Am getting this error whenever i send mail to google account
Hello Nick,
Please set log level to Protocol Communication for the following services
- SMTP Sending : from WebAdmin > Services > SMTP Sending > Logging
- Processing : from WebAdmin > Queue > Processing > Logging
and share afterwards PROCESSING and SMTP-OUT log lines related to the mail delivery for that Gmail account.
HTH,
Ioan
Hi Indreias,
below are the logs
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: >> EHLO mail
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: << 250-thk-tes-rat06.xxx.co.ke
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: << 250-8BITMIME
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: << 250 SIZE 41943040
2022-12-19 13:13:03 +0300 08 mail SMTP-OUT:0000004D: Start sending mail 0AD52C
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: >> MAIL FROM:ict@xx.com
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: << 250 sender ict@xx.com ok
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: >> RCPT TO:nichs@yahoo.com
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: << 550 #5.1.0 Address rejected.
2022-12-19 13:13:03 +0300 08 mail SMTP-OUT:0000004D: RCPT nich@yahoo.com rejected with message: #5.1.0 Address rejected.
2022-12-19 13:13:03 +0300 08 mail SMTP-OUT:0000004D: No RCPT accepted for mail 0AD52C; aborting transaction
2022-12-19 13:13:03 +0300 08 mail SMTP-OUT:0000004D: Set recipient nichotoss@yahoo.com state to RELAY ERROR
2022-12-19 13:13:03 +0300 08 mail SMTP-OUT:0000004D: Delivery attempt completed for mail 0AD52C; schedule for cleanup
2022-12-19 13:13:03 +0300 08 mail SMTP-OUT:0000004D: Set mail state to SENT
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: >> RSET
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: << 250 reset
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: >> QUIT
2022-12-19 13:13:03 +0300 16 mail SMTP-OUT:0000004D: << 221 thk-tes-rat06.safaricombusiness.co.ke
2022-12-19 13:13:03 +0300 08 mail SMTP-OUT:0000004D: Disconnected from 41.xx.xx.143
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: Relay mail 3C6BBE: connecting to 41.xx.xx.143:25
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: Relay mail 3C6BBE: connected to 41.xx.xx.143:25
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 220 thk-tes-rat06.xxxx.co.ke ESMTP
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: >> EHLO mail
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250-thk-tes-rat06.xx.co.ke
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250-8BITMIME
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250-SIZE 41943040
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250 STARTTLS
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: >> STARTTLS
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 220 Go ahead with TLS
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: >> EHLO mail
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250-thk-tes-rat06.xxx.co.ke
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250-8BITMIME
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250 SIZE 41943040
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: Start sending mail 3C6BBE
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: >> MAIL FROM:opgr@xx.com
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250 sender opgr@xxx.com ok
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: >> RCPT TO:kf@gmail.com
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 550 #5.1.0 Address rejected.
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: RCPT kf@gmail.com rejected with message: #5.1.0 Address rejected.
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: No RCPT accepted for mail 3C6BBE; aborting transaction
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: Set recipient kf@gmail.com state to RELAY ERROR
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: Delivery attempt completed for mail 3C6BBE; schedule for cleanup
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: Set mail state to SENT
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: >> RSET
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 250 reset
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: >> QUIT
2022-12-19 13:21:10 +0300 16 mail SMTP-OUT:0000004E: << 221 thk-tes-rat06.xxx.co.ke
2022-12-19 13:21:10 +0300 08 mail SMTP-OUT:0000004E: Disconnected from 41.xx.xx.143
Hello Nick,
From above log lines we could see that the mails you are trying to send to Yahoo or Gmail accounts are relayed to 41.xx.xx.143 and not to their coresponding MX servers.
Usually, when a relay is using, the delivery to non-local accounts is permitted only if using an authenticated session.
Please double check your relay service setup and configure the needed authentication details, like: WebAdmin > Security & Filtering > Acceptance & Routing > Routing Basic Settings > Enable authentication (under Deliver through smart host, which we believe it is checked instead of Deliver using DNS MX entry).
If this is not your case please provide enough information so we could understand how the mentioned IP address is chosen and not the MX servers for Yahoo or Gmail.
HTH,
Ioan
Thank you Indreias,i checked Deliver using DNS MX entry,i can send to yahoo.com and receive without problem.The problem is when i sent to google account i receive error,
Your message did not reach some or all of the intended recipients.
Subject:
Sent: 19-Dec-22 3:31 PM
The following recipient(s) cannot be reached:
'oss@gmail.com' on 19-Dec-22 3:31 PM
552 Âhþ
From gmail account to my Domain error below
The response from the remote server was:
550 Please turn on SMTP Authentication in your mail client. mail-pg1-f178.google.com [209.85.215.178]:33539 is not permitted to relay through this server without authentication.
how can i fix this.
Hello Nick,
Please share PROCESSING and SMTP-OUT logs corresponding to the message sent from your server to oss@gmail.com via DNS MX entry (keep “Protocol Communication” log level as mentioned in my first reply).
From your description the delivery is rejected with code 552 (plus some strange UTF8 chars) but only after we could see the logs we could understand better your problem.
