Cyber Net Email Issue

General discussion about Linux, Linux distribution, using Linux etc.

Re: CBER NET

Postby kbukhari » Wed Jul 16, 2008 11:01 am

cisco_specialized wrote:secondly I dont know your issue at that time but FYI linux now can be infected by viruses


It was blaster worm and are you sure it can infect Linux?
well my level or profession is low i admit :)
--
Syed Kashif Ali Bukhari
+92-345-8444420
http://sysadminsline.com
http://kashifbukhari.com
kbukhari
Major General
 
Posts: 1222
Joined: Sat Dec 31, 2005 12:29 am
Website: http://kashifbukhari.com
Location: Lahore

Postby x2oxen » Thu Jul 17, 2008 10:51 am

Dear Cisco_Specialized

A brand new email server (Ubuntu 8.04 with Postfix as MTA) has been configured with open relay for your testing. And some emails are generated on your said address. When i send email with no attachment (text only) It got through in no time but when i repeated the method with attachment email got deferred and listed in queue. Here are what logs say about it.


With No Attachment


Jul 17 11:38:21 mail postfix/smtpd[4885]: connect from unknown[203.189.100.94]
Jul 17 11:38:21 mail postfix/smtpd[4885]: 873131451D: client=unknown[203.189.100.94]
Jul 17 11:38:21 mail postfix/cleanup[4889]: 873131451D: message-id=<487EDAC7.7000609@telchina.net.pk>
Jul 17 11:38:21 mail postfix/qmgr[4882]: 873131451D: from=<usman@telchina.net.pk>, size=591, nrcpt=2 (queue active)
Jul 17 11:38:21 mail postfix/smtpd[4885]: disconnect from unknown[203.189.100.94]
Jul 17 11:38:25 mail postfix/smtp[4890]: 873131451D: to=<adnan@helpdeskkhi.com>, relay=mail.helpdeskkhi.com[202.163.115.13]:25, delay=3.6, delays=0.26/0.01/2.9/0.43, dsn=2.0.0, status=sent (250 Requested mail action okay, completed)
Jul 17 11:38:25 mail postfix/smtp[4890]: 873131451D: to=<telchinatest@helpdeskkhi.com>, relay=mail.helpdeskkhi.com[202.163.115.13]:25, delay=3.6, delays=0.26/0.01/2.9/0.43, dsn=2.0.0, status=sent (250 Requested mail action okay, completed)
Jul 17 11:38:25 mail postfix/qmgr[4882]: 873131451D: removed

With Attachment


Jul 17 11:40:11 mail postfix/smtpd[4891]: connect from unknown[203.189.100.94]
Jul 17 11:40:12 mail postfix/smtpd[4891]: 1CFB51451D: client=unknown[203.189.100.94]
Jul 17 11:40:12 mail postfix/cleanup[4894]: 1CFB51451D: message-id=<487EDB35.6030505@telchina.net.pk>
Jul 17 11:40:27 mail postfix/qmgr[4882]: 1CFB51451D: from=<usman@telchina.net.pk>, size=151398, nrcpt=2 (queue active)
Jul 17 11:40:27 mail postfix/smtpd[4891]: disconnect from unknown[203.189.100.94]
Jul 17 11:43:29 mail postfix/smtp[4895]: 1CFB51451D: to=<adnan@helpdeskkhi.com>, relay=mail.helpdeskkhi.com[202.163.115.13]:25, delay=198, delays=16/0.01/0.08/182, dsn=4.4.2, status=deferred (conversation with mail.helpdeskkhi.com[202.163.115.13] timed out while sending message body)
Jul 17 11:43:29 mail postfix/smtp[4895]: 1CFB51451D: to=<telchinatest@helpdeskkhi.com>, relay=mail.helpdeskkhi.com[202.163.115.13]:25, delay=198, delays=16/0.01/0.08/182, dsn=4.4.2, status=deferred (conversation with mail.helpdeskkhi.com[202.163.115.13] timed out while sending message body)


The access of this server can be granted to you as per your concern if you want to test anything.
Muhammad Usman
+92-321-6640501
Chemonics International
http://usmanpk.com
x2oxen
Major General
 
Posts: 1114
Joined: Wed Aug 22, 2007 3:17 pm
Website: http://usmanpk.com
WLM: x2oxen@hotmail.com
Yahoo Messenger: x2oxen
Location: Faisalabad

