Okay, so I have read a lot around about the issues im having and the solutions people are offering only solve part of the problem.    1) We have a domain  2) The domain points to our VPS with a static IP running FreeBSD  3) The domain has Google Apps configured  4) Our MX Records point to Google  5) If someone sends us an email we get it in our Gmail, fine.  6) Google apps costs 50 dollars per email address, so we want some pop3 accounts just for development of various things  7) Google is forwarding all our mail to our VPS, and our VPS has postfix and accepts mail for the domain.  8) If in PHP on the VPS we send email to our domain and it gets delivered to the local postfix accounts only    What we want is.  A) Postfix on our VPS to "accept" email for our domain and deliver it locally  B) Postfix to deliver email from our box to Google and not the local boxes    So.... the complication is that it must answer to the domain but not deliver mail locally if it originates from itself / e.g. PHP.  Does anyone have any bright ideas? This one has our network admin stumped because its easy to not deliver locally but then we cant accept incoming mail. And its easy to send all email out, but then we cant accept incoming mail.  Cheers,  Madhava Jay
123595
I have a following setup:   linux box with postfix configured to be responsible for example.com domain domain's MX servers are configured so that mail sent to example.com is sent to google mail servers several user accounts on linux machine exist (same machine also hosts example.com site)   When someone from the outside attempts to send mail to address ending with @example.com, it gets routed to google mail (and there handled appropriately).  When linux machine tries to send mail to outside world, mail is delivered correctly, as reverse dns and spf records are configured correctly, so linux machine is valid mail sender for example.com domain (along with google mail servers).  However, here's the problem. When php application (hosted at linux box) tries to send mail to someuser@example.com (and someuser doesn't exist on linux box), it fails, since it doesn't even consult google mail servers, but postfix smtp locally concludes that "someuser" is unknown.  So, the question is: how do I tell postfix to relay mails sent to @example.com domain to google mail servers (so, to servers specified in MX records), IF and only if a mailbox is not found locally.
4284
This is a  about setting up .     I have an office with many computers that share a single external ip (I'm unsure if the address is static or dynamic). Each computer connects to our mail server via IMAP using outlook. Email is sent and received by those computers, and some users send and receive email on their mobile phones as well.  I am using  to generate an SPF record and I'm unsure about some of the fields in the wizard, specifically:   Enter any other domains who may send or relay mail for this domain Enter any IP addresses in CIDR format for netblocks that originate or relay mail for this domain Enter any other hosts which can send or relay mail for this domain How stringent should SPF-aware MTA's treat this?   the first few questions i'm fairly certain about... hope i have given enough info.
122869
here's my problem:  # iptables -P INPUT DROP # host -t mx gmail.com ;; connection timed out; no servers could be reached # iptables -P INPUT ACCEPT # host -t mx gmail.com gmail.com mail is handled by 20 alt2.gmail-smtp-in.l.google.com. gmail.com mail is handled by 5 gmail-smtp-in.l.google.com. gmail.com mail is handled by 40 alt4.gmail-smtp-in.l.google.com. gmail.com mail is handled by 10 alt1.gmail-smtp-in.l.google.com. gmail.com mail is handled by 30 alt3.gmail-smtp-in.l.google.com.   after setting iptables to drop all input packets unless specified otherwise, I can't resolve hosts and therefore postfix fails to send mails. I think it is crucial to set firewall up - what is the firewall setting that I missed?  here's my current iptables:  # iptables -L INPUT -n -v Chain INPUT (policy ACCEPT 120 packets, 17552 bytes)  pkts bytes target     prot opt in     out     source               destination           2669K  160M fail2ban-ssh-ddos  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 22 2669K  160M fail2ban-ssh  tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            multiport dports 22   122 19135 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:80   252 27262 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:143     0     0 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:587    46  3191 ACCEPT     tcp  --  *      *       0.0.0.0/0            0.0.0.0/0            tcp dpt:21   264 2459K ACCEPT     all  --  lo     *       0.0.0.0/0            0.0.0.0/0
