Elk M1 Email --- again!

George M

Active Member
So for years I have had my elk texting me (emailing) when the system is Armed or Disarmed. About 3 weeks ago it stopped. So I figured I couldn't put off updating the XEP to v.2 any longer. 
So I updated both the main board and the XEP. 
 
Still no email getting sent. Tried three different rules, Tried three different servers (smtp2go, aol, yahoo), Tried both texts and actual emails. Nothing shows up in the logs.
Nothing.
 
Then I remembered that I am also not getting the alerts from my Blue Iris system. Same thing, was working and then not. At about the same time frame. So now I'm thinking it may be more a of a network or firewall issue. However I don't know where to start to try and track that down. 
 
Anyone have any advise at to how to begin to track down the problem?
 
Thanks
George M
 
They're configured to use a mail gateway somewhere, yes?  Check to make sure that IP address is still accepting mail and that any account info you use for it is current and correct.  If it's an e-mail account that's had a password change recently then you'd need to update anything else using it.
 
Yes, confirmed all email servers work correctly. Tried using smtp servers at AOL, Yahoo, and SMTP2go. confirmed they all work normally. Also confirmed the ISP is not blocking the ports via the Telnet command.
 
Put the Elk M1 in a DMZ for a couple minutes and see if it works. Also watch it.  Enable logging on your firewall.  
 
It'll take 30 seconds to check; literally.
 
Pete,
 
When I get home I will try. I'm sure I'll have questions.
 
When you say to put it in a DMZ do you mean at the router?
 
When you say to put it in a DMZ do you mean at the router?
 
Yes.
 
What is the mfg and model number of the router you are using?
 
A quickie copy and paste.
 
To set up a default DMZ server:
 
1. Log on to your router
2. Select ADVANCED > Setup > WAN Setup.
3. Select the Default DMZ Server check box.
4. Type the IP address of Elk M1
5. Click Apply.
 
netgearDMZ.jpg
 
Pete,
I got that set up. Then I looked at the logs in the router. 
 