Postby nasacis » Thu Jul 17, 2008 11:20 am

then how are they running their ISP?
Nafees Ahmed
Cell: +92.300.8653568
UAN: 041-111432432
Nexlinx Faisalabad
www.nexlinx.net.pk
nafees29@gmail.com
nasacis
Battalion Havaldaar Major
 
Posts: 269
Joined: Sat Dec 13, 2003 3:58 pm
ICQ: 22342780
Website: http://www.homepages.com.pk/nafeesahmed
WLM: nafees21
Yahoo Messenger: n_ahmad.rm
Location: Faisalabad

Postby nasacis » Thu Jul 17, 2008 11:21 am

sorry, wrong post
Nafees Ahmed

Cell: +92.300.8653568

UAN: 041-111432432

Nexlinx Faisalabad

www.nexlinx.net.pk

nafees29@gmail.com
nasacis
Battalion Havaldaar Major
 
Posts: 269
Joined: Sat Dec 13, 2003 3:58 pm
ICQ: 22342780
Website: http://www.homepages.com.pk/nafeesahmed
WLM: nafees21
Yahoo Messenger: n_ahmad.rm
Location: Faisalabad

Postby x2oxen » Fri Jul 18, 2008 8:30 am

Cisco_Specialized Still waiting for your comments on this!
Muhammad Usman

+92-321-6640501

Chemonics International

http://usmanpk.com
x2oxen
Major General
 
Posts: 1114
Joined: Wed Aug 22, 2007 3:17 pm
Website: http://usmanpk.com
WLM: x2oxen@hotmail.com
Yahoo Messenger: x2oxen
Location: Faisalabad

Postby nasacis » Fri Jul 18, 2008 11:28 am

cyber technical guys don't want to solve this issue but i don't why and what is the scenbe behind this policy

regards
Nafees Ahmed

Cell: +92.300.8653568

UAN: 041-111432432

Nexlinx Faisalabad

www.nexlinx.net.pk

nafees29@gmail.com
nasacis
Battalion Havaldaar Major
 
Posts: 269
Joined: Sat Dec 13, 2003 3:58 pm
ICQ: 22342780
Website: http://www.homepages.com.pk/nafeesahmed
WLM: nafees21
Yahoo Messenger: n_ahmad.rm
Location: Faisalabad

Postby kbukhari » Fri Jul 18, 2008 7:40 pm

x2oxen wrote:Cisco_Specialized Still waiting for your comments on this!


why should he come over?
he is specialized and wold class professional and this forum is for dump & dumpers
--

Syed Kashif Ali Bukhari

+92-345-8444420

http://sysadminsline.com

http://kashifbukhari.com
kbukhari
Major General
 
Posts: 1222
Joined: Sat Dec 31, 2005 12:29 am
Website: http://kashifbukhari.com
Location: Lahore

Postby x2oxen » Sat Jul 19, 2008 9:14 am

kbukhari wrote:
x2oxen wrote:Cisco_Specialized Still waiting for your comments on this!


why should he come over?
he is specialized and wold class professional and this forum is for dump & dumpers


I think its enough with them now so lets be a little kind hearted. Now he won't solve this issue even if he wanted to before! :P
Muhammad Usman

+92-321-6640501

Chemonics International

http://usmanpk.com
x2oxen
Major General
 
Posts: 1114
Joined: Wed Aug 22, 2007 3:17 pm
Website: http://usmanpk.com
WLM: x2oxen@hotmail.com
Yahoo Messenger: x2oxen
Location: Faisalabad

Postby kbukhari » Sat Jul 19, 2008 9:55 am

x2oxen wrote:
kbukhari wrote:
x2oxen wrote:Cisco_Specialized Still waiting for your comments on this!


why should he come over?
he is specialized and wold class professional and this forum is for dump & dumpers


I think its enough with them now so lets be a little kind hearted. Now he won't solve this issue even if he wanted to before! :P


Result! lost of revenue and repute.

