I've got a problem with Gmail.
It started after one of our trojan infected PCs sent spam for one day from our IP address.
We've fixed the problem, but we got into 3 black lists. We've fixed that, too. But still every time we send an email to Gmail the message is rejected:
So I've checked Google Bulk Sender'
s guide once again and found an error in our SPF record and fixed it. Google says everything should become fine after some time, but this doesn't happen. 3 weeks already passed but we still can't send emails to Gmail.
Our MX setup is a bit complex, but not too much: We have a domain name delo-company.
com, it has it'
s own mail @delo-company.
com (this one is fine, but the problems are with sub-domain name corp.delo-company.com).
Delo-company.
com domain has several DNS records for the subdomain:
corp A 82.209.198.147
corp MX 20 corp.delo-company.
com
corp.delo-company.
com TXT "v=spf1 ip4:82.209.198.147 ~all"
(I set ~all for testing purposes only, it was -all before that)
These records are for our corporate Exchange 2003 server at 82.209.198.147. Its LAN name is s2.corp.delo-company.
com so its HELO/EHLO greetings are also s2.corp.delo-company.
com.
To pass EHLO check we've also created some records in delo-company.
com'
s DNS:
s2.corp A 82.209.198.147
s2.corp.delo-company.
com TXT "v=spf1 ip4:82.209.198.147 ~all"
As I understand SPF verifications should be passed in this way: Out server s2 connects to MX of the recepient (Rcp.MX): EHLO s2.corp.delo-company.
com Rcp.MX says Ok, and makes SPF check of HELO/EHLO. It does NSlookup for s2.corp.delo-company.
com and gets the above DNS-records. TXT records says that s2.corp.delo-company.
com should be only from IP 82.209.198.147. So it should be passed.
Then our s2 server says RCPT FROM: Rcp.MX` server checks it, too. The values are the same so they should also be positive.
Maybe there is also a rDNS check, but I'm not sure what is checked HELO or RCPT FROM.
Our PTR record for 82.209.198.147 is:
147.198.209.82.in-addr.arpa. 86400 IN PTR s2.corp.delo-company.
com.
To me everything looks fine, but anyway all emails are rejected by Gmail.
So, I've checked MXtoolbox.
com - it says everything is fine, I passed http://www.kitterman.com/spf/validate.html Python check, I did 25port.
com email test. It'
s fine, too:
Return-Path: <
[email protected]>
Received: from s2.corp.delo-company.
com (82.209.198.147) by verifier.port25.
com id ha45na11u9cs for <
[email protected]>; Fri, 2 Mar 2012 13:03:21 -0500 (envelope-from <
[email protected]>)
Authentication-Results: verifier.port25.com; spf=pass
[email protected].
com
Authentication-Results: verifier.port25.com; domainkeys=neutral (message not signed)
[email protected].
com
Authentication-Results: verifier.port25.com; dkim=neutral (message not signed)
Authentication-Results: verifier.port25.com; sender-id=pass
[email protected].
com
Content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01CCF89E.BE02A069"
Subject: test
Date: Fri, 2 Mar 2012 21:03:15 +0300
X-MimeOLE: Produced By Microsoft Exchange V6.5
Message-ID: <
[email protected]>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: test
Thread-Index: Acz4jS34oznvbyFQR4S5rXsNQFvTdg==
From: =?koi8-r?B?89XQ0tXOwMsg8MHXxcw=?= <
[email protected]>
To: <
[email protected]>
I also checked with
[email protected], but it FAILs all the time, no matter which SPF records I make:
<s2.corp.delo-company.
com #5.7.1 smtp;550 5.7.1 <
[email protected]>: Recipient address rejected: SPF Tests: Mail-From Result="softfail": Mail From="
[email protected].
com" HELO name="s2.corp.delo-company.
com" HELO Result="softfail" Remote IP="82.209.198.147">
I've filled Gmail form twice, but nothing happens.
We do not send spam, only emails for our clients. 2 or 3 times we did mass emails (like New Year Greetings and sales promos) from corp.delo-company.
com addresses, but they where all complying to Gmail Bulk Sender'
s Guide (I mean SPF, Open Relays, Precedence: Bulk and Unsubscribe tags). So, this should be not a problem.
Please, help me. What am I doing wrong?
UPD: I also tried Unlocktheinbox.
com test and the server also fails this test. Here is the result: http://bit.ly/wYr39h . Here is one more http://bit.ly/ypWLjr
I also tried to send email from that server manually via telnet and everything is fine. Here is what I type:
220 mx.google.
com ESMTP g15si4811326anb.170
HELO s2.corp.delo-company.
com
250 mx.google.
com at your service
MAIL FROM: <
[email protected]>
250 2.1.0 OK g15si4811326anb.170
RCPT TO: <
[email protected]>
250 2.1.5 OK g15si4811326anb.170
DATA
354 Go ahead g15si4811326anb.170
From:
[email protected].
com
To: Pavel <
[email protected]>
Subject: Test 28
This is telnet test
.
250 2.0.0 OK 1330795021 g15si4811326anb.170
QUIT
221 2.0.0 closing connection g15si4811326anb.170
And this is what I get:
Delivered-To: pablomedok@gmail.
com
Received: by 10.227.132.73 with SMTP id a9csp96864wbt;
Sat, 3 Mar 2012 09:17:02 -0800 (PST)
Received: by 10.101.128.12 with SMTP id f12mr4837125ann.49.1330795021572;
Sat, 03 Mar 2012 09:17:01 -0800 (PST)
Return-Path: <
[email protected]>
Received: from s2.corp.delo-company.
com (s2.corp.delo-company.
com. [82.209.198.147])
by mx.google.
com with SMTP id g15si4811326anb.170.2012.03.03.09.15.59;
Sat, 03 Mar 2012 09:17:00 -0800 (PST)
Received-SPF: pass (google.com: domain of
[email protected].
com designates 82.209.198.147 as permitted sender) client-ip=82.209.198.147;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of
[email protected].
com designates 82.209.198.147 as permitted sender)
[email protected].
com
Date: Sat, 03 Mar 2012 09:17:00 -0800 (PST)
Message-Id: <
[email protected]>
From:
[email protected].
com
To: Pavel <
[email protected]>
Subject: Test 28
This is telnet test