I guess I was premature in the above question. I have installed the ArGo Mail Transfer program to transfer mail from another server to my server. It appears that I get the "550 Protocol violation" error or the "10054 connection reset by peer" error. After several hours of testing I took eWall out of the picture and it worked fine. That being said, it narrows the issue down to eWall.
How do I isolate and resolve this issue.
Mail Transfer log snippet:
7/7/2007 1:20:37 AM - Starting transfer
7/7/2007 1:20:37 AM - [ 27] Transferring data for 1 accounts
7/7/2007 1:20:37 AM - [ 27] Processing account XXXX
7/7/2007 1:20:37 AM - [ 27] Retrieving mail from server pop.bestweb.net, account XXXX
7/7/2007 1:20:37 AM - [ 27] Logging in...
7/7/2007 1:20:37 AM - [ 27] Found 0 messages
7/7/2007 1:20:37 AM - [ 27] Logging out...
7/7/2007 1:20:37 AM - [ 27] Sorting mail according to rules for account XXXx
7/7/2007 1:20:37 AM - [ 27] Delivering mail for account XXXX, by 1 rules
7/7/2007 1:20:37 AM - [ 27] Delivering mail to server mail.XXXXXXXXXXX.com, account XXXX@XXXXXXXX.com
7/7/2007 1:20:37 AM - [ 27] Logging in...
7/7/2007 1:20:37 AM - [ 27] Delivering message 1 of 2
7/7/2007 1:20:40 AM - [ 27] Deleting the temporary file
7/7/2007 1:20:40 AM - [ 27] Delivering message 2 of 2
7/7/2007 1:20:40 AM - [ 27] Error delivering message: 550 Protocol violation
7/7/2007 1:20:40 AM - [ 27] Deleting the temporary file
7/7/2007 1:20:40 AM - [ 27] Logging out...
7/7/2007 1:20:40 AM - [ 27] Problem with account XXXX: [10053] Software caused connection abort
7/7/2007 1:20:40 AM - Transfer terminated
7/7/2007 1:37:44 AM - Starting transfer
7/7/2007 1:37:44 AM - [ 32] Transferring data for 1 accounts
7/7/2007 1:37:44 AM - [ 32] Processing account XXXX
7/7/2007 1:37:44 AM - [ 32] Retrieving mail from server pop.YYYYYY.net, account XXXX
7/7/2007 1:37:44 AM - [ 32] Logging in...
7/7/2007 1:37:44 AM - [ 32] Found 1 messages
7/7/2007 1:37:44 AM - [ 32] Retrieving message 1 of 1
7/7/2007 1:37:44 AM - [ 32] Registering UIDL=UID17990-1099332720
7/7/2007 1:37:44 AM - [ 32] Logging out...
7/7/2007 1:37:44 AM - [ 32] Sorting mail according to rules for account XXXX
7/7/2007 1:37:44 AM - [ 32] Delivering mail for account XXXX, by 1 rules
7/7/2007 1:37:44 AM - [ 32] Delivering mail to server mail.XXXXXXXXXXX.com, account XXXX@XXXXXXXXXX.com
7/7/2007 1:37:44 AM - [ 32] Logging in...
7/7/2007 1:37:45 AM - [ 32] Delivering message 1 of 1
7/7/2007 1:37:47 AM - [ 32] Deleting the temporary file
7/7/2007 1:37:47 AM - [ 32] Logging out...
