Re: [FW-1] Connection to final MTA failed

["Spadafora, Robert (CA - Toronto)" <rspadafora@FW1-NOSPAMDELOITTE.CA>]

Title: RE: Connection to final MTA failed

Well, I think this was is resolved...for the most part.
After trying all of the suggestions provided so far (such as explicitly rejecting ident, bouncing the CVP service, changing SMTP security timeouts, etc.) rejectng ident seemed to do the trick most of the time.

Out of 10 e-mails sent out at once to hotmail, nine are delivered on the first try while one fails several times with "connection to final MTA failed".

Thanks to everyone for your help.

Rob S.

 -----Original Message-----
From:   Spadafora, Robert (CA - Toronto) 
Sent:   Thursday, May 09, 2002 3:49 PM
To:     'FW-1-MAILINGLIST@LISTS.US.CHECKPOINT.COM'
Subject:        Connection to final MTA failed

Outbound e-mail from an internal ms exchange server to the Internet through
a Fw-1 4.1 SP5 on a Nokia IP-120 using an SMTP resource that passes the
e-mail to a CVP server (Trend Interscan virus wall).

When sending e-mails to web based e-mail services such as hotmail and
yahoo, we will notice between 3 - 5 "Connection to final MTA failed"
messages in the fw-1 log.  When sending them to private corporate e-mail
accounts, such as john_doe@abcinc.com, we do not get the "Connection to final MTA
failed" messages.

We've already tried settng Policy-->Properties---> "Accept outgoing
packets originating from gateway" to "first". However, the symptom still exists.

Can you or someone suggest reasoning as to why we are getting the
"Connection to final MTA failed" messages with web based
e-mail destinations and not with private corporate e-mail destinations?

Can anyone suggest a remedy?

Note, that without using an SMTP resource, any message to any e-mail
account passes on the first attempt without any error message.

Regards,
Rob S.