Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I support a domain for a sports club ( and use Google Apps for email. This has been working fine until recently when all mail to either individual accounts or groups started getting bounced. Even sending mail within our Google account gets bounced (see bounce response below).

all of the MX records look correct and I have added an SPF entry:

v=spf1 ~all

and the domain isn't blacklisted (according to

Two other DNS related things that may be significant:

  1. My ISP has included it's own MX record although the first google one seems to take priority
  2. My ISP also includes its own SPF record: v=spf1 a mx

I am unable to delete either of these records using my control panel. Could either of these be the cause of the problem?

Any help appreciated.

Delivery to the following recipient failed permanently:

Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the other email provider for further information about the cause of this error. The error that the other server returned was: 553 553 sorry, that address is not in my list of allowed recipients; no valid cert for gatewaying (#5.7.1) (state 14).

----- Original message -----

MIME-Version: 1.0 Received: by with SMTP id v26mr15360391yhi.69.1322787413227; Thu, 01 Dec 2011 16:56:53 -0800 (PST) Received: by with HTTP; Thu, 1 Dec 2011 16:56:53 -0800 (PST) X-Originating-IP: [] Date: Thu, 1 Dec 2011 16:56:53 -0800 Message-ID: Subject: test From: "XXXXXX" To: "XXXXXX" Content-Type: multipart/alternative; boundary=20cf303bfe28e0f78404b31171b6

share|improve this question
Are you able to receive mail (i.e. the only 'bounces' you are seeing are when sending from that domain)? Just for my own due diligence, I checked, and didn't see much wrong for that domain ( What I DID find, when I examined the MX records was this: 10 60 min (which you mentioned is a record that your host includs) All of the other entries are pointed to Google's servers, and while you have another MX entry in there set at a level preference of 10, my guess is this is throwing things off. Not sure though... – David W Dec 3 '11 at 4:58
David, that's what I was thinking but was not sure. I've disabled the offending records and will check again once the changes filter through – seejay Dec 3 '11 at 17:11
up vote 2 down vote accepted

The 553 553 error is not from google. The problem comes from the mx records

dig mx

;; ANSWER SECTION:           3600    IN      MX      10
***           3600    IN      MX      10***.           3600    IN      MX      20           3600    IN      MX      20           3600    IN      MX      30           3600    IN      MX      40

You have to remove 10 , your ISP screwed your settings.

share|improve this answer
And if you can't change it, then switch the ISP. – mailq Dec 3 '11 at 10:22
I got the ISP to remove the records and now mails are working ok. – seejay Dec 3 '11 at 19:19

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.