[swinog] Re: Email Outage @ NZZ?
Hi List *sigh*... May I ask for help again? 13.111.14.63 not in iptables, so it looks like Fail2Ban is not the culprit this time. Since 24.9.2023 23:00 no connections in our log nor hostname mta.email.nzz.ch connecting. Two Customer complaining that NZZ has sent a newsletter this morning which they did not get. Mit freundlichen Grüssen -Benoît Panizzon- -- I m p r o W a r e A G-Leiter Commerce Kunden __ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 PrattelnFax +41 61 826 93 01 Schweiz Web http://www.imp.ch __ ___ swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-le...@lists.swinog.ch
[swinog] Re: Email Outage @ NZZ?
Hi Thanks for the help. Issue found. I hate Fail2ban! -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G-Leiter Commerce Kunden __ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 PrattelnFax +41 61 826 93 01 Schweiz Web http://www.imp.ch __ ___ swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-le...@lists.swinog.ch
[swinog] Re: Email Outage @ NZZ?
Hi Benoît, All I see from @bounce.email.nzz.ch comes from mta.email.nzz.ch [13.111.14.63]. Interestingly, I see a lot of temp rejects in our logs on 17. August (between 16:40 and 19:26) from that domain and IP because we were not able to resolve the domain. Mails are still coming up to today at the same rate as earlier. Hope this helps. Best regards, Laurent On 01.09.23 10:30, Benoît Panizzon via swinog wrote: > Hi > > According to NZZ we are rejecting all emails with sender domain > @bounce.email.nzz.ch with "Receiving email server is temporarily > overwhelmed with delivery attempts, from you and other > senders". Unfortunately their feedback is very vague, no logs or > exact times of issue from their side. > > I can't find any such emails in our log, but I see some are SRS > forwarded from bluewin, VTX, Hostpoint etc. and do reach us. > Unfortunately I have no access (without customer permission) to the > content and therefore can not glimpse at the email headers to find the > true origin. > > Could somebody do me a favour: From which IP Address do you see emails > with envelope domain @bounce.email.nzz.ch being delivered? > > It used to be salesforce: 13.111.14.63 until 17. August, but I fear > this changed, which causes the issue, as I have seen at least one email > delivered with this domain, failing SPF from an IP belonging to Liberty > Global Austria if this was not some broken forwarding attempt. > > -- > Mit freundlichen Grüssen > > -Benoît Panizzon- @ HomeOffice und normal erreichbar > -- > I m p r o W a r e A G-Leiter Commerce Kunden > __ > > Zurlindenstrasse 29 Tel +41 61 826 93 00 > CH-4133 PrattelnFax +41 61 826 93 01 > Schweiz Web http://www.imp.ch > __ > ___ > swinog mailing list -- swinog@lists.swinog.ch > To unsubscribe send an email to swinog-le...@lists.swinog.ch ___ swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-le...@lists.swinog.ch
[swinog] Re: Email Outage @ NZZ?
Hi Benoît We still get lots of mail via 13.111.14.63 from this domain. Did not see any other IP in the last days. Regaards Matthias On 01/09/2023 10:30, Benoît Panizzon via swinog wrote: Hi According to NZZ we are rejecting all emails with sender domain @bounce.email.nzz.ch with "Receiving email server is temporarily overwhelmed with delivery attempts, from you and other senders". Unfortunately their feedback is very vague, no logs or exact times of issue from their side. I can't find any such emails in our log, but I see some are SRS forwarded from bluewin, VTX, Hostpoint etc. and do reach us. Unfortunately I have no access (without customer permission) to the content and therefore can not glimpse at the email headers to find the true origin. Could somebody do me a favour: From which IP Address do you see emails with envelope domain @bounce.email.nzz.ch being delivered? It used to be salesforce: 13.111.14.63 until 17. August, but I fear this changed, which causes the issue, as I have seen at least one email delivered with this domain, failing SPF from an IP belonging to Liberty Global Austria if this was not some broken forwarding attempt. -- Matthias Cramer / mc322-ripe Senior Network & Security Engineer iway AGPhone +41 43 500 Badenerstrasse 569 Fax +41 44 271 3535 CH-8048 Zurichhttp://www.iway.ch/ GnuPG 1024D/2D208250 = DBC6 65B6 7083 1029 781E 3959 B62F DF1C 2D20 8250 ___ swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-le...@lists.swinog.ch
[swinog] Re: Email Outage @ NZZ?
Hi According to NZZ we are rejecting all emails with sender domain @bounce.email.nzz.ch with "Receiving email server is temporarily overwhelmed with delivery attempts, from you and other senders". Unfortunately their feedback is very vague, no logs or exact times of issue from their side. I can't find any such emails in our log, but I see some are SRS forwarded from bluewin, VTX, Hostpoint etc. and do reach us. Unfortunately I have no access (without customer permission) to the content and therefore can not glimpse at the email headers to find the true origin. Could somebody do me a favour: From which IP Address do you see emails with envelope domain @bounce.email.nzz.ch being delivered? It used to be salesforce: 13.111.14.63 until 17. August, but I fear this changed, which causes the issue, as I have seen at least one email delivered with this domain, failing SPF from an IP belonging to Liberty Global Austria if this was not some broken forwarding attempt. -- Mit freundlichen Grüssen -Benoît Panizzon- @ HomeOffice und normal erreichbar -- I m p r o W a r e A G-Leiter Commerce Kunden __ Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 PrattelnFax +41 61 826 93 01 Schweiz Web http://www.imp.ch __ ___ swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-le...@lists.swinog.ch
