标题: 400 cannot handshake with mail server [打印本页] 作者: Rluo 时间: 2007-6-3 16:50 标题: 400 cannot handshake with mail server 各位；
我们公司发送到[email=***@aol.com]***@aol.com[/email]的邮件都被退回；退回的信息如下；请帮追各位专家给说明一下是什么原因导致呢？不光是aol的邮件，其他的也有。
×××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××××
I'm afraid I wasn't able to deliver your message to the following address.
This is a permanent error; I've given up. I am sorry for this inconvenience. webmaster@aol.com Error Message: 400 cannot handshake with mail server
-------------------------------------------
the following is a part of original message:
Return-Path: <robin.luo@ptp.com.cn>
Received: from [10.52.163.21] by [10.52.163.22] with StormMail ESMTP id 44120.1989083641;
Thu, 31 May 2007 15:42:54 +0800 (CST)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C7A358.3E551929"
Subject: test 15:49
content-class: urn:content-classes:message
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
Date: Thu, 31 May 2007 15:49:40 +0800
Message-ID: <D166FDD09DD08A4B8AAEA8EFC3A50A0C3256C9@shanntx1.ptp.com.cn>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: test 15:49
Thread-Index: AcejWD3HH70ghnLcT7eCuTUT94mN1A==
From: "Luo, Robin" <Robin.Luo@ptp.com.cn>
To: <webmaster@aol.com>
This is a multi-part message in MIME format.
------_=_NextPart_001_01C7A358.3E551929
Content-Type: text/plain;
charset="gb2312"
Content-Transfer-Encoding: quoted-printable
Test
=20
Best Regards
=20
=20
------_=_NextPart_001_01C7A358.3E551929
Content-Type: text/html;
charset="gb2312"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; charset=3Dgb2312">
<META content=3D"MSHTML 6.00.2900.3086" name=3DGENERATOR></HEAD>
<BODY>
<DIV><SPAN class=3D522214907-31052007><FONT =
size=3D2>Test</FONT></SPAN></DIV>
<DIV> </DIV>
<DIV align=3Dleft><FONT size=3D2>Be作者: tdk 时间: 2007-6-3 17:37
是这个ip吧 反解应该没什么问题。
Answer:
220.248.90.50 PTR record: shanntx1.ptp.com.cn.
v=spf1 This identifies the TXT record as an SPF string.
a ptp.com.cn's IP address is 222.73.255.65.
That server is allowed to send mail from ptp.com.cn.
mx ptp.com.cn has one MX server, shanntx1.
It is allowed to send mail from ptp.com.cn.
If you add more MX servers in the future, they'll automatically be allowed, too.
~all SPF queries that do not match any other mechanism will return "softfail".
Messages that are not sent from an approved server should still be accepted but may be subjected to greater scrutiny.
You need to transfer these records to your DNS server by yourself. No changes can be made by the wizard, it can only provide you with the data that needs to be entered into your DNS server.
If you run BIND
Paste this into your zone file:
ptp.com.cn. IN TXT "v=spf1 a mx ~all"
When a mail server sends a bounce message, it uses a null MAIL FROM: <>, and a HELO address that's supposed to be its own name. SPF will still operate, but in "degraded mode" by using the HELO domain name instead. Because this wizard can't tell which name your mail server uses in its HELO command, it lists all possible names, so there may be multiple lines shown below. If you know which hostname your mail server uses in its HELO command, you should pick out the appropriate entries and ignore the rest.
So this should also appear in DNS. You may or may not be in charge of the DNS for these entries; if you are, add them.
shanntx1.ptp.com.cn. IN TXT "v=spf1 a -all"
If you run tinydns (djbdns)
'ptp.com.cn:v=spf1 a mx ~all:3600
'shanntx1.ptp.com.cn:v=spf1 a -all:3600
我也看到设置好了，但仍然是发不过去；提示：400 cannot handshake with mail server
我用telnet 到对方的25端口，提示：
[rfmngr@SHANNTX0 rfmngr]$ nslookup
Note: nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead. Run nslookup with
the `-sil[ent]' option to prevent this message from appearing.
> set type=mx
> aol.com
Server: 210.22.84.3
Address: 210.22.84.3#53
Non-authoritative answer:
aol.com mail exchanger = 15 mailin-03.mx.aol.com.
aol.com mail exchanger = 15 mailin-04.mx.aol.com.
aol.com mail exchanger = 15 mailin-01.mx.aol.com.
aol.com mail exchanger = 15 mailin-02.mx.aol.com.
Authoritative answers can be found from:
aol.com nameserver = dns-06.ns.aol.com.
aol.com nameserver = dns-07.ns.aol.com.
aol.com nameserver = dns-01.ns.aol.com.
aol.com nameserver = dns-02.ns.aol.com.
mailin-03.mx.aol.com internet address = 64.12.138.120
mailin-03.mx.aol.com internet address = 64.12.138.153
mailin-03.mx.aol.com internet address = 205.188.157.217
mailin-03.mx.aol.com internet address = 64.12.137.89
mailin-04.mx.aol.com internet address = 64.12.138.88
mailin-04.mx.aol.com internet address = 64.12.138.153
mailin-04.mx.aol.com internet address = 205.188.156.249
mailin-04.mx.aol.com internet address = 64.12.138.57
>
[rfmngr@SHANNTX0 rfmngr]$ telnet mailin-02.mx.aol.com 25
Trying 205.188.155.89...
