On 11/24/2014 08:42 AM, Wietse Venema wrote:
Robert Moskowitz:
Google bounced my mail because of a temp error. I changed nothing
in my DNS or DKIM. It's their bug, not mine.
And with mine, I needed an spf record to make them happy:
htt-consult.com. IN TXT "v=spf1 mx ~all"
Now when my wife sends emails to her employer, yby.org, they don't get
rejected. The bug is with their error message. They confound at least
two problems into one error.
The problem discussed here exists even with good DNS configuration.
Google SOMETIMES rejects a message and minutes later accepts the
SAME message from the SAME source IP address to the SAME server IP
address, with the SAME sender DNS configuration. See logging below.
I understand what you are talking about. So far, I have not seen it.
Could be my low traffic.
The spf record at least got them accepting emails again. The
enforcement, at least for me, was recent. I have been messaging google
for years without spf and with ipv6. The bounce only started two weeks ago.
So I don't deny/ignore what you have encountered. So far I have not and
spf took care of the bounces I was getting. Indicating at least in my
case, or some of my cases, the part of the error message applying to me
was email policy, not ipv6.
Note that I have a /48 allocation from my ISP who has their /40 from
Verizon. I was delegated my RDNS that my ISP is secondary for.
Their error message suggests that a) they had a problem looking up
PTR information, and that b) someone made the mistake of translating
a TEMPORARY DNS error into a HARD mail delivery problem.
Wietse
Nov 11 11:55:15 spike postfix/smtp[22958]: 3jcZv4004YzJrPw:
to=<censored>, relay=aspmx.l.google.com[2607:f8b0:400d:c04::1a]:25,
delay=3.6, delays=0.12/0.01/2.6/0.93, dsn=5.7.1, status=bounced
(host aspmx.l.google.com[2607:f8b0:400d:c04::1a] said: 550-5.7.1
[2604:8d00:189::2] Our system has detected that this message does
not 550-5.7.1 meet IPv6 sending guidelines regarding PTR records
and authentication 550-5.7.1 . Please review 550-5.7.1
https://support.google.com/mail/?p=ipv6_authentication_error for
more 550 5.7.1 information. l17si30149401qaj.81 - gsmtp (in reply
to end of DATA command))
Nov 11 11:58:29 spike postfix/smtp[22980]: 3jcZyr2BpqzJrPw:
to=<censored>, relay=aspmx.l.google.com[2607:f8b0:400d:c04::1a]:25,
delay=1.4, delays=0.11/0.01/0.19/1.1, dsn=2.0.0, status=sent (250
2.0.0 OK 1415725109 k30si37581932qge.88 - gsmtp)
