Question about errors in exim_mainlog

NestMan

Active Member
May 10, 2016
25
0
1
Utah
cPanel Access Level
Root Administrator
I am new to troubleshooting email problems in the exam_mainlog. How come when there is a failure it starts with 5 nearly identical entries, each separated by a few seconds of time, followed by the actual error where the failed email address is identified? So all of the following is shown in the log to tell me that a particular email did not get delivered?

Thank you!


Code:
## Nearly identical entries

2016-07-21 02:43:47 1bPzKw-0003s1-G4 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=15757: 421 4.7.0 [TS01] Messages from 198.154.111.111 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html

2016-07-21 02:43:48 1bPzKw-0003s1-G4 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=15757: 421 4.7.0 [TS01] Messages from 198.154.111.111 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html

2016-07-21 02:43:48 1bPzKw-0003s1-G4 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=15757: 421 4.7.0 [TS01] Messages from 198.154.111.111 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html

2016-07-21 02:43:49 1bPzKw-0003s1-G4 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=15757: 421 4.7.0 [TS01] Messages from 198.154.111.111 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html

2016-07-21 02:43:49 1bPzKw-0003s1-G4 SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=15757: 421 4.7.0 [TS01] Messages from 198.154.111.111 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html

# Final error where the failed email address is identified

2016-07-21 02:43:49 1bPzKw-0003s1-G4 == [email protected] R=dkim_lookuphost T=dkim_remote_smtp defer (-45) H=mta6.am0.yahoodns.net [66.196.118.240]: SMTP error from remote mail server after MAIL FROM:<[email protected]> SIZE=15757: 421 4.7.0 [TS01] Messages from 198.154.111.111 temporarily deferred due to user complaints - 4.16.55.1; see https://help.yahoo.com/kb/postmaster/SLN3434.html
 
Last edited by a moderator:

NOC_Serverpoint

Well-Known Member
Jul 3, 2016
103
7
18
cPanel Access Level
Website Owner
Hello,

Your server is clearly black listed at the Yahoo's end that's why you are receiving these errors.

The important part is the specific error code, such as “BL21” or “TS01“. These along with the link will tell you the specific SMTP error that Yahoo! is returning. Always check this list of Yahoo’s SMTP Error Codes so you know exactly why you are listed.
https://help.yahoo.com/kb/postmaster/smtp-error-codes-sln23996.html

Before you try to request removal, be sure to analyze your server to find out why you were listed in the first place. You have to fix the issue or they will just list your server again.
Do not try to get removed from the blacklist if you have not found the source of the problem. You don’t want cycles of delisting and re-listing to damage your sender reputation. If you have found the problem, then simple wait. In many cases, I find that the block is removed in under 48 hours.

Don’t forget DNS.

Make sure that:

Reverse DNS resolves to a hostname.
Make sure the hostname has a A record.
Don’t use generic hostnames assigned by ISPs or server vendors.
SPF is valid.
DKIM is working properly.
DNS is one of the most critical elements to good email delivery, so always fix DNS issues as they could be why you are blacklisted in the first place.

For blacklist removal, Even if you are not a bulk sender, you will need to complete the Yahoo! Bulk Sender Form.
http://help.yahoo.com/l/us/yahoo/mail/postmaster/bulkv2.html

Also check the server black listings from :http://mxtoolbox.com/blacklists.aspx
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
How come when there is a failure it starts with 5 nearly identical entries, each separated by a few seconds of time, followed by the actual error where the failed email address is identified?
Hello,

You could search 1bPzKw-0003s1-G4 in /var/log/exim_mainlog with a command such as:

Code:
exigrep 1bPzKw-0003s1-G4 /var/log/exim_mainlog
Check to see if that particular message is sending to multiple Yahoo email addresses.

Thank you.
 

NestMan

Active Member
May 10, 2016
25
0
1
Utah
cPanel Access Level
Root Administrator
Thanks guys, but neither of you really answered my question, so I will politely ask again:

"How come when there is a failure it starts with 5 nearly identical entries, each separated by a few seconds of time, followed by the actual error where the failed email address is identified?"

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

Thank you.