Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


xpd



SysOp
10333 posts

Uber Geek

Mod Emeritus
Trusted
Lifetime subscriber

#265805 12-Feb-2020 10:14
Send private message quote this post

I have a client who has on premise Exchange, and using SMX for filtering etc. 

 

They have been notified by staff that emails going to Xtra.co.nz addresses are not showing up. No bounce messages, emails not showing in spam (or so they say) via webmail etc.

 

Looking at the SMX logs, I can see the mail hitting the Xtra server and responding OK and marking the email as delivered.

 

Who can I talk to, to get this looked into ?

 

 





XPD / Gavin / DemiseNZ

 

 


Create new topic
21953 posts

Uber Geek

Trusted
Lifetime subscriber

  #2416582 12-Feb-2020 10:26
Send private message quote this post

I have seen this before. I am wracking my brain for what it was. Did by chance the customer have their domain hosted with xtra (Or one of it's subsidies) ever before? I think I have some vague recollection the issue was that the LOCAL Xtra servers still had mx records for that domain listed and the mail was being null routed.

 

 

 

It happened because the customer moved their domain away and despite written request for xtra to remove all dns records, it's a manual process on the "old" system and it was never done.

 

 

 

 


xpd



SysOp
10333 posts

Uber Geek

Mod Emeritus
Trusted
Lifetime subscriber

  #2416588 12-Feb-2020 10:48
Send private message quote this post

networkn:

 

I have seen this before. I am wracking my brain for what it was. Did by chance the customer have their domain hosted with xtra (Or one of it's subsidies) ever before? I think I have some vague recollection the issue was that the LOCAL Xtra servers still had mx records for that domain listed and the mail was being null routed.

 

It happened because the customer moved their domain away and despite written request for xtra to remove all dns records, it's a manual process on the "old" system and it was never done.

 

 

Not that Im aware of.... but will dig into the records. 

 

 





XPD / Gavin / DemiseNZ

 

 


 
 
 
 


21953 posts

Uber Geek

Trusted
Lifetime subscriber

  #2416609 12-Feb-2020 10:57
One person supports this post
Send private message quote this post

You could dig alien and terminator directly :) (I am not sure they still exist but potentially).

 

 

 

 


298 posts

Ultimate Geek


  #2416682 12-Feb-2020 12:58
Send private message quote this post

Check that your SPF records are all correct. They should list ALL potential servers that could be sending email on your behalf.

 

Xtra have a habit of marking email as Spam if these are incorrect or missing.

 

It's also not consistent in my experience as some messages were delivered and some just vanished.

 

 





 

21953 posts

Uber Geek

Trusted
Lifetime subscriber

  #2416685 12-Feb-2020 13:01
Send private message quote this post

xpd:

 

networkn:

 

I have seen this before. I am wracking my brain for what it was. Did by chance the customer have their domain hosted with xtra (Or one of it's subsidies) ever before? I think I have some vague recollection the issue was that the LOCAL Xtra servers still had mx records for that domain listed and the mail was being null routed.

 

It happened because the customer moved their domain away and despite written request for xtra to remove all dns records, it's a manual process on the "old" system and it was never done.

 

 

Not that Im aware of.... but will dig into the records. 

 

 

 

 

I think based on notes I found, it wasn't just DNS Servers that had old records. For us it wasn't all mail going missing, but rather "most" and so it took them a bit longer to find the servers that had the old records.

 

 


162 posts

Master Geek

Lifetime subscriber

  #2416714 12-Feb-2020 14:11
Send private message quote this post

Try

 

https://dkimvalidator.com/

 

this is good for diagnosing issues with the mail sender

 

 

 

Click to see full size


xpd



SysOp
10333 posts

Uber Geek

Mod Emeritus
Trusted
Lifetime subscriber

  #2416718 12-Feb-2020 14:25
Send private message quote this post

SPF etc all fine, dkimvalidator.com all fine. 

 

This us what I get from SMX :

 

 

 

xtra.co.nz [210.55.143.33]

 

 

Delivered Date:

 

 

 

 

2020/02/11 12:47:08

 

 

Response:

 

 

 

 

 

 

 

To my eyes, thats Xtra.co.nz accepting the email - what its doing with it beyond that, who knows......

