Gmail rejecting emails forwarded from Gmail
I'm hoping someone could point me in the right direction to resolve this problem.
I run a personal postfix server to forward my own domain emails to gmail.
For a while things are good, I've done my email trifecta (SPF, DKIM, DMARC) and have mostly configured my email server to filter as much SPAM as possible, and keeping my nose (domain) as clean as possible.
For the last few months, I've started getting delivery rejected by Gmail receiving emails from gmail forwarded by my postfix server. Specifically an 550-5.7.1 error.
from the log below:
jennifermooreafb4@gmail.com -> owner@thewhat.com -> xxxx@gmail.com
and xxxx@gmail.com returns the 550-5.7.1 error
I'm at a loss at how to fix this. Have anyone faced this before?
Thanks in advance
TT
Log below:
Jun 2 23:03:35 erch postfix/smtpd[925397]: connect from mail-oa1-x33.google.com[2001:4860:4864:20::33]
Jun 2 23:03:37 erch postfix/smtpd[925397]: Untrusted TLS connection established from mail-oa1-x33.google.com[2001:4860:4864:20::33]: TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256 client-signature RSA-PSS (2048 bits) client-digest SHA256
Jun 2 23:03:38 erch policyd-spf[925404]: prepend Received-SPF: Pass (mailfrom) identity=mailfrom; client-ip=2001:4860:4864:20::33; helo=mail-oa1-x33.google.com; envelope-from=jennifermooreafb4@gmail.com; receiver=<unknown>
Jun 2 23:03:38 erch postfix/smtpd[925397]: 6B1481E787: client=mail-oa1-x33.google.com[2001:4860:4864:20::33]
Jun 2 23:03:38 erch postsrsd[925407]: srs_forward: jennifermooreafb4@gmail.com rewritten as <srs0=x3rx=wj=gmail.com=jennifermooreafb4@thewhat.com>
Jun 2 23:03:38 erch postsrsd[925407]: srs_forward: <srs0=x3rx=wj=gmail.com=jennifermooreafb4@thewhat.com> not rewritten: Valid SRS address for jennifermooreafb4@gmail.com
Jun 2 23:03:38 erch postfix/cleanup[925406]: 6B1481E787: message-id=<cad+=kweypatakp25gof4__ttijc=s5mijmnfvcwgggk24d1w6a@mail.gmail.com>
Jun 2 23:03:40 erch opendkim[786430]: 6B1481E787: s=20210112 d=gmail.com a=rsa-sha256 SSL
Jun 2 23:03:40 erch postfix/qmgr[925392]: 6B1481E787: from=<srs0=x3rx=wj=gmail.com=jennifermooreafb4@thewhat.com>, size=1215489, nrcpt=1 (queue active)
Jun 2 23:03:47 erch postfix/smtp[925409]: 6B1481E787: to=xxxx@gmail.com, orig_to=owner@thewhat.com, relay=gmail-smtp-in.l.google.com[2404:6800:4003:c11::1b]:25, delay=9.4, delays=2.8/0.02/0.73/5.8, dsn=5.7.1, status=bounced (host gmail-smtp-in.l.google.com[2404:6800:4003:c11::1b] said: 550-5.7.1 [2400:8901::fXXXc:9XXf:fXX2:fXX2 19] Our system has detected that 550-5.7.1 this message is likely suspicious due to the very low reputation of 550-5.7.1 the sending domain. To best protect our users from spam, the message 550-5.7.1 has been blocked. Please visit 550 5.7.1 https://support.google.com/mail/answer/188131 for more information. gb14-20020a17090b060e00b001df6b7a8a91si5573425pjb.109 - gsmtp (in reply to end of DATA command))</srs0=x3rx=wj=gmail.com=jennifermooreafb4@thewhat.com></cad+=kweypatakp25gof4__ttijc=s5mijmnfvcwgggk24d1w6a@mail.gmail.com></srs0=x3rx=wj=gmail.com=jennifermooreafb4@thewhat.com></srs0=x3rx=wj=gmail.com=jennifermooreafb4@thewhat.com></unknown>
5 Replies
Our system has detected that 550-5.7.1 this message is likely suspicious due to the very low reputation of 550-5.7.1 the sending domain. To best protect our users from spam, the message 550-5.7.1 has been blocked. Please visit 550 5.7.1 https://support.google.com/mail/answer/188131 for more information.
Google has decided for whatever reason that your mail server has a “low reputation”. The criteria Google uses is prob a state secret to them. There’s not much you can do about it except visit the link & see if it tells you how to remediate the condition.
— sw
Running your own mail servers is just asking for the kind of trouble you have run into.
Do what so many of us do… get yourself a cheap hosting account with an ISP (i.e. Dreamhost, etc.) and do your email through there.
Via the DNS records at our domain registry, we send web (A/CNAME) traffic to Linode and mail traffic (MX) to our ISP mail host.
(We use PairNetworks pair.com. There are some cheaper (but not better) hosts our there if you shop around.)
Do what so many of us do… get yourself a cheap hosting account with an ISP (i.e. Dreamhost, etc.) and do your email through there.
Woe be unto you if your requirements and/or use model don't fit into the box the marketing and support 'droids at your chosen ISP have determined is what a "typical" customer should want to do. Need a particular milter? Nope ("What's a filter?"). Want to use sieve? Nope ("What's sieve?"). Need an upgraded version of the kernel (newer than 2.6x) or (worse yet) mail server access? Nope ("Invalidates our cPanel support agreement."). Billing mistakes? "Sorry, we have your money and we triple dog dare you to try to get it back!"
Woe be unto you if you have to deal with a support person who can't speak his/her native language well…let alone your native language.
Woe be unto you if your chosen ISP is a US-incorporated subsidiary of a Chinese or Russian entity (corporate or government…since in China & Russia there is very little distinction between the two).
Woe be unto you if you send "too many" emails in a month ("It was in the 4pt type at the bottom of the service agreement.").
Woe be unto you if your ISP is perpetually on a DNSBL or SBL ("What's a DNSBL/SBL?").
…ad nauseam.
Sorry, I'd rather deal with Google…
-- sw
Sorry, I'd rather deal with Google…
Yes, because Google has the highest of moral standards, they highly respect their customer's privacy, they have no business agreements with Russia or China, and they swear to do no evil because they always work in the best interest of their clients.
Gmail?
You know the old saying… if the product if free… YOU are the product.
Yes, because Google has the highest of moral standards, they highly respect their customer's privacy, they have no business agreements with Russia or China, and they swear to do no evil because they always work in the best interest of their clients.
Google is a company with a profit motive that is their absolute prime directive. Everything else is secondary…including their customers.
The Russians and Chinese are state actors that use these US-incorporated entities to further their political and foreign policy interests. I don't want to get into a debate with you about which is more "evil"…that's a discussion you should have with a foreign policy professional and/or a priest.
However, making money is a well-understood goal for some action. Government interests are not. If you view Google through that lens it becomes no different than the corner store in terms of operational goals…just bigger.
I notice that you glossed over all the rest of my post. Each of these items are from my past experiences with 3rd party hosting services. I offered them as counterpoint to your "rainbows and unicorns" assertion that using such a service for email-handling will solve the OPs problem. It won't…it may mitigate it some but the risks (especially with limited support and capabilities) may be high compared to the reward…and Google will still be there and their (capricious) policies with respect to how Gmail is used will still be in place.
-- sw