Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have been unable to send email to users on hotmail or other Microsoft email servers for some time. Its been a major headache trying to find out why and how to fix the issue.

The emails being sent that are blocked from my domain I use Google Aps to host my regular email serverice for my email addresses. I can sent email from my desktop or gmail to a hotmail without any problem. But any email sent from my server on behalf of is blocked, not even arriving in the junk email.

The IP that the emails are being sent from is the same IP that my site is hosted on: This IP is new to me since August 2010, I had a different IP for the previous 3-4 years.

This IP is not on any credible spam lists

The one list my IP is listed on seems to be out of my control, says "no reverse DNS, MX host should have rDNS - RFC1912 2.1". But since I use Google for my email hosting, I don't have control over setting up RDNS for all the MX records.

I do have Reverse DNS setup for my IP though, it resolves to "".

I have signed up for SNDS and was approved. My ip says "All of the specified IPs have normal status."

Sender Score: 100

My Mcafee threat level seems fine

I have a TXT SPF record setup, I am currently using as my DNS, and they don't have a field for SPF, but their FAQ says to add the SPF info as a TXT entry. v=spf1 a ~all

Some "SPF checking" tools ive used detect that my domain has a valid SPF, but others don't. Like Microsoft's SPF wizard, i think this is because its specifically looking for an SPF record and not in the TXT. "No SPF Record Found. A and MX Records Available".

From my home I can run "nslookup -type=TXT" and it returns:

Server: Address:

Non-authoritative answer: text = "v=spf1 a ~all"

One strange thing I found is i'm unable to ping or or do a "telnet 25". I am able to ping and many other domains I tried. I tried changing my DNS servers to Google's Public DNS and did a ipconfig /flushdns but that had no effect. I am however able to connect with telnet to

This is what the email headers look like when I send to a Google email server and I receive the email with no troubles. You can see that SPF is passing.

Delivered-To: Received: by with SMTP id q12cs91243yae; Sun, 27 Feb 2011 18:01:49 -0800 (PST) Received: by with SMTP id uu7mr4292541icb.68.1298858509242; Sun, 27 Feb 2011 18:01:49 -0800 (PST) Return-Path: Received: from ([]) by with ESMTP id uh9si8493137icb.127.2011.; Sun, 27 Feb 2011 18:01:48 -0800 (PST) Received-SPF: pass ( domain of designates as permitted sender) client-ip=; Authentication-Results:; spf=pass ( domain of designates as permitted sender) Message-Id: <> Received: from coruscant ([]:12907) by with [XMail 1.27 ESMTP Server] id for from ; Sun, 27 Feb 2011 18:01:29 -0800 Date: Sun, 27 Feb 2011 18:01:29 -0800 Subject: Test To: From: XXXX Reply-To: X-Mailer: PHP/5.2.13

I can send to gmail and other email services fine. I don't know what i'm doing wrong!


I have been removed from hotmails IP block and am now able to send emails to hotmail, but they are all going directly to the JUNK folder.


I used Telnet to send a test message to, seems my SPF is not being detected. Result: neutral (SPF-Result: None) SPF (no records) TXT (no records)

I did have a nameserver as my 4th option that doens't have the TXT records since it doens't support it. So I removed it from the list and instead added as my 4th adn 5th nameservers, which does support TXT.

Now that the new nameservers have taken affect, I pass the SPF check email along with Microsofts SenderID Wizard. Seems some lookups were using the 4th nameserver and skipping the first 3???

MAIL SENT THROUGH GOOGLE SMTP: SPF (no records) 86400 IN TXT "v=spf1 a ~all" 86400 IN A SPF (no records) 300 IN TXT "v=spf1 ip4: ip4: ip4: ip4: ip4: ip4: ip4: ip4: ip4: ip4: ?all"

MAIL SENT FROM TELNET ON SERVER SPF (no records) 86400 IN TXT "v=spf1 a ~all" 86400 IN A

share|improve this question
It seems all my server and SPF setup was fine, Hotmail did have my IP blocked. I found a contact email for the "JMR Program Management Team" and they put me in contact with the "Windows Live Hotmail Sender Support Team" who verified my IP was blocked and submitted a fix to remove the IP which will take 24-48 hours. So we'll see if that fixes the problem. they also added my domain to the "Sender ID program". It was a very fast response, I'm impressed! – Canadaka Feb 28 '11 at 4:36
I'm glad to hear you got it straightened out. I'm confused though, your telnet test (as a comment to my answer) was successfull, so how is it that you were being blocked? – joeqwerty Feb 28 '11 at 12:00
I guess i'm being blocked by a filter or IP block after the connection is message is delivered. Might be nice if Hotmail blocked the connection or sent a mail undeliverable message so one was more clear they are 'blocked' by hotmail. – Canadaka Feb 28 '11 at 22:06
Well I just sent a test message to hotmail and it went through!!! But it went straight to the Junk Mail folder, but at least it was accepted. Now to figure out why its going straight to junk, says "Microsoft SmartScreen marked this message as junk and we'll delete it after ten days." Will see if adding the 2nd SPF record to my Reverse DNS subdomain helps. – Canadaka Feb 28 '11 at 22:15

Your title says your email is being blocked by but in one of your comments to Stony's answer you state that your SMTP log shows "RCPT=OK" and "RECV=OK" when sending email to That in and of itself should be telling you that your email is not being blocked. It's being accepted by and is most likely being filtered after being accepted. there's a difference between an email being blocked/rejected and being filtered after being accepted.