455
I run my own mail server on an Azure Linux VM with Postfix. Since I was under heavy spam attack I reinforced my mail server security measures.  Without going into the security things, today I noticed something particularly unusual.  Postfix was not getting mail from some well known domains. Only some  #  /var/log/mail postfix/smtpd[40702]: NOQUEUE: reject: RCPT from xxxx.ing.net[xx.xx.xx.xx]: 451 4.3.5 &lt;prvs=2022b5a257=xxxxx@ing.com&gt;: Sender address rejected: Server configuration problem; from=&lt;xxxxxxx@ing.com&gt; to=&lt;xxxxxxxxxx&gt; proto=ESMTP helo=&lt;xxxx.ing.net&gt;  # /var/log/warn postfix/smtpd[32944]: warning: problem talking to server private/spf-policy: Connection timed out   What I dumbly did was to ping for SPF record on ing.com / ing.net  From my Windows box nslookup   ing.com Server:  [8.8.8.8] Address:  8.8.8.8  Risposta da un server non autorevole: ing.com text =          "MS=ms77059065" ing.com text =          "v=spf1 include:_spf.ing.net ip4:91.209.197.6 ip4:89.20.160.55 ip4:78.136.53.254 ip4:95.138.135.251 ip4:92.52.81.2 ip4:146.148.26.249 ip4:83.231.160.132 ip4:83.231.160.128/26 ip4:212.187.169.64/26"         " include:_spf_mx.solvinity.com include:mailplus.nl ip4:24.157.48.85 ip4:141.155.214.85 ip4:160.34.64.28 ip4:192.254.112.185 ip4:118.127.87.207 ip4:128.242.118.200 ip4:62.73.172.35 ip4:83.217.248.35 ip4:91.209.197.7 -all" ing.com text =          "adobe-idp-site-verification=8b81f7b92ccac0b65bab7d47f9fcecaeda6f04ac870b79133d8ac54be7b53534" ing.com text =   From the email server box nslookup  &gt; nslookup &gt; set type=txt &gt; ing.com ;; Truncated, retrying in TCP mode.   From mail server box setting the DNS server to 8.8.8.8 returns the same SPF payload.  Question is: what is causing this issue with TXT DNS resolution in Azure VM? Before blindly changing the system DNS settings, I would like to understand the error and its cause, and why happening only on Azure default DNS
104519
Not sure if this belongs here or at serverfault...  I've seen websites where, to login to the website, requires a digital certificate to be installed for the user logging in. As far as I can tell, this certificate is in addition to the website using an SSL certificate (https)  I'm just looking to be pointed in the right direction on how to code for this (apache / php hopefully), who issues these certificates (must it be a trusted var or can I ?) or even what to search for via google.  -Mario
26529
I'm not really sure how email routing works, but someone ordered something on Amazon and I received the email instead of them.  Or maybe we both got it, I don't know.  The order doesn't show up in my account, so I'm certain I wasn't charged for it, but I shouldn't be getting other peoples' emails.  We'll say that my email is johndoe1@gmail.com, and somebody who's email is john.doe1@gmail.com places an order on Amazon.  The confirmation email is sent to me at johndoe1@gmail.com.  I checked the email header, and it did say To: john.doe1@gmail.com which is not my email address.  At first I thought that Google ignores periods in email addresses, but I tested the account setup and it doesn't give any error when you put a period in the address.  I didn't create the account; I just used the "check availability" function and the address I chose with a period was fine.  Maybe someone with knowledge about how Email works could tell me why this happened.  Is this a bug in the way Amazon sends emails?  Or is it a bug in how Google receives them?  Who should I report this issue to?
76243
How do I create subdomain like  ? Do i have to access htaccess somehow? Is it actually simply possible to create it via pure php code or I need to use some external script-server side language?  To those who answered: Well, then, should i ask my hosting if they provide some sort of DNS access??