7/7/2007 1:37:47 AM - [ 32] Problem with account XXXX: 550 Protocol violation
7/7/2007 1:37:47 AM - Transfer terminated
eWall Log for the corresponding time frame:
7/7/2007 1:20:37 AM 4 0 ------ Requested connection from United States 216.179.41.27
7/7/2007 1:20:37 AM 4 0 Agent: TCC
7/7/2007 1:20:37 AM 4 4 Event: ONCONNECT
7/7/2007 1:20:37 AM 4 130 Connected at 192.168.1.7:2525
7/7/2007 1:20:37 AM 4 131 Event: ONREPLY
7/7/2007 1:20:37 AM 4 132 < 220 columbia.topcatcomputing.com ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.8.8) + eWall v3.0.210
7/7/2007 1:20:37 AM 4 183 Event: ONCOMMAND
7/7/2007 1:20:37 AM 4 185 > EHLO columbia
7/7/2007 1:20:37 AM 4 371 Event: ONREPLY
7/7/2007 1:20:37 AM 4 373 < 250-Welcome, ip216-179-41-27.cust.bestweb.net [216.179.41.27], pleased to meet you
7/7/2007 1:20:37 AM 4 373 < 250-AUTH=LOGIN
7/7/2007 1:20:37 AM 4 373 < 250-AUTH LOGIN
7/7/2007 1:20:37 AM 4 373 < 250-SIZE 5242880
7/7/2007 1:20:37 AM 4 373 < 250 HELP
7/7/2007 1:20:37 AM 4 424 Event: ONCOMMAND
7/7/2007 1:20:37 AM 4 425 > RSET
7/7/2007 1:20:37 AM 4 474 Event: ONREPLY
7/7/2007 1:20:37 AM 4 475 < 250 Reset state
7/7/2007 1:20:38 AM 4 526 Event: ONCOMMAND
7/7/2007 1:20:38 AM 4 528 > MAIL FROM:<quickmeals@c9.baristamedia.com>
7/7/2007 1:20:38 AM 4 836 Event: ONREPLY
7/7/2007 1:20:38 AM 4 838 < 250 Sender "quickmeals@c9.baristamedia.com" OK...
7/7/2007 1:20:38 AM 4 839 Event: ONSENDER
7/7/2007 1:20:38 AM 4 891 Event: ONCOMMAND
7/7/2007 1:20:38 AM 4 893 > RCPT TO:<XXXX@XXXXXXXXXX.com>
7/7/2007 1:20:38 AM 4 1115 Event: ONREPLY
7/7/2007 1:20:38 AM 4 1117 < 250 Recipient "XXXX@XXXXXXXXXXX.com" OK...
7/7/2007 1:20:38 AM 4 1117 Event: ONRECIPIENT
7/7/2007 1:20:38 AM 4 1170 Event: ONCOMMAND
7/7/2007 1:20:38 AM 4 1171 > DATA
7/7/2007 1:20:38 AM 4 1171 Event: ONREPLY
7/7/2007 1:20:38 AM 4 1173 < 354 Ready
7/7/2007 1:20:38 AM 4 1189 Message ID: <20070706201849.18495977EB88@c9.baristamedia.com>
7/7/2007 1:20:38 AM 4 1189 Subject: Complimentary Rachel Ray Collection. Claim yours.
7/7/2007 1:20:38 AM 4 1189 Message size: 7.51 KB
7/7/2007 1:20:38 AM 4 1189 Event: ONMESSAGE - quickmeals@c9.baristamedia.com -> xxxx@xxxxxxxx.com
7/7/2007 1:20:38 AM 4 1193 -> Processing filter 'Add Message Count Inbound'
7/7/2007 1:20:38 AM 4 1193 Checking condition 'message is incoming'
7/7/2007 1:20:38 AM 4 1193 Applying action 'run 'cscript.exe''
7/7/2007 1:20:38 AM 4 1195 c:\windows\system32\cscript.exe //T:120 D:\Scripts\SpamStats.vbs " Incoming Messages"
7/7/2007 1:20:38 AM 4 1373 Return code: 0
7/7/2007 1:20:38 AM 4 1375 Applying action 'run 'cscript.exe''
7/7/2007 1:20:38 AM 4 1375 c:\windows\system32\cscript.exe //T:120 "C:\ArGoAdminUI\Filter VBS Scripts\Stats.vbs" XXXX@XXXXXXXXXX.com "IN" " Incoming Messages" 7691
7/7/2007 1:20:39 AM 4 1661 Return code: 0
7/7/2007 1:20:39 AM 4 1661 -> Processing filter 'Add Message Count Outbound'
7/7/2007 1:20:39 AM 4 1661 Checking condition 'message is outgoing'
7/7/2007 1:20:39 AM 4 1661 -> Processing filter 'DNSBL'
7/7/2007 1:20:39 AM 4 1661 Checking condition 'message is incoming'
7/7/2007 1:20:39 AM 4 1661 Checking condition 'sender is listed in 'bl.spamcop.net' or 'cbl.abuseat.org' or 't1.dnsbl.net.au' or 'zen.spamhaus.org'...'