 

 

 

 





XPD / Gavin / DemiseNZ

 

 


 
 
 
 


21953 posts

Uber Geek

Trusted
Lifetime subscriber

  #2416727 12-Feb-2020 14:28
One person supports this post
Send private message quote this post

You need to talk to the Spark Complex Technical Support. There was a guy here @cbrpilot who helped me a few times?

 

 


20 posts

Geek


  #2416741 12-Feb-2020 15:14
Send private message quote this post

xpd:

 

250 OK > 5E41EB7C-717505D7@mta2308

  This ID should allow the mail admins to track the eventual destination of the mail in question, if it was sent around 11/2/20.   One thing you might like to check is to see if the message was autofiltered into the Spam folder in the Xtra mailbox.  Messages identified as 'probably spam' are put in here (ones classified as 'definitely spam' are dropped) and the Spam folder then automatically deletes messages older than 30 days.  This allows you to identify false-positives and to add the sender to your address book, effectively whitelisting them.  

 

If you do find that the mail was misclassified as 'probable spam', one possible reason is that your sending IP address has managed to find itself on a blacklist somewhere.


xpd



SysOp
10333 posts

Uber Geek

Mod Emeritus
Trusted
Lifetime subscriber

  #2416751 12-Feb-2020 15:47
Send private message quote this post

Argh one thing I didnt check was blacklists :D  And bingo.....  Result: 210.55.143.33 listed in DrMX blacklist

 

Will let the client know and they can go give Xtra/Spark a poke to get it sorted. 

 

 

 

Thanks!

 

 





XPD / Gavin / DemiseNZ

 

 


20 posts

Geek


  #2416764 12-Feb-2020 16:58
Send private message quote this post

It is more likely to be the IP address of your original sending host; 210.55.143.33 is the IP of the Xtra MTA host and so this is the receiver, it will be looking for blacklist entries of the original sender or one of the hops.


'That VDSL Cat'
11708 posts

Uber Geek

Trusted
Spark
Subscriber

  #2416805 12-Feb-2020 19:02
One person supports this post
Send private message quote this post

Tockly:

 

Check that your SPF records are all correct. They should list ALL potential servers that could be sending email on your behalf.

 

Xtra have a habit of marking email as Spam if these are incorrect or missing.

 

It's also not consistent in my experience as some messages were delivered and some just vanished.

 

 

 

 

a change was made several months back, that i deliberatly didnt mention here.

 

the number of issues with Spam filters incorrectly marking content basically vanished.

 

 

 

Gavin, pass me some identifying details in a DM and i'll take a peak at the logs for you.

 

If i can't see anything might need to pass you to the folk that are on the other end of the phone though - they work directly with SMX.





#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.


21953 posts

Uber Geek

Trusted
Lifetime subscriber

  #2425063 21-Feb-2020 15:24
Send private message quote this post

@hio77 we have had a customer report the same thing today. Did you get a resolution with @xpd you can share ?

 

 


Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

New Vodafone mobile data plans with unlimited data
Posted 26-Feb-2020 06:55


Vodafone launches innovation initiatives to help businesses use 5G
Posted 26-Feb-2020 05:00


Ultimate Ears HYPERBOOM brings massive sound and extreme bass
Posted 25-Feb-2020 09:00


Withings launches three new devices to help monitor heart health from home
Posted 13-Feb-2020 20:05


Auckland start-up Yourcar matches new car buyers with dealerships
Posted 13-Feb-2020 18:05


School gardens go high tech to teach kids the importance of technology
Posted 13-Feb-2020 11:10


Malwarebytes finds Mac threats outpace Windows for the first time
Posted 13-Feb-2020 08:01


Amazon launches Echo Show 8 in Australia and New Zealand
Posted 8-Feb-2020 20:36


Vodafone New Zealand starts two year partnership with LetsPlay.Live
Posted 28-Jan-2020 11:24


Ring launches indoor-only security camera
Posted 23-Jan-2020 17:26


New report findings will help schools implement the digital technologies curriculum content
Posted 23-Jan-2020 17:25


N4L to upgrade & support wireless internet inside schools
Posted 23-Jan-2020 17:22


Netflix releases 21 Studio Ghibli works
Posted 22-Jan-2020 11:42


Vodafone integrates eSIM into device and wearable roadmap
Posted 17-Jan-2020 09:45


Do you need this camera app? Group investigates privacy implications
Posted 16-Jan-2020 03:30



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.