The mystery has been solved.

The subject emails were not in fact sent through our smtp host but
originated from a web application running on a host that is not listed
as authorised in our spf.  That was the real reason the person
reporting the error could not provide me with a copy of their original
message, which they cleverly managed to conceal until pressed on the
issue this morning.

They also resent the same messages manually through our proper mail
server immediately after the transmission failures.  So, there were
entries in our mail host logs that corresponded to the approximate
time that the error messages were generated but which showed no
transmission errors.

The offending web application is now configured to send through our
public mail server.

Thanks for all the help.  It was an educational experience.  Hopefully
not to be repeated but valuable none-the-less.


-- 
***          E-Mail is NOT a SECURE channel          ***
James B. Byrne                mailto:byrn...@harte-lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

Reply via email to