[hobbit] Unexpected service response
Michael Lowery, MCSE/CCNP Allied Technology Group, LLC. 501.372.4909 ext. 223 Yes, the strange thing is that they all give the 501 error, except Exchange servers, which give a 502 response. They all were returning the 220 message, in the banner, though.
I have changed the smtp test to the following, and I get green, no flapping between Yellow and green anymore in the history files either.
Is the test just wrong by default, or should I be concerned that I had to change it from the default?
[smtp] send "ehlo hostname.domainname.com\r\nquit\r\n" expect "220" options banner port 25
-----Original Message----- From: Thomas [mailto:tlp-hobbit at holme-pedersen.dk] Sent: Friday, June 10, 2005 2:32 PM To: hobbit at hswn.dk Subject: Re: [hobbit] Unexpected service response
Have you tried to do a telnet to the host on port 25 and type the commands to see the responce ?
Br Thomas
Lowery, Michael wrote:
Well, I've upgraded to Hobbit 4.0.4 and I'm still having smtp testing issues. I'm hoping someone can help me figure out why this is happening and guide me in the right direction.
The problem is that I get Yellow results for a host that I'm running the smtp test on. The server is running postfix and I thought that information might be relevant, but it apparently isn't. This is happening on all my smtp servers, but this is the only host that remains Yellow. The others are always green, but have the same symptoms in their history files.
The error I get is "Unexpected service response" on the hobbit page.
In bb-services I have: [smtp] send "mail\r\nquit\r\n" expect "220" options banner port 25
In the hist file for the hosts, I get messages like the following:
Wed Jun 8 23:20:11 2005 yellow 1118290811 38 Wed Jun 8 23:20:49 2005 green 1118290849 262 Wed Jun 8 23:25:11 2005 yellow 1118291111 38 Wed Jun 8 23:25:49 2005 green 1118291149 262 Wed Jun 8 23:30:11 2005 yellow 1118291411 38 Wed Jun 8 23:30:49 2005 green 1118291449 263 Wed Jun 8 23:35:12 2005 yellow 1118291712 20405 Thu Jun 9 05:15:17 2005 green 1118312117 302 Thu Jun 9 05:20:19 2005 yellow 1118312419 30 Thu Jun 9 05:20:49 2005 green 1118312449 268 Thu Jun 9 05:25:17 2005 yellow 1118312717 33 Thu Jun 9 05:25:50 2005 green 1118312750 267 Thu Jun 9 05:30:17 2005 yellow 1118313017 33 Thu Jun 9 05:30:50 2005 green 1118313050 268 Thu Jun 9 05:35:18 2005 yellow 1118313318 32 Thu Jun 9 05:35:50 2005 green 1118313350 268 Thu Jun 9 05:40:18 2005 yellow 1118313618 31 Thu Jun 9 05:40:49 2005 green 1118313649 269 Thu Jun 9 05:45:18 2005 yellow 1118313918 31 Thu Jun 9 05:45:49 2005 green 1118313949 272 Thu Jun 9 05:50:21 2005 yellow 1118314221 100607 Fri Jun 10 09:47:08 2005 green 1118414828 297 Fri Jun 10 09:52:05 2005 yellow 1118415125 10 Fri Jun 10 09:52:15 2005 green 1118415135 292 Fri Jun 10 09:57:07 2005 yellow 1118415427 20 Fri Jun 10 09:57:27 2005 green 1118415447 279 Fri Jun 10 10:02:06 2005 yellow 1118415726 31 Fri Jun 10 10:02:37 2005 green 1118415757 268 Fri Jun 10 10:07:05 2005 yellow 1118416025 44 Fri Jun 10 10:07:49 2005 green 1118416069 256 Fri Jun 10 10:12:05 2005 yellow 1118416325 49 Fri Jun 10 10:12:54 2005 green 1118416374 251 Fri Jun 10 10:17:05 2005 yellow 1118416625 56 Fri Jun 10 10:18:01 2005 green 1118416681 244 Fri Jun 10 10:22:05 2005 yellow 1118416925 1202 Fri Jun 10 10:42:07 2005 green 1118418127 299 Fri Jun 10 10:47:06 2005 yellow 1118418426 55 Fri Jun 10 10:48:01 2005 green 1118418481 244 Fri Jun 10 10:52:05 2005 yellow 1118418725 61 Fri Jun 10 10:53:06 2005 green 1118418786 243 Fri Jun 10 10:57:09 2005 yellow 1118419029 62 Fri Jun 10 10:58:11 2005 green 1118419091 239 Fri Jun 10 11:02:10 2005 yellow 1118419330 11 Fri Jun 10 11:02:21 2005 green 1118419341 286 Fri Jun 10 11:07:07 2005 yellow 1118419627 25 Fri Jun 10 11:07:32 2005 green 1118419652 273 Fri Jun 10 11:12:05 2005 yellow 1118419925 41 Fri Jun 10 11:12:46 2005 green 1118419966 259 Fri Jun 10 11:17:05 2005 yellow 1118420225 51 Fri Jun 10 11:17:56 2005 green 1118420276 249 Fri Jun 10 11:22:05 2005 yellow 1118420525 10703
Any help is greatly appreciated.
