Tracing what happens with email sent via Mandrill


(Mynethoster Malaysia) #1

Because of Mandrillapp’s support very slow like snail, im need to get opinion from you guys.

Recently we are on mandrillapp network to send the emails but lately some of the email never been received by receivers and sometimes need to send 3-5 times to get it delivered.

We have check the notification from admins where (outbound >> activity) and the status delivered. But it endup as NOT DELIVER and not in inbox or spam box. NOTHING, the receiver not receive any.

Anyone of you experience the same issue? How to fix this? While mandrillapp support’s people just busy telling their system the best but keep thier weekness by their side hence it just turn we down as the people which not technically hero with IT stuffs.

Could anyone of you guide me what to do to solve this issue? Or perhaps reducing the tension we experiencing now? :frowning:


(Michael Brown) #2

Look at the Mandrill Activity page and look for the email which is not being delivered to the end user:

This popup (along with the sender/receiver info for convenience) has all the information necessary for an email admin on the other end to be able to diagnose what happened to the mail.

I look at that and see:

Mandrill’s mail server at 205.201.139.6 successfully delivered the mail to 74.125.196.26 at 2014-06-19 21:04. The receiving mail server reported a queue ID of “1403226277 t31si10719657yhe.60”. In order to track down what happened with that message, I’ll need to ask the admin of that server to check his logs for that queue ID.

There’s a well-defined method to this. :slight_smile:


A better example since I have the logs for the other end:

I check on the receiving server for the logs and find everything I need to verify what happened at that step:

Tue Jun 24 15:34:32 2014 Info: Start MID 113614 ICID 508325
Tue Jun 24 15:34:32 2014 Info: MID 113614 ICID 508325 From: <bounce-md_30025787.53a9xxc2.v1-e2dxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@mandrillapp.com>
Tue Jun 24 15:34:32 2014 Info: MID 113614 ICID 508325 RID 0 To: <michael@xxxxxxxxx.ca>
Tue Jun 24 15:34:32 2014 Info: MID 113614 SPF: mailfrom identity bounce-md_30025787.53a9xxc2.v1-e2dxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@mandrillapp.com Pass (v=spf1) 
Tue Jun 24 15:34:33 2014 Info: MID 113614 SPF: pra identity michael.brown@xxxxxxxxxxx.net None headers sender
Tue Jun 24 15:34:33 2014 Info: MID 113614 DKIM: pass signature verified (d=xxxxxxxxxxx.net s=mandrill i=michael.brown@xxxxxxxxxxx.net)
Tue Jun 24 15:34:33 2014 Info: MID 113614 Message-ID '<30025787.20140624193426.53a9d2c2d733f7.88721452@mail8.us4.mandrillapp.com>'
Tue Jun 24 15:34:33 2014 Info: MID 113614 Subject 'Test email from Mandrill'
Tue Jun 24 15:34:33 2014 Info: MID 113614 ready 2625 bytes from <bounce-md_30025787.53a9xxc2.v1-e2dxxxxxxxxxxxxxxxxxxxxxxxxxxxxx@mandrillapp.com>
Tue Jun 24 15:34:33 2014 Info: MID 113614 matched all recipients for per-recipient policy DEFAULT in the inbound table
Tue Jun 24 15:34:33 2014 Info: ICID 508325 close
Tue Jun 24 15:34:33 2014 Info: MID 113614 interim verdict using engine: CASE spam negative
Tue Jun 24 15:34:33 2014 Info: MID 113614 using engine: CASE spam negative
Tue Jun 24 15:34:33 2014 Info: MID 113614 interim AV verdict using Sophos CLEAN
Tue Jun 24 15:34:33 2014 Info: MID 113614 antivirus negative 
Tue Jun 24 15:34:33 2014 Info: MID 113614 Outbreak Filters: verdict negative
Tue Jun 24 15:34:33 2014 Info: MID 113614 queued for delivery
Tue Jun 24 15:34:33 2014 Info: New SMTP DCID 88302 interface 216.16.235.12 address 216.16.235.99 port 25
Tue Jun 24 15:34:33 2014 Info: DCID 88302 STARTTLS command not supported
Tue Jun 24 15:34:33 2014 Info: Delivery start DCID 88302 MID 113614 to RID [0]
Tue Jun 24 15:34:33 2014 Info: Message done DCID 88302 MID 113614 to RID [0] 
Tue Jun 24 15:34:33 2014 Info: MID 113614 RID [0] Response '2.0.0 s5OJYX2n009512 Message accepted for delivery'
Tue Jun 24 15:34:33 2014 Info: Message finished MID 113614 done

Next step: I go to the next server (216.16.235.99, queue ID s5OJYX2n009512) and repeat the process.


(Mynethoster Malaysia) #3

Thanks for your input! Well mandrillapp should pay you for the support. Until now they still sleeping waiting money coming in without replying our ticket.

What ssh command u used for this? Seem you good at this :slight_smile:


(Michael Brown) #4

There’s nothing they can do. You’ve already pointed out it says ‘Delivered’. Once they pass off the email to the next-hop their job is done.

Heh, that’s why they love me :smiley:

The particular output above was from an Ironport. But in general on a Linux mailserver you want one of:

grep QUEUEID /var/log/mail
grep QUEUEID /var/log/maillog
grep QUEUEID /var/log/messages
grep QUEUEID /var/log/syslog