Video Screencast Help
Symantec to Separate Into Two Focused, Industry-Leading Technology Companies. Learn more.

Symantec Messaging Gateway are not receiving some external emails.

Created: 10 Apr 2013 | 3 comments

Mail clients in am environment defended by a Symantec Messaging Gateway are not receiving some external emails.

Mailer-Daemon@mail.mydomen.ru

From - Wed Apr 10 13:39:28 2013
X-Account-Key: account3
X-UIDL: 218
X-Mozilla-Status: 0001
X-Mozilla-Status2: 00000000
X-Mozilla-Keys:                                                                                 
Received: from mail.mydomen.ru (172.16.xxx.200) by MAIL1.mydomen.mydomen.ru
 (172.16.xxx.201) with Microsoft SMTP Server id 14.3.123.3; Wed, 10 Apr 2013
 13:39:24 +0400
From: Mail Delivery System <Mailer-Daemon@mail.mydomen.ru>
Message-ID: <E1.00.26303.24335615@mail.mydomen.ru>
To: <adm@mydomen.ru>
Subject: Undelivered Mail Returned to Sender
Date: Wed, 10 Apr 2013 13:39:14 +0400
Content-Type: multipart/report; report-type=delivery-status;
	boundary="qzuYxZ/o9Yko2XW4GKYzNfClxu7DIvieOjuOPA=="
Return-Path: <>
X-MS-Exchange-Organization-AuthSource: MAIL1.mydomen.mydomen.ru
X-MS-Exchange-Organization-AuthAs: Anonymous
MIME-Version: 1.0
I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to <postmaster>

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

<email@dest.ru>: 550 5.7.1 Sender ID (PRA) Not Permitted
X-Symantec-Messaging-Gateway-Queue-ID: B1/00-26303-C3335615
X-Symantec-Messaging-Gateway-Sender: rfc822; adm@mydomen.ru
Reporting-MTA: dns; mail.mydomen.ru
Arrival-Date: Wed, 10 Apr 2013 13:39:14 +0400

Final-Recipient: rfc822; email@dest.ru
Status: 5.7.1
Action: failed
Last-Attempt-Date: Wed, 10 Apr 2013 13:39:14 +0400
Diagnostic-Code: smtp; 550 5.7.1 Sender ID (PRA) Not Permitted

--qzuYxZ/o9Yko2XW4GKYzNfClxu7DIvieOjuOPA==
Content-Description: Undelivered Message
Content-Type: message/rfc822

X-AuditID: c0a809fa-b7f986d0000066bf-0a-5165333ce521
Received: from MAIL1.mydomen.mydomen.ru ( [172.16.xxx.201])	by mail.mydomen.ru (Symantec
 Messaging Gateway) with SMTP id A1.00.26303.C3335615; Wed, 10 Apr 2013
 13:39:08 +0400 (MSK)
Received: from [127.0.0.1] (192.168.xxx.114) by MAIL1.mydomen.mydomen.ru
 (192.168.xxx.240) with Microsoft SMTP Server id 14.3.123.3; Wed, 10 Apr 2013
 13:39:18 +0400
Message-ID: <5165332D.5050906@mydomen.ru>
Date: Wed, 10 Apr 2013 13:38:53 +0400
From: =?UTF-8?B?0KDQvtC80LDQvQ==?= <adm@mydomen.ru>
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:17.0) Gecko/20130328 Thunderbird/17.0.5
To: <email@dest.ru>
Subject: =?UTF-8?B?0L/RgNC+0LLQtdGA0LrQsCDQvtGC0L/RgNCw0LLQutC4IDEy?=
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: 8bit
Return-Path: adm@mydomen.ru
X-Originating-IP: [192.168.xxx.114]

Exchange 2010 SP2 (MAIL1.mydomen.mydomen.ru 172.16.xxx.201) + Symantec Messaging Gateway Version 10.0.1 (mail.mydomen.ru 172.16.xxx.200 )

TECH163559 Assigning the Symantec Messaging Gateway IP to relay exceptions in mail server will resolve this issue.- yes

DNS Records:

mydomen.ru. MX. 10. mail.mydomen.ru. IN. 86400

v=spf1 a mx a:mail.mydomen.ru ip4:89.249.YY.YY include:spf.unisender.com -all

mail.mydomen.ru. A. 212.33.XX.XX.

Message Audit Logs Symantec Messaging Gateway :

Wednesday, Apr 10, 2013 01:47:23 PM MSK adm@mydomen.ru email@dest.ru test None Deliver message normally

 

Discussion Filed Under:

Comments 3 CommentsJump to latest comment

TSE-JDavis's picture

So as the error message states, the IP they see you coming from doesn't match your SPF record. I don't find a public SPF record for mydomen.ru, so I'm not sure where you are getting that readout you pasted.

http://mxtoolbox.com/SuperTool.aspx?action=spf:myd...

 

mexanizm's picture

Sorry, mydomen.ru - not real. I hid my real domain.

SPF record for domain:

mydomen.ru    text = "spf2.0/mfrom,pra include:senderid.unisender.com -all"
mydomen.ru text = "v=spf1 a mx a:mail.mydomen.ru ip4:89.249.xx.xx include:spf.unisender.com -all"

I think the problem in this entry:

mydomen.ru    text = "spf2.0/mfrom,pra include:senderid.unisender.com -all"
mexanizm's picture

The problem in this entry:

mydomen.ru    text = "spf2.0/mfrom,pra include:senderid.unisender.com -all"

After update on:

spf2.0/mfrom,pra a mx a:mail.mydomen.ru ip4:89.249.xx.xx include:senderid.unisender.com -all

Problem solved, the error disappeared. Thanks for the support.