Connected to mailin-02.mx.aol.com.
Escape character is '^]'.
554- (RTR:CH) http://postmaster.info.aol.com/errors/554rtrch.html
554 Connecting IP: 220.248.90.50
Connection closed by foreign host.
[rfmngr@SHANNTX0 rfmngr]$ telnet mailin-03.mx.aol.com 25
Trying 64.12.138.153...
Connected to mailin-03.mx.aol.com.
Escape character is '^]'.
554- (RTR:CH) http://postmaster.info.aol.com/errors/554rtrch.html
554 Connecting IP: 220.248.90.50
Connection closed by foreign host.
[rfmngr@SHANNTX0 rfmngr]$ telnet mailin-04.mx.aol.com 25
Trying 64.12.138.57...
Connected to mailin-04.mx.aol.com.
Escape character is '^]'.
554- (RTR:CH) http://postmaster.info.aol.com/errors/554rtrch.html
554 Connecting IP: 220.248.90.50
Connection closed by foreign host.
[rfmngr@SHANNTX0 rfmngr]$
Your IP address has generated AOL member complaints and your mail system may be compromised due to a virus or other security related issue.
SOLUTION:
Complaints:
When an AOL member clicks "this is spam" for a piece of email sent from one of your IPs, this is considered a "complaint". If you are having difficulty with the number of complaints you are receiving a feedback loop would benefit you. Once you have requested a feedback loop you will be notified when a member clicks "this is spam". See feedback loop for additional information.
Security:
Please contact your ISP or network administrator for assistance in securing your computer or network. Once you are confident the issue has been resolved please contact us to have the block removed.
Help | Updated Terms of Use | Updated Privacy Policy | Trademarks | Download AOL 9.0
Last Updated:
2006 AOL LLC.作者: Rluo 时间: 2007-6-4 16:11
AOL的信是一直发送不去，
其他一些域名的信，是有时可以，有时不可以；不行时也是提示：400 cannot handshake with mail server
我要晕死，已经被老板给冒火了；让我一定解决，我怎么搞啊 5555555555作者: tdk 时间: 2007-6-4 16:14
完了 你的ip被对方拒绝了 可能是rbl干的
你去www.5dmail.net/tools.htm 看看ip在什么spam库中吧作者: tdk 时间: 2007-6-4 16:15
Your IP address has generated AOL member complaints and your mail system may be compromised due to a virus or other security related issue.
When an AOL member clicks "this is spam" for a piece of email sent from one of your IPs,
Thank you for writing back and allowing me to further help you with this issue.
I understand how something like this can really try your patience and apologize for any inconvenience this has caused.Nonetheless, I am going to do my best to make sure you receive all the help you need.
AOL may have received large amounts of junk e-mail from someone using this domain name. Please ask your system administrator or Internet Service Provider to call the AOL Postmaster Hotline at 1-888-212-5537.
The Postmaster Team, which is available 7 days a week, 24 hours a day, can work with the ISP to quickly resolve the issue. Additional information is available at the AOL Postmaster Web Site: http://postmaster.info.aol.com/
Thank you for taking the time to write to AOL. I hope that I have provided you with useful information regarding your concern.
-----Original Message-----
From: MAILER-DAEMON@ptp.com.cn [mailto:MAILER-DAEMON@ptp.com.cn]
Sent: Tuesday, May 08, 2007 4:10 PM
To: Herron, Jon
Subject: failure notice
I'm afraid I wasn't able to deliver your message to the following address.
This is a permanent error; I've given up. I am sorry for this inconvenience. wrherron@aol.com Error Message: 400 cannot handshake with mail server
-------------------------------------------
the following is a part of original message:
Return-Path: <jon.herron@ptp.com.cn>
Received: from [10.52.163.21] by [10.52.163.22] with StormMail ESMTP id 42447.579086456;
Mon, 7 May 2007 11:26:35 +0800 (CST)
Subject: Lots of Photos
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----_=_NextPart_001_01C79058.70031D0D"
Date: Mon, 7 May 2007 11:33:11 +0800
content-class: urn:content-classes:message
Message-ID: <D166FDD09DD08A4B8AAEA8EFC3A50A0C2E29E5@shanntx1.ptp.com.cn>
X-MimeOLE: Produced By Microsoft Exchange V6.0.6249.0
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator: <D166FDD09DD08A4B8AAEA8EFC3A50A0C2E29E5@shanntx1.ptp.com.cn>
Thread-Topic: Lots of Photos
Thread-Index: AceQWG9RCcXcrHbaSC2Wsw/7E8AY0Q==
From: "Herron, Jon" <Jon.Herron@ptp.com.cn>
To: <wrherron@aol.com>,
<nlongwor@nsw.bigpond.net.au>,
<jacherron@optusnet.com.au>,
<amcardle@ozemail.com.au>
This is a multi-part message in MIME format.