7/7/2007 1:20:39 AM 4 1748 216.179.41.27 not listed
7/7/2007 1:20:39 AM 4 1748 -> Processing filter 'ScanEngine-Columbia'
7/7/2007 1:20:39 AM 4 1748 Checking condition 'anything'
7/7/2007 1:20:39 AM 4 1748 Applying action 'add field 'X-VIRUS-SCANNING-HOST: columbia.topcatcomputing.com''
7/7/2007 1:20:39 AM 4 1748 Applying action 'run 'EmlScan.exe''
7/7/2007 1:20:39 AM 4 1755 D:\Scripts\EmlScan.exe 192.168.1.7:1344 C:\PROGRA~1\SERVER~1\EWALL3~1.0\Temp\TMP000~2.EML
7/7/2007 1:20:39 AM 4 1823 Return code: 4
7/7/2007 1:20:39 AM 4 1824 -> Processing filter 'ScanEngine-FailOver-Destiny'
7/7/2007 1:20:39 AM 4 1824 Checking condition 'anything'
7/7/2007 1:20:39 AM 4 1824 Checking condition 'X-VIRUS-SCANNED is missing'
7/7/2007 1:20:39 AM 4 1824 -> Processing filter 'ScanEngine-FailOverDefault'
7/7/2007 1:20:39 AM 4 1824 Checking condition 'anything'
7/7/2007 1:20:39 AM 4 1824 Checking condition 'X-VIRUS-SCANNED is missing'
7/7/2007 1:20:39 AM 4 1824 -> Processing filter 'Add Sender IP'
7/7/2007 1:20:39 AM 4 1824 Checking condition 'message is incoming'
7/7/2007 1:20:39 AM 4 1824 Applying action 'add field 'X-SENDER-IP: {X-User-IP}''
7/7/2007 1:20:39 AM 4 1824 -> Processing filter 'Paranoid'
7/7/2007 1:20:39 AM 4 1824 Checking condition 'message is incoming'
7/7/2007 1:20:39 AM 4 1824 Checking condition 'sender not in 'WhiteList.TXT''
7/7/2007 1:20:39 AM 4 1827 Checking condition 'message has spam probability more than 50%'
7/7/2007 1:20:39 AM 4 1845 Spam probability: 93%
7/7/2007 1:20:39 AM 4 1845 Dictionary: C:\Program Files\Server Side Solutions\Paranoid\Dictionaries\P9\
7/7/2007 1:20:39 AM 4 1845 Applying action 'run 'cscript.exe''
7/7/2007 1:20:39 AM 4 1847 C:\windows\System32\cscript.exe //T:120 D:\Scripts\SpamStats.vbs "Paranoid"
7/7/2007 1:20:39 AM 4 2052 Return code: 0
7/7/2007 1:20:39 AM 4 2053 Applying action 'run 'cscript.exe''
7/7/2007 1:20:39 AM 4 2054 c:\windows\system32\cscript.exe //T:120 "C:\ArGoAdminUI\Filter VBS Scripts\Stats.vbs" XXX@XXXXXXXXXX.com "IN" "Paranoid" 8226
7/7/2007 1:20:39 AM 4 2307 Return code: 0
7/7/2007 1:20:39 AM 4 2307 Applying action 'add field 'X-SPAM-PROB: {X-Paranoid-Prob}''
7/7/2007 1:20:39 AM 4 2307 Applying action 'add [TCC SPAM FILTER: SPAM PROBABILITY {X-Paranoid-Prob} %] to the subject'
7/7/2007 1:20:39 AM 4 2307 -> Processing filter 'Spam Probabilty'
7/7/2007 1:20:39 AM 4 2307 Checking condition 'message is incoming'
7/7/2007 1:20:39 AM 4 2307 Checking condition 'message has spam probability more or equal to 0%'
7/7/2007 1:20:39 AM 4 2307 Spam probability: 93%
7/7/2007 1:20:39 AM 4 2307 Dictionary: C:\Program Files\Server Side Solutions\Paranoid\Dictionaries\P9\
7/7/2007 1:20:39 AM 4 2307 Applying action 'add field 'X-SPAM-PROB: {X-Paranoid-Prob}''
7/7/2007 1:20:40 AM 4 2679 Event: ONREPLY
7/7/2007 1:20:40 AM 4 2680 < 250 Message accepted for delivery.
7/7/2007 1:20:40 AM 4 2682 Event: ONCOMMAND
7/7/2007 1:20:40 AM 4 2684 > .
