New answers tagged

1

Not much you can do, Microsoft does not use SPF and DMARC to reject, only mark the Spam Confidence Level accordingly and lets the customer device. You could message @tzink7 on twitter, he should know, but this is an old post and I doubt they fixed it yet. https://blogs.msdn.microsoft.com/tzink/2015/01/09/an-update-on-dkim-on-ipv4-and-dmarc-in-office-365/ ...


1

Found out it(after I checked two other SMTP servers sending an email to hotmail.com worked) had something todo with the second NIC not being configured (DHCP on) and the SMTP server used it for its outgoing traffic (firewall didnt liked that). After disabling it, clearing the DNS and checking nslookup again it got the right address and started processing the ...


0

Untrusted TLS connection established to gmail-smtp-in.l.google.com I think you have a certificate chain error here. Make sure you are sending the intermediate certificate along with your certificate.


1

@Stefan You seem very knowledgeable which is awesome, I looked over your headers, without your domain name it makes it very hard to help troubleshoot. The one thing I did notice in your headers is that you're using "Simple/Simple" to sign your DKIM, you should really switch that over to "Relaxed/Relaxed". A lot of mail servers have trouble with simple. ...


0

@TheGreenOrange When you telnet to hotmail, you can't simply do telnet hotmail.com 25 You have to telnet to their MX Records (Which is their Mail Servers) and they have a lot as you can see: Hotmail MX Records Take the one with the lowest preference telnet mx1.hotmail.com 25 Wait like 20 seconds for a reply. If it doesn't time out then you know ...


9

One thing missing in the above (excellent) replies is to set up outbound TLS. Gmail has started to punish senders not using TLS, and other providers aren't saying anything but I'm sure they will follow suit.


16

There should be no issues becoming a small mail provider. You seem to be doing the right things. Many large providers don't get things right, and hopefully get most of their mail delivered. If mail is being sent to the SPAM folder, it is likely you have missed something. There should be a record of why you have delivery issues: For bounced messages ...


3

Nowadays, the spam activities is a real headache. The Big guys like Gmail, Microsoft, Yahoo etc. trying to secure their users from the spams. Hence, they must improve their techniques to filter the spams. And due to the secure reason, they could not disclose their policies. Hence, we could not configure our servers which can communicate their servers. ...


2

You can combine them all like this. v=spf1 a mx ptr ip4:x.x.x.x ip4:y.y.y.y include:mktomail.com include:icpbounce.com include:spf.mandrillapp.com -all I recommend changing the ~all to -all - the whole point in setting up authentication in the first place is to make it fail when it's violated. Then test sending emails from all the different places to ...


0

I don't know much about that testing location, I use mailtest@unlocktheinbox.com as my main go to email tester. That aside, DMARC can fail, if your SPF is not aligned this is called the ASPF test. DMARC requires SPF, DKIM or Both. Since you have SPF working, the only thing that comes to mind will be that possibly your ASPF Test is failing, or the tester ...


1

Not tested but should work: example.com TXT "v=spf1 a mx ip:5.6.7.8/26 include:spf.yourdomain.com ~all" example2.com TXT "v=spf1 a mx include:spf.yourdomain.com ~all" and on your main, one domain: spf.yourdomain.com TXT "v=spf1 (multiple common values) -all" You can add multiple entries (a mx), IP subnets and include. All SPF mechanisms can be used ...


0

you can easily generate here http://www.mailradar.com/spf/ and later validate http://www.kitterman.com/spf/validate.html


2

You should set rDNS (PTR) record for the IP address (IP of the webshop), as the recipient mail server is rejecting the mail due to invalid or no PTR (rDNS) record for the IP address from where the mail is originated.



Top 50 recent answers are included