Benefit from a mission critical IT monitoring with Monitis Premium or get it FREE for your entry level monitoring needs.
-Over 200,000 users
-More than 300,000 websites monitored
-Used in 197 countries
-Recommended by 98% of users
Course Of The Month
3 days, 1 hour left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
Emails being rejected
Posted on 2014-02-12
This Monday I moved offices from one location to another. I received a new IP block. I modified my MX records and ptr records but did them incorrectly. I had incoming mail going to my Barracuda Spam device and outgoing mail leaving through my exchange server. When mail started being rejected I panicked and started sending mail outbound through my barracuda as well. So now I have my mx record pointing to barracuda and my ptr record resolving to barracuda. I made that last change today. Mail is still bring rejected. How can I validate that my current DNS configuration is good?. Does this take time to resolve? And if so how long before they will start being delivered?
Please help... My email has been unstable for 3 days now and things are not good!!
Please help... My email has been unstable for 3 days now and things are not good!!
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
-
13
8
21 Comments
Have you seen the rejection emails you are getting? What does it exactly say? Have you checked the settings on Barracuda device to make sure it is not using 3rd party forwards or anything funky that changed due to the new IP block?
Active 4 days ago
Here is an example of the undeliverable:
Diagnostic information for administrators:
Generating server: barracuda.structuredassets
jcrespo@netvoix.com
#< #5.0.0 X-Spam-&-Virus-Firewall; host netvoix-com.mail.eo.outloo
Original message headers:
X-ASG-Debug-ID: 1392240338-06de93103a56360
Received: from sasmail.StructuredAssetSer
barracuda.structuredassets
(version=TLSv1 cipher=AES128-SHA bits=128 verify=NO) for
<jcrespo@netvoix.com>; Wed, 12 Feb 2014 16:25:38 -0500 (EST)
X-Barracuda-Envelope-From:
Received: from sasmail.StructuredAssetSer
([fe80::10f:ad4d:a34a:7ec4
([fe80::10f:ad4d:a34a:7ec4
From: Brian Modlin <bmodlin@structuredassetse
To: "jcrespo@netvoix.com" <jcrespo@netvoix.com>
Date: Wed, 12 Feb 2014 16:26:02 -0500
Subject: test
Thread-Topic: test
X-ASG-Orig-Subj: test
Thread-Index: Ac8oOQWrVlASy9wETQ+i2hLWv1
Message-ID: <0BAA22B50820694AA876F9AF0
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: multipart/related;
boundary="_006_0BAA22B5082
type="multipart/alternativ
MIME-Version: 1.0
X-Barracuda-Connect: UNKNOWN[10.1.10.27]
X-Barracuda-Start-Time: 1392240338
X-Barracuda-Encrypted: AES128-SHA
X-Barracuda-URL: http://10.1.10.36:8000/cgi-mod/mark.cgi
X-Virus-Scanned: by bsmtpd at structuredassetservices.co
X-Barracuda-BRTS-Status: 1
X-Barracuda-Spam-Score: 0.00
X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=EXTRA_MPART_TYPE, HTML_MESSAGE
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.145061
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------
0.00 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
0.00 HTML_MESSAGE BODY: HTML included
Diagnostic information for administrators:
Generating server: barracuda.structuredassets
jcrespo@netvoix.com
#< #5.0.0 X-Spam-&-Virus-Firewall; host netvoix-com.mail.eo.outloo
Original message headers:
X-ASG-Debug-ID: 1392240338-06de93103a56360
Received: from sasmail.StructuredAssetSer
barracuda.structuredassets
(version=TLSv1 cipher=AES128-SHA bits=128 verify=NO) for
<jcrespo@netvoix.com>; Wed, 12 Feb 2014 16:25:38 -0500 (EST)
X-Barracuda-Envelope-From:
Received: from sasmail.StructuredAssetSer
([fe80::10f:ad4d:a34a:7ec4
([fe80::10f:ad4d:a34a:7ec4
From: Brian Modlin <bmodlin@structuredassetse
To: "jcrespo@netvoix.com" <jcrespo@netvoix.com>
Date: Wed, 12 Feb 2014 16:26:02 -0500
Subject: test
Thread-Topic: test
X-ASG-Orig-Subj: test
Thread-Index: Ac8oOQWrVlASy9wETQ+i2hLWv1
Message-ID: <0BAA22B50820694AA876F9AF0
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
acceptlanguage: en-US
Content-Type: multipart/related;
boundary="_006_0BAA22B5082
type="multipart/alternativ
MIME-Version: 1.0
X-Barracuda-Connect: UNKNOWN[10.1.10.27]
X-Barracuda-Start-Time: 1392240338
X-Barracuda-Encrypted: AES128-SHA
X-Barracuda-URL: http://10.1.10.36:8000/cgi-mod/mark.cgi
X-Virus-Scanned: by bsmtpd at structuredassetservices.co
X-Barracuda-BRTS-Status: 1
X-Barracuda-Spam-Score: 0.00
X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=EXTRA_MPART_TYPE, HTML_MESSAGE
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.2.145061
Rule breakdown below
pts rule name description
---- ---------------------- --------------------------
0.00 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
0.00 HTML_MESSAGE BODY: HTML included
You are still blacklisted. Check the same section on other failed messages you are getting and if the messages are different post them here. But based on this header you need to get your network cleaned and unblocked first. See the error message below:
#< #5.0.0 X-Spam-&-Virus-Firewall; host netvoix-com.mail.eo.outloo
#< #5.0.0 X-Spam-&-Virus-Firewall; host netvoix-com.mail.eo.outloo
The best thing to do is to monitor port 25 on your network. The only IP address that should be utilizing that port should be your mail server or barracuda device. If any other IP address shows up then those machines are the ones you clean by running antivirus and anti malware scans (malwarebytes.org). If your server is infected you still have to clean it in the same way. Make sure you disconnect the machine from the network as soon as you figure out which one it is.