7/7/2007 1:20:40 AM 4 2684 Event: ONREPLY
7/7/2007 1:20:40 AM 4 2686 < 550 Protocol violation
7/7/2007 1:20:40 AM 4 2687 Disconnect
7/7/2007 1:20:40 AM 4 2687 Event: ONDISCONNECT
7/7/2007 1:37:44 AM 16 1 ------ Requested connection from United States 216.179.41.27
7/7/2007 1:37:44 AM 16 1 Agent: TCC
7/7/2007 1:37:44 AM 16 5 Event: ONCONNECT
7/7/2007 1:37:44 AM 16 132 Connected at 192.168.1.7:2525
7/7/2007 1:37:44 AM 16 132 Event: ONREPLY
7/7/2007 1:37:44 AM 16 134 < 220 columbia.topcatcomputing.com ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.8.8) + eWall v3.0.210
7/7/2007 1:37:45 AM 16 185 Event: ONCOMMAND
7/7/2007 1:37:45 AM 16 187 > EHLO columbia
7/7/2007 1:37:45 AM 16 328 Event: ONREPLY
7/7/2007 1:37:45 AM 16 329 < 250-Welcome, ip216-179-41-27.cust.bestweb.net [216.179.41.27], pleased to meet you
7/7/2007 1:37:45 AM 16 329 < 250-AUTH=LOGIN
7/7/2007 1:37:45 AM 16 329 < 250-AUTH LOGIN
7/7/2007 1:37:45 AM 16 329 < 250-SIZE 5242880
7/7/2007 1:37:45 AM 16 329 < 250 HELP
7/7/2007 1:37:45 AM 16 380 Event: ONCOMMAND
7/7/2007 1:37:45 AM 16 382 > RSET
7/7/2007 1:37:45 AM 16 427 Event: ONREPLY
7/7/2007 1:37:45 AM 16 428 < 250 Reset state
7/7/2007 1:37:45 AM 16 479 Event: ONCOMMAND
7/7/2007 1:37:45 AM 16 481 > MAIL FROM:<bo-b0r2cqtab2exv8akqjrsrbjy023z0g@b.email.womanwithin.com>
7/7/2007 1:37:45 AM 16 958 Event: ONREPLY
7/7/2007 1:37:45 AM 16 959 < 250 Sender "bo-b0r2cqtab2exv8akqjrsrbjy023z0g@b.email.womanwithin.com" OK...
7/7/2007 1:37:45 AM 16 959 Event: ONSENDER
7/7/2007 1:37:45 AM 16 1012 Event: ONCOMMAND
7/7/2007 1:37:45 AM 16 1014 > RCPT TO:<XXX@XXXXXXXXXX.com>
7/7/2007 1:37:46 AM 16 1223 Event: ONREPLY
7/7/2007 1:37:46 AM 16 1225 < 250 Recipient "XXX@XXXXXXXXXX.com" OK...
7/7/2007 1:37:46 AM 16 1225 Event: ONRECIPIENT
7/7/2007 1:37:46 AM 16 1278 Event: ONCOMMAND
7/7/2007 1:37:46 AM 16 1279 > DATA
7/7/2007 1:37:46 AM 16 1279 Event: ONREPLY
7/7/2007 1:37:46 AM 16 1281 < 354 Ready
7/7/2007 1:37:46 AM 16 1311 Message ID: <b0r2cqtab2exv8akqjrsrbjy023z0g.967769578.6440@mta703.email.womanwithin.com>
7/7/2007 1:37:46 AM 16 1311 Subject: Introducing Christine Alt at WomanWithin.com, share your thoughts
7/7/2007 1:37:46 AM 16 1311 Message size: 14.33 KB
7/7/2007 1:37:46 AM 16 1311 Event: ONMESSAGE - bo-b0r2cqtab2exv8akqjrsrbjy023z0g@b.email.womanwithin.com -> XXX@XXXXXXXXXX.com
7/7/2007 1:37:46 AM 16 1315 -> Processing filter 'Add Message Count Inbound'
7/7/2007 1:37:46 AM 16 1315 Checking condition 'message is incoming'
7/7/2007 1:37:46 AM 16 1315 Applying action 'run 'cscript.exe''
7/7/2007 1:37:46 AM 16 1316 c:\windows\system32\cscript.exe //T:120 D:\Scripts\SpamStats.vbs " Incoming Messages"
7/7/2007 1:37:46 AM 16 1537 Return code: 0
7/7/2007 1:37:46 AM 16 1538 Applying action 'run 'cscript.exe''
7/7/2007 1:37:46 AM 16 1539 c:\windows\system32\cscript.exe //T:120 "C:\ArGoAdminUI\Filter VBS Scripts\Stats.vbs" XXXX@XXXXXXXXXX.com "IN" " Incoming Messages" 14673
7/7/2007 1:37:46 AM 16 1814 Return code: 0
7/7/2007 1:37:46 AM 16 1815 -> Processing filter 'Add Message Count Outbound'
7/7/2007 1:37:46 AM 16 1815 Checking condition 'message is outgoing'
7/7/2007 1:37:46 AM 16 1815 -> Processing filter 'DNSBL'
7/7/2007 1:37:46 AM 16 1815 Checking condition 'message is incoming'
7/7/2007 1:37:46 AM 16 1815 Checking condition 'sender is listed in 'bl.spamcop.net' or 'cbl.abuseat.org' or 't1.dnsbl.net.au' or 'zen.spamhaus.org'...'
