Sensata Support 
England
Member since
10/18/2006
Platinum Membership
Posts: 68
 |
| 3/05/2007 04:52 PM |
|
Hello all,
I have a client that has been able to email another company in France perfectly fine up until the end of last week. Since then they have been receiving an return error message when sending to the domain. This is the same for all users trying to send to that domain.
Below is the error message received when any user trys sending to that domain.
Thanks for any help or advice.
Olly
|
|
|
|
|
|
robert pearman
United Kingdom
Member since
2/23/2007
Platinum Membership
Posts: 1794
|
| 3/07/2007 10:27 AM |
|
do the NDR's originate from your exchange server or the remote company?
ps... i dont see a message
|
|
|
|
|
|
Sensata Support
England
Member since
10/18/2006
Platinum Membership
Posts: 68
|
| 3/07/2007 11:46 AM |
|
The following recipient(s) could not be reached:
xxxx@yyyyyyyyyyyy.com on 19/02/2007 08:39
You do not have permission to send to this recipient. For assistance, contact your system administrator.
<***************.com #5.7.1 smtp;550 5.7.1 Access denied>
Hopefully you can now see the message. ************.com is the domain name of where the email is being sent from.
|
|
|
|
|
|
robert pearman
United Kingdom
Member since
2/23/2007
Platinum Membership
Posts: 1794
|
| 3/07/2007 02:11 PM |
|
| can you post up the headers? |
|
|
|
|
|
Sensata Support
England
Member since
10/18/2006
Platinum Membership
Posts: 68
|
| 3/07/2007 03:21 PM |
|
Below is the complete email message received
"Your message did not reach some or all of the intended recipients.
Subject: ****************** - New Business Checklists Received
Sent: 19/02/2007 08:39
The following recipient(s) could not be reached:
xxxx@yyyyyyyyyyy.com on 19/02/2007 08:39
You do not have permission to send to this recipient. For assistance, contact your system administrator.
<***************.com #5.7.1 smtp;550 5.7.1 Access denied>"
|
|
|
|
|
|
robert pearman
United Kingdom
Member since
2/23/2007
Platinum Membership
Posts: 1794
|
| 3/07/2007 04:20 PM |
|
if you right click the message, click options, then under headers do a select all > copy and then paste that info into a reply here.
|
|
|
|
|
|
Libis Bueno
Worcester, MA
Member since
9/2/2005
Registered Users
Posts: 52
|
| 4/09/2007 03:14 PM |
|
I'm having the same issue, has anyone resolved this issue if so can yo u please post the asnswers?
thanks
LB |
|
Libis R. Bueno
"Opportunity lies in the middle of difficulties"
Albert Einstein
|
|
|
|
Libis Bueno
Worcester, MA
Member since
9/2/2005
Registered Users
Posts: 52
|
| 4/09/2007 03:35 PM |
|
SOrry I guess it will make sence if I give more info on my problem :)
Ok, so my client has two doamin and we have one configured as the primary domain to send and recieve emails. they can send email to almost everyone except to some people in Russia and AOL
here are the messages we get back.
Russia:
_____________________________________________
From: System Administrator
Sent: Monday, April 02, 2007 10:00 AM
To: Yura Levin (vladimirlevin@mtu-net.ru)
Subject: Undeliverable: privet
Your message did not reach some or all of the intended recipients.
Subject: privet
Sent: 4/2/2007 10:00 AM
The following recipient(s) could not be reached:
Yura Levin (vladimirlevin@mtu-net.ru) on 4/2/2007 10:00 AM
You do not have permission to send to this recipient. For assistance, contact your system administrator.
: Client host rejected: Access denied>
AOL:
_____________________________________________
From: System Administrator
Sent: Saturday, March 31, 2007 4:10 PM
To: lobzik@aol.com
Subject: Undeliverable: test on 3-29-07
Your message did not reach some or all of the intended recipients.
Subject: test on 3-29-07
Sent: 3/29/2007 3:59 PM
The following recipient(s) could not be reached:
lobzik@aol.com on 3/31/2007 4:10 PM
Could not deliver the message in the time limit specified. Please retry or contact your administrator
I check with Dnsstuff and our IP or Domain is not in a blacklist and the DNS report checks out fine...
Any ideas what could be causing this issue?
Thanks any suggestions will be appreciated.
Thanks in advance for looking at this post.
LB
|
|
Libis R. Bueno
"Opportunity lies in the middle of difficulties"
Albert Einstein
|
|
|
|
robert pearman
United Kingdom
Member since
2/23/2007
Platinum Membership
Posts: 1794
|
| 4/10/2007 10:24 AM |
|
when you run the DNS report - do you have an SPF key against both domain names?
do you have reverse dns entries for your mail server?
AOL is notorious for blocking domains without reverse dns!
reverse dns is somthing that your ISP or domain hosting company can do for you (if you dont host your own external DNS server )
it simply allows the AOL mail servers to verify that the emssage your sending is coming from the right server.
|
|
|
|
|
|
Libis Bueno
Worcester, MA
Member since
9/2/2005
Registered Users
Posts: 52
|
| 4/10/2007 10:40 PM |
|
Hi Robert,
thanks for the reply....
I do have a PTR record created for both domain. as for the SPF key I'm not sure about that one.
