Probably need SPF, SenderID, DomainKeys and DKIM setup to be safe. A good quick test is to send an e-mail (via the new smtp server) to: check-auth(a)verifier.port25.com This will give you a reply email with a detailed breakdown of what's missing. On 28/03/2012 3:33 p.m., Pieter De Wit wrote:

Hi,

Do you have DKIM setup on the domain ? And SPF ? If not, try that

Cheers,

Pieter

On Wed, 28 Mar 2012, Dave Mill wrote:

...

Hi Inspire Net rolled out a new customer outbounding smtp server last Friday. If anyone wishes to add us to any trusted lists then please add the IP address of 203.114.168.20. All user emails from Inspire Net will likely come from that IP from now on.

Since then, we've had many issues getting emails accepted for delivery to Xtra/Yahoo. For long periods of time they will defer all emails, then accept a few, and then go back to deferring all emails.

The help page in question is http://help.yahoo.com/kb/index?page=content&y=PROD_MAIL_ML&locale=en_US&id=SLN3434&impressions=true .

The answer seems to be to wait 4 hours. Which we've done. A lot.

I've contacted postmaster(a)xtra.co.nz about this issue and had no response. For now, to keep our users happy, we're occasionally manually delivering all emails to Xtra via our old, trusted SMTP server, but this is less than ideal. We need our new SMTP server to be trusted.

My questions are:

-Does any one have any advice to give based on past experience on how long this may last, or how to get our smtp server trusted? -Does anyone from Telecom want to contact me about this issue?

Thanks in advance for any help given.

Cheers Dave

_______________________________________________ NZNOG mailing list NZNOG(a)list.waikato.ac.nz http://list.waikato.ac.nz/mailman/listinfo/nznog

On Wed, Mar 28, 2012 at 9:43 PM, Craig Whitmore wrote:

...

Probably need SPF, SenderID, DomainKeys and DKIM setup to be safe.

As this is an outgoing mail server for an ISP, 1000's of domains's could come from it depending on how many email domains they host. Getting every domain to add SFP/SenderID records and DKIM records in the DNS and for the ISP to sign every email with a different DKIM keys etc would be virtually impossible.

Craig's really hit the nail on the head here. Buts its even worse than what Craig says. Just because we host say 1000 domains for incoming mail doesn't mean that only 1000 domains outbound through us. A customer with a domain name that is with another company for MX may still want to outbound mails from that domain through our SMTP server. SPF records and DKIM records would be needed for many thousands of domain names. In saying that, for the past 12 hours we've had no issues with having emails accepted by Yahoo/Xtra. mx1 and mx2 are both accepting emails. In case this is handy to anyone else here is what we have done to remedy this issue (I'll list in order of likelihood in my opinion): -We did nothing but wait another day - during this time mx2 started to trust us. -I filled out this form - http://help.yahoo.com/l/us/yahoo/mail/postmaster/bulkv2.html - this is designed for "bulk mail-out senders" (spammers) to use, but it may have helped. We've received no acknowledgement from filling out this form other than the initial automated one. -As mentioned we emailed postmaster(a)xtra a few days ago. I've received no response to this email but maybe its been silently dealt with. -Potentially someone lurking on NZNOG got this issue fixed for us. So anyway. Thanks for all of the responses. I'm half expecting this issue to come back, but for now this is the best situation we've had over the past 6 days. Cheers Dave