Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


xpd

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

#265805 12-Feb-2020 10:14
Send private message

I have a client who has on premise Exchange, and using SMX for filtering etc. 

 

They have been notified by staff that emails going to Xtra.co.nz addresses are not showing up. No bounce messages, emails not showing in spam (or so they say) via webmail etc.

 

Looking at the SMX logs, I can see the mail hitting the Xtra server and responding OK and marking the email as delivered.

 

Who can I talk to, to get this looked into ?

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

                      LinkTree

 

 

 


Create new topic
networkn
Networkn
32351 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #2416582 12-Feb-2020 10:26
Send private message

I have seen this before. I am wracking my brain for what it was. Did by chance the customer have their domain hosted with xtra (Or one of it's subsidies) ever before? I think I have some vague recollection the issue was that the LOCAL Xtra servers still had mx records for that domain listed and the mail was being null routed.

 

 

 

It happened because the customer moved their domain away and despite written request for xtra to remove all dns records, it's a manual process on the "old" system and it was never done.

 

 

 

 




xpd

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #2416588 12-Feb-2020 10:48
Send private message

networkn:

 

I have seen this before. I am wracking my brain for what it was. Did by chance the customer have their domain hosted with xtra (Or one of it's subsidies) ever before? I think I have some vague recollection the issue was that the LOCAL Xtra servers still had mx records for that domain listed and the mail was being null routed.

 

It happened because the customer moved their domain away and despite written request for xtra to remove all dns records, it's a manual process on the "old" system and it was never done.

 

 

Not that Im aware of.... but will dig into the records. 

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

                      LinkTree

 

 

 


networkn
Networkn
32351 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #2416609 12-Feb-2020 10:57
Send private message

You could dig alien and terminator directly :) (I am not sure they still exist but potentially).

 

 

 

 




Tockly
346 posts

Ultimate Geek


  #2416682 12-Feb-2020 12:58
Send private message

Check that your SPF records are all correct. They should list ALL potential servers that could be sending email on your behalf.

 

Xtra have a habit of marking email as Spam if these are incorrect or missing.

 

It's also not consistent in my experience as some messages were delivered and some just vanished.

 

 





 


networkn
Networkn
32351 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #2416685 12-Feb-2020 13:01
Send private message

xpd:

 

networkn:

 

I have seen this before. I am wracking my brain for what it was. Did by chance the customer have their domain hosted with xtra (Or one of it's subsidies) ever before? I think I have some vague recollection the issue was that the LOCAL Xtra servers still had mx records for that domain listed and the mail was being null routed.

 

It happened because the customer moved their domain away and despite written request for xtra to remove all dns records, it's a manual process on the "old" system and it was never done.

 

 

Not that Im aware of.... but will dig into the records. 

 

 

 

 

I think based on notes I found, it wasn't just DNS Servers that had old records. For us it wasn't all mail going missing, but rather "most" and so it took them a bit longer to find the servers that had the old records.

 

 


  #2416714 12-Feb-2020 14:11
Send private message

Try

 

https://dkimvalidator.com/

 

this is good for diagnosing issues with the mail sender

 

 

 

Click to see full size


xpd

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #2416718 12-Feb-2020 14:25
Send private message

SPF etc all fine, dkimvalidator.com all fine. 

 

This us what I get from SMX :

 

 

 

xtra.co.nz [210.55.143.33]

 

 

Delivered Date:

 

 

 

 

2020/02/11 12:47:08

 

 

Response:

 

 

 

 

 

 

 

To my eyes, thats Xtra.co.nz accepting the email - what its doing with it beyond that, who knows......

 

 

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

                      LinkTree

 

 

 


 
 
 

Trade NZ and US shares and funds with Sharesies (affiliate link).
networkn
Networkn
32351 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #2416727 12-Feb-2020 14:28
Send private message

You need to talk to the Spark Complex Technical Support. There was a guy here @cbrpilot who helped me a few times?

