I'm currently investigating a mail loop issue and would like to know how can I resolved this issue.
Our exchange server has a max. limit of 30hop counts. However when this person (not our client) forwards an email to a distirbution list (postfix) and one of the recipient on that distribution list auto-forwards all mails to to his mailbox here in our exchange server the mail will not arrived in our exchange server. (we cant even find it even with diagnostic logging turned on or in message tracking)
The sender will always received status 4.4.6 this only occurs on the email that is auto-forwarded to our server. Client settings does not have forwarding rules.
ANy idea?
below is the header: notes: a) postfix1.comp.nus.edu.sg -> is the senders mail server b)smtp.ourdomain.sg -> is our mail server
Received: from postfix1.comp.nus.edu.sg ([137.132.84.21]) by smtp.ourdomain.sg with Microsoft SMTPSVC(6.0.3790.1830); Thu, 11 Oct 2007 18:14:37 +0800 Received: from localhost (avs1.comp.nus.edu.sg [192.168.20.25]) by postfix1.comp.nus.edu.sg (Postfix) with ESMTP id 5433A242FF; Thu, 11 Oct 2007 18:14:36 +0800 (SGT) X-Virus-Scanned: amavisd-new at comp.nus.edu.sg Received: from postfix1.comp.nus.edu.sg ([192.168.21.75]) by localhost (avs1.comp.nus.edu.sg [192.168.20.25]) (amavisd-new, port 10024) with ESMTP id p6FXpk7meQ04; Thu, 11 Oct 2007 18:14:37 +0800 (SGT) Received: from stfimaphost0.comp.nus.edu.sg (stfimaphost0.comp.nus.edu.sg [137.132.90.40]) by postfix1.comp.nus.edu.sg (Postfix) with ESMTP; Thu, 11 Oct 2007 18:14:36 +0800 (SGT) Received: by stfimaphost0.comp.nus.edu.sg (Postfix) id 67AC210F01; Thu, 11 Oct 2007 18:14:34 +0800 (SGT) Received: from postfix1.comp.nus.edu.sg (postfix1.comp.nus.edu.sg [192.168.21.75]) by stfimaphost0.comp.nus.edu.sg (Postfix) with ESMTP id 5E21310F00 for <appnsp@staff-mg.comp.nus.edu.sg>; Thu, 11 Oct 2007 18:14:34 +0800 (SGT) Received: from localhost (avs1.comp.nus.edu.sg [192.168.20.25]) by postfix1.comp.nus.edu.sg (Postfix) with ESMTP id 4CAAC242FF for <appnsp@comp.nus.edu.sg>; Thu, 11 Oct 2007 18:14:34 +0800 (SGT) X-Virus-Scanned: amavisd-new at comp.nus.edu.sg Received: from postfix1.comp.nus.edu.sg ([192.168.21.75]) by localhost (avs1.comp.nus.edu.sg [192.168.20.25]) (amavisd-new, port 10024) with ESMTP id qCtXn4aKPcpd for <appnsp@comp.nus.edu.sg>; Thu, 11 Oct 2007 18:14:35 +0800 (SGT) Received: from suna0.comp.nus.edu.sg (suna0.comp.nus.edu.sg [192.168.20.70]) by postfix1.comp.nus.edu.sg (Postfix) with ESMTP for <appnsp@comp.nus.edu.sg>; Thu, 11 Oct 2007 18:14:34 +0800 (SGT) Received: by suna0.comp.nus.edu.sg (Postfix, from userid 1095) id 0CDB7C381; Thu, 11 Oct 2007 18:14:34 +0800 (SGT) Resent-From: yeoak@comp.nus.edu.sg Resent-Date: Thu, 11 Oct 2007 18:14:33 +0800 Resent-Message-ID: <20071011101433.GH28186@comp.nus.edu.sg> Resent-To: appnsp@comp.nus.edu.sg X-Original-To: yeoak@staffunix-mb.comp.nus.edu.sg Received: from postfix1.comp.nus.edu.sg (postfix1.comp.nus.edu.sg [192.168.21.75]) by stfimaphost0.comp.nus.edu.sg (Postfix) with ESMTP id 73D3C15CD8; Wed, 10 Oct 2007 05:49:24 +0800 (SGT) Received: from localhost (avs1.comp.nus.edu.sg [192.168.20.25]) by postfix1.comp.nus.edu.sg (Postfix) with ESMTP id 5B1502426F; Wed, 10 Oct 2007 05:49:24 +0800 (SGT) X-Virus-Scanned: amavisd-new at comp.nus.edu.sg Received: from postfix0.comp.nus.edu.sg ([192.168.21.67]) by localhost (avs1.comp.nus.edu.sg [192.168.20.25]) (amavisd-new, port 10024) with ESMTP id TEnMWbGv7OYg; Wed, 10 Oct 2007 05:49:16 +0800 (SGT) Received: from canaveral.indigo.cert.org (canaveral.indigo.cert.org [192.88.209.130]) by postfix0.comp.nus.edu.sg (Postfix) with ESMTP; Wed, 10 Oct 2007 05:49:14 +0800 (SGT) Received: from canaveral.indigo.cert.org (localhost [127.0.0.1]) by canaveral.indigo.cert.org (8.13.1/8.13.1/1.31) with ESMTP id l99Ln2ES003342; Tue, 9 Oct 2007 17:49:02 -0400 Received: from localhost (lnchuser@localhost) by canaveral.indigo.cert.org (8.13.1/8.13.1/Submit/1.1) with SMTP id l99JGLrg027568; Tue, 9 Oct 2007 15:16:21 -0400 Date: Tue, 9 Oct 2007 15:16:21 -0400 Message-Id: <TA07-282A.5058@us-cert.gov> From: CERT Advisory <cert-advisory@cert.org> To: cert-advisory@cert.org Organization: CERT(R) Coordination Center - +1 412-268-7090 List-Help: <http://www.cert.org/>, <mailto:Majordomo@cert.org?body=help> List-Unsubscribe: <mailto:Majordomo@cert.org?body=unsubscribe%20cert-advisory> List-Post: NO (posting not allowed on this list) List-Owner: <[email=cert-advisory-owner@cert.org]mailto:cert-advisory-owner@cert.org[/email]> List-Archive: <http://www.cert.org/> Subject: US-CERT Technical Cyber Security Alert TA07-282A -- Microsoft Updates for Multiple Vulnerabilities Precedence: list Return-Path: yeoak@comp.nus.edu.sg X-OriginalArrivalTime: 11 Oct 2007 10:14:37.0208 (UTC) FILETIME=[871EA180:01C80BEF]