To better answer your question I attached both DNS report for my Domains.
thanks in advance for looking into this for me...
|
 Attachment: 1410405640154.zip
|
Libis R. Bueno
"Opportunity lies in the middle of difficulties"
Albert Einstein
|
|
|
|
robert pearman
United Kingdom
Member since
2/23/2007
Platinum Membership
Posts: 1794
|
| 4/11/2007 10:38 AM |
|
hi,
ive looked at your reports - and i am a bit surprised when you said they check out fine.
there are multiple warnings and failures on there, althought not all of them are directly linked into the mail server.
it says that you do not have an SPF key - i would first contact your ISP and see if they can create one for you.
if (as i suspect) you are hosting your own dns servers, on the dns report under SPF key there is a link that tells you how to go about creating an SPF key. |
|
|
|
|
|
Libis Bueno
Worcester, MA
Member since
9/2/2005
Registered Users
Posts: 52
|
| 4/11/2007 03:57 PM |
|
Thanks for the reply...
Robert, No, we are not hosting our DNS, we are using our ISP's DNS.
When I said that my reports checkout fine  , I was refering to my PTR and MX records..... Sorry if I miss leaded you
You asked if I had a PTR record for our email. right? I want to know if our email settings looked OK to you, I know that there are some DNS issues on the Report, but since we don't host the DNS ourselve, I can't fix those warning or error, I tried getting our ISP to fix that but I got no answer yet.
As for the SPF key.... I will get in touch with them, althougth I asked an email expert and he told me that SPF is not really needed as it really does not address the issue that we are having. but I will ask the ISP to see if they could add.
can you please advice....
Thanks
|
|
Libis R. Bueno
"Opportunity lies in the middle of difficulties"
Albert Einstein
|
|
|
|
robert pearman
United Kingdom
Member since
2/23/2007
Platinum Membership
Posts: 1794
|
| 4/11/2007 05:27 PM |
|
:P to you too, lol.
well with all due to respect yo your email expert - what does he suggest the problem is?
as we have two seperate issues it is a little more tricky to say 100% what is the cause.
i would say that in my opinion an SPF key will help you with the AOL problem, only because we ourselves have had trouble emailing AOL in the past - we now have an SPF key and we can email AOL fine.
As for the russian problem,
can you email the recepient from any other address - hotmail or somthing like that? |
|
|
|
|
|
Marina Roos
The Netherlands
Member since
3/24/2005
Forum Admins
Posts: 12627
|
| 4/13/2007 12:53 AM |
|
I am not a fan of SPF records at all. Simply create another SMTP connector that will send through smarthost and add the unwilling domains in the Address tab.
|
|
| Marina Roos Smallbizserver.Net Administrator | Mission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain' |
|
|
|
|
robert pearman
United Kingdom
Member since
2/23/2007
Platinum Membership
Posts: 1794
|
| 4/13/2007 11:48 AM |
|
i am curious as to why you do not like SPF keys,
i do have some reservations about them myself, perhaps reservations is the wrong word........
i think they are a good idea, if, they were compulsary. as it stands now they are a bit of a pain sometimes some people using them, some not, some servers accepting mail some not.
|
|
|
|
|
|
Marina Roos
The Netherlands
Member since
3/24/2005
Forum Admins
Posts: 12627
|
| 4/14/2007 12:31 AM |
|
Exactly. It doesn't make much sense if not everybody is using them. And can you believe it that there are ISP providers that claim that you have to have those SPF records to be in compliance?? Which is big nonsense.
|
|
| Marina Roos Smallbizserver.Net Administrator | Mission accomplished. We have joined the branch office to our SBS 2003 Headquarters and have the same user experience on the branch office as we have on our local network at the Headquarters. Want to know how? Signup up for a subscription and get instant access to the article series 'How to add an additional Domain Controller from a remote office to the SBS domain' |
|
|
|
|
Libis Bueno
Worcester, MA
Member since
9/2/2005
Registered Users
Posts: 52
|
| 4/16/2007 01:42 AM |
|
Hi guys....
sorry for starting this long discusion on this topic.... but, still can't find a solution to my problem....
I am trying to get my ISP to setup SPF for our domain. I haven't gotten no reply from them yet... still waiting...
Robert, I could email the recipient from other email, at this point my client is more concern emailing AOL user than Russian users (no offense to any Russians on this forum  )....
Has any one have deal with AOL and SBS, what do I need to do to resolve this issues, and if so, can you please pointe me into the right direction?
Marina, I agree with you, that's exacly what the email expert that replied to my question said.... Can you please step me thru the process of adding the SMPT Connector?
Thanks
|
|
Libis R. Bueno
"Opportunity lies in the middle of difficulties"
Albert Einstein
|
|
|
|
robert pearman
United Kingdom
Member since
2/23/2007
Platinum Membership
Posts: 1794
|
| 4/16/2007 12:39 PM |
|
google search unable to email AOL >
this page - and the related ones look like they have all the info you need to fix your problem!
|
|
|
|
|
|
Marina Roos
The Netherlands
Member since
3/24/2005
Forum Admins
Posts: 12627
|
|
Libis Bueno
Worcester, MA
Member since
9/2/2005
Registered Users
Posts: 52
|
| 5/01/2007 11:18 PM |
|
Hi Mariana,
Thanks for the Link....
Very intresting.... because my server did meet any of the spec for emailing to AOL...
- Will check if your IP address is on a open relay blacklist (i.e. www.ordb.org) == NO - Will check if your IP address is in their list of dynamic IP addresses == Static IP
- Will perform a Reverse DNS lookup on your IP to check if it corresponds to your domain == Yes...
I thnk my problem has been resolved by doing the following....
1) I asked the ISP to setup an SPF record. (Robert, you were right.... I guess this is very important now days :P _)
2) I scanned the network for virus, none found...
3) I added the abuse & postmaster emails address...
6) Installed Trend Micro SMB 3.6 with messeging services...
Thank you all for your pointing me in the right direction.... I love this forum...... You guys rock....
SBS for life Homes.....
|
|
Libis R. Bueno
"Opportunity lies in the middle of difficulties"
Albert Einstein
|
|
|
|