添加链接
link管理
链接快照平台
  • 输入网页链接,自动生成快照
  • 标签化管理网页链接

Hi,

One of my client is getting the below error log on Ironport while sending and receiving email with attachment size of 1.5MB and above to/from Yahoo domain.  (Any file type attachment).

Emails with file size lower then 1.5MB are being sent successfully, Gmail and hotmail are working fine as well.

Info: Delivery start DCID 771662 MID 658038 to RID [0]

Info: Connection Error: DCID 771662 domain: yahoo.com IP: 98.138.112.35 port: 25 details: [Errno 54] Connection reset by peer interface: xxx.xxx.xxx.xxx  reason: network error

Info: Delayed: DCID 771662 MID 658038 to RID 0 - 4.4.0 - Other network problem ('000', ['[Errno 54] Connection reset by peer']) []

Pls reply if anyone knows solution to this.

Regards,

Hi ,,

Yes the customer has ASA in front of the ESA..

ESMTP inspection is already disabled on the ASA but still the problem is persisting with sending/receiving mail to/from Yahoo with attachment size of 1.5MB and above.

Mail with attachement size of 1.5MB and below are sent and received properly.

Thanks

Hello Inthikhab,

I think this issue would be strongly related to firewall or network issues as a timeout error would mean the appliance sent the initial connection for delivery out, it was established and when delivering the data, the connection had not received responses and eventually timed out and dropped.

I would suggest the following actions:

- Review your firewall logs for connections and packets from your appliance's delivery IP to the yahoo mail servers in the instances where these errors occur as it seems like packet loss or packets being interrupted by firewalls which can cause this.

And if you wish to see if the appliance is not delivering the data properly :-

Log into GUI > System Admin > Log Subscriptions > Create a new log

Log type -> Domain Debug Log > Domain name -> yahoo.com

Submit this log and commit this change.

Replicate this delivery issue so it tracks this down.

It is highly likely that the appliance sends all the data to the receiving side but no response is given back so the appliance treats this as a time-out and the connection is dropped.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

  • How to use Community
  • New Community Member Guide
  • Knowledge Articles Cisco Secure Email Gateway Release Notes Cisco Secure Email and Web Manager Release Notes Cisco Cybersecurity Viewpoints Guided Resources