Re: [mailop] Microsoft POP3 Troubles

2016-05-05 Thread Michael Wise
You'd think some rDNS, but... It's not Azure. I have no idea, sorry. But by virtue of the, "admin" I'd want whomever owns that domain to be advised? It might be some Dev doing something with their own mailbox, or ... I have no idea, sorry. Aloha, Michael. -- Sent from my Windows Phone

Re: [mailop] Microsoft POP3 Troubles

2016-05-05 Thread Chris via mailop
On 05/05/2016 5:16 PM, Michael Wise wrote: But by virtue of the, "admin" I'd want whomever owns that domain to be advised? It might be some Dev doing something with their own mailbox, or ... I have no idea, sorry. Hi Michael, The issue is its not just this one particular mailbox, this just

Re: [mailop] Microsoft POP3 Troubles

2016-05-05 Thread Michael Wise
I don't know who would be responsible for this, but will ask around in the morning. 3am here currently. :( Aloha, Michael. -- Sent from my Windows Phone From: Chris via mailop Sent: ‎5/‎5/‎2016 2:37 AM To: mailop@mailop.org

Re: [mailop] DNS Errors for Microsoft Hostnames

2016-05-05 Thread Tony Finch
Michael Wise wrote: > > So is the FORMERR ... just the resolver noting that EDNS is not supported? > > If so, I'm uncertain of the issue. There has been some discussion of this problem on the bind-users list, see https://lists.isc.org/pipermail/bind-users/2016-May/thread.html The problems seem t

Re: [mailop] Microsoft POP3 Troubles

2016-05-05 Thread Joseph B
> I was reviewing my flow records and I can see in the last 24h we have > started doing a much larger amount of POP3 traffic to Microsoft than > usual. As an example, some of the IP's that are making the POP3 > connections are: Yes, we started seeing these logins from around April 18th. Some u

Re: [mailop] Microsoft POP3 Troubles

2016-05-05 Thread Michael Peddemors
Generally an increase in POP is only related to two things: * Email Client has short time out's and long query times. Seems some* email clients will attempt to download messages, but if the re-query time comes around, it will terminate the first connection and then restart from the beginning.

Re: [mailop] DNS Errors for Microsoft Hostnames

2016-05-05 Thread Michael Wise
" All this is stating is that DNS++ does not support RFC 2671 EDNS protocol extensions. " DNS++ is responding per the RFC by sending the FORMERR back to the requestor. We don't support *ANY* EDNS features at present, at all. That would appear to include the ... OPT records? As to the, "Why

Re: [mailop] Microsoft POP3 Troubles

2016-05-05 Thread Michael Wise
Well, I got an answer, but am no further ahead as such. I'd suggest treating them as a malfunctioning POP3 client and suggest ... that they upgrade to IMAP4 instead? :) It doesn't seem to be coming from an area that would suggest it's a rogue tenant, but that cannot be completely ruled out. Ple

[mailop] amazon vs starttls

2016-05-05 Thread Carl Byington
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 relay=amazon-smtp.amazon.com. [207.171.189.228], dsn=4.0.0, stat=Deferred: 421 #4.4.5 Too many TLS sessions at this time So amazon accepts the inbound port 25 connection, advertises starttls in response to ehlo, and then complains when we try to use

Re: [mailop] DNS Errors for Microsoft Hostnames

2016-05-05 Thread Franck Martin via mailop
I use this tool because it checks everything DNS (including DNSSEC) and makes a pretty graph. The two errors are not related to DNSSEC, so seems you have something to fix ;) On Wed, May 4, 2016 at 5:03 PM, Michael Wise wrote: > > > Microsoft officially doesn’t do DNSSEC. > (or at least not now a

Re: [mailop] DNS Errors for Microsoft Hostnames

2016-05-05 Thread Franck Martin via mailop
This page, provides a way to test EDNS: https://www.dns-oarc.net/oarc/services/replysizetest Bind acts this way. Makes an EDNS query of full size, if no answer, makes a DNS query and request the response to be limited to a 512bytes answer, there it usually will get an answer, that the result is t

Re: [mailop] DNS Errors for Microsoft Hostnames

2016-05-05 Thread Michael Wise
And we don't do EDNS, so it seems, from the guys I've spoken to ... That we don't, and some diagnostic tools are making assumptions that they perhaps shouldn't. I can't say. I don't know. The people whose eyes I have put this in front of assert we're acting according to the RFC. They're getti

[mailop] Anyone from AOL on this list?

2016-05-05 Thread Josh Nason
Hi all -- we have some AOL caching questions and are curious if someone from there is on this list. If so, I'd love to hear from you. Thanks! -- [image: Dyn logo, Dyn.com] [image: Dyn facebook account]

[mailop] Cisco PIX Mailguard Oddity

2016-05-05 Thread Todd Herr
Forgive me if this is off topic, but I don't know where else to turn. I've got a customer who's having trouble sending mail to two domains with nothing obvious (to me) in common save for one thing; both domain's primary MXen look to be sitting behind Cisco PIX devices with Mailguard turned on. I k

Re: [mailop] Cisco PIX Mailguard Oddity

2016-05-05 Thread Jim Cheetham
Common "feature". Cisco devices by default allow only SMTP, not ESMTP. These defaults keep coming back to bite admins, year after year after year. http://www.cisco.com/c/en/us/support/docs/security/asa-5500-x-series-next-generation-firewalls/113423-asa-esmtp-smtp-inspection.html provides one examp

Re: [mailop] Cisco PIX Mailguard Oddity

2016-05-05 Thread Steve Atkins
> On May 5, 2016, at 5:08 PM, Todd Herr wrote: > > Forgive me if this is off topic, but I don't know where else to turn. > > I've got a customer who's having trouble sending mail to two domains with > nothing obvious (to me) in common save for one thing; both domain's primary > MXen look to b

Re: [mailop] Cisco PIX Mailguard Oddity

2016-05-05 Thread Dave Warren
On 2016-05-05 17:08, Todd Herr wrote: Forgive me if this is off topic, but I don't know where else to turn. I've got a customer who's having trouble sending mail to two domains with nothing obvious (to me) in common save for one thing; both domain's primary MXen look to be sitting behind Cisco

Re: [mailop] Cisco PIX Mailguard Oddity

2016-05-05 Thread Al Iverson
The Cisco PIX rears its ugly head yet again. http://www.spamresource.com/2009/12/receiving-duplicate-list-messages.html Cheers, Al -- Al Iverson www.aliverson.com (312)725-0130 On Thu, May 5, 2016 at 8:00 PM, Steve Atkins wrote: > >> On May 5, 2016, at 5:08 PM, Todd Herr wrote: >> >> Forgive