This is what comes up:
[Internet disconnected] Sunday, May 15,2016 15:44:15             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:43:53             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:42:53             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:41:53             
[Time synchronized with NTP server time-b.netgear.com] Sunday, May 15,2016 15:41:17             
[LAN access from remote] from 89.36.223.194:37434 to 192.168.0.99:19 Sunday, May 15,2016 15:41:14             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:40:54             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:40:48             
[LAN access from remote] from 192.187.127.207:64810 to 192.168.0.99:22 Sunday, May 15,2016 15:40:37             
[LAN access from remote] from 192.187.127.207:64810 to 192.168.0.99:22 Sunday, May 15,2016 15:40:34             
[LAN access from remote] from 192.187.127.207:59607 to 192.168.0.99:22 Sunday, May 15,2016 15:40:11             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:40:08             
[LAN access from remote] from 192.187.127.207:59607 to 192.168.0.99:22 Sunday, May 15,2016 15:40:08             
[DoS attack: RST Scan] from source: 176.32.99.234:443 Sunday, May 15,2016 15:39:14             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:39:08             
[Internet connected] IP address: 174.29.9.176 Sunday, May 15,2016 15:38:31             
[Internet disconnected] Sunday, May 15,2016 15:38:24             
[admin login] from source 192.168.0.121 Sunday, May 15,2016 15:38:20             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:38:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:37:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:36:13             
[DoS attack: RST Scan] from source: 54.231.13.33:443 Sunday, May 15,2016 15:35:48             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:35:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:34:08             
[DoS attack: RST Scan] from source: 108.160.172.205:443 Sunday, May 15,2016 15:34:05             
[DoS attack: RST Scan] from source: 108.160.172.237:443 Sunday, May 15,2016 15:33:26             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:33:08             
[DoS attack: ACK Scan] from source: 54.85.233.177:443 Sunday, May 15,2016 15:33:00             
[DoS attack: ACK Scan] from source: 54.231.13.33:443 Sunday, May 15,2016 15:32:39             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:32:08             
[UPnP set event:DeletePortMapping] from source 192.168.0.128 Sunday, May 15,2016 15:31:56             
[UPnP set event:DeletePortMapping] from source 192.168.0.128 Sunday, May 15,2016 15:31:55             
[UPnP set event:AddPortMapping] from source 192.168.0.128 Sunday, May 15,2016 15:31:35             
[UPnP set event:AddPortMapping] from source 192.168.0.128 Sunday, May 15,2016 15:31:33             
[DoS attack: RST Scan] from source: 176.32.101.185:443 Sunday, May 15,2016 15:31:14             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:31:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:30:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:29:11             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:28:08             
[NVR rule match] from 174.24.98.13:35007 to 174.29.5.132:88 Sunday, May 15,2016 15:27:19             
[NVR rule match] from 174.24.98.13:43579 to 174.29.5.132:88 Sunday, May 15,2016 15:27:19             
[NVR rule match] from 174.24.98.13:36875 to 174.29.5.132:88 Sunday, May 15,2016 15:27:19             
[NVR rule match] from 174.24.98.13:49127 to 174.29.5.132:88 Sunday, May 15,2016 15:27:19             
[DoS attack: ACK Scan] from source: 54.85.233.177:443 Sunday, May 15,2016 15:27:15             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:27:12             
[DoS attack: ACK Scan] from source: 54.85.233.177:443 Sunday, May 15,2016 15:26:44             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:26:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:25:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:24:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:23:08             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:22:08             
[DoS attack: RST Scan] from source: 104.69.230.120:443 Sunday, May 15,2016 15:21:13             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:21:08             
[DoS attack: ACK Scan] from source: 54.85.233.177:443 Sunday, May 15,2016 15:21:05             
[DoS attack: ACK Scan] from source: 54.85.233.177:443 Sunday, May 15,2016 15:20:34             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:19:55             
[Time synchronized with NTP server time-b.netgear.com] Sunday, May 15,2016 15:19:31             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:18:55             
[Internet connected] IP address: 174.29.5.132 Sunday, May 15,2016 15:18:23             
[Internet disconnected] Sunday, May 15,2016 15:18:17             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:17:55             
[DoS attack: ACK Scan] from source: 54.85.233.177:443 Sunday, May 15,2016 15:17:51             
[LAN access from remote] from 218.38.19.158:45507 to 192.168.0.99:2222 Sunday, May 15,2016 15:17:28             
[admin login] from source 192.168.0.121 Sunday, May 15,2016 15:17:06             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:16:55             
[DoS attack: ACK Scan] from source: 176.32.101.110:443 Sunday, May 15,2016 15:16:54             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:15:55             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:14:55             
[LAN access from remote] from 185.94.111.1:43151 to 192.168.0.99:123 Sunday, May 15,2016 15:14:23             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:13:55             
[DoS attack: ACK Scan] from source: 54.85.233.177:443 Sunday, May 15,2016 15:13:05             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:12:55             
[DoS attack: ACK Scan] from source: 54.85.233.177:443 Sunday, May 15,2016 15:12:34             
[DoS attack: ACK Scan] from source: 173.201.192.199:995 Sunday, May 15,2016 15:12:11             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:11:55             
[DoS attack: RST Scan] from source: 31.13.66.1:443 Sunday, May 15,2016 15:11:51             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:10:55             
[DoS attack: RST Scan] from source: 54.239.28.175:443 Sunday, May 15,2016 15:10:16             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:09:55             
[DoS attack: RST Scan] from source: 54.239.27.17:443 Sunday, May 15,2016 15:09:51             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:08:55             
[LAN access from remote] from 110.92.64.218:6000 to 192.168.0.99:1433 Sunday, May 15,2016 15:08:18             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:07:56             
[DoS attack: RST Scan] from source: 31.13.74.3:443 Sunday, May 15,2016 15:07:49             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:07:39             
[Time synchronized with NTP server time-b.netgear.com] Sunday, May 15,2016 15:07:35             
[DoS attack: RST Scan] from source: 72.21.210.52:443 Sunday, May 15,2016 15:07:29             
[DoS attack: ACK Scan] from source: 151.80.113.66:6009 Sunday, May 15,2016 15:06:48             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:06:39             
[LAN access from remote] from 174.131.111.178:4533 to 192.168.0.99:445 Sunday, May 15,2016 15:06:22             
[LAN access from remote] from 174.131.111.178:4533 to 192.168.0.99:445 Sunday, May 15,2016 15:06:19             
[LAN access from remote] from 154.16.63.90:39918 to 192.168.0.99:22 Sunday, May 15,2016 15:06:11             
[Internet connected] IP address: 174.29.3.104 Sunday, May 15,2016 15:05:57             
[Internet disconnected] Sunday, May 15,2016 15:05:51             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:05:39             
[DoS attack: RST Scan] from source: 98.138.243.53:443 Sunday, May 15,2016 15:05:23             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:04:39             
[DoS attack: RST Scan] from source: 54.239.26.114:443 Sunday, May 15,2016 15:04:23             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:03:39             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:02:39             
[LAN access from remote] from 162.222.92.8:12200 to 192.168.0.2:3306 Sunday, May 15,2016 15:01:43             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:01:39             
[DoS attack: RST Scan] from source: 31.13.66.1:443 Sunday, May 15,2016 15:01:04             
[DHCP IP: (192.168.0.123)] to MAC address 98:5F:D3:26:58:AC Sunday, May 15,2016 15:00:33             
[LAN access from remote] from 169.229.3.91:53326 to 192.168.0.2:443 Sunday, May 15,2016 15:00:26             
 
 
DEL
I checked on the ISP blocking the ports. It is not. I used the telnet command to check it.
 
Now send out an email from the M1.  Watch the logs for the IP of the M1 and check you email and see if the email get there.
 
I am guessing you are using a static IP for the M1 eh?
 
PM me your internet IP address and your M1 address. 
 
Do a what is my ip address in google.
 
Also if you can go to your modem.  If it is a motorola SB modem then the IP is 192.168.100.1.  You might not be able to get to it.  If you do get to it let me know.
 
How do I look at the logs for the ip of the M!?
 
It is a combination modem / router which I get to via 192.168.0.1
Yes, static on the M1
I have a rule in the M1 to send a message every minute
 
I'll send a PM with the info
 
The IP of the M1 should be in the logs above when it is talking to your router.
 
Are you getting the emails sent out every minute?  Are you also sending a text every minute via email?
 
Nothing from the M1 address is showing up in the logs. No emails are going out.
 
However I can connect to the M1 via the .99 address
 
I may have it solved. In the M1 I changed from "Get DNS automatiocally" to setting the DNS to my gateway.
Now I am getting the texts and messages.
 
Thanks for you help.
I'll monitor it for a while.
 
Back
Top