As for your DNS go to http://centralops.net and do a nslookup on your domain. Change the type from any to A or MX to see specific results. That should tell you what the outside world sees when they want to send you emails or access your other services.
As for your DNS go to http://centralops.net and do a nslookup on your domain. Change the type from any to A or MX to see specific results. That should tell you what the outside world sees when they want to send you emails or access your other services.
Active 4 days ago
Tried to run the utility and don't know how to use it. I get no results... Sorry, but can you assist?
Active 4 days ago
My MX = mail.structuredassetservic
My PTR = barracuda.structuredassets
Outbound mail relays through the barracuda and I believe the email headers say the mail is going out from barracuda.structuredassets
Is this the correct DNS configuration?
My PTR = barracuda.structuredassets
Outbound mail relays through the barracuda and I believe the email headers say the mail is going out from barracuda.structuredassets
Is this the correct DNS configuration?
Active 4 days ago
Also, here is the headers of the undeliverable message I received when trying to send mail:
Received: from barracuda.structuredassets
sasmail.structuredassetser
id 8.3.327.1; Thu, 13 Feb 2014 10:05:13 -0500
Received: by barracuda.structuredassets
DFECEBE99F; Thu, 13 Feb 2014 10:04:46 -0500 (EST)
Date: Thu, 13 Feb 2014 10:04:46 -0500
From: MAILER-DAEMON
Subject: Undelivered Mail Returned to Sender
To: <bmodlin@structuredassetse
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-statu
boundary="138C8BE99D.13923
Message-ID: <20140213150446.DFECEBE99F
Return-Path: <>
Received: from barracuda.structuredassets
sasmail.structuredassetser
id 8.3.327.1; Thu, 13 Feb 2014 10:05:13 -0500
Received: by barracuda.structuredassets
DFECEBE99F; Thu, 13 Feb 2014 10:04:46 -0500 (EST)
Date: Thu, 13 Feb 2014 10:04:46 -0500
From: MAILER-DAEMON
Subject: Undelivered Mail Returned to Sender
To: <bmodlin@structuredassetse
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-statu
boundary="138C8BE99D.13923
Message-ID: <20140213150446.DFECEBE99F
Return-Path: <>
Active 4 days ago
Should the PTR reflect barracuda.structuredassets
All outbound mail is sent out from the Exchange server and then RELAYED through the barracuda.
All outbound mail is sent out from the Exchange server and then RELAYED through the barracuda.
As far as your external DNS goes your MX pointing to mail.structuredassetservic
As for the internal issues, check your relay in Exchange. Is it still set to the correct IP addresses after the move? Also check the Barracuda device to make sure the IP of the exchange server is correct.
Goto http://testconnectivity.microsoft.com and see what results you get there. It should help a lot to resolve your issues.
PTR can be wrong at times because really you have to get your ISP to make that change on their end. It should not be the sole reason for rejection of emails.
As for the internal issues, check your relay in Exchange. Is it still set to the correct IP addresses after the move? Also check the Barracuda device to make sure the IP of the exchange server is correct.
Goto http://testconnectivity.microsoft.com and see what results you get there. It should help a lot to resolve your issues.
PTR can be wrong at times because really you have to get your ISP to make that change on their end. It should not be the sole reason for rejection of emails.
