Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.



659 posts

Ultimate Geek
+1 received by user: 24

Subscriber

Topic # 83151 11-May-2011 16:43 Send private message

Anyone else have issues with the Xtra SPAM filter? They seem to blacklist our domain as standard. We run our own Exchange server with a static IP. It's really frustrating trying to tell/teach someone how to log into their Xtra account online to check that SPAM folder, not the one they have in Outlook etc. Total WOFTAM. They need to relax the aggressiveness of detection I feel.

Create new topic
52 posts

Master Geek


  Reply # 468023 11-May-2011 18:59 Send private message

Have u set up the RDNS record for that static ip? If not, most email servers may regard the mails from that server ip as spam.

7705 posts

Uber Geek
+1 received by user: 288

Trusted
Subscriber

  Reply # 468221 12-May-2011 11:22 Send private message

Setting up a mail server best practices to be recognized as legitimate
http://serverfault.com/questions/72559/setting-up-a-mail-server-best-practices-to-be-recognized-as-l...



659 posts

Ultimate Geek
+1 received by user: 24

Subscriber

  Reply # 468225 12-May-2011 11:27 Send private message

My server is set up correctly but thanks for the info.

7705 posts

Uber Geek
+1 received by user: 288

Trusted
Subscriber

  Reply # 468228 12-May-2011 11:38 Send private message

Do you mind saying what your domain name is or the mail server domain is?

Anyway, if you're sure everything is right at your end.. you can an email to [email protected] or [email protected]

Try include details like any smtp logs from the server specific to the problem.  Emailing those addresses does seem to end up as a job logged for Telecom Complex Faults to look at (eventually).

I got a response within 48 hrs last time I reported a problem.

In our case it was some infected xtra ADSL user attempting to send thousands of messages to our mail server, they sorted it out and notified the user that they had a problem.



659 posts

Ultimate Geek
+1 received by user: 24

Subscriber

  Reply # 468230 12-May-2011 11:40 Send private message

I found this article does it still stand?

http://www.geekzone.co.nz/forums.asp?forumid=39&topicid=26341

hyspecs.co.nz

7705 posts

Uber Geek
+1 received by user: 288

Trusted
Subscriber

  Reply # 468231 12-May-2011 11:42 Send private message

Yes it does but if you have reverse DNS / PTR, SPF, DKIM etc setup properly you shouldn't be having a problem.

Edit:

Ok two problems...

#1

mail.hyspecs.co.nz (203.97.146.22) doesn't have a PTR record.

Appears you do not have a reverse dns setup for your mail server domain name / ip address.  Contact you account manager at your provider to get this setup (looks like Telstraclear).

#2

The MX records show that you receive mail via a trendmico gateway (anti spam service I presume) which probably forwards to your server, your exchange server mail.hyspecs.co.nz is the backup (pref 15).

It's likely that when you send mail, it's direct from exchange so from mail.hyspecs.co.nz (203.97.146.22).

Now mail.hyspecs.co.nz does not respond to smtp or telnet on port 25 so it;s effectively useless as a backup MX record for receiving mail.

Also external receiving mail servers eg: xtra/yahoo that check your server's smtp header as an anti spam technique will just get a timeout from your server.

Basically a few config issues to sort out.

 



659 posts

Ultimate Geek
+1 received by user: 24

Subscriber

  Reply # 471033 19-May-2011 12:09 Send private message

Thanks for the info. I have changed the MX record since you ran that diag test to remote.hyspecs.co.nz. This should work for point 2?



659 posts

Ultimate Geek
+1 received by user: 24

Subscriber

  Reply # 471043 19-May-2011 12:18 Send private message

Sorry of course just remembered on your point 2. As we only receive email from the Trend servers I have only made the remote.hyspecs.co.nz server respond to those IP addresses. So you are right the MX record for remote.hyspecs.co.nz wont work, unless I change the firewall rule. I guess I just left during the change over phase to using Trend. It doens't hurt to have it there as an MX record now does it?


Edit: So what you're saying is that by blocking all other connections to our mail server on 25 apart from the Trend ones, may have an effect on our email being sent to Xtra/Yahoo because it wont be responding on port 25 anymore?  

7705 posts

Uber Geek
+1 received by user: 288

Trusted
Subscriber

  Reply # 471114 19-May-2011 14:17 Send private message

Hmm first question regarding how your outgoing email being sent, is it direct from exchange or is it configured to sent through Trend Micro?

The MX records specify the receiving servers for a domain, specifying a server that doesn't actually receive is pointless.

Most anti spam systems use a number of factors to classify whether a message is spam or not, the trick is to hit as many of the best practices as possible to give your sent messages enough trust so that they pass Xtra's anti spam system.




659 posts

Ultimate Geek
+1 received by user: 24

Subscriber

  Reply # 471115 19-May-2011 14:19 Send private message

Yes I send all outgoing mail direct from the exchange server, not via Trend.

I've made your suggested changes and Telstra are doing the reverse DNS setup for me.

7705 posts

Uber Geek
+1 received by user: 288

Trusted
Subscriber

  Reply # 471131 19-May-2011 14:52 Send private message

One thing I suggest you do is create a test gmail account, then send an email from your email/domain to the test gmail account.

In gmail when viewing an email next to the top reply to button is a arrow, click that and go to show original.





This will show you a lots of interesting email headers, namely: 

Received: from
Received-SPF:
Authentication-Results:

1451 posts

Uber Geek
+1 received by user: 99

Trusted

  Reply # 471137 19-May-2011 14:56 Send private message

A SPF Record in your domain also really helps.  I haven't had a dropped e-mail since I added in a SPF record for my mail server.b




Check out my Mobile Cell Site Google Maps KML Files in my blog.
Now using Google Fusion Tables or Address Lookup or GPS using Smartphone
I update it on a monthly basis automatically from RSM.



659 posts

Ultimate Geek
+1 received by user: 24

Subscriber

  Reply # 471441 20-May-2011 09:24 Send private message

Thanks for your help guys have now got SPF records and PTR record is almost sorted.

Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:




News »

Trending now »
Hot discussions in our forums right now:

Moment of Truth?
Created by BarTender, last reply by joker97 on 20-Sep-2014 11:54 (405 replies)
Pages... 25 26 27


Festival of Democracy
Created by gzt, last reply by gzt on 21-Sep-2014 03:11 (112 replies)
Pages... 6 7 8


Mr. Key to extradite Kim Dotcom?
Created by TimA, last reply by SaltyNZ on 18-Sep-2014 09:20 (126 replies)
Pages... 7 8 9


Will My VDSL gets better?
Created by coconuts, last reply by hio77 on 20-Sep-2014 21:32 (28 replies)
Pages... 2


New On Account mobile plans - Red+
Created by NikT, last reply by kawaii on 20-Sep-2014 20:55 (45 replies)
Pages... 2 3


someone tried to hack us 20 million times!
Created by joker97, last reply by Beccara on 20-Sep-2014 20:48 (15 replies)

IOS8 - Network Load
Created by FireEngine, last reply by raytaylor on 20-Sep-2014 16:55 (45 replies)
Pages... 2 3


Computer Lounge's Zen Radical
Created by JayADee, last reply by JayADee on 19-Sep-2014 14:51 (15 replies)


Geekzone Live »
Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.