7/7/2007 1:37:47 AM 16 2161 216.179.41.27 not listed
7/7/2007 1:37:47 AM 16 2162 -> Processing filter 'ScanEngine-Columbia'
7/7/2007 1:37:47 AM 16 2162 Checking condition 'anything'
7/7/2007 1:37:47 AM 16 2162 Applying action 'add field 'X-VIRUS-SCANNING-HOST: columbia.topcatcomputing.com''
7/7/2007 1:37:47 AM 16 2162 Applying action 'run 'EmlScan.exe''
7/7/2007 1:37:47 AM 16 2163 D:\Scripts\EmlScan.exe 192.168.1.7:1344 C:\PROGRA~1\SERVER~1\EWALL3~1.0\Temp\TMP001~2.EML
7/7/2007 1:37:47 AM 16 2251 Return code: 4
7/7/2007 1:37:47 AM 16 2252 -> Processing filter 'ScanEngine-FailOver-Destiny'
7/7/2007 1:37:47 AM 16 2252 Checking condition 'anything'
7/7/2007 1:37:47 AM 16 2252 Checking condition 'X-VIRUS-SCANNED is missing'
7/7/2007 1:37:47 AM 16 2252 -> Processing filter 'ScanEngine-FailOverDefault'
7/7/2007 1:37:47 AM 16 2252 Checking condition 'anything'
7/7/2007 1:37:47 AM 16 2252 Checking condition 'X-VIRUS-SCANNED is missing'
7/7/2007 1:37:47 AM 16 2252 -> Processing filter 'Add Sender IP'
7/7/2007 1:37:47 AM 16 2252 Checking condition 'message is incoming'
7/7/2007 1:37:47 AM 16 2252 Applying action 'add field 'X-SENDER-IP: {X-User-IP}''
7/7/2007 1:37:47 AM 16 2252 -> Processing filter 'Paranoid'
7/7/2007 1:37:47 AM 16 2252 Checking condition 'message is incoming'
7/7/2007 1:37:47 AM 16 2252 Checking condition 'sender not in 'WhiteList.TXT''
7/7/2007 1:37:47 AM 16 2255 Checking condition 'message has spam probability more than 50%'
7/7/2007 1:37:47 AM 16 2317 Spam probability: 36%
7/7/2007 1:37:47 AM 16 2317 Dictionary: C:\Program Files\Server Side Solutions\Paranoid\Dictionaries\P9\
7/7/2007 1:37:47 AM 16 2317 -> Processing filter 'Spam Probabilty'
7/7/2007 1:37:47 AM 16 2317 Checking condition 'message is incoming'
7/7/2007 1:37:47 AM 16 2317 Checking condition 'message has spam probability more or equal to 0%'
7/7/2007 1:37:47 AM 16 2317 Spam probability: 36%
7/7/2007 1:37:47 AM 16 2317 Dictionary: C:\Program Files\Server Side Solutions\Paranoid\Dictionaries\P9\
7/7/2007 1:37:47 AM 16 2317 Applying action 'add field 'X-SPAM-PROB: {X-Paranoid-Prob}''
7/7/2007 1:37:47 AM 16 2650 Event: ONREPLY
7/7/2007 1:37:47 AM 16 2651 < 250 Message accepted for delivery.
7/7/2007 1:37:47 AM 16 2652 Event: ONCOMMAND
7/7/2007 1:37:47 AM 16 2654 > .
7/7/2007 1:37:47 AM 16 2654 Event: ONREPLY
7/7/2007 1:37:47 AM 16 2660 < 550 Protocol violation
7/7/2007 1:37:47 AM 16 2660 Disconnect
7/7/2007 1:37:47 AM 16 2660 Event: ONDISCONNECT