Thanks, Michael
-----Original Message----- From: Lowery, Michael Sent: Tuesday, June 07, 2005 8:00 AM To: hobbit at hswn.dk Subject: RE: [hobbit] Unexpected service response
Ok, this may have been a stupid question, I don't know. But after further investigations, I see that this happens quite a bit on the other SMTP servers as well, they just report it occasionally and not long enough for me to be notified. There is only one host that constantly reports this.
Is there something I should change in the way the test works to avoid getting the "Unexpected service response" message?
Thanks, Michael
-----Original Message----- From: Lowery, Michael Sent: Monday, June 06, 2005 1:51 AM To: hobbit at hswn.dk Subject: [hobbit] Unexpected service response
I've never had a problem with the SMTP test before. Now, testing a postfix mail server, I get a Yellow alert, and the page says:
Service smtp on mail.domain.com is not OK : Unexpected service response
501 Syntax error in parameters or arguments
I can telnet to port 25 on this server with no problems from the hobbit server, I get a 220 message upon connect. Here is exactly what I get (names and IPs changed to protect the innocent). So what can be the problem here?
[root at hobbit etc]# telnet mail.domain.com 25 Trying 20.30.40.51... Connected to adsl-20-30-40-51.dsl.hometown.isp.net (20.30.40.51). Escape character is '^]'. 220 SMTP service ready
Thanks, Michael
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
-- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.6.4 - Release Date: 06-06-2005
To unsubscribe from the hobbit list, send an e-mail to hobbit-unsubscribe at hswn.dk
In <40534FFD21F8E9428DD8CCF2B60B09EC7C0C9D at atlitdc01.atg.local> "Lowery, Michael" <mlowery at alliedtechgroup.com> writes:
[smtp flipping between green and yellow]
I have changed the smtp test to the following, and I get green, no flapping between Yellow and green anymore in the history files either.
Is the test just wrong by default, or should I be concerned that I had to change it from the default?
[smtp] send "ehlo hostname.domainname.com\r\nquit\r\n" expect "220" options banner port 25
The original test was the same as the BB way of testing. That is not to say it was "right", just to explain where I grabbed it from.
Techically, the original test - which just sends "mail" and then "quit" - is improper; the "mail" command requires arguments, e.g. mail from: <some.email at address.net> so it isn't too surprising that some servers complain about it.
I'm tempted to change it to
[smtp] send "rset\r\nquit\r\n" expect "220" options banner port 25
and would like to hear if that also works with your setup. I think the reason for the "mail" command first was to please sendmail, which has a habit of logging connections that dont send a "mail" command (it generated a "NOQUEUE" entry in the log, but I dont know if it still does that).
Regards, Henrik
On 6/10/05, Henrik Storner <henrik at hswn.dk> wrote:
[smtp] send "rset\r\nquit\r\n" expect "220" options banner port 25
Unfortunately sendmail fills the syslog with messages like that below when only the rset is used....
Jun 13 21:55:43 external.mrgordon.net sendmail[4100]: [ID 801593 mail.info] j5DLthju004100: monitor.mrgordon.net [192.168.2.240] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
-- --==[ Bob Gordon ]==--
On Mon, Jun 13, 2005 at 02:59:35PM -0700, Bob Gordon wrote:
On 6/10/05, Henrik Storner <henrik at hswn.dk> wrote:
[smtp] send "rset\r\nquit\r\n" expect "220" options banner port 25
Unfortunately sendmail fills the syslog with messages like that below when only the rset is used....
Jun 13 21:55:43 external.mrgordon.net sendmail[4100]: [ID 801593 mail.info] j5DLthju004100: monitor.mrgordon.net [192.168.2.240] did not issue MAIL/EXPN/VRFY/ETRN during connection to MTA
(Going through the mailbox in preparation for the next release ...)
How about this one:
[smtp] send "vrfy postmaster\r\nquit\r\n" expect "220" options banner port 25
Works with qmail here ... hopefully it will work with Sendmail also.
participants (3)
-
henrik@hswn.dk
-
mlowery@alliedtechgroup.com
-
rgordonjr@gmail.com