none
Requested #503 Command sequence error - MAIL FROM already given. ## error

    Question

  • This message is received when users are trying to send email to an external email.  After 5 minutes, the email is resent successfully.  We cannot understand why this keeps happening.  


    Diagnostic information for administrators:

     

    Generating server: exchcas.desu.edu

     

    username@usbank.com
    Requested
    #503 Command sequence error - MAIL FROM already given. ##


    Any help would be greatly appreciated.

    Thursday, December 11, 2008 8:29 PM

Answers

  •  

    Hi Gil,

     

    I suggest you double confirm whether the issue only occurs when a blank sender is provided.

     

    For example, if you telnet to the McAfee Smart Host (dsugate2.desu.edu):

     

    +++++++++++++

    Ehlo

    Mail From: somebody (not a blank sender)

    Rcpt to: somebody

    Data

    Test

    .

    Mail from: somebody (not a blank sender)

    ++++++++++++++

     

    Whether can the issue also be reproduced?

     

    In addition, Gil, based on current information, I think that it is a McAfee Smart Host side issue. As in my test environment, I am able to telnet to my Exchange Server and send two mails (with blank sender) in the same session.

     

    From your SMTP log, I notice after reset command, the McAfee Smart Host are able to accept the second mail from address:

     

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,159,192.168.2.54:28127,216.228.143.116:25,<,503 Command sequence error - MAIL FROM already given.,

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,160,192.168.2.54:28127,216.228.143.116:25,>,RSET,

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,161,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,162,192.168.2.54:28127,216.228.143.116:25,*,710882,sending message

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,163,192.168.2.54:28127,216.228.143.116:25,>,MAIL FROM:<>,

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,164,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",

     

    Mike

    • Marked as answer by Mike Shen Tuesday, December 23, 2008 1:53 AM
    Thursday, December 18, 2008 8:06 AM

All replies

  •  

    Hi Gil,

     

    Would you please let me know?

     

    1.      Whether the issue occurs only on a specific remote domain or every external user such as Yahoo, hotmail.

    2.      Whether the issue can always be reproduced?

    3.      Whether the exchcas.desu.edu is your exchange server? Whether all the outbound messages will go through the server and go to Internet directly? If the outbound messages need to go through other mail server, please let me know.

     

    If the exchcas.desu.edu is your exchange server, please enable SMTP logging on the server and check related SMTP log for further information.

     

    Mike

     

    Monday, December 15, 2008 5:09 AM
  • MIke,

    Before I answer let me add some information  We are using exchange 2007 sp1 with outbound internet mail pointed to two  McAfee Security/SPAM appliances which are used as a SMART Hosts. 

    1.      Whether the issue occurs only on a specific remote domain or every external user such as Yahoo, hotmail. 

    No the error appears to random most often a user can resend the message and it is sucessfully delivered.  Using my account which has a forwarder set occasionally a message generates this error, in that situation the sender and recipent is always the same.  I'll attach the full error message.

    2.     
    Whether the issue can always be reproduced?  

    No, not on demand the error does not seem to have a pattern that I can determine.

    3.      Whether the exchcas.desu.edu is your exchange server? Whether all the outbound messages will go through the server and go to Internet directly? If the outbound messages need to go through other mail server, please let me know.

    EXCHCAS.DESU.EDU is our exchange server is it is published using ISA 2006.  All outbound messages are sent to a McAfee Appliance used as a SMART HOST and then delivered. 

     

     

    If the exchcas.desu.edu is your exchange server, please enable SMTP logging on the server and check related SMTP log for further information. 

    Below is part of the SMTP log.  We believe the part highlighted in red shows the entries that are relevant, with the cause of our problem possibly being the "MAIL FROM: <>".  The message that follows has the  Requested #503 Command sequence error - MAIL FROM already given. ##  error.  This seems to repeat throughtout the log.  Checking the Exchange server queue, we can see NDR's with "MAIL FROM: <>". 
    We are not clear on the next course of action to clear up the errors.

    Thanks for your assistance.


    -----------

    Delivery has failed to these recipients or distribution lists:

     

    grussell@students.desu.edu
    An error occurred while trying to deliver this message to the recipient's e-mail address. Microsoft Exchange will not try to redeliver this message for you. Please try resending this message, or provide the following diagnostic text to your system administrator.

     

    The following organization rejected your message: Requested.

