Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Hot answers tagged

30

I had to wrap my SPF record in quotation marks for it to work. "v=spf1 include:_spf.google.com ~all"


21

No, Google doesn't currently offer this service. Even if they did, it's a not a very good idea to have all of your local authentication sources in the cloud. Let's say that you do move all of your authentication to some cloud service. Now, imagine that your ISP has an outage. Now no one can log in, even though your local network is fine. That's bad. Even if ...


17

Hotmail fails to use proper DNS rules. Hotmail will always try to deliver to the domain's A-record first and will ignore MX-records. If the domain A-record accepts a connection (eg. it runs a mailserver) it will try to deliver the email, which in most cases will not be an issue if the webserver and mail server are the same box. However, if an domain uses a ...


15

You need to prefix the FQDN with the priority: For what it's worth, it actually says this in the help button right above the field: A number and DNS name of a mail exchange server, indicating priority of the server. Servers with lower numbers are tried first.


13

This is absolutely impossible. Yes, there are means to synchronize between local directory services and Google's directory, but that doesn't mean that you can use Google's directory like AD, OD, or even a simple LDAP service. Now, if all you want is to enable users to be able to use their Google credentials to sign into your application, look into OpenID.


12

From RFC 2821 "Simple Mail Transfer Protocol", section 5 "Address Resolution and Mail Handling": The lookup first attempts to locate an MX record associated with the name. If a CNAME record is found instead, the resulting name is processed as if it were the initial name. In general, this is how CNAMEs work. They are often mis-used, mis-understood, ...


12

I discovered that the problem was that although we had SPF records set up for our domains, we did not have a DKIM record associated with our domain. In order to add a DKIM record in Google Apps, you need to do the following: Go to the Admin Console Click on "Google Apps" Click on "Gmail" Scroll down until you see "Authenticate Email" and click that Select ...


11

The delay appears to be within google's network. However, this is technically not a problem. SMTP delivery is not and should never be viewed as an instant method of communication. It's a store and forward with multiple stops along the way which means multiple queues and multiple locations where delays might occur. SMTP is designed this way and delays can (...


11

RFC 7208 § 5.1 is explicit about this: after all appears, everything after it MUST be ignored. Mechanisms after "all" will never be tested. Mechanisms listed after "all" MUST be ignored. Any "redirect" modifier (Section 6.1) MUST be ignored when there is an "all" mechanism in the record, regardless of the relative ordering of the terms. The RFC it ...


10

I work for a school of similar size. My recommendation: Focus on the network infrastructure as the first priority. Get beyond consumer level switches and internet access by implementing say, a Cisco ASA 5505 firewall combined with a Squid web proxy to do edge and http filtering and VPN connectivity. An ASA 5505 is probably less than 500$ with a support ...


9

You can't use a CNAME as a root for your domain. To quote Wikipedia's article on RFC 1034 : An alias defined in a CNAME record must have no other resource records of other types (MX, A, etc.) The reason for this is because the CNAME tells clients that (in essence) you need to look here for your answer, but this applies for the entire domain. So not only ...


9

In zone files, all domain names without trailing dot interpreted as relative to the zone. @ is a shortcut for the zone domain and if label is omitted, the last label is used. That is probably why in your last MX example you got no MX records. ; CNAME Records mail 3600 IN CNAME ghs.google.com. calendar 3600 IN CNAME ghs.google.com. docs ...


9

The problem here is how Exchange itself works (O365): However mails sent from inside office 365 addressed to users with accounts in 0ffice365 continued to appear in office 365 mailboxes, and are not routed to the mx mail server (google apps), and thus are not appearing in google apps mail mail boxes. This is to be expected. Exchange isn't going to ...


8

What about something like MXLogic? (which was sold to mcafee) It's a SaaS spam filter, but most provide outage protection, where they are storing the email for the length of the outage. "McAfee intelligently synchronizes and delivers an accurate record of up to 60 rolling days of outage-period message activity"


8

http://www.nabber.org/projects/oneldap/ provides a backend for OpenLDAP that can at least authenticate users against various services (IMAP, POP, SSH, etc.). It would be possible to write a plugin to use the Google Client Login API directly if you wanted. This solution would at least work for an app that used LDAP for authentication, but is far from a ...


8

Congratulations, you've just received your first backscatter spam. Unfortunately, the root cause of backscatter spam is badly configured mail servers which accept a message before determining that it's undeliverable and then attempt to return it to the "From:" address, which is obviously fake. If there aren't a lot of them, you can forward them to ...


8

You want to prevent this sort of thing in the future? Use a real MTA instead of Google Apps. As you've discovered, it is certainly possible to relay emails through a GApps account, but it's far from ideal, and frankly, it's not what that service was built to do. They give you zero visibility into logs of any sort, which you'd need in order to troubleshoot ...


8

You need to change your MX records to point to your new email host.


7

You can use the Microsoft Sender ID Framework SPF Record Wizard to generate SPF record.


7

Set the fallback_transport variable to relay , that way it'll send it to Google or whatever server it should, if doesn't find the user locally. If you never want the mail to be sent to a local user change the mydestination variable to localhost , that way it'll only forward locally email addresses ending in .localhost It would look like that in your main....


7

Something like this should do the trick: #The cnames are not needed, but nice to have. It will allow you to access mail via mail.domain.com mail IN CNAME ghs.google.com. calendar IN CNAME ghs.google.com. docs IN CNAME ghs.google.com. sites IN CNAME ghs.google.com. start IN CNAME ghs.google.com. #This is important @ IN MX 1 aspmx.l.google.com. @ IN MX 3 ...


7

You'll get yourself shut down fairly quickly if you do something like this. There are per-account per-day max limit on the number of emails you can send - I believe it's in the neighborhood of 500. See the Google Apps Sending Limits documentation. You'll need to consider either running your own mailer or using the services of one of the many companies ...


7

Yes, it is quite possible to push out certificate trusts to users. This is done through Group Policy. You can find it under Users -> Windows Settings - > Security Settings -> Public Key Policies. From there you can manage which certificates and certificate-authorities are to be trusted. The same hive exists on the Computer side of the GPO as well. You'll ...


7

Nevertheless, if there is something I can or should do about this - I'd like to know Unfortunately, there isn't. You are at the mercy of the providers receiving the email to know it's 'complete' spam and discard it without issuing a bounce (which is not very likely). If you haven't already setup SPF records, you should consider doing so. This will reduce ...


7

Set-ADGroup "SecurityGroupName" -Replace @{mail="test@example.com"}


7

Just add the include statement that Google is recommending: v=spf1 a mx ip4:67.231.248.250 include:_spf.google.com ~all Do not create multiple SPF records.


7

Install postfix with apt-get install postfix. When asked select "satellite system" or the option with smarthost. Accept the defaults of everything else for now. Edit your main.cf according to the following file: /etc/postfix/main.cf # a file which should contain the google apps domain myorigin = /etc/mailname # if your google apps domain is in ...


7

SES is not designed for this - SES is primarily for automated sending email, with the facility to receive email and send it to automated systems via Lambda, SNS, or stored on S3. Sending would actually work fine from email clients. The thing that won't work is receiving email, as below - it doesn't store it for collection by IMAP or similar. You can use ...


6

You're thinking too hard about this. :) Create a group "foo" that has both fred and bill as members. Set access controls on the group as appropriate. By default, I believe it will not allow accounts outside of your domain to email that list.


6

It's not possible to replace your Domain Controller with Google Apps.


Only top voted, non community-wiki answers of a minimum length are eligible