Hi Vukko -- I see what you mean, it's only showing a successful MX lookup. In trying to sniff a successful standard Gmail SMTP connection, all traffic is encrypted. STARTTLS is the first command of any transmission. Is there a trick to be able to use telnet or SSH to diagnose a Gmail connection somehow?
Our SPF record does have the IP address of the sending website (ip4:#.#.#.#) plus the CNAME (a:blah.com) of the website as well. (For the domain the A records point to our website which is what's generating the emails, and the MX records are pointing to Gmail, which won't forward emails to members of the group. Dang confusing!) Any pointers on *HOW TO DIAGNOSE WHY GMAIL IS BOUNCING INTERNAL EMAILS TO INTERNAL GMAIL GROUPS* would be very thoroughly appreciated. :) On Tuesday, November 25, 2014 8:32:27 PM UTC-6, vukko wrote: > > Hi William > > On Tue, Nov 25, 2014 at 8:22 PM, William T <[email protected] > <javascript:>> wrote: > >> We have a website (www.blah.com for example) that generates emails to a >> gmail group ([email protected] <javascript:> for example). The group has >> fewer than ten people in it, all being members of the organization. The >> emails aren't getting thru the group to the members of the group. >> >> It was working a few weeks ago but I reckon Google has changed their >> heuristics to keep the ever-so-clever-and-adaptive spammers out. >> >> Our exim4 logs show that the mail makes it TO gmail but no comments on >> why it disappears: >> 2014-11-25 11:33:26 1XtJzR-0005VW-7p => [email protected] <javascript:> >> R=dnslookup T=remote_smtp H=aspmx.l.google.com [64.233.185.26] X= >> TLS1.0:RSA_ARCFOUR_SHA1:16 DN="C=US,ST=California,L=Mountain >> View,O=Google Inc,CN=mx.google.com" >> > > This log extract does _not_ show delivery. All it is showing is that it > managed to do a MX lookup. > > > >> >> We've tried adjusting the SPF record but that's confusing as hell :/ and >> rather than taking stabs at updating the SPF blindly... there's gotta be a >> guide to debugging this, somewhere. We've found lots of similar questions >> with various random tips to try, but no "here's how to figure out what >> Gmail's particular objection is". >> > > Your SPF record needs to contain whatever FQDN or IP address that you > are sending from, there's nothing really complicated about it. > > > >> >> === >> >> So: what is the step-by-step procedure to find out WHY an >> organization's gmail group refuses email from the organization's web >> server? The web app can't broadcast messages to the gmail group, we want to >> know WHY. >> > > Try it by hand using telnet from your server, see if it accepts email. > > -- > Marko > > -- You received this message because you are subscribed to the Google Groups "Gmail-Users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. Visit this group at http://groups.google.com/group/gmail-users. For more options, visit https://groups.google.com/d/optout.
