
* suppress all the ESMTP keywords

Both didn't help.

--
Ralf Hildebrandt ([hidden email])          [hidden email]
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
Entscheider in gro�en Unternehmen interessieren sich �blicherweise
einen Dreck daf�r, ob ihre Systeme auch morgen noch funktionieren.
Hauptsache, sie sind im Falle eines Falles Nicht Schuld[tm].
Reply | Threaded
Open this post in threaded view
|

Re: Timeout after DATA problem

Wietse Venema
Ralf Hildebrandt:
> I'm having a "Timeout after DATA problem" on mail.charite.de
>
> tcpdump recording can be found here:
> http://www.arschkrebs.de/194.74.154.66.dump

There is no <CR><LF>.<CR><LF> at the end of DATA.

The last line contains the following text:

delete this e-mail and attachments from your system. Thank you..<CR><LF>

        Wietse
Reply | Threaded
Open this post in threaded view
|

Re: Timeout after DATA problem

Ralf Hildebrandt
* Wietse Venema <[hidden email]>:
> Ralf Hildebrandt:
> > I'm having a "Timeout after DATA problem" on mail.charite.de
> >
> > tcpdump recording can be found here:
>
> There is no <CR><LF>.<CR><LF> at the end of DATA.

Yes. I noticed that.
 
> The last line contains the following text:
>
> delete this e-mail and attachments from your system. Thank you..<CR><LF>

According to the admin of the other side there's something that adds
the the disclaimer. If an attachment is being sent, the mail goes
through, since the attachment data comes last in the stream. Strange.

So I need a tcpdump/windump from the sending side...

--
Ralf Hildebrandt ([hidden email])          [hidden email]
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
Send me a spam, I'll send you a LART.
Send me 1353 spams, I'll send you 1353 LARTs.
Reply | Threaded
Open this post in threaded view
|

Re: Timeout after DATA problem

Victor Duchovni
In reply to this post by Ralf Hildebrandt
On Fri, Jun 06, 2008 at 03:44:58PM +0200, Ralf Hildebrandt wrote:

> I'm having a "Timeout after DATA problem" on mail.charite.de
>
> tcpdump recording can be found here:
> http://www.arschkrebs.de/194.74.154.66.dump

Best guess: The message that is timing out ends in "Thank you." without
a terminating <CRLF>. The sending MTA, emits the message body, then
".<CRLF>" without appending the missing blank line. No amount of network
tuning will fix software bugs in the sending system.

09:10:51.312889 194.74.154.66.7116 > 141.42.4.200.25: P 3157:4061(904) ack 338 win 65198 (DF)
...
0x0350   6174 656c 7920 6279 2072 6574 7572 6e20        ately.by.return.
0x0360   652d 6d61 696c 2061 6e64 203d 0d0a 6465        e-mail.and.=..de
0x0370   6c65 7465 2074 6869 7320 652d 6d61 696c        lete.this.e-mail
0x0380   2061 6e64 2061 7474 6163 686d 656e 7473        .and.attachments
0x0390   2066 726f 6d20 796f 7572 2073 7973 7465        .from.your.syste
0x03a0   6d2e 2054 6861 6e6b 2079 6f75 2e2e 0d0a        m..Thank.you....

Shorter than negotiated MSS packet (at end of message) that ends in:

