[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1323
  • Last Modified:

I started using POSTINI for incoming mail and since this was set up, I have some difficulty with outgoing mail

My outgoing mail server sends emails directly and not via POSTINI.  My problem is, some items that are being sent don't make it to the recipient.  Some do.  The smtp queue empties and we get no 'no delivery reports'.  I am sure emails are not filtered with antivirus or antispam as they are simple text messages with no graphics or key words or the like.  I am confused
0
chitchcock
Asked:
chitchcock
  • 9
  • 6
1 Solution
 
Wonko_the_SaneCommented:
Random recipients? Recipients for certain domains only? Can you reproduce the behaviour?

Changing incoming mail to external filter providers will usually go with changes to the DNS configuration for your domain. Is everything setup correctly there? E.g. does your mail server have valid A and PTR records, does it use the correct name, do you have SPF records defined?
0
 
chitchcockAuthor Commented:
MX record was the only change I made.  I will check into the A and PTR records now and let you know.  Thanks for the tips
0
 
chitchcockAuthor Commented:
Sorry, I didn't answer all of your question.  Random recipients no; I will send an email to the same recipient twice and sometimes only one will make it.  This happens with a reported 10 or more recipients so far.  I followed postinis instruction for the MX record change and am checking on your requested A, PTR and SPF records so hopefully it is a mix up with one of those.  
0
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.

 
chitchcockAuthor Commented:
Their is no SPF records.  I am concerned about the PTR record.  Our domains incoming mail is direct to POSTINIs servers, sanitized and sent to us.  Do I need to have POSTINI configure my PTR record?
0
 
SembeeCommented:
If you send all email via Postini then there is nothing else that you can do. Take it up with Postini to track the email through their system.
You shouldn't have to do anything with your PTR records because Postini is now handling the delivery of your email.

Simon.

--
If your question has been answered, please remember to accept the answer and close the question.
0
 
chitchcockAuthor Commented:
I do not send any email via Postini.  I only accept incoming mail from them.  Outgoing emails are sent directly from the server.  No restrictions
0
 
Wonko_the_SaneCommented:
To make it simple: The external (Internet) IP address of your outgoing mail server should have a PTR record in DNS listing the correct name of the server

E.g. 200.199.198.197 --> mail.yourdomain.com

After all this really wouldn't explain why the mail is delivered sometimes...
0
 
chitchcockAuthor Commented:
Thanks.  I wonder if the recipients have some sort of filtering or checkback that confirms dns entry for mail and the actual domain exist.  In my case, their is no mail.domain.com anymore for MX record. That has been diverted to postinis servers.  But if the recipient checks, my domains 'a' record exists and is different from the mx record.  Not sure if that matters but at this stage it may just be some sort of dns checkback from their antispam, antivirus or mail system.
0
 
Wonko_the_SaneCommented:
One thing about the missing NDRs: Is it possible that the NDRs are filtered by POSTINI? A NDR would really help a lot here to get an idea of what the issue could be.
0
 
chitchcockAuthor Commented:
I will check with them
0
 
Wonko_the_SaneCommented:
Your outgoing mail server definitely needs valid A and PTR records. They can be different from the MX record.
0
 
chitchcockAuthor Commented:
I am told by my ISP that the A and PTR are correct.  I also talked to Postini and they stated all NDRs get through either to me or to my quarantine but I do not see them in quarantine.  Strange the mail is released but no NDR arrives.  It is sounding more like the recipients mail server is rejecting or deleting the mails.
0
 
Wonko_the_SaneCommented:
OK, I have to start guessing now, so careful...
- Maybe you can setup a "blind" MX-record for your outgoing mail server. Blind meaning: It has the DNS MX record pointing to the A record of your outgoing server, however your outgoing server will not really listen on port 25 for inbound email (usually easy to do if you have a firewall). This is not required per the RFCs. It is crucial that you only do this if your server is not reachable on TCP port 25 from the Internet, otherwise you would render your postini filter useless. Don't really think this would help, but it is easy to do
- You can try to get with the recipient's IT and check if they can provide you any input. This could help a lot.
0
 
chitchcockAuthor Commented:
I am discussing with the subject i.t. manager and he is limp other then to say he uses MXlogics which is an antispam system like Postini.  I did get one bounceback:

Your message did not reach some or all of the intended recipients.

      Subject:      RE: Latranga
      Sent:      10/17/2007 9:03 AM

The following recipient(s) cannot be reached:

      Rod D. Potratz, CFP on 10/17/2007 9:03 AM
            There was a SMTP communication problem with the recipient's email server.  Please contact your system administrator.
            <my.maildomain.net #5.5.0 smtp;550-MY_IP blocked by ldap:ou=rblmx,dc=mso,dc=att,dc=net>
0
 
Wonko_the_SaneCommented:
OK, so they are blocking you because of  a DNS thing or you are blacklisted somewhere. It is iimpossible for me tell what the actual problem is, and it could also be the fault of the recipient if they block you although you did everything correct (which is possible)

Suggestions:
- Try this MX-thing as described above if you can do it without a lot of hassle
- Contact MXLogix and try to find out why exactly they are blocking you, this could help to resolve the issue
0
 
chitchcockAuthor Commented:
Thanks for the good suggestions.  I have determined it is not a blacklist issue by checking the various spam dns orgs.  My firewall is not flexible enough to do the mx suggestion as it is only a symantec gateway security 360.  I am sure the issue is with MXlogics and will contact them.  Much regards
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

  • 9
  • 6
Tackle projects and never again get stuck behind a technical roadblock.
Join Now