TomHD Posted February 3, 2015 Posted February 3, 2015 Hello All, Still having issues with external emails getting delayed or bounced back. Wondered if the send connector wasn't configured properly? Anyone here from Suffolk/E2BN give me any information on the configuration of their send connector? Thanks, TomHD
Oaktech Posted February 3, 2015 Posted February 3, 2015 Are you still using the default send connector that is create by the wizard? If so, delete it and recreate it. There is a documented bug where sometimes the default config is invalid and it's just easier to do it again.
TomHD Posted February 3, 2015 Author Posted February 3, 2015 Not using the default send connector. It is configured as following: General - Name: external Status: Enabled Protocol Logging: None FQDN: mail.romanhill-pri.suffolk.sch.uk Maximum message size: 10240 Address space - Type: SMTP Address space: * Include all subdomains ticked Cost: 1 Network - Use domain name system (DNS) "MX" records to route mail automatically Source Server - Name: RHP-SR-MAIL Site: romanhill.internal/Configuration/Sites/RHP Role: Mailbox, Client Access, Hub Transport Thanks, TomHD
Oaktech Posted February 3, 2015 Posted February 3, 2015 The only thing I can think of is that your send type using DNS might be wrong if you are part of EB2N it might require a smart host to be set up. It was certainly the case when I was with swgfl.
TomHD Posted February 3, 2015 Author Posted February 3, 2015 E2BN have got back to me with the following: "Looks like the basic cause of this is that the hide public IP 85.12.76.1 for Suffolk is on the CBL blacklist as having been detected sending spam or some other malicious activity. This does not indicate an issue with your own network The problem with a global hide is that it can affect any Suffolk school that does not have a dedicated outbound PAT address. There are a few things you can do. 1. Contact Suffolk ICT Services ( Schools Choice ) and ask if they provide an outbound MTA service for schools so that you can send mail via that and not direct to the net. 2. Contact Schools choice and request a dedicated PAT address for your schools IP range. This will move your mail server and any other outbound services from hiding behind the same address as all the other schools. We are about to implement another 128 addresses for Suffolk but these won't be ready until 16th Feb. They may have some spare in the existing range that they can allocate to you now. 3. For either of these options I would recommend contacting Schools Choice and ask them to create an SPF txt record for your dns domain within the E2BN Namesurfer tool. SPF is a reputation record that many remote mail servers check to see if your domain is trusting selected IP addresses as "authorised" to send mail for you domain." We are connecting directly to the Internet on our send connector, is this likely to be our problem? Thanks, TomHD
Oaktech Posted February 3, 2015 Posted February 3, 2015 interesting... your mail domain is romanhill-pri.suffolk.sch.uk yes? This domain appears to go via suffolk's servers, so i wonder again whether you should be using a smarthost? A quick black list check also shows up that the 85.12.76.10 IP is also on spamhaus zen and sorbs as well as CBL. What errors are people recieving when they send/recieve? The alternate smtp IP for suffolk 85.12.76.11 seems clear, so I wonder if you can ask to be routed via that svr-msg305.suffolkcc.gov.uk. I'd ask some pointed questions of the LEA about this.
TomHD Posted February 3, 2015 Author Posted February 3, 2015 (edited) Yupp, the domain is romanhill-pri.suffolk.sch.uk Currently the send connector installed connects to the Internet directly and I am wondering the same. Waiting for response from School's Choice. An example of the bounce back: BAY004-MC5F28.hotmail.com rejected your message to the following e-mail addresses: '[email protected]' ([email protected]) <mailto:[email protected]> BAY004-MC5F28.hotmail.com gave this error: OU-002 (BAY004-MC5F28) Unfortunately, messages from 85.12.76.1 weren't sent. Please contact your Internet service provider since part of their network is on our block list. You can also refer your provider to Troubleshooting. Edited February 3, 2015 by TomHD
Oaktech Posted February 3, 2015 Posted February 3, 2015 Yeah, you don't have control of your own destiny there. If the IP the mails are coming from is blacklisted, and you don't own the IP then you are helpless bar appealing to whoever owns the IP to get it removed asap. Sorry...
TomHD Posted February 3, 2015 Author Posted February 3, 2015 Thanks @Oaktech I think our send connector isn't configured right and that we are not supposed to send through the IP showing in the bounced back message. Waiting on response from Schools Choice.
TomHD Posted February 3, 2015 Author Posted February 3, 2015 WOOP WOOP, turns out the send connector wasn't configured correctly! FQDN was incorrect and had to go via a smart host IP. This info was given to me by Schools Choice. All back up and running now Thanks all for your inputs 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now