Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.



673 posts

Ultimate Geek
+1 received by user: 26

Subscriber

Topic # 83151 11-May-2011 16:43 Send private message

Anyone else have issues with the Xtra SPAM filter? They seem to blacklist our domain as standard. We run our own Exchange server with a static IP. It's really frustrating trying to tell/teach someone how to log into their Xtra account online to check that SPAM folder, not the one they have in Outlook etc. Total WOFTAM. They need to relax the aggressiveness of detection I feel.

Create new topic
52 posts

Master Geek


  Reply # 468023 11-May-2011 18:59 Send private message

Have u set up the RDNS record for that static ip? If not, most email servers may regard the mails from that server ip as spam.

7746 posts

Uber Geek
+1 received by user: 316

Trusted
Subscriber

  Reply # 468221 12-May-2011 11:22 Send private message

Setting up a mail server best practices to be recognized as legitimate
http://serverfault.com/questions/72559/setting-up-a-mail-server-best-practices-to-be-recognized-as-l...



673 posts

Ultimate Geek
+1 received by user: 26

Subscriber

  Reply # 468225 12-May-2011 11:27 Send private message

My server is set up correctly but thanks for the info.

7746 posts

Uber Geek
+1 received by user: 316

Trusted
Subscriber

  Reply # 468228 12-May-2011 11:38 Send private message

Do you mind saying what your domain name is or the mail server domain is?

Anyway, if you're sure everything is right at your end.. you can an email to [email protected] or [email protected]

Try include details like any smtp logs from the server specific to the problem.  Emailing those addresses does seem to end up as a job logged for Telecom Complex Faults to look at (eventually).

I got a response within 48 hrs last time I reported a problem.

In our case it was some infected xtra ADSL user attempting to send thousands of messages to our mail server, they sorted it out and notified the user that they had a problem.



673 posts

Ultimate Geek
+1 received by user: 26

Subscriber

  Reply # 468230 12-May-2011 11:40 Send private message

I found this article does it still stand?

http://www.geekzone.co.nz/forums.asp?forumid=39&topicid=26341

hyspecs.co.nz

7746 posts

Uber Geek
+1 received by user: 316

Trusted
Subscriber

  Reply # 468231 12-May-2011 11:42 Send private message

Yes it does but if you have reverse DNS / PTR, SPF, DKIM etc setup properly you shouldn't be having a problem.

Edit:

Ok two problems...

#1

mail.hyspecs.co.nz (203.97.146.22) doesn't have a PTR record.

Appears you do not have a reverse dns setup for your mail server domain name / ip address.  Contact you account manager at your provider to get this setup (looks like Telstraclear).

#2

The MX records show that you receive mail via a trendmico gateway (anti spam service I presume) which probably forwards to your server, your exchange server mail.hyspecs.co.nz is the backup (pref 15).

It's likely that when you send mail, it's direct from exchange so from mail.hyspecs.co.nz (203.97.146.22).

Now mail.hyspecs.co.nz does not respond to smtp or telnet on port 25 so it;s effectively useless as a backup MX record for receiving mail.

Also external receiving mail servers eg: xtra/yahoo that check your server's smtp header as an anti spam technique will just get a timeout from your server.

Basically a few config issues to sort out.

 



673 posts

Ultimate Geek
+1 received by user: 26

Subscriber

  Reply # 471033 19-May-2011 12:09 Send private message

Thanks for the info. I have changed the MX record since you ran that diag test to remote.hyspecs.co.nz. This should work for point 2?



673 posts

Ultimate Geek
+1 received by user: 26

Subscriber

  Reply # 471043 19-May-2011 12:18 Send private message

Sorry of course just remembered on your point 2. As we only receive email from the Trend servers I have only made the remote.hyspecs.co.nz server respond to those IP addresses. So you are right the MX record for remote.hyspecs.co.nz wont work, unless I change the firewall rule. I guess I just left during the change over phase to using Trend. It doens't hurt to have it there as an MX record now does it?


Edit: So what you're saying is that by blocking all other connections to our mail server on 25 apart from the Trend ones, may have an effect on our email being sent to Xtra/Yahoo because it wont be responding on port 25 anymore?  

7746 posts

Uber Geek
+1 received by user: 316

Trusted
Subscriber

  Reply # 471114 19-May-2011 14:17 Send private message

Hmm first question regarding how your outgoing email being sent, is it direct from exchange or is it configured to sent through Trend Micro?

The MX records specify the receiving servers for a domain, specifying a server that doesn't actually receive is pointless.

Most anti spam systems use a number of factors to classify whether a message is spam or not, the trick is to hit as many of the best practices as possible to give your sent messages enough trust so that they pass Xtra's anti spam system.




673 posts

Ultimate Geek
+1 received by user: 26

Subscriber

  Reply # 471115 19-May-2011 14:19 Send private message

Yes I send all outgoing mail direct from the exchange server, not via Trend.

I've made your suggested changes and Telstra are doing the reverse DNS setup for me.

7746 posts

Uber Geek
+1 received by user: 316

Trusted
Subscriber

  Reply # 471131 19-May-2011 14:52 Send private message

One thing I suggest you do is create a test gmail account, then send an email from your email/domain to the test gmail account.

In gmail when viewing an email next to the top reply to button is a arrow, click that and go to show original.





This will show you a lots of interesting email headers, namely: 

Received: from
Received-SPF:
Authentication-Results:

1465 posts

Uber Geek
+1 received by user: 111

Trusted

  Reply # 471137 19-May-2011 14:56 Send private message

A SPF Record in your domain also really helps.  I haven't had a dropped e-mail since I added in a SPF record for my mail server.b




Check out my Mobile Cell Site Google Maps KML Files in my blog.
Now using Google Fusion Tables or Address Lookup or GPS using Smartphone
I update it on a monthly basis automatically from RSM.



673 posts

Ultimate Geek
+1 received by user: 26

Subscriber

  Reply # 471441 20-May-2011 09:24 Send private message

Thanks for your help guys have now got SPF records and PTR record is almost sorted.

Create new topic




Twitter »
Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





Trending now »

Hot discussions in our forums right now:

How stable are snap IP addresses?
Created by Physn, last reply by timmmay on 23-Oct-2014 10:38 (19 replies)
Pages... 2


Spark Socialiser
Created by freitasm, last reply by freitasm on 22-Oct-2014 18:39 (34 replies)
Pages... 2 3


$39 iPhone plan goneburger
Created by MadEngineer, last reply by Dynamic on 23-Oct-2014 15:27 (15 replies)

American legal jurisdiction in New Zealand
Created by ajobbins, last reply by gzt on 21-Oct-2014 14:58 (30 replies)
Pages... 2


iPad Air 2 and iPad Mini 3. Gonna get one?
Created by Dingbatt, last reply by Geektastic on 23-Oct-2014 15:13 (98 replies)
Pages... 5 6 7


Another Trade Me competitor: SellShed
Created by freitasm, last reply by SellShed on 22-Oct-2014 11:54 (42 replies)
Pages... 2 3


Snap have failed our company!
Created by dafman, last reply by NonprayingMantis on 23-Oct-2014 11:56 (36 replies)
Pages... 2 3


Theif taunts 12 year old via stolen laptop
Created by macuser, last reply by charsleysa on 22-Oct-2014 23:49 (12 replies)


Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.