Re: Anyone use aspmx.l.google.com?

[Scion]

Krusty put finger to keyboard:

> We use the aspmx.l.google.com gmail SMTP server for firing off basic
> emails from within Oracle to let us know when something's gone tits up.
> Unfortunately as of yesterday it's stopped working from my home server,
> & the only reason I can think of is Google are now blocking dynamic IPs
> (even though aspmx.l.google.com is supposed to work with them). The
> error is:
>
> SMTP transient error: 421 4.7.0 Email Senders Guidelines.
>
> I don't suppose anyone else uses it & has noticed problems?

I can telnet in from a machine on a fixed IP address and it accepts the
sender and recipient name OK, although it then rejects my 'test' string as
likely spam. This is a 'hard' 500-series rejection.

A 400-series error is, as the description says, transient and your system
should try again later.

From the Google help page at
https://support.google.com/a/answer/3726730?hl=en
there are a few 4.7.0 scenarios - the one you're hitting is most likely
"Our system has detected an unusual rate of unsolicited mail originating
from your IP address. To protect our users from spam, mail sent from your
IP address has been temporarily blocked. Review our Bulk Email Senders
Guidelines."

If you've not reset your router recently then perhaps your Oracle app has
flung a few too many messages - either a lot over a short period of time
(flooding) or a lesser number but over a longer period of time. I've no
idea what algorithms Google uses to detect spam. (That's not something
that any sane company would publish of course.)

[Scion]

Krusty put finger to keyboard:

> Scion wrote:
>
>> From the Google help page at
>> https://support.google.com/a/answer/3726730?hl=en there are a few 4.7.0
>> scenarios - the one you're hitting is most likely "Our system has
>> detected an unusual rate of unsolicited mail originating from your IP
>> address. To protect our users from spam, mail sent from your IP address
>> has been temporarily blocked. Review our Bulk Email Senders
>> Guidelines."
>

> That was my first thought when it started happening yesterday, so I've
> rebooted the router a few times since then, & checked it gets a
> different IP.

>
>> If you've not reset your router recently then perhaps your Oracle app
>> has flung a few too many messages
>

> The volumes are tiny. Maybe a handful over a day or two if I'm testing
> something new, then none for months.

Does this shed any light?

"If your device or application does not support SSL - connect to
aspmx.l.google.com on port 25.

You must configure an SPF record for your domain with the IP address of
the device or application to ensure that recipients do not reject mail
sent from it. You must also add this IP address to the Email Whitelist box
in your Google Admin console. For example, if your sending device sends
from 123.45.67.89, add that address to your SPF record without removing
the Google Apps mail servers from the record: v=spf1 ip4:123.45.67.89
include:_spf.google.com ~all"

(From https://support.google.com/a/answer/176600?hl=en which also confirms
that sender dynamic IPs are allowed)

[Scion]

> We don't whitelist dynamic IPs, or even the various static ones for that
> matter. It's not been a problem for the few years we've been doing this
> though, & having to whitelist dynamic IPs would seem a bit daft anyway.
>
> The static IPs are still sending fine, so either they've changed
> something that just affects dynamic ones, or blocked a range of TalkTalk
> IPs, or I've just been unlucky & ended up with a banned IP everytime I
> reboot the router.

Try your IP address at
http://www.spamhaus.org/lookup and
http://mxtoolbox.com/blacklists.aspx

If it's on one or both of those there then there's a removal process,
although it's not guaranteed to work.

NB again, I don't know what Google chooses to do, or whether it uses those
lists, but it's worth checking.

I suspect that Google is toying with blocking dynamic IP ranges like you
suggest. A friend with a gmail account has been complaining that he has
seen spam go from a few a week to several hundred a day so perhaps they're
on lockdown.