    Thank you..<CRLF>

09:10:51.312896 141.42.4.200.25 > 194.74.154.66.7116: . ack 4061 win 16368 (DF)
0x0000   4500 0028 a910 4000 4006 a340 8d2a 04c8        E..(..@.@..@.*..
0x0010   c24a 9a42 0019 1bcc b895 ffb7 f642 8498        .J.B.........B..
0x0020   5010 3ff0 3257 0000                            P.?.2W..
09:15:51.313241 141.42.4.200.25 > 194.74.154.66.7116: P 338:389(51) ack 4061 win
 16368 (DF)
0x0000   4500 005b a911 4000 4006 a30c 8d2a 04c8        E..[..@.@....*..
0x0010   c24a 9a42 0019 1bcc b895 ffb7 f642 8498        .J.B.........B..
0x0020   5018 3ff0 eecc 0000 3432 3120 342e 342e        P.?.....421.4.4.
0x0030   3220 6d61 696c 2e63 6861 7269 7465 2e64        2.mail.charite.d
0x0040   6520 4572 726f 723a 2074 696d 656f 7574        e.Error:.timeout
0x0050   2065 7863 6565 6465 640d 0a                    .exceeded..
09:15:51.314134 141.42.4.200.25 > 194.74.154.66.7116: F 389:389(0) ack 4061 win
16368 (DF)
0x0000   4500 0028 a912 4000 4006 a33e 8d2a 04c8        E..(..@.@..>.*..
0x0010   c24a 9a42 0019 1bcc b895 ffea f642 8498        .J.B.........B..
0x0020   5011 3ff0 3223 0000                            P.?.2#..
09:15:51.352482 194.74.154.66.7116 > 141.42.4.200.25: . ack 390 win 65147 (DF)
0x0000   4500 0028 7e20 4000 7206 9c30 c24a 9a42        E..(~.@.r..0.J.B
0x0010   8d2a 04c8 1bcc 0019 f642 8498 b895 ffeb        .*.......B......
0x0020   5010 fe7b 7397 0000 0000 7335 f56a             P..{s.....s5.j
09:15:51.352502 194.74.154.66.7116 > 141.42.4.200.25: F 4061:4061(0) ack 390 win
 65147 (DF)

Timout with no retrasmissions and peer still there.

> What I tried:
>
> * reduce the MTU on my end to 1000

Can solve problems when sending, more likely harmful than useful when
receiving.

> * suppress all the ESMTP keywords
>
> Both didn't help.

Not surprising if my guess is correct.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[hidden email]?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
Reply | Threaded
Open this post in threaded view
|

Re: Timeout after DATA problem

Victor Duchovni
In reply to this post by Ralf Hildebrandt
On Fri, Jun 06, 2008 at 04:14:52PM +0200, Ralf Hildebrandt wrote:

> * Wietse Venema <[hidden email]>:
> > Ralf Hildebrandt:
> > > I'm having a "Timeout after DATA problem" on mail.charite.de
> > >
> > > tcpdump recording can be found here:
> >
> > There is no <CR><LF>.<CR><LF> at the end of DATA.
>
> Yes. I noticed that.
>  
> > The last line contains the following text:
> >
> > delete this e-mail and attachments from your system. Thank you..<CR><LF>
>
> According to the admin of the other side there's something that adds
> the the disclaimer. If an attachment is being sent, the mail goes
> through, since the attachment data comes last in the stream. Strange.

Not strange the disclaimer should be adjusted to end in a <CRLF>. This
message was a text/plain, not a multipart, so in this case the disclaimer
terminates the message.

--
        Viktor.

Disclaimer: off-list followups get on-list replies or get ignored.
Please do not ignore the "Reply-To" header.

To unsubscribe from the postfix-users list, visit
http://www.postfix.org/lists.html or click the link below:
<mailto:[hidden email]?body=unsubscribe%20postfix-users>

If my response solves your problem, the best way to thank me is to not
send an "it worked, thanks" follow-up. If you must respond, please put
"It worked, thanks" in the "Subject" so I can delete these quickly.
Reply | Threaded
Open this post in threaded view
|

Re: Timeout after DATA problem

Ralf Hildebrandt
In reply to this post by Victor Duchovni
* Victor Duchovni <[hidden email]>:

> Best guess: The message that is timing out ends in "Thank you." without
> a terminating <CRLF>. The sending MTA, emits the message body, then
> ".<CRLF>" without appending the missing blank line. No amount of network
> tuning will fix software bugs in the sending system.

That was my guess as well, but I wanted a second guess :)=

--
Ralf Hildebrandt ([hidden email])          [hidden email]
Postfix - Einrichtung, Betrieb und Wartung       Tel. +49 (0)30-450 570-155
http://www.arschkrebs.de
"General Failure's Fault. Not Yours."  -Anon.