24260
I don't think  deserved to get  deleted as spam. Martin'Vobr vas Rebex linked to a product he makes as an example of a library to accomplish the task the OP sought, and did so in a way that made it clear that he is the creator of the library and therefore his word should be taken understanding that he is biased.  Do you think he did anything underhanded in his answer? Here's the "spammy" part, for those without ten thousand arbitrary numbers:     I would try the code from the codeproject and if it suits your needs stick with it. In case of too many parsing problem the commercial email component with decent support could be a wise move. I would recommend our  ($149 single dev) but I'm biased. Feel free to browse for you own favorite ;-). At least it will be (in case of any problem) someone who is paid for solving your mail parsing problem.   Ordinarily I would flag this for moderator attention but unfortunately I am not permitted to flag locked answers. Also, I'd like to know if I'm completely wrong about my understanding of what is and is not spam.  To me, this isn't spam. To six other people, it is. One of us has to be wrong, by the pigeonholing convention of '57. Can we figure this out? There are a lot of similar users to Martin who post their products, and a lot of them do it in a very spammy way. But in the specific instance of Martin I think he does it well. We can't outright outlaw all users who advocate their own libraries, can we? Those might be the only libraries that do what the asker wants, after all.
7643
I receive Mailer Daemon messages saying certain emails fail. My domain is itaccess.org which is administered by Google apps. Is there any way I can identify who is sending emails from my domain, and how they are doing it without me creating an account for them?  Delivered-To: 7e949ba@itaccess.org Received: by 10.142.152.34 with SMTP id z34csp12042wfd;         Wed, 8 Aug 2012 07:12:46 -0700 (PDT) Received: by 10.152.112.34 with SMTP id in2mr18229790lab.6.1344435165782;         Wed, 08 Aug 2012 07:12:45 -0700 (PDT) Return-Path: &lt;whao@www20.aname.net&gt; Received: from smtp-gw.fsdata.se (smtp-gw.fsdata.se. [195.35.82.145])         by mx.google.com with ESMTP id b9si24888989lbg.77.2012.08.08.07.12.44;         Wed, 08 Aug 2012 07:12:45 -0700 (PDT) Received-SPF: neutral (google.com: 195.35.82.145 is neither permitted nor denied by best guess record for domain of whao@www20.aname.net) client-ip=195.35.82.145; Authentication-Results: mx.google.com; spf=neutral (google.com: 195.35.82.145 is neither permitted nor denied by best guess record for domain of whao@www20.aname.net) smtp.mail=whao@www20.aname.net Received: from www20.aname.net (www20.aname.net [89.221.250.20])     by smtp-gw.fsdata.se (8.14.3/8.13.8) with ESMTP id q78EChia020085     for &lt;7E949BA@itaccess.org&gt;; Wed, 8 Aug 2012 16:12:43 +0200 Received: from www20.aname.net (localhost [127.0.0.1])     by www20.aname.net (8.14.3/8.14.3) with ESMTP id q78ECgQ1013882     for &lt;7E949BA@itaccess.org&gt;; Wed, 8 Aug 2012 16:12:42 +0200 Received: (from whao@localhost)     by www20.aname.net (8.14.3/8.12.0/Submit) id q78ECgKn013879;     Wed, 8 Aug 2012 16:12:42 +0200 Date: Wed, 8 Aug 2012 16:12:42 +0200 Message-Id: &lt;201208081412.q78ECgKn013879@www20.aname.net&gt; To: 7E949BA@itaccess.org References: &lt;20120808171231.CAC5128A79D815BC08430@USER-PC&gt; In-Reply-To: &lt;20120808171231.CAC5128A79D815BC08430@USER-PC&gt; X-Loop: whao@whao.se From: MAILER-DAEMON@whao.se Subject: whao.se:  kontot avstängt - account closed X-FS-SpamAssassinScore: 1.8 X-FS-SpamAssassinRules: ALL_TRUSTED,DCC_CHECK,FRT_CONTACT,SUBJECT_NEEDS_ENCODING      Detta är ett automatiskt svar från F S Data - http://www.fsdata.se      Kontot för domänen whao.se är tillsvidare avstängt.     För mer information, kontakta info@fsdata.se      Mvh,     /F S Data      -----    This is an automatic reply from F S Data - http://www.fsdata.se    The domain account "whao.se" is closed.   For further information, please contact info@fsdata.se    Best regards,   /F S Data
