Orcon rejecting Gmail but OK with Outlook Hotmail

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › Orcon rejecting Gmail but OK with Outlook Hotmail

Cloudman

8 posts

Wannabe Geek

#180701 18-Sep-2015 13:57

When I send an email to an @ocron.net.nz address it is rejected if sent from Gmail (Google for Work webmail) but gets through it is from my personal Hotmail account. Why is this? I rang Ocron technical support for assistance but they would not co-operate as I am not an Orcon customer (a bit short sighted of them).

Mail Delivery Subsystem <mailer-daemon@googlemail.com>

Delivery to the following recipient failed permanently:

xxxxx@orcon.net.nz

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domain orcon.net.nz by mail.orcon.net.nz.[219.88.242.10].

The error that the other server returned was:
550 5.7.1 <xxxxx@orcon.net.nz>... Verification failed for <xxxxx@xxxxx.co.nz> Unrouteable address Sender verify failed

1 | 2

20578 posts

Uber Geek

Trusted

Lifetime subscriber

#1389710 18-Sep-2015 14:13

That error code often means "unable to relay". Have you checked your SPF records to see if the sending IP is allowed by policy? Stick your domain name into mxtoolbox, check that the IP your emails are coming from are on any SPF policy published.

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1389722 18-Sep-2015 14:34

Yes, looks like an SPF problem with your sending domain. Check that out per the previous post, once you have that fixed if you're still having problems, drop me a PM.

Cloudman

8 posts

Wannabe Geek

#1389730 18-Sep-2015 14:44

Sorry I am not that technial... what does this mean? (What do I have to do?)
'check that the IP your emails are coming from are on any SPF policy published'

timmmay

20578 posts

Uber Geek

Trusted

Lifetime subscriber

#1389758 18-Sep-2015 15:17

If you tell me the sending domain name I can check the SPF. You might also have to send me an email so I can check the email headers, but probably not. You can PM me the domain if you don't want to post it publicly.

I do a fair bit of small business technical support around email and web.

Mattmannz

471 posts

Ultimate Geek

#1389759 18-Sep-2015 15:17

You probably don't have an SPF record which is a method that email servers use to verify that you are who you say you are. Whoever looks after your DNS needs to create an SPF record.

Cheers
Matt.

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1389884 18-Sep-2015 19:25

OP -- please feel free to fire me a PM with details. This thread's not getting us anywhere. We'll try to assist best we can. Cheers!

ubergeeknz

3344 posts

Uber Geek

Trusted

Vocus

#1389914 18-Sep-2015 20:34

gorringS: mean gmail doesn't like the that orcon got bad rating far domain goes so it then blocks it

From the OP's post, emphasis added:

Technical details of permanent failure:
Google tried to deliver your message, but it was rejected by the server for the recipient domain orcon.net.nz by mail.orcon.net.nz.[219.88.242.10].

The error that the other server returned was:
550 5.7.1 <xxxxx@orcon.net.nz>... Verification failed for <xxxxx@xxxxx.co.nz> Unrouteable address Sender verify failed

AliExpress

Shop now on AliExpress (affiliate link).

Ragnor

8219 posts

Uber Geek

Trusted

#1391337 21-Sep-2015 15:00

Sounds like a spf issue to me.

Cloudman in the dns config for your .co.nz do you have SPF entries setup?

You generally need two dns records for spf, a txt entry (for legacy reasons) and spf entry. The default value for google apps is: "v=spf1 include:_spf.google.com mx ~all"

If you send from other servers for that domain, eg your website you'll need to include those too.

Here's an example from one of our domains using google apps:

timmmay

20578 posts

Uber Geek

Trusted

Lifetime subscriber

#1391353 21-Sep-2015 15:17

Since Cloudman never came back and answered their own question we can't help.

Cloudman

8 posts

Wannabe Geek

#1391467 21-Sep-2015 18:11

Hi all. Still here, just learning about domain records and how to get them. Here is what I have obtained:

Name TTL Class Type Spec
@.              3600        IN       TXT "google-site-verification=longstringofnumbersandletters"
@.              86400 IN       NS ns32b.ssggrp-wc.com.
@.              86400 IN       NS ns32a.ssggrp-wc.com.
@.              3600        IN       MX 150 ALT1.ASPMX.L.GOOGLE.COM.
@.              3600        IN       MX 150 ALT2.ASPMX.L.GOOGLE.COM.
@.              3600        IN       MX 50 ASPMX.L.GOOGLE.COM.
www. 86400 IN       A ipaddress
webmail 86400 IN       A ipaddress
smtp. 86400 IN A ipaddress
ftp.             86400 IN       A ipaddress
A. 86400 IN       A ipaddress

timmmay

20578 posts

Uber Geek

Trusted

Lifetime subscriber

#1391474 21-Sep-2015 18:28

Second post of this thread told you how to check your SPF records. They're a TXT record and doesn't look like you have any, so it's probably not an SPF issue. Check out the SPF records with mxtoolbox though.

richms

28172 posts

Uber Geek

Trusted

Lifetime subscriber

#1391475 21-Sep-2015 18:29

As susptected, no SPF records. The TXT for google-site-verification is just so someone could claim the domain in webmaster tools or analytics or something like that. its nothing to do with mail.

Whoever configured your domain to point to google for emails left the job half finished. Get on to them to complete it.

Richard rich.ms