HTH,
Ioan
hi Friend,
Below are the logs,
2022-12-20 07:54:12 +0300 08 mail SMTP-OUT:00000074: Start sending mail 1D6D2E
2022-12-20 07:54:12 +0300 16 mail SMTP-OUT:00000074: >> MAIL FROM:<ict@threestxxotel.com>
2022-12-20 07:54:12 +0300 16 mail SMTP-OUT:00000074: >> RCPT TO:<threexxs@gmail.com>
2022-12-20 07:54:12 +0300 16 mail SMTP-OUT:00000074: >> NOOP
2022-12-20 07:54:12 +0300 08 mail SMTP-OUT:00000074: Release mail 1D6D2E
2022-12-20 07:54:12 +0300 16 mail SMTP-OUT:00000074: << 250 2.1.0 OK go36-20020a1709070da400b0078db719e54csi13397651ejc.98 - gsmtp
2022-12-20 07:54:12 +0300 08 mail SMTP-OUT:00000074: Release mail 1D6D2E
2022-12-20 07:54:12 +0300 16 mail SMTP-OUT:00000074: << 250 2.1.5 OK go36-20020a1709070da400b0078db719e54csi13397651ejc.98 - gsmtp
2022-12-20 07:54:12 +0300 16 mail SMTP-OUT:00000074: << 250 2.0.0 OK go36-20020a1709070da400b0078db719e54csi13397651ejc.98 - gsmtp
2022-12-20 07:54:12 +0300 16 mail SMTP-OUT:00000074: >> BDAT 247340 LAST
2022-12-20 07:54:12 +0300 16 mail SMTP-OUT:00000074: >> Send last chunk of size 247340
2022-12-20 07:54:12 +0300 08 mail SMTP-OUT:00000074: Release mail 1D6D2E
2022-12-20 07:54:13 +0300 08 mail SMTP-OUT:00000074: Release mail 1D6D2E
2022-12-20 07:54:14 +0300 16 mail SMTP-OUT:00000074: << 550-5.7.26 This message does not pass authentication checks (SPF and DKIM both
2022-12-20 07:54:14 +0300 16 mail SMTP-OUT:00000074: << 550-5.7.26 do not pass). SPF check for [threesteerxxotel.com] does not pass
2022-12-20 07:54:14 +0300 16 mail SMTP-OUT:00000074: << 550-5.7.26 with ip: [197.248.xx.45].To best protect our users from spam, the
2022-12-20 07:54:14 +0300 16 mail SMTP-OUT:00000074: << 550-5.7.26 message has been blocked. Please visit
2022-12-20 07:54:14 +0300 16 mail SMTP-OUT:00000074: << 550-5.7.26 Prevent mail to Gmail users from being blocked or sent to spam - Gmail Help for more
2022-12-20 07:54:14 +0300 16 mail SMTP-OUT:00000074: << 550 5.7.26 information. go36-20020a1709070da400b0078db719e54csi13397651ejc.98 - gsmtp
2022-12-20 07:54:14 +0300 08 mail SMTP-OUT:00000074: BDAT chunk rejected with message: 5.7.26 This message does not pass authentication checks (SPF and DKIM both 5.7.26 do not pass). SPF check for [threestxxshotel.com] does not pass 5.7.26 with ip: [197.248.xx.45].To best protect our users from spam, the 5.7.26 message has been blocked. Please visit 5.7.26 Prevent mail to Gmail users from being blocked or sent to spam - Gmail Help for more 5.7.26 information. go36-20020a1709070da400b0078db719e54csi13397651ejc.98 - gsmtp
2022-12-20 07:54:14 +0300 08 mail SMTP-OUT:00000074: Set recipient <threestxxs@gmail.com> state to RELAY ERROR
2022-12-20 07:54:14 +0300 08 mail SMTP-OUT:00000074: Delivery attempt completed for mail 1D6D2E; schedule for cleanup
2022-12-20 07:54:14 +0300 08 mail SMTP-OUT:00000074: Set mail state to SENT
2022-12-20 07:54:14 +0300 16 mail SMTP-OUT:00000074: >> RSET
2022-12-20 07:54:14 +0300 08 mail SMTP-OUT:00000074: Disconnected from 108.177.127.27
my qns is these spf & dkim are they configured any where in our mailserver or only in cpanel
Hello Nick,
So now we see a delivery attempt to a Gmail recipient, via one of their SMTP servers (108.177.127.27 = el-in-f27.1e100.net) and the reject reason was:
This message does not pass authentication checks (SPF and DKIM both
550-5.7.26 This message does not pass authentication checks (SPF and DKIM both
550-5.7.26 do not pass). SPF check for [threesteerxxotel.com] does not pass
For me this message should point that your domain SPF DNS record is not authorizing the public IP address used for egress traffic sent from Axigen server so you should double check and fix it before trying again.
My suggestion is to check the validity of the SPF record using an online tool like: SPF Query Tool
You may also need some information about your public IP address used for egress as in some cases it may be different from the one you have configured for the MX record (especially if you are using incoming NAT rules or having multiple public IP addresses configured for your instance).
HTH,
Ioan
Thank you Indreias,Have tested using the tool and here are results
Input accepted, querying now…
Mail sent from this IP address: 197.248.x.25
Mail from (Sender): ict@threesteerxx.com
Mail checked using this SPF policy: v=spf1 +ip4:197.248.x.25 +include:_spf.google.com ~all
Results - PASS sender SPF authorized
Mail sent from this IP address: 197.248.x.25
Mail Server HELO/EHLO identity: threexxx@gmail.com
HELO/EHLO Results - softfail domain owner discourages use of this host
what does is it mean?
As per your issue you need to check two things your DKIM and SPF as both did not pass authentication process.
for your last question
A soft fail in an SPF record means that suspicious emails, or emails from unauthorized servers, are not rejected, but forwarded to a spam folder, or marked as suspicious.
Hello Nick,
First of all: could you please explain us the procedure you have used to validate the public IP address used by your server for egress traffic to “internet” - TCP port 25?
HTH,
Ioan
Hello Nick,
Beside double-checking if the IP address used for egress traffic is included into the SPF record my suggestion is to also use online delivery tools that may provide some useful info about messages sent from your server:
HTH,
Ioan