PermaLink SMTP Server: Authentication is not enabled in the SMTP Internet Site Document for...
... or What 7 fixed - part 1.

My absotively last word on this subject (I hope)...

Having implemented D7 on our main inbound email server and smugly implemented an SMTP Inbound Site document using the method I described here enhanced by IBM's fix for the localhost issue, I was more than a little perturbed to see a small but significant number of
SMTP Server: Authentication is not enabled in the SMTP Internet Site Document for 

events logged at the console.

After extensive debugging (mainly involving blind alleys the details of which I will spare you) I have the following observations and recommendations:

  1. Don't panic.

  2. The 30 or so events per day here are all caused by no more than 3 remote hosts.

  3. Every one of those 3 hosts is not a known (to us or anyone else) mail sender.

  4. Two of those are verifiably infected with some malware or other and the third quite probably is too.

  5. Two belong to a company known to us whose email in and out continues to flow normally via their advertised mail host.

  6. Whatever malware it is that infests the affected systems is attempting to connect to SMTP on remote systems for some reason (not necessarily simple propagation) - I have not been able to sniff any inbound packets from these systems so the rest is educated guesswork.

  7. Malware is setting up the SMTP connection in some broken (possibly deliberately so) fashion.

  8. Domino sees an inbound SMTP connection to a host name or address it does not know. Remember, these are TCP packets and are easily spoofed.

  9. Domino sends a 421 transient failure response, writes the infamous "SMTP Server: Authentication is not enabled in the SMTP Internet Site Document for" message to the console and moves on.

Thus, so far as I am aware, this is not symptomatic of a failure in Domino 7 and you can safely ignore it - providing your SMTP Inbound Site document really is set up correctly.

Category: Domino 7
Technorati:

Comments :

1. Thomas OZENNE05/05/2006 15:53:45
Homepage: http://vecnix.net


I'd wish it would be so simple :) my smtp server simply refuses all connections




2. Chris Linfoot05/05/2006 16:26:44


It is simple. Drop me an email if you need help.




3. Nhan Ly17/08/2006 02:12:21


Hello Chris,

I ran accross your site while searching for the same error ("SMTP Server: Authentication is not enabled in the SMTP Internet Site Document for...") and I also receive this error "smtp server xxx.xxxx.xxxx.xxx is disconnected, 9 message received. I have Domino server 6.5.1. Suddendly the error appear this morning and I have not made any changes. Any advice on this problem is greatly appreciated. Please email your solution(s) to lynhant@yahoo.com.

Thank you,




4. Chris Linfoot17/08/2006 09:22:03


Please reread the above. This "error" is not necessarily a problem. Unless you have lost all inbound email...?




5. JJC05/06/2007 14:51:11


Was having the same issue. Server was refusing all connections internally and externally. Due to DNS records being messed up. Needed a CNAME record added for our domino server that did not have an underscore in the name in it (don't blame me for using an underscore, in inherited the box).

Like this:
host record: server_name.microsoft.com (10.1.1.2)
cname record: servername.microsoft.com (10.1.1.2)

Also restarted the server.




Unable to post a comment? Please read this for a possible explanation...
Add Manual Trackback
Please enter the details of the trackback post. Your trackback will not appear on the site until it has been verified. This won't be immediate, as trackbacks are validated on a scheduled basis. Be patient.











Search
Popular Categories
Monthly Archive
Other stuff
ClustrMaps
Contact Me
Meta
Proudly powered by IBM Lotus Domino 8 Proudly powered by IBM Lotus Domino 8

Subscribe to articles Subscribe to articles feed

Subscribe to comments Subscribe to comments feed

ROR info ROR info


My Amazon wish list Wishlist


Wikio - Top Blogs - Technology
Like what I do?
Research Autism Then please consider a donation to support the work of Research Autism.
Idea Jam
Planet Lotus
Dilbert