27819
Until recently my server with Postfix has worked well. Then I enforced some restrictions to a) combat spam b) disable sending emails to me on behalf on my own name -- I have begun receiving emails from my own email address demanding to send bitcoin to someone.   I want to fix both a and b.  And now I can't send email via my own postfix server.    Client host rejected: cannot find your reverse hostname, [&lt;my ip here&gt;]   Note that I carry my laptot to different places and countries, and connect to WiFi from those. And I want to be able to send email always.  Here's a part of my config of Postfix. For database of the accounts and domains I use Postgresql.  smtpd_helo_required = yes  smtpd_client_restrictions =   permit_mynetworks,   permit_sasl_authenticated,   reject_unknown_reverse_client_hostname,    reject_unknown_client_hostname,   reject_unauth_pipelining  smtpd_helo_restrictions =   permit_mynetworks,   permit_sasl_authenticated,   reject_invalid_helo_hostname,  ###  reject_non_fqdn_helo_hostname,   reject_unauth_pipelining  smtpd_sender_restrictions =   permit_mynetworks,   reject_sender_login_mismatch,   permit_sasl_authenticated,   reject_non_fqdn_sender,   reject_unknown_sender_domain,   reject_unauth_pipelining  smtpd_relay_restrictions =   permit_mynetworks,   permit_sasl_authenticated,   reject_non_fqdn_recipient,   reject_unknown_recipient_domain,    reject_unauth_destination   smtpd_recipient_restrictions =   permit_mynetworks,   permit_sasl_authenticated,   reject_non_fqdn_recipient,   reject_unknown_recipient_domain,   reject_unauth_pipelining  smtpd_data_restrictions =   permit_mynetworks,   permit_sasl_authenticated,   reject_multi_recipient_bounce,   reject_unauth_pipelining  # deliver mail for virtual users to Dovecot's LMTP socket virtual_transport = lmtp:unix:private/dovecot-lmtp  #  query to find which domains we accept mail for virtual_mailbox_domains = pgsql:/etc/postfix/virtual_mailbox_domains.cf  # query to find which email addresses we accept mail for virtual_mailbox_maps = pgsql:/etc/postfix/virtual_mailbox_maps.cf  # query to find a user's email aliases virtual_alias_maps = pgsql:/etc/postfix/virtual_alias_maps.cf  virtual_alias_domains =  alias_database =  alias_maps =   mynetworks = 127.0.0.0/8 [::ffff:127.0.0.0]/104 [::1]/128 inet_interfaces = all
68522
I am setting up a new server and discovered that Gmail does not accept emails from this server.  I checked Exim logfiles and found the following:  Our system has detected that this\n550-5.7.1 message does not meet IPv6 sending guidelines regarding PTR records\n550-5.7.1 and authentication. Please review\n550 5.7.1 https://support.google.com/mail/answer/81126 for more information. om7si10023450wjc.42 - gsmtp   My server has IP4 and IPv6 ip addresses. I have added SPF records for both IP4 and IPv6 IP addresses. The only thing is that I don't have PTR records yet (my data center does not allow to add PTR records if A record does not point to the same server). So, I will PTR records later when I move websites to the new server.  My question: is it possible that Gmail does not accept emails just because I don't have PTR records? All email providers in similar situations just put emails in Spam or Bulk mail folders. Gmail does not accept mails at all?
43245
I know, I know, I should switch to Postfix.  But in the meantime, how do I throttle outbound email (especially email to a single domain) in Sendmail?
36120
My ISP has started blocking port 25 so I can not send email through my dedicated server any more.   I have several options:   Send email through the SMTP server provided by my ISP. Any problems with this? Setup mu server so that it receives email on another port instead of port 25     No one else sends email through my server so it should be OK. How do I do this on a Linux server? Buy a static client IP - these are not being blocked so far.   Which one is preferable?
