Компьютерный форум OSzone.net  

Компьютерный форум OSzone.net (http://forum.oszone.net/index.php)
-   Microsoft Exchange Server (http://forum.oszone.net/forumdisplay.php?f=76)
-   -   [решено] 535 5.7.3 Authentication unsuccessful (http://forum.oszone.net/showthread.php?t=334292)

merdzd 12-04-2018 09:05 2808388
535 5.7.3 Authentication unsuccessful
 
Доброго дня.
Ошибка по теме, возникает при некоторых входящих рассылках (noreply@SENDER.ru) в основном с сервера 187.253.200.115.
С их же сервера же 62.152.55.8 . Всё гладко.
в ресив коннекторе стоят все галочки. анонимус и тд.

Скрытый текст

2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,3,10.0.0.8:25,62.152.55.8:53789,<,EHLO ORCA.SENDER.ru,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,4,10.0.0.8:25,62.152.55.8:53789,>,250-EMAIL.Myfirm.ru Hello [62.152.55.8],
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,5,10.0.0.8:25,62.152.55.8:53789,>,250-SIZE,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,6,10.0.0.8:25,62.152.55.8:53789,>,250-PIPELINING,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,7,10.0.0.8:25,62.152.55.8:53789,>,250-DSN,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,8,10.0.0.8:25,62.152.55.8:53789,>,250-ENHANCEDSTATUSCODES,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,9,10.0.0.8:25,62.152.55.8:53789,>,250-STARTTLS,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,10,10.0.0.8:25,62.152.55.8:53789,>,250-X-ANONYMOUSTLS,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,11,10.0.0.8:25,62.152.55.8:53789,>,250-AUTH NTLM LOGIN,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,12,10.0.0.8:25,62.152.55.8:53789,>,250-X-EXPS GSSAPI NTLM,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,13,10.0.0.8:25,62.152.55.8:53789,>,250-8BITMIME,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,14,10.0.0.8:25,62.152.55.8:53789,>,250-BINARYMIME,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,15,10.0.0.8:25,62.152.55.8:53789,>,250-CHUNKING,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,16,10.0.0.8:25,62.152.55.8:53789,>,250-XEXCH50,
2018-04-04T05:55:34.315Z,EMAIL\Default EMAIL,08D58F20963FA836,17,10.0.0.8:25,62.152.55.8:53789,>,250 XRDST,
2018-04-04T05:55:34.364Z,EMAIL\Default EMAIL,08D58F20963FA836,18,10.0.0.8:25,62.152.55.8:53789,<,MAIL FROM:<noreply@SENDER.ru>,
2018-04-04T05:55:34.364Z,EMAIL\Default EMAIL,08D58F20963FA836,19,10.0.0.8:25,62.152.55.8:53789,*,08D58F20963FA836;2018-04-04T05:55:34.277Z;1,receiving message
2018-04-04T05:55:34.364Z,EMAIL\Default EMAIL,08D58F20963FA836,20,10.0.0.8:25,62.152.55.8:53789,>,250 2.1.0 Sender OK,
2018-04-04T05:55:34.407Z,EMAIL\Default EMAIL,08D58F20963FA836,21,10.0.0.8:25,62.152.55.8:53789,<,RCPT TO:<leonid@Myfirm.ru>,
2018-04-04T05:55:34.876Z,EMAIL\Default EMAIL,08D58F20963FA836,22,10.0.0.8:25,62.152.55.8:53789,>,250 2.1.5 Recipient OK,
2018-04-04T05:55:34.907Z,EMAIL\Default EMAIL,08D58F20963FA836,23,10.0.0.8:25,62.152.55.8:53789,<,BDAT 1165 LAST,
2018-04-04T05:55:41.632Z,EMAIL\Default EMAIL,08D58F20963FA837,0,10.0.0.8:25,187.253.200.115:44281,+,,
2018-04-04T05:55:41.632Z,EMAIL\Default EMAIL,08D58F20963FA837,1,10.0.0.8:25,187.253.200.115:44281,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2018-04-04T05:55:41.632Z,EMAIL\Default EMAIL,08D58F20963FA837,2,10.0.0.8:25,187.253.200.115:44281,>,"220 EMAIL.Myfirm.ru Microsoft ESMTP MAIL Service ready at Wed, 4 Apr 2018 08:55:41 +0300",




