Logout

Alt-N Discussion Groups > MDaemon Discussion Groups > MDaemon Issues > Archive > 10054 error

 [F] Alt-N Discussion Groups  / MDaemon Discussion Groups  / MDaemon Issues  / Archive  /

10054 error

[Godman, Gary]
Gary Godman
Newbie
Newbie
Posts: 21
Gary Godman - 04:56pm, Apr 21 2021

I'm seeing 10054 on messages from google but only if they are larger than about 90KB i'm using Meraki mx84 firewall attaching wireshark capture Meraki says they don't do anything to the traffic. MD support says its a firewall issue, tried turning off av engines and spam filter and content filter with support to no effect. sending from yahoo or outlook work fine it's only gmail/google mail. Any ideas would be appreciated.

Sorry posted to another issue previously by mistake.

Attachments:

gmailmerakicap04212021.pcap (233 KB)


  (older msg: 2)All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items

Gary Godman - Apr 22, 2021 10:55 am (#3 Total: 5)  

 

Photo of Author
Gary Godman
Newbie
Newbie
Posts: 21
Google just says delivery incomplete and will keep trying

AMP is on for firewall

Firewall does not have RBL Filter at least not one I know of and Meraki support said there is nothing in the firewall monitoring mail traffic

Attached cap with no TLS

Turning off TLS allows the files to go thorough normally.

Yes google gives no information just delivery incomplete

Attachments:

no tls.pcap (584 KB) (146 Downloads)


Arron Caruth - Apr 22, 2021 11:38 am (#4 Total: 5)  

Guest User  

Photo of Author
Posts: 1
Can you post your ticket number with our support team?  I want to make sure I'm looking at the correct ticket.
 
 
>Meraki support said there is nothing in the firewall monitoring mail traffic
 
Doesn't AMP monitor all traffic or just HTTP traffic?  I'm not sure, and I have found mixed information online.  
 
Since the mail transfer works with TLS disabled, an easy workaround would be to disable TLS for inbound mail from google.  Not ideal, but at least you would get the emails until we are able to find a better solution.  To add a hostname to the TLS whitelist open MDaemon and go to Security / SSL & TLS / STARTTLS White list.  Google uses a bunch of different hostnames, so I would just try adding *.google.com
 
Also, can you decrypt the Wireshark capture that is using TLS and send it to me privately so we can take a look at it?  Decrypting the session is not typically an easy task, and depending on the encryption being used may require you to make some configuration changes and capture the traffic failing again so that you can decrypt it.   You can find information on decrypting the session at https://wiki.wireshark.org/TLS.
 
Once you get a decrypted session, please either send it to me privately or post it here.  If you want to send it to me privately you can send it to arron.caruth@mdaemon.com.
 
--
Arron Caruth
Vice President of Product Development
o: 817-601-3222    e: Arron.Caruth@mdaemon.com

MDaemon Technologies
Simple Secure Email
Visit us on www.mdaemon.com | Facebook | LinkedIn | YouTube
Sent using the MDaemon Email Server
 
On Thu, 22 Apr 2021 10:55:46 -0500, "lists-md-issues@mdaemon.com (Michael Rad)" <lists-md-issues@mdaemon.com> wrote:
Google just says delivery incomplete and will keep trying

AMP is on for firewall

Firewall does not have RBL Filter at least not one I know of and Meraki support said there is nothing in the firewall monitoring mail traffic

Attached cap with no TLS

Turning off TLS allows the files to go thorough normally.

Yes google gives no information just delivery incomplete

Attachment: no tls.pcap

 
View/reply at 10054 error
--MD-ISSUES---------------------------------------------------------------
This list is for questions and discussions regarding issues with MDAEMON. 
To unsubscribe from this mailing list send an email to 
md-issues-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------

--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user 
support and discussion.  MDaemon staff members may participate in the 
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical 
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------
--MD-ISSUES---------------------------------------------------------------
This list is for questions and discussions regarding issues with MDAEMON.
To unsubscribe from this mailing list send an email to
md-issues-unsubscribe@mdaemon.com .
--POWERED BY MDAEMON!-----------------------------------------------------

--------------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion.  MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
--------------------------------------------------------------------------

Gary Godman - Apr 22, 2021 11:53 am (#5 Total: 5)  

 

Photo of Author
Gary Godman
Newbie
Newbie
Posts: 21
Thanks that worked hope to get the decrypt done tonight or tomorrow and will send to you off list.



  All MessagesOldest ItemsOlder ItemsNewer ItemsNewest Items



 Content:

Read New | Search

 Guest:

Email to Admin



You are visiting as a Guest user.