     

      _____  

    Sent by Microsoft Exchange Server 2007






     

    Diagnostic information for administrators:

     

    Generating server: exchcas.desu.edu

     

    grussell@students.desu.edu
    Requested #503 Command sequence error - MAIL FROM already given. ##

     

    Original message headers:

     

    Received: from MAILBOX.desu.edu ([fe80::31b1:a59b:f6d9:f5e0]) by
     exchcas.desu.edu ([::1]) with mapi; Mon, 15 Dec 2008 10:24:48 -0500
    From: Gil Russell <grussell@desu.edu>
    To: "grussell@students.desu.edu" <grussell@students.desu.edu>
    Date: Mon, 15 Dec 2008 10:24:47 -0500
    Subject: FW: rationalizing my my documents folders
    Thread-Topic: rationalizing my my documents folders
    Thread-Index: AclX40rbsgUG9b0FSIOdD11gaXc3twG1+vLwAAOB2MAAAAFpqA==
    Message-ID: <07894AD5756EC14BB4573782604815BD451B9AB2B8@MAILBOX.desu.edu>
    References: <07894AD5756EC14BB4573782604815BD451C065661@MAILBOX.desu.edu>
     <07894AD5756EC14BB4573782604815BD451C163590@MAILBOX.desu.edu>
    In-Reply-To: <07894AD5756EC14BB4573782604815BD451C163590@MAILBOX.desu.edu>
    Accept-Language: en-US
    Content-Language: en-US
    X-MS-Has-Attach:
    X-MS-TNEF-Correlator:
    acceptlanguage: en-US
    Content-Type: multipart/alternative;
                boundary="_000_07894AD5756EC14BB4573782604815BD451B9AB2B8MAILBOXdesued_"
    MIME-Version: 1.0

    ------------------------
    2008-12-15T15:24:50.041Z,DESUDefault,08CB294B7C9A8EE6,0,,216.228.143.116:25,*,,attempting to connect
    2008-12-15T15:24:50.041Z,DESUDefault,08CB294B7C9A8EE6,1,192.168.2.54:28127,216.228.143.116:25,+,,
    2008-12-15T15:24:50.041Z,DESUDefault,08CB294B7C9A8EE6,2,192.168.2.54:28127,216.228.143.116:25,<,220 dsugate2.desu.edu EWSA3200/SMTP Ready.,
    2008-12-15T15:24:50.041Z,DESUDefault,08CB294B7C9A8EE6,3,192.168.2.54:28127,216.228.143.116:25,>,EHLO exchcas.desu.edu,
    2008-12-15T15:24:50.041Z,DESUDefault,08CB294B7C9A8EE6,4,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",
    2008-12-15T15:24:50.041Z,DESUDefault,08CB294B7C9A8EE6,5,192.168.2.54:28127,216.228.143.116:25,*,710806,sending message
    <snipped>
    2008-12-15T15:25:01.179Z,DESUDefault,08CB294B7C9A8EE6,150,192.168.2.54:28127,216.228.143.116:25,>,MAIL FROM:<>,
    2008-12-15T15:25:01.179Z,DESUDefault,08CB294B7C9A8EE6,151,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",
    2008-12-15T15:25:01.179Z,DESUDefault,08CB294B7C9A8EE6,152,192.168.2.54:28127,216.228.143.116:25,>,RCPT TO:<
    apps+f4ft4yo6@facebookappmail.com>,
    2008-12-15T15:25:01.179Z,DESUDefault,08CB294B7C9A8EE6,153,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",
    2008-12-15T15:25:01.179Z,DESUDefault,08CB294B7C9A8EE6,154,192.168.2.54:28127,216.228.143.116:25,>,DATA,
    2008-12-15T15:25:01.179Z,DESUDefault,08CB294B7C9A8EE6,155,192.168.2.54:28127,216.228.143.116:25,<,"354 Enter mail, end with ""."" on a line by itself.",
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,156,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,157,192.168.2.54:28127,216.228.143.116:25,*,710878,sending message
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,158,192.168.2.54:28127,216.228.143.116:25,>,MAIL FROM:<
    grussell@desu.edu>,
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,159,192.168.2.54:28127,216.228.143.116:25,<,503 Command sequence error - MAIL FROM already given.,
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,160,192.168.2.54:28127,216.228.143.116:25,>,RSET,
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,161,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,162,192.168.2.54:28127,216.228.143.116:25,*,710882,sending message
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,163,192.168.2.54:28127,216.228.143.116:25,>,MAIL FROM:<>,
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,164,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,165,192.168.2.54:28127,216.228.143.116:25,>,RCPT TO:<apps+o6phplie@facebookappmail.com>,
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,166,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,167,192.168.2.54:28127,216.228.143.116:25,>,DATA,
    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,168,192.168.2.54:28127,216.228.143.116:25,<,"354 Enter mail, end with ""."" on a line by itself.",
    2008-12-15T15:25:01.585Z,DESUDefault,08CB294B7C9A8EE6,169,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",
    2008-12-15T15:25:01.585Z,DESUDefault,08CB294B7C9A8EE6,170,192.168.2.54:28127,216.228.143.116:25,*,710888,sending message
    2008-12-15T15:25:01.585Z,DESUDefault,08CB294B7C9A8EE6,171,192.168.2.54:28127,216.228.143.116:25,>,MAIL FROM:<>,
    2008-12-15T15:25:01.585Z,DESUDefault,08CB294B7C9A8EE6,172,192.168.2.54:28127,216.228.143.116:25,<,503 Command sequence error - MAIL FROM already given.,
    2008-12-15T15:25:01.585Z,DESUDefault,08CB294B7C9A8EE6,173,192.168.2.54:28127,216.228.143.116:25,>,QUIT,
    2008-12-15T15:25:01.585Z,DESUDefault,08CB294B7C9A8EE6,174,192.168.2.54:28127,216.228.143.116:25,<,221 Closing connection.,
    2008-12-15T15:25:01.585Z,DESUDefault,08CB294B7C9A8EE6,175,192.168.2.54:28127,216.228.143.116:25,-,,Local