2018-04-04T05:55:41.852Z,EMAIL\Default EMAIL,08D58F20963FA837,3,10.0.0.8:25,187.253.200.115:44281,<,EHLO User,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,4,10.0.0.8:25,187.253.200.115:44281,>,250-EMAIL.Myfirm.ru Hello [187.253.200.115],
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,5,10.0.0.8:25,187.253.200.115:44281,>,250-SIZE,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,6,10.0.0.8:25,187.253.200.115:44281,>,250-PIPELINING,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,7,10.0.0.8:25,187.253.200.115:44281,>,250-DSN,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,8,10.0.0.8:25,187.253.200.115:44281,>,250-ENHANCEDSTATUSCODES,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,9,10.0.0.8:25,187.253.200.115:44281,>,250-STARTTLS,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,10,10.0.0.8:25,187.253.200.115:44281,>,250-X-ANONYMOUSTLS,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,11,10.0.0.8:25,187.253.200.115:44281,>,250-AUTH NTLM LOGIN,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,12,10.0.0.8:25,187.253.200.115:44281,>,250-X-EXPS GSSAPI NTLM,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,13,10.0.0.8:25,187.253.200.115:44281,>,250-8BITMIME,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,14,10.0.0.8:25,187.253.200.115:44281,>,250-BINARYMIME,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,15,10.0.0.8:25,187.253.200.115:44281,>,250-CHUNKING,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,16,10.0.0.8:25,187.253.200.115:44281,>,250-XEXCH50,
2018-04-04T05:55:41.853Z,EMAIL\Default EMAIL,08D58F20963FA837,17,10.0.0.8:25,187.253.200.115:44281,>,250 XRDST,
2018-04-04T05:55:42.053Z,EMAIL\Default EMAIL,08D58F20963FA837,18,10.0.0.8:25,187.253.200.115:44281,<,AUTH LOGIN,
2018-04-04T05:55:42.053Z,EMAIL\Default EMAIL,08D58F20963FA837,19,10.0.0.8:25,187.253.200.115:44281,>,334 <authentication response>,
2018-04-04T05:55:42.266Z,EMAIL\Default EMAIL,08D58F20963FA837,20,10.0.0.8:25,187.253.200.115:44281,>,334 <authentication response>,
2018-04-04T05:55:42.470Z,EMAIL\Default EMAIL,08D58F20963FA837,21,10.0.0.8:25,187.253.200.115:44281,*,,Inbound AUTH LOGIN failed because of LogonDenied
2018-04-04T05:55:42.528Z,EMAIL\Default EMAIL,08D58F20963FA836,24,10.0.0.8:25,62.152.55.8:53789,>,250 2.6.0 <5AC468D505335030.0299025340000000@datex.ru> Queued mail for delivery,
2018-04-04T05:55:42.595Z,EMAIL\Default EMAIL,08D58F20963FA836,25,10.0.0.8:25,62.152.55.8:53789,<,RSET,
2018-04-04T05:55:42.595Z,EMAIL\Default EMAIL,08D58F20963FA836,26,10.0.0.8:25,62.152.55.8:53789,>,250 2.0.0 Resetting,
2018-04-04T05:55:42.627Z,EMAIL\Default EMAIL,08D58F20963FA836,27,10.0.0.8:25,62.152.55.8:53789,<,MAIL FROM:<noreply@SENDER.ru>,
2018-04-04T05:55:42.627Z,EMAIL\Default EMAIL,08D58F20963FA836,28,10.0.0.8:25,62.152.55.8:53789,*,08D58F20963FA836;2018-04-04T05:55:34.277Z;2,receiving message
2018-04-04T05:55:42.627Z,EMAIL\Default EMAIL,08D58F20963FA836,29,10.0.0.8:25,62.152.55.8:53789,>,250 2.1.0 Sender OK,
2018-04-04T05:55:42.675Z,EMAIL\Default EMAIL,08D58F20963FA836,30,10.0.0.8:25,62.152.55.8:53789,<,RCPT TO:<leonid@Myfirm.ru>,
2018-04-04T05:55:42.678Z,EMAIL\Default EMAIL,08D58F20963FA836,31,10.0.0.8:25,62.152.55.8:53789,>,250 2.1.5 Recipient OK,
2018-04-04T05:55:42.715Z,EMAIL\Default EMAIL,08D58F20963FA836,32,10.0.0.8:25,62.152.55.8:53789,<,BDAT 1101 LAST,
2018-04-04T05:55:43.137Z,EMAIL\Default EMAIL,08D58F20963FA836,33,10.0.0.8:25,62.152.55.8:53789,>,250 2.6.0 <5AC468D6742E683E.0241804D40000000@datex.ru> Queued mail for delivery,
2018-04-04T05:55:43.173Z,EMAIL\Default EMAIL,08D58F20963FA836,34,10.0.0.8:25,62.152.55.8:53789,<,QUIT,
2018-04-04T05:55:43.173Z,EMAIL\Default EMAIL,08D58F20963FA836,35,10.0.0.8:25,62.152.55.8:53789,>,221 2.0.0 Service closing transmission channel,
2018-04-04T05:55:43.174Z,EMAIL\Default EMAIL,08D58F20963FA836,36,10.0.0.8:25,62.152.55.8:53789,-,,Local
2018-04-04T05:55:47.473Z,EMAIL\Default EMAIL,08D58F20963FA837,22,10.0.0.8:25,187.253.200.115:44281,>,535 5.7.3 Authentication unsuccessful,
2018-04-04T05:55:47.678Z,EMAIL\Default EMAIL,08D58F20963FA837,23,10.0.0.8:25,187.253.200.115:44281,<,QUIT,
2018-04-04T05:55:47.678Z,EMAIL\Default EMAIL,08D58F20963FA837,24,10.0.0.8:25,187.253.200.115:44281,>,221 2.0.0 Service closing transmission channel,
2018-04-04T05:55:47.680Z,EMAIL\Default EMAIL,08D58F20963FA837,25,10.0.0.8:25,187.253.200.115:44281,-,,Local
2018-04-04T05:56:45.854Z,EMAIL\Default EMAIL,08D58F20963FA839,0,10.0.0.8:25,93.189.83.36:2100,+,,
2018-04-04T05:56:45.854Z,EMAIL\Default EMAIL,08D58F20963FA839,1,10.0.0.8:25,93.189.83.36:2100,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2018-04-04T05:56:45.855Z,EMAIL\Default EMAIL,08D58F20963FA839,2,10.0.0.8:25,93.189.83.36:2100,>,"220 EMAIL.Myfirm.ru Microsoft ESMTP MAIL Service ready at Wed, 4 Apr

