Hi Bastian,

On 16.03.19 11:28, Bastian Blank wrote:

> So your _provider_ is on the the MS blacklist.  Netcup did not show up
> on my radar, but I don't know what else.
> 
>> Here's what I've checked/tried:
>> * Neither I nor any of my users send spam. The mail volume is VERY low.
> 
> It is really low, so low that DNSWL did not pick the IP up as recurrent
> sender or refuse to.

I wasn't aware of DNSWL before this, so I'm going to look into it for
sure. Thanks for the pointer.

>> * I use a reputable service provider for my server (i.e., I suspect if
>> there were other customers in my IP range doing bad things, they'd be
>> kicked out).
> 
> Not according to the rejection by MS services.

True. However, I don't understand why, even after whitelisting my
server's IP it gets blacklisted again shortly thereafter.

>> In my desparation I've even registered to the Google Postmaster thing
>> and demeaningly "verified" my domain by altering the DNS:
>> https://postmaster.google.com/ -- all data is entirely empty (even
>> though there were positively mails blocked since I've registered with them).
> 
> For the correct domains?  I don't see any verification records for
> spornkuller.de.

Ah, I thought it would be sufficient to register the domain which the MX
record points to (johannes-bauer.com in my case, which aliases with
spornkuller.de). But I'll register spornkuller.de as well and see what I
get.

>> If anyone has any ideas of what could be wrong, I'm absolutely grasping
>> for straws here. Any help is greatly appreciated.
> 
> Let's point out the obvious(?):
> 
> You MTA is known under different names:
> 
>> johannes-bauer.com mail is handled by 10 johannes-bauer.com.
>> spornkuller.de mail is handled by 10 spornkuller.de.

Is this a problem? In other words, should I refer to the MTA always
under the same name, i.e., have the MX record of johannes-bauer.com
point to spornkuller.de? If this is somehow an issue I definitely
overlooked it.

> It does not advertise ESMTP (how the heck did you manage to
> miss-configure it this much?):
> 
> | % nc spornkuller.de 25    
> | 220 Hi there

Ugh!

smtpd_banner = Hi there

My best guess is that I was testing something and had it half-configured
or whatever. I'm fairly sure that it was previously disclosing full
version numbers and that's why I was poking around with that setting to
avoid it. Fixed and thanks for the pointer.

Is the banner however also used when Postfix connects to a different
MTA? Because I only have problems delivering messages, no issues
receiving at all.

> Claim your info at dnswl.org.

I will, thanks a bunch for the info. Your support is greatly
appreciated! If we ever meet in person, please remind me and beers are
on me :)

All the best,
Joe

Reply via email to