    Monday, December 15, 2008 5:20 PM
  •  

    Hi Gil,

     

    Thanks for your information.

     

    Firstly, please ensure I understand your environment correctly. The Exchange Server EXCHCAS.DESU.EDU has IP Address 192.168.2.54. The McAfee Smart Host (dsugate2.desu.edu) IP Address is 216.228.143.116.

     

    After reviewing the SMTP log, I guess the issue occurs that the Exchange Server attempt to send several emails to the Smart Host in the same session. I suggest you attempt the following method to test whether the issue can be reproduced:

     

    Telnet to the 25 port of the McAfee Smart Host (dsugate2.desu.edu)

     

    Ehlo

    Mail From: somebody@domain.com

    Rcpt to: somebody@domain.com

    Data

    Test

    .

    Mail from: somebodyelse@domain.com

     

    Please let me know whether you are able to reproduce the issue after typing the second Mail From.

     

    Mike

     

     

    Tuesday, December 16, 2008 6:00 AM
  •  Check the SMTPGATE.LOG file to find the offending command that caused the error. Then, contact the sending host to determine why the command was given.
    Active Directory and Exchange Administrator
    Tuesday, December 16, 2008 8:30 PM
  • You have the enviroment correct.

    the error occurs when a  MAIL FROM:<>, command is sent

    I was able to trace the MAIL FROM:<>, back to exchange trying to send NDR's  messages with a blank MAIL FROM:

    Stopping enabling recipent filtering to drop messages that are sent to invalid accounts and not send NDR's seems to have fixed the problem.
    Wednesday, December 17, 2008 9:11 PM
  • Kiran,

     

    I'm not sure where to find the SMTPGATE.LOG in Exchange 2007.  

    Wednesday, December 17, 2008 9:12 PM
  •  

    Hi Gil,

     

    I suggest you double confirm whether the issue only occurs when a blank sender is provided.

     

    For example, if you telnet to the McAfee Smart Host (dsugate2.desu.edu):

     

    +++++++++++++

    Ehlo

    Mail From: somebody (not a blank sender)

    Rcpt to: somebody

    Data

    Test

    .

    Mail from: somebody (not a blank sender)

    ++++++++++++++

     

    Whether can the issue also be reproduced?

     

    In addition, Gil, based on current information, I think that it is a McAfee Smart Host side issue. As in my test environment, I am able to telnet to my Exchange Server and send two mails (with blank sender) in the same session.

     

    From your SMTP log, I notice after reset command, the McAfee Smart Host are able to accept the second mail from address:

     

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,159,192.168.2.54:28127,216.228.143.116:25,<,503 Command sequence error - MAIL FROM already given.,

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,160,192.168.2.54:28127,216.228.143.116:25,>,RSET,

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,161,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,162,192.168.2.54:28127,216.228.143.116:25,*,710882,sending message

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,163,192.168.2.54:28127,216.228.143.116:25,>,MAIL FROM:<>,

    2008-12-15T15:25:01.367Z,DESUDefault,08CB294B7C9A8EE6,164,192.168.2.54:28127,216.228.143.116:25,<,"250 Requested mail action okay, completed.",

     

    Mike

    • Marked as answer by Mike Shen Tuesday, December 23, 2008 1:53 AM
    Thursday, December 18, 2008 8:06 AM
  • Mike,

    I reviewed the logs from the last several days since I adjusted the Orgainzatio Hub Transport Anti-SPAM recipent filter and the error has not reoccured.

     

    The actual beavior that I noticed is the message blank Mail From: command was bounced as well at the message following.  Messages after the RSET were processed correctly until another blank Mail From: was received.

    I'm goin to open a ticket with Mcaffe to see what they have to say.

    I'll post what I findout.

    Thursday, December 18, 2008 2:26 PM