11896
I have just answered a question on .  The nature of this error means that it requires DBA access to diagnose and resolve.  So I think it is more suited to ServerFault, and voted to close it accordingly.    Except that I wasn't offered the choice of selecting a more approprate Trilogy site.  I think the reason for this is that the question was .  But it was migrated by an SF moderator, Chopper3, and no other voters.  By  Chopper is "no Oracle expert", and I think he has made an error here.    I'm not launching an ad hominem attack, and I'm fine with moderators having super powers.   I just think that we ought to be able to bounce migrated questions back, even if the previous migration was ordained by a moderator.    @AdamDavies suggests I post a comment on the original site.  That indeed was the first thing which occurred to me.  However, comment is not an option. I don't know whether this is  a reputation thang (I don't use SF much) or because the question was closed by a mod.  I have also flagged the question with the SF moderators, so we'll see.
62138
I have been trying to get PEAR::mail to successfully deliver emails to hotmail users without being flagged as SPAM and ending up in the junk folder, i have no problems with yahoo/gmail only with hotmail.  google suggested that this is a common problem with hotmail and that possible causes can include   incorrect reverse DNS for main IP of the server lack of SenderId/SPF records  being blacklisted   having checked all of the above i can only think of one other reason - incorrectly formatted headers ?  to test this theory i set up outlook to send email via the same address that PEAR::mail uses and sent a quick test - it delivered straight to my inbox  so i compared the headers from the email sent from PEAR::mail against the headers sent by Outlook and there are only a few differences - i have only listed the differences to save space (and peoples eyes)  PEAR::mail headers (not in outlook headers)  X-PHP-Script: www.example.com/register.php for [users ip address]   Outlook headers (not in PEAR::mail headers)  X-Mailer: Microsoft Office Outlook 11 Thread-Index: Ack6CWSQlgV8s6+6SWyifka2NNpB7g== X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3350   the only other differences that i can see are   the order of the From: and To: headers are reversed  and in the Received: section of the headers   Outlook  Received: from myhomehostname.com ([ip address] helo=simber)  by mywebhostname.com with local (Exim 4.67)   PEAR::mail  Received: from apache by mywebhostname.com with local (Exim 4.67)   could these small differences in the headers be the cause or am i looking in the wrong place ? i knew this might be problematic hence why i chose to use the PEAR::mail class rather than rolling my own but now i really have no idea where to go with this, any help would be greatly appreciated.  Update: as per changelog's suggestion i have tried adding the MS headers to the PEAR::mail class and i have tried replacing PEAR::mail with PHPMailer (with &amp; without the extra headers) - they all end up in the junk folder.  I am starting to believe that it may not be the headers afterall.  Update 2: i should have mentioned that the emails are just a registration confirmation to validate the email address the user signed up with - no mailshots etc so our volume is extremely low.   I have considered warning users who provide a @hotmail/live email address to add us to their address book or check their junk folder - but this just seems unprofessional to me - it may be that i have to resort to this.  As for becoming Sender Score Certified - its very unlikely that i can justify the cost of this when considering the low volume and purpose of these emails.
60122
I'm using network, where services such as Gmail or any other e-mails, Google Drive, Dropbox, all social networks are blocked. Basically my goal is to access simply GMail, but I couldn't find any way to do that so far. I understand that different proxies have different filtering rules, so please post any tricks or your-way solutions.
58228
This is a question to experienced people that might help us shed some light on the issue.   We noticed a very strange behavior on our site, in Google Analytics. Some dude from Finland, namely, from Kouvola city is hitting one of our pages - only one page on our site, 'bout a hundred times per day, all with an average bounce rate of 90%+...  This is causing our overall bounce rate to go up by 1 to 3% per day... which is very disturbing.. since we're trying to do our best in order to keep it as low as possible. And obviously having it jumped from ~24% to 27%, just because of that crazy dude is not making us happy at all... We tried implementing a geo-targeted script in order to catch this particular visitor and deliver him a juicy message, and it seemed like it helped in the beginning, it has stopped for a day or two, but now he's back...   The geo-targeted script was also logging all IP addresses for page requests originating from Finland in order to find out more details and (in order to block them on the server level, later).. but thing is, it was all mainly cable or DSL connections with various, but not constantly repeating IPs... we are all wondering what is he up to really ?   I think that this page should be kept updated with ideas on how to combat this and perhaps someone could also shed light on what it might be ? What is the reason for doing this "bounce-rate attack", as I call it?  There was a similar question asked on stackoverflow earlier, with no meaningful answer - here -