Active 4 days ago
When you sy "I did a quick telnet to port 25 and your banner is not showing any names. It should really read mail.structuredassetservic
Also, what if I added multiple PTRs... like:
mail.structuredassetservic
Also, please remember the DNS entries I have now are way different than the original one's I created for the move. I really screwed them up!! Now that they are "fixed" or at least better, I am concerned that what I did last week is still affecting me now. That is why I am trying to get a "Blessing" on my current config so I can feel confident.
Please clarify my questions above!!!!
Sorry, but I am desperate at this point!! No stable mail in 4 days!!
Also, what if I added multiple PTRs... like:
mail.structuredassetservic
Also, please remember the DNS entries I have now are way different than the original one's I created for the move. I really screwed them up!! Now that they are "fixed" or at least better, I am concerned that what I did last week is still affecting me now. That is why I am trying to get a "Blessing" on my current config so I can feel confident.
Please clarify my questions above!!!!
Sorry, but I am desperate at this point!! No stable mail in 4 days!!
I think your DNS is fine on the external side. Internally I can't say for sure but if you are able to send and receive mails then your DNS is most likely set properly.
Did you try the Microsoft test site I sent you the link for? http://testconnectivity.microsoft.com
Update us on the status of what your system is doing now that certain things are fixed and some still aren't (still blacklisted).
Did you try the Microsoft test site I sent you the link for? http://testconnectivity.microsoft.com
Update us on the status of what your system is doing now that certain things are fixed and some still aren't (still blacklisted).
Active 4 days ago
Here are the results.....
RCATestResult.html
RCATestResult.html
The only thing the outbound test is saying that you do not have a SPF record which are easy to create. Walk through the wizard to get one created and update your DNS entries to reflect the generated SPF record. https://www.microsoft.com/mscorp/safety/content/technologies/senderid/wizard/
So at this point are you outbound emails still being rejected?
So at this point are you outbound emails still being rejected?
Active 4 days ago
yes.... they are still being rejected..... Can you please answer the questions I had above:
"When you sy "I did a quick telnet to port 25 and your banner is not showing any names. It should really read mail.structuredassetservic
Also, what if I added multiple PTRs... like:
mail.structuredassetservic
"When you sy "I did a quick telnet to port 25 and your banner is not showing any names. It should really read mail.structuredassetservic
Also, what if I added multiple PTRs... like:
mail.structuredassetservic
When people meet we say Hello to each other. The same way when email servers start the process of sending and receiving emails they do a "handshake". In this handshake they identify themselves with their names. This name is also listed on the banner.
For example google's mail server identifies itself as
In your case, earlier it was coming up blank however now it shows this
So your banner is now OK. As for the PTR's lets put that on hold because I don't think it is what is causing your problem here.
The original header you posted - It was for incoming email and its clear that it was rejected due to your IP being on the blacklist.
The second header you posted says:
So the question is what is sasmail? Header says Barracuda forwarded the email to sasmail and your comment says the other way around.
For example google's mail server identifies itself as
220 mx.google.com ESMTP r6si802295qcl.98 - gsmtp
In your case, earlier it was coming up blank however now it shows this
220 barracuda.structuredassetservices.com ESMTP (54b580e75d81dcab857e0a4d65d1b878)
So your banner is now OK. As for the PTR's lets put that on hold because I don't think it is what is causing your problem here.
The original header you posted - It was for incoming email and its clear that it was rejected due to your IP being on the blacklist.
The second header you posted says:
Received: from barracuda.structuredassetservices.com (10.1.10.x) by
sasmail.structuredassetservices.com (10.1.10.x) with Microsoft SMTP Server
id 8.3.327.1;
Outbound mail relays through the barracuda and I believe the email headers say the mail is going out from barracuda.structuredassetservices.co m
So the question is what is sasmail? Header says Barracuda forwarded the email to sasmail and your comment says the other way around.
I think you need to check your configuration again. It looks like from that outbound email header that the email went from Barracuda to Exchange Server, not the other way around.
Featured Post
An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.
One of a set of tools we're offering as a way of saying thank you for being a part of the community.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
The new Gmail Phishing Scam going around is surprising even the savviest of users with its sophisticated techniques.
As cyber crime continues to grow in both numbers and sophistication, a troubling trend of optimization has emerged over the last year.
Familiarize people with the process of utilizing SQL Server stored procedures from within Microsoft Access. Microsoft Access is a very powerful client/server development tool. One of the SQL Server objects that you can interact with from within Micr…
In this video we show how to create a Shared Mailbox in Exchange 2013. We show this process by using the Exchange Admin Center.
Log into Exchange Admin Center.: First we need to log into the Exchange Admin Center.
Navigate to the Recipients >> Sha…
Suggested Courses
Course of the Month3 days, 1 hour left to enroll
696 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.