 

 


cheshirecat
50 posts

Geek


  #2416741 12-Feb-2020 15:14
Send private message

xpd:

 

250 OK > 5E41EB7C-717505D7@mta2308

  This ID should allow the mail admins to track the eventual destination of the mail in question, if it was sent around 11/2/20.   One thing you might like to check is to see if the message was autofiltered into the Spam folder in the Xtra mailbox.  Messages identified as 'probably spam' are put in here (ones classified as 'definitely spam' are dropped) and the Spam folder then automatically deletes messages older than 30 days.  This allows you to identify false-positives and to add the sender to your address book, effectively whitelisting them.  

 

If you do find that the mail was misclassified as 'probable spam', one possible reason is that your sending IP address has managed to find itself on a blacklist somewhere.


xpd

xpd

Geek @ Coastguard NZ
13765 posts

Uber Geek

Retired Mod
ID Verified
Trusted
Lifetime subscriber

  #2416751 12-Feb-2020 15:47
Send private message

Argh one thing I didnt check was blacklists :D  And bingo.....  Result: 210.55.143.33 listed in DrMX blacklist

 

Will let the client know and they can go give Xtra/Spark a poke to get it sorted. 

 

 

 

Thanks!

 

 





       Gavin / xpd / FastRaccoon / Geek of Coastguard New Zealand

 

                      LinkTree

 

 

 


cheshirecat
50 posts

Geek


  #2416764 12-Feb-2020 16:58
Send private message

It is more likely to be the IP address of your original sending host; 210.55.143.33 is the IP of the Xtra MTA host and so this is the receiver, it will be looking for blacklist entries of the original sender or one of the hops.


hio77
12999 posts

Uber Geek

ID Verified
Trusted
Lizard Networks

  #2416805 12-Feb-2020 19:02
Send private message

Tockly:

 

Check that your SPF records are all correct. They should list ALL potential servers that could be sending email on your behalf.

 

Xtra have a habit of marking email as Spam if these are incorrect or missing.

 

It's also not consistent in my experience as some messages were delivered and some just vanished.

 

 

 

 

a change was made several months back, that i deliberatly didnt mention here.

 

the number of issues with Spam filters incorrectly marking content basically vanished.

 

 

 

Gavin, pass me some identifying details in a DM and i'll take a peak at the logs for you.

 

If i can't see anything might need to pass you to the folk that are on the other end of the phone though - they work directly with SMX.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

 

 


networkn
Networkn
32351 posts

Uber Geek

ID Verified
Trusted
Lifetime subscriber

  #2425063 21-Feb-2020 15:24
Send private message

@hio77 we have had a customer report the same thing today. Did you get a resolution with @xpd you can share ?

 

 


Create new topic





News and reviews »

Air New Zealand Starts AI adoption with OpenAI
Posted 24-Jul-2025 16:00


eero Pro 7 Review
Posted 23-Jul-2025 12:07


BeeStation Plus Review
Posted 21-Jul-2025 14:21


eero Unveils New Wi-Fi 7 Products in New Zealand
Posted 21-Jul-2025 00:01


WiZ Introduces HDMI Sync Box and other Light Devices
Posted 20-Jul-2025 17:32


RedShield Enhances DDoS and Bot Attack Protection
Posted 20-Jul-2025 17:26


Seagate Ships 30TB Drives
Posted 17-Jul-2025 11:24


Oclean AirPump A10 Water Flosser Review
Posted 13-Jul-2025 11:05


Samsung Galaxy Z Fold7: Raising the Bar for Smartphones
Posted 10-Jul-2025 02:01


Samsung Galaxy Z Flip7 Brings New Edge-To-Edge FlexWindow
Posted 10-Jul-2025 02:01


Epson Launches New AM-C550Z WorkForce Enterprise printer
Posted 9-Jul-2025 18:22


Samsung Releases Smart Monitor M9
Posted 9-Jul-2025 17:46


Nearly Half of Older Kiwis Still Write their Passwords on Paper
Posted 9-Jul-2025 08:42


D-Link 4G+ Cat6 Wi-Fi 6 DWR-933M Mobile Hotspot Review
Posted 1-Jul-2025 11:34


Oppo A5 Series Launches With New Levels of Durability
Posted 30-Jun-2025 10:15









Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.