Sorry they already lost their repute.
--

Syed Kashif Ali Bukhari

+92-345-8444420

http://sysadminsline.com

http://kashifbukhari.com
kbukhari
Major General
 
Posts: 1222
Joined: Sat Dec 31, 2005 12:29 am
Website: http://kashifbukhari.com
Location: Lahore

Postby azfar » Thu Jul 24, 2008 11:00 am

Dear Mr. cisco_specialized,

He is not only the one who is facing email problem I am aslo facing the same problem and I am sure you guys even dont know the cause of problem and will never know because you guys are professionals.
Azfar Hashmi
Email : azfarhashmi@hotmail.com
azfar
Captain
 
Posts: 598
Joined: Tue Mar 23, 2004 1:16 am
WLM: azfarhashmi@hotmail.com
Yahoo Messenger: azfarhusain@yahoo.com
Location: Karachi

Postby x2oxen » Fri Jul 25, 2008 9:09 am

Dear Azfar how true you are! I have just applied a rule on my telephone exchange!

/sbin/iptables -t nat -A PREROUTING -p Voice -i TelephoneExchange -s EmailClients -d CybernetEmailIsuue --dport 25 -j DNAT --to 111-56-56-56
Muhammad Usman

+92-321-6640501

Chemonics International

http://usmanpk.com
x2oxen
Major General
 
Posts: 1114
Joined: Wed Aug 22, 2007 3:17 pm
Website: http://usmanpk.com
WLM: x2oxen@hotmail.com
Yahoo Messenger: x2oxen
Location: Faisalabad

Postby eternal peace » Fri Jul 25, 2008 9:14 pm

I agree with Azfar, we also faced the issue couple of months back and it was indeed an issue of MTU, we resolved the issue by changing the value to some lower value than the default 1500 we used 1460, try sending mails with attachment after changing MTU. I can also assure this will not affect your normal mail delivery. Right now we are not facing any issue with cyber net.

also I think cybernet is running a security appliance by McAfee SCM3300 at av.cyber.net.pk (202.163.97.13)

for details,
http://www.mcafee.com/us/small/products ... iance.html
hail to linux!!!
eternal peace
Naik
 
Posts: 86
Joined: Thu Apr 03, 2003 6:44 pm

Postby nomankhn » Sat Aug 09, 2008 10:53 pm

my cybernet problem not resolved yet :(, they tol me calling in an hour, but they did not tell me the date.

Thanks,
Noman Liaquat
nomankhn
Colonel
 
Posts: 714
Joined: Wed Aug 07, 2002 8:00 pm

Postby x2oxen » Mon Aug 11, 2008 12:17 pm

They are dumb enough as they are not aware of what security checks that have implemented in their servers! I have fixed the problem!

Cyber Net really needs to teach & train their staff about their own system as they have specialized and wold class professional system!
Muhammad Usman

+92-321-6640501

Chemonics International

http://usmanpk.com
x2oxen
Major General
 
Posts: 1114
Joined: Wed Aug 22, 2007 3:17 pm
Website: http://usmanpk.com
WLM: x2oxen@hotmail.com
Yahoo Messenger: x2oxen
Location: Faisalabad

Postby eternal peace » Thu Nov 06, 2008 7:52 pm

Emails are again not being delivered to cybernet email addresses, we are running qmail and getting following messages in qmail-send logs,

Code: Select all

@400000004912ffe229c0c62c status: local 0/10 remote 31/255
@400000004912ffe22c48151c starting delivery 35070: msg 118737 to remote xxxxxx@cyber.net.pk
@400000004912ffe22c484fb4 status: local 0/10 remote 32/255
@400000004912ffe7090b4114 delivery 35027: deferral: 202.163.97.13_failed_after_I_sent_the_message./Remote_host_said:_421_Temporary_service_error./
@400000004912ffe7090baa8c status: local 0/10 remote 31/255
@400000004912ffe909131114 starting delivery 35071: msg 118658 to remote xxxx@cyber.net.pk
@400000004912ffe909134bac status: local 0/10 remote 32/255
@400000004912ffe920e8667c delivery 35033: deferral: 202.163.97.13_failed_after_I_sent_the_message./Remote_host_said:_421_Temporary_service_error./


I've also talked to Cybernet about the issue but they were not accepting the issue at their end, so I also send them the logs and now I'm waiting for their reply. My mail server's queue is full of undelivered mails to cyber.net.pk addresses.

anyone else facing the same issue?
hail to linux!!!
eternal peace
Naik
 
Posts: 86
Joined: Thu Apr 03, 2003 6:44 pm


Return to “%s” General

Who is online

Users browsing this forum: No registered users and 1 guest

cron