------_=_NextPart_001_01C79058.70031D0D
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
Hi Everyone
It has been a while since I have sent any photos. Here are some of the latest including some from Disneyland.
I understand that you are having difficulties sending e-mails to AOL members.
I apologize for the inconvenience this has caused you.
AOL has developed Solicited Bulk Mailing Guidelines to both aid 'netizens' with their online marketing campaigns and to protect our member base from e-mail abuse.
If you believe your organization's e-mail provider can adhere to AOL guidelines provided at http://postmaster.info.aol.com/guidelines/index.html, please ask your e-mail provider to call our Postmaster Hotline at 703-265-4670 or 1-888-212-5537 and the Postmaster group will evaluate your mailing patterns and resolve any outstanding issues with your server or domain.
AOL has developed a site for Internet users who are experiencing problems sending e-mail to AOL or for people who have questions about AOL's e-mail and junk e-mail policies at http://postmaster.info.aol.com/index.html.
I am an administrator of PTP company in China. We couldn't send the mail to
@aol.com, the system always refused our email from security filter,
would you please remove this limit from your security filter list.
Here is the information of our company.
Company Name: Plantation Timber Products Group.
Address: Suite 902－908, Dongfang Building, 31 Wujiang Road,
Shanghai, China.
Contract Phone: (86)-(21)-52110909 Contract Person: luo robin
Contract Email: robin.luo@ptp.com.cnrobin_luo_min@163.com
Web site: www.ptp.com.cn
POP3: shanntx1.ptp.com.cn IP address: 220.248.90.50
The Second POP3: shanntx1.ptp.com.cn IP address: 220.248.90.50
thanks & regards
robin作者: Rluo 时间: 2007-6-4 16:28
我看了反相解析已经好了：
shanntx1.ptp.com.cn is not an IP address, so I am using 220.248.90.50 (the A record for shanntx1.ptp.com.cn).
Location: China [City: Shanghai, Shanghai]
Preparation:
The reverse DNS entry for an IP is found by reversing the IP, adding it to "in-addr.arpa", and looking up the PTR record.
So, the reverse DNS entry for 220.248.90.50 is found by looking up the PTR record for
50.90.248.220.in-addr.arpa.
All DNS requests start by asking the root servers, and they let us know what to do next.
See How Reverse DNS Lookups Work for more information.
How I am searching:
Asking c.root-servers.net for 50.90.248.220.in-addr.arpa PTR record:
c.root-servers.net says to go to ns-sec.ripe.net. (zone: 220.in-addr.arpa.)
Asking ns-sec.ripe.net. for 50.90.248.220.in-addr.arpa PTR record:
ns-sec.ripe.net [193.0.0.196] says to go to sh-dns.cncnet.net. (zone: 248.220.in-addr.arpa.)
Asking sh-dns.cncnet.net. for 50.90.248.220.in-addr.arpa PTR record: Timed out [at 210.52.207.2]. Trying again.
Asking bj-dns.cncnet.net. for 50.90.248.220.in-addr.arpa PTR record: Timed out [at 210.52.149.2]. Trying again.
Asking sh-dns.cncnet.net. for 50.90.248.220.in-addr.arpa PTR record: Timed out [at 210.52.207.2]. Trying again.
Asking bj-dns.cncnet.net. for 50.90.248.220.in-addr.arpa PTR record: Timed out [at 210.52.149.2]. Trying again.
Asking bj-dns.cncnet.net. for 50.90.248.220.in-addr.arpa PTR record:
bj-dns.cncnet.net [210.52.149.2] says to go to dns-chj.sh.cncnet.net. (zone: 90.248.220.in-addr.arpa.)
Asking dns-chj.sh.cncnet.net. for 50.90.248.220.in-addr.arpa PTR record: Reports shanntx1.ptp.com.cn. [from 210.22.70.3]
To see the reverse DNS traversal, to make sure that all DNS servers are reporting the correct results, you can Click Here.
SPF也已经设置：
[rfmngr@SHANNTX0 rfmngr]$ nslookup
Note: nslookup is deprecated and may be removed from future releases.
Consider using the `dig' or `host' programs instead. Run nslookup with
the `-sil[ent]' option to prevent this message from appearing.
> set query=txt
> ptp.com.cn
Server: 210.22.84.3
Address: 210.22.84.3#53
Non-authoritative answer:
ptp.com.cn text = "v=spf1 a mx ~all"
Authoritative answers can be found from:
ptp.com.cn nameserver = dns7.hichina.com.
ptp.com.cn nameserver = dns8.hichina.com.
dns7.hichina.com internet address = 218.30.103.247
dns7.hichina.com internet address = 218.30.103.250
dns8.hichina.com internet address = 218.244.143.41
好像也没有rbl嘛； 要么朋友在www.5dmail.net/tools.htm帮我看看作者: tdk 时间: 2007-6-4 16:30
看dns报告 mail server hostname 有个警告不知道影响多少 估计问题不太大
