On Fri, Dec 16, 2022 at 10:40:53AM +1100, raf <post...@raf.org> wrote:
> On Thu, Dec 15, 2022 at 03:54:38PM -0600, Richard Raether > <rraet...@cct.lsu.edu> wrote: > > > Dear users wiser than me (probably everyone), > > > > We have a legitimate domain, einsteintoolkit.org, but I'm getting mail for > > einsteintoolkit.org.s9b1.psmtp.com, which postfix doesn't allow through > > because it doesn't recognize it as a legitimate domain. What am I > > misunderstanding about psmtp and how it works, and does anyone know how I > > can get these emails properly delivered? > > > > Any advice is welcome. > > > > Thanks, > > > > Richard Raether > > Sysadmin > > Center for Computation and Technology > > Louisiana State University > > [Warning: Rhetorical questions ahead] > > Why do you want them to be delivered? > They are not for your domain. > > How are they getting to your server? > There is no MX record for that domain. > psmtp.com has NS/SOA/TXT(spf) records, > but that's it (I think). None of the > subdomains seem to have any records at all. > So no remote server should be sending > such emails to your server. > > Are those emails generated locally on your > server? If not, it could be a malicious server > targetting your server (bcause it's not following > the normal protocols for working out where to > send an email). > > And sorry, I have no idea how psmtp.com works > or what it's supposed to do. Googling shows these: > > The Science behind Mail Delivery > https://litmus.com/community/discussions/46-the-science-behind-mail-delivery > > Which mentions something called postini > > and: > > MX records explained > https://help.salesforce.com/s/articleView?id=000385607&type=1 > > Which shows an example where a similar domain is the name used > in salesforce.com's MX records, but in that case, the similar > domains had IP addresses (at the time). The domain you mentioned > doesn't. > > It looks like maybe postini (or your organisation's > instance) is defunct. Actually, googling postini shows > that it is probably globally dead: > > Why Postini is Moving to the Google Graveyard > https://sendgrid.com/blog/postini-moving-google-graveyard/ > > https://en.wikipedia.org/wiki/Postini > > So it looks like it's been dead since 2015. > > Perhaps that means that some server somewhere is using > seven year old cached DNS records. But that doesn't > sound possible. > > It might not be worth worrying about, unless it is, in > which case you should probably try to contact whoever > is sending them and get them to stop using seven year > old MX records. But you really shouldn't have to ask > someone to do that. Just letting the emails bounce > should server that purpose adequately. Whoever is > sending them will know that it's not working and can > contact their email administrator for help. > > Your logs should show the IP address or hostname of the > server that connected to your server and tried to send > those emails. Perhaps you can contact its postmaster > and alert them to the problem. > > cheers, > raf Actually, the sender can't just be using old old MX records since there's no corresponding A records that would point to your server. But something wierdly broken is happening at the sender end. cheers, raf