You state that you can't telnet to port 25 of That's because is not an MX for A quick nslookup shows the following MX records for,,, and

You state that you can't ping but you can ping It's irrelevant whether or not you can ping or any other server, name, web site, etc. The ping tool doesn't test the availability of a service (web, email, etc). The fact that you can't ping only means that the hosts that resolve to don't respond to pings or that a firewall is blocking those pings. It's totally irrelevant to the problem. In addition, pinging has nothing to do with the MX records for is the domain name and pinging is pinging the A records configured for that domain name. When you ping you're pinging the A record for that domain name, you're not pinging the MX records for

Have a look at the Hotmail Postmaster page here to see if there's anything you need to look in to:

share|improve this answer
I realize all of that, I just had read in another thread to test doing a nslookup to I am however able to do an nxlookup to I have been through that troubleshooting page several times and before posting on serverfault. I also seem to have no connection trouble when sending a test email over telnet. – Canadaka Feb 28 '11 at 2:22
220 <> [XMail 1.27 ESMTP Server] service ready; Sun, 27 Feb 2011 18:15:00 -0800 HELO 250 MAIL FROM:<> 250 OK RCPT TO:<> 250 OK DATA 354 Start mail input; end with <CRLF>.<CRLF> SUBJECT:Test Telnet test from command line . 250 OK <SC> – Canadaka Feb 28 '11 at 2:23
@Canadaka, it's apparent you're having trouble grasping basic mail server concepts. You should contact a local consultant who can help you troubleshoot your situation and help you understand where the problem is. – Chris S Feb 28 '11 at 3:11
I've been running my own mail servers since 2001, I think I know the basics :P My IP was being blocked by Hotmail, see my comment to the original post. Since I changed locations in the data-center and got a new IP last august, its possible the IP was recycled and the previous user had gotten it blocked on hotmail. – Canadaka Feb 28 '11 at 4:39
up vote 1 down vote accepted

My issue was fixed by contacting Microsoft and they had to manually remove a block on my IP. Once the block was removed emails from my server were reaching Hotmail, but going directly to junk mail.

I have created a separate question to try and resolve the junk mail problem: Hotmail marking messages as junk

share|improve this answer

ok so for understanding. You want send an email from your google account with an other FROM adress? Something like

But when your server send direct the mail over sendmail for example and you know that they don't come to the other site check the mail log if you have access. There you can see the complete connection to the other site.

share|improve this answer
No no, all emails are from Really the fact that I use Google Apps to host my personal email service should have no effect. Its not used at all in the sending of an email from my webserver using PHP. I have looked at the SMTP logs on my server and I can see that the emails sent to are sent out with no errors. – Canadaka Feb 28 '11 at 1:12
ok so you connect with apache/php over smtp to your email account and send it over this? Or direct from your local server? Edit: Ok when there are no errors the other site has eccepted the connection and take the mail. Can you copy the line? – Stony Feb 28 '11 at 1:19
My server runs Windows Web Server 2008 and PHP. I am using Xmail as my SMTP server and PHP sends the emails connecting to it on the localhost. I have been using this setup for years and there are no problems sending to other non-hotmail servers. This is my PHP.ini settings [mail function] ; For Win32 only. SMTP = localhost smtp_port = 3000 sendmail_from = – Canadaka Feb 28 '11 at 1:28
In the Xmail SMTP logs it says "RCPT=OK" and "RECV=OK". So it seems hotmail has accepted the connection and the received it... – Canadaka Feb 28 '11 at 1:30
ok but this looks good. I think the mail is send. Perhaps the user has a spamfilter and the email is send there. But i have partial the same problems with Yahoo. – Stony Feb 28 '11 at 9:11

You want to update that SPF record to include your web server's IP address ( Right now, the SPF only mentions gmail. You send mail from gmail -and- your web server.

share|improve this answer
the servers IP is inculded in the SPF, that is what the "a" is for. WHen I send an email to a NON-hotmail server I can view the email headers and see that SPF passes! Received-SPF: pass ( domain of designates as permitted sender) client-ip=; – Canadaka Feb 28 '11 at 2:06
I'm confused, reading the google forums it seems some people suggest adding "" and others say "". – Canadaka Feb 28 '11 at 23:24
I created a thread on the Google Forums to find this answer:… – Canadaka Feb 28 '11 at 23:30
per Google Enterprise support, I've been using "" in my SPF record for a few years now. – Chris_K Mar 1 '11 at 2:16
It seems the "" works It passed a test email to Seems _spf is a wildcard for all the google mx servers or something. – Canadaka Mar 1 '11 at 2:35

My DNS show your rDNS is broken for Perhaps it is pointing to the old IP address. spf_query shows no applicable policy for either the helo name or mail-from.

Consider adding 'v=spf1 a -all' as a text record for Also add the appropriate SPF record for Perhaps 'v=spf1 mx ~all'.

share|improve this answer
I also found this an hour ago, I contacted my data-center to update the reverse DNS to point to which points to the same IP. This was a mistake, I used to have point to my server but now that I use Google Apps, it points to google mail. – Canadaka Feb 28 '11 at 4:42
Is it better to point the Reverse DNS to just "" or something like ""? – Canadaka Feb 28 '11 at 4:45
It is better to have it something like I believe the PTR record for this already exists. points elsewhere, fix your A record and I think you will be OK. Host names like are almost always spam sources, and often forged. Host names like is more likely to be sending ham. – BillThor Feb 28 '11 at 4:50
I would suggest you change the name your mail server to a subdomain like You may want to send a message to to verify your configuration. The message they send back will give you a good idea of any problems. You may need to wait for your DNS changes to propagate first. – BillThor Feb 28 '11 at 5:04
I changed the Reverse DNS to "" and that has propagated. So now i'm going to add a 2nd SPF "server IN TXT "v=spf1 -all". I didn't want to use because I use that as a CNAME to for webmail access. Thanks! – Canadaka Feb 28 '11 at 22:10

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.