Wednesday, October 17, 2007

Your message did not reach some or all of the intended recipients

Working with different customers we always seem to run into the same type issues over and over. In a previous post I talked about the 4.4.7 Could Not Deliver Message error, this time has to do with not having permission to send.

Your message did not reach some or all of the intended recipients. Subject: test Sent: 10/2/2007 8:33 AM

The following recipient(s) could not be reached:

ruth@testdomain.com on 10/4/2007 8:58 AM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
... Access temporarily denied. IP name lookup failed [196.25.11.101]>

The message failed going over to Ruth at testdomain coming from testo at 196.25.11.101. For this customer we actually found out that it was again a combination of missing reverse DNS records and possible blacklisting. You can do a Reverse DNS lookup on www.dnsstuff.com or on www.openrbl.org using either the CGI or JS client.

If you have Exchange 2003 at the site you are trying to research this for then another great tool to use would be SMTPDIAG. You can download it from here and read an article on how to use it here. It really helps with testing so you’re not sending 50 messages and then having to wait for them to bounce back or error out eventually.

Saturday, September 08, 2007

Construction and Use of a Passive Ethernet Tap

This Tech Tip provides straightforward instructions on how to construct and use a passive Ethernet tap. The end product may be used with any hub or switch and any operating system. A passive Ethernet tap is useful when installing an intrusion detection system (IDS) sensor or when snooping Ethernet traffic.
by Michael Peters

Hardware Requirements
  • A single 4-port Ethernet housing such as the Versatap AT44 Surface Jack Housing from Allen Tel Products
  • 4 Category 5e modular snap-in jacks such as the AT55 Category 5e Modular Snap-In Jacks from Allen Tel Products
  • A small section, about 6 inches, of Category 5e cable


Construction


Figure 1 represents the AT55 Category 5e jack. The wire termination pin positions and associated wire color codes are also shown.

Figure 1: AT55 Category 5e Jack





This diagram is usually included with new Category 5e jacks from any other vendor.


Disassemble the section of Category 5e wire that you have into eight separate wires. These wires should have the same color codes as in Figure 1.


The next step should be to partially assemble the Ethernet housing with the four jacks. These should snap into position easily. Once mounted, begin wiring the first jack position using the solid orange wire. Use the next diagram as a guide. The wires can be inserted with a small screwdriver or some other small flat tool.
Once you have terminated all eight wires, trim off any excess wire that remains. Snap the housing closed, and you should now have a completed passive Ethernet tap (see Figure 2).




Figure 2: Passive Ethernet Tap


Instructions for Use


Place the passive Ethernet tap inline between a host machine and the Ethernet switch using the two outside positions labeled "HOST". Verify that the link status indicators on your host Ethernet interface and the Ethernet switch are connected again. You may now connect the Ethernet port of your sniffer or IDS sensor into the Tap A and/or Tap B connectors of the passive Ethernet tap.


Note: Keep in mind that when you have a full-duplex Ethernet connection, Tap A will show half-duplex traffic and Tap B will show the remaining traffic. You will need to use two Ethernet interfaces to examine both halves of the full-duplex signal. If you use Sun Trunking software, the traffic can be reassembled. See sun.com for information on Sun Trunking software.