cameron 12-04-2018 11:11 2808422
вот же ответ
Цитата:
Цитата merdzd
2018-04-04T05:55:42.053Z,EMAIL\Default EMAIL,08D58F20963FA837,19,10.0.0.8:25,187.253.200.115:44281,>,334 <authentication response>,
2018-04-04T05:55:42.266Z,EMAIL\Default EMAIL,08D58F20963FA837,20,10.0.0.8:25,187.253.200.115:44281,>,334 <authentication response>,
2018-04-04T05:55:42.470Z,EMAIL\Default EMAIL,08D58F20963FA837,21,10.0.0.8:25,187.253.200.115:44281,*,,Inbound AUTH LOGIN failed because of LogonDenied »
явная попытка авторизации.

merdzd 12-04-2018 11:41 2808435
Цитата:
Цитата cameron
явная попытка авторизации »
Согласен, так им и сказал.
Вернее переслал через нашего сотрудника.
Они же не специально это делают...
Что посоветовать им?

cameron 12-04-2018 11:49 2808438
Цитата:
Цитата merdzd
Что посоветовать им? »
это отправляет скрипт или софт - в нём убрать аунтификацию.

merdzd 12-04-2018 12:48 2808454
Кстати есть прямые попытки авторизации на сервере.

Код:
2018-04-12T00:23:48.968Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,3,10.0.0.8:25,118.201.203.86:49231,<,HELO EMAIL.MYFirm.ru,
2018-04-12T00:23:48.968Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,4,10.0.0.8:25,118.201.203.86:49231,>,250 EMAIL.MYFirm.ru Hello [118.201.203.86],
2018-04-12T00:23:49.370Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,5,10.0.0.8:25,118.201.203.86:49231,<,AUTH LOGIN,
2018-04-12T00:23:49.370Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,6,10.0.0.8:25,118.201.203.86:49231,>,334 <authentication response>,
2018-04-12T00:23:49.772Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,7,10.0.0.8:25,118.201.203.86:49231,>,334 <authentication response>,
2018-04-12T00:23:50.175Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,8,10.0.0.8:25,118.201.203.86:49231,*,,Inbound AUTH LOGIN failed because of LogonDenied
2018-04-12T00:23:55.178Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,9,10.0.0.8:25,118.201.203.86:49231,>,535 5.7.3 Authentication unsuccessful,
2018-04-12T00:23:55.610Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,10,10.0.0.8:25,118.201.203.86:49231,<,QUIT,
2018-04-12T00:23:55.610Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,11,10.0.0.8:25,118.201.203.86:49231,>,221 2.0.0 Service closing transmission channel,
2018-04-12T00:23:55.611Z,EMAIL\Default EMAIL,08D59DE9DFBB36F1,12,10.0.0.8:25,118.201.203.86:49231,-,,Local
2018-04-12T00:24:17.337Z,EMAIL\Default EMAIL,08D59DE9DFBB36F3,0,10.0.0.8:25,91.209.70.221:37259,+,,
2018-04-12T00:24:17.337Z,EMAIL\Default EMAIL,08D59DE9DFBB36F3,1,10.0.0.8:25,91.209.70.221:37259,*,SMTPSubmit SMTPAcceptAnySender SMTPAcceptAuthoritativeDomainSender AcceptRoutingHeaders,Set Session Permissions
2018-04-12T00:24:17.338Z,EMAIL\Default EMAIL,08D59DE9DFBB36F3,2,10.0.0.8:25,91.209.70.221:37259,>,"220 EMAIL.MYFirm.ru Microsoft ESMTP MAIL Service ready at Thu, 12 Apr 2018 03:24:16 +0300",
Что вы делаете с такими?
Баните IP/или всю маску провайдера.
Я пока баню если они в Китае зарегистрированы.

cameron 12-04-2018 13:36 2808470
Цитата:
Цитата merdzd
Что вы делаете с такими? »
на ЕХ ничего. у меня перед ним фильтрующий МТА.


Время: 23:22.

Время: 23:22.
© OSzone.net 2001-