[Paul Carmichael]

Scion wrote:

> "If your device or application does not support SSL - connect to
> aspmx.l.google.com on port 25.
>
> You must configure an SPF record for your domain with the IP address of
> the device or application to ensure that recipients do not reject mail
> sent from it. You must also add this IP address to the Email Whitelist box
> in your Google Admin console. For example, if your sending device sends
> from 123.45.67.89, add that address to your SPF record without removing
> the Google Apps mail servers from the record: v=spf1 ip4:123.45.67.89
> include:_spf.google.com ~all"

What a load of fuss. I pay dyn.com about USD20 per year for smtp (from
dynamic ip) and don't have to put up with all this nonsense.


--

Paul.
CBR1100XX SuperBlackbird (Buen mueble de patio), Orbea Dakar, Legs
BOTAFOT #4 BOTAFOF #30 MRO #24 OMF #15 UKRMMA #30
http://paulc.es/

[Paul Carmichael]

Krusty wrote:

> Paul Carmichael wrote:
>
>> Scion wrote:
>>
>> > "If your device or application does not support SSL - connect to
>> > aspmx.l.google.com on port 25.
>> >
>> > You must configure an SPF record for your domain with the IP
>> > address of the device or application to ensure that recipients do
>> > not reject mail sent from it. You must also add this IP address to
>> > the Email Whitelist box in your Google Admin console. For example,
>> > if your sending device sends from 123.45.67.89, add that address to
>> > your SPF record without removing the Google Apps mail servers from
>> > the record: v=spf1 ip4:123.45.67.89 include:_spf.google.com ~all"
>>
>> What a load of fuss. I pay dyn.com about USD20 per year for smtp
>> (from dynamic ip) and don't have to put up with all this nonsense.
>

> And that will work from any device without needing a login will it..?
>

No. It needs a login. I use it for my server here (so obviously it's
transparent to clients) and for mail sent from my phone. Well, from just
about any device anywhere. Your stuff sends emails anonymously?

[che...@savvyinfocenter.com]

Hello everyone,

i am chetan i have same issues with aspmx.l.google.com

i have use SPF and TXT record of aspmx.l.google.com on bluehost server.
and i am going send mail with my personal gmail account but mail goes to receiver spam folder.

i am send mail through email library of codeigniter. following are setting which i have set in email library ------

var $useragent = "gmail";
var $mailpath = "/usr/sbin/sendmail";
var $protocol = "smtp";
var $smtp_crypto = "ssl";
var $smtp_host = "aspmx.l.google.com";
var $smtp_user = "xx...@gmail.com";
var $smtp_pass = "xxxxx";
var $smtp_port = "25";
var $smtp_timeout = 5;
var $wordwrap = TRUE;
var $wrapchars = "76";
var $mailtype = "html";
var $charset = "utf-8";
var $multipart = "mixed";
var $alt_message = '';
var $validate = FALSE;
var $priority = "3";
var $newline = "\n";
var $crlf = "\r\n";

and i got following errors -------


fsockopen(): SSL operation failed with code 1. OpenSSL Error messages:
error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

fsockopen(): Failed to enable crypto


can help u me please i am not got solution, i have too much that RnD for this issue but not got solution.

please help me if you have any solution.



Thanks
chetan

[The Older Gentleman]

<che...@savvyinfocenter.com> wrote:

> and i got following errors -------

as well as posting it to the wrong newsgroup?


--
Ninja H2 Honda CB400 Four CD200 Suzuki TS250ERRx3 BMW R60/6
Yamaha RXS100 660 Tenere Triumph Street Triple
More garages needed....
neil underscore murray at fastmail dot fm

[YTC#1]

On 19/01/2016 09:04, Krusty wrote:

> The Older Gentleman wrote:
>
>> <che...@savvyinfocenter.com> wrote:
>>
>>> and i got following errors -------
>>
>> as well as posting it to the wrong newsgroup?
>

> I can't be arsed to go into Google Groups to check, but I've got a
> feeling that was a thread I originally started in here.
>

Bloody spammer!


--
Bruce Porter
"The internet is a huge and diverse community but mainly friendly"
http://ytc1.blogspot.co.uk/
There *is* an alternative! http://www.openoffice.org/