Hi List
Anyone from NZZ on this list?
It looks like we have a couple of customers complaining not receiving emails from NZZ since almost 14 days and sender not getting any bounces.
What I suspect when looking at the logs is an outage at SalesForce aka mta.email.nzz.ch[13.111.14.63] from which I don't see any connections anymore in the last couple of days.
Mit freundlichen Grüssen
-Benoît Panizzon-
Hi
According to NZZ we are rejecting all emails with sender domain @bounce.email.nzz.ch with "Receiving email server is temporarily overwhelmed with delivery attempts, from you and other senders". Unfortunately their feedback is very vague, no logs or exact times of issue from their side.
I can't find any such emails in our log, but I see some are SRS forwarded from bluewin, VTX, Hostpoint etc. and do reach us. Unfortunately I have no access (without customer permission) to the content and therefore can not glimpse at the email headers to find the true origin.
Could somebody do me a favour: From which IP Address do you see emails with envelope domain @bounce.email.nzz.ch being delivered?
It used to be salesforce: 13.111.14.63 until 17. August, but I fear this changed, which causes the issue, as I have seen at least one email delivered with this domain, failing SPF from an IP belonging to Liberty Global Austria if this was not some broken forwarding attempt.
Hi Benoît
We still get lots of mail via 13.111.14.63 from this domain. Did not see any other IP in the last days.
Regaards
Matthias
On 01/09/2023 10:30, Benoît Panizzon via swinog wrote:
Hi
According to NZZ we are rejecting all emails with sender domain @bounce.email.nzz.ch with "Receiving email server is temporarily overwhelmed with delivery attempts, from you and other senders". Unfortunately their feedback is very vague, no logs or exact times of issue from their side.
I can't find any such emails in our log, but I see some are SRS forwarded from bluewin, VTX, Hostpoint etc. and do reach us. Unfortunately I have no access (without customer permission) to the content and therefore can not glimpse at the email headers to find the true origin.
Could somebody do me a favour: From which IP Address do you see emails with envelope domain @bounce.email.nzz.ch being delivered?
It used to be salesforce: 13.111.14.63 until 17. August, but I fear this changed, which causes the issue, as I have seen at least one email delivered with this domain, failing SPF from an IP belonging to Liberty Global Austria if this was not some broken forwarding attempt.
Hi Benoît,
All I see from @bounce.email.nzz.ch comes from mta.email.nzz.ch [13.111.14.63].
Interestingly, I see a lot of temp rejects in our logs on 17. August (between 16:40 and 19:26) from that domain and IP because we were not able to resolve the domain.
Mails are still coming up to today at the same rate as earlier.
Hope this helps.
Best regards, Laurent
On 01.09.23 10:30, Benoît Panizzon via swinog wrote:
Hi
According to NZZ we are rejecting all emails with sender domain @bounce.email.nzz.ch with "Receiving email server is temporarily overwhelmed with delivery attempts, from you and other senders". Unfortunately their feedback is very vague, no logs or exact times of issue from their side.
I can't find any such emails in our log, but I see some are SRS forwarded from bluewin, VTX, Hostpoint etc. and do reach us. Unfortunately I have no access (without customer permission) to the content and therefore can not glimpse at the email headers to find the true origin.
Could somebody do me a favour: From which IP Address do you see emails with envelope domain @bounce.email.nzz.ch being delivered?
It used to be salesforce: 13.111.14.63 until 17. August, but I fear this changed, which causes the issue, as I have seen at least one email delivered with this domain, failing SPF from an IP belonging to Liberty Global Austria if this was not some broken forwarding attempt.
-- Mit freundlichen Grüssen
-Benoît Panizzon- @ HomeOffice und normal erreichbar
I m p r o W a r e A G - Leiter Commerce Kunden ______________________________________________________
Zurlindenstrasse 29 Tel +41 61 826 93 00 CH-4133 Pratteln Fax +41 61 826 93 01 Schweiz Web http://www.imp.ch ______________________________________________________ _______________________________________________ swinog mailing list -- swinog@lists.swinog.ch To unsubscribe send an email to swinog-leave@lists.swinog.ch
Hi
Thanks for the help. Issue found. I hate Fail2ban!
Hi List
*sigh*... May I ask for help again?
13.111.14.63 not in iptables, so it looks like Fail2Ban is not the culprit this time.
Since 24.9.2023 23:00 no connections in our log nor hostname mta.email.nzz.ch connecting.
Two Customer complaining that NZZ has sent a newsletter this morning which they did not get.
Mit freundlichen Grüssen
-Benoît Panizzon-
-
Benoit Panizzon -
Benoît Panizzon
-
Laurent S. -
Matthias Cramer