Email Problems, some receive emails, some dont.

[keithalmli]

I'm having major issues with my server, it seems that certain customers will receive our e-mails with out problem. Both customers seem to be on the outlook system. I have purchased many tools to see what may be wrong with DNS.

The e-mails are external e-mails.

This customer does not receive our email:

domain-tld.mail.protection.outlook.com[xxxxxxxx215] [email protected]

This customer does receive our email:

domain-tld.mail.protection.outlook.com[xxxxxxxxxx.138] [email protected]


I noticed several emails are "Relayed messages" in WHM I've done a little bit of reading on maybe a cause for this, but i guess not sure why these would be relayed if they are direct messages being sent from a viable source.

The logs seem to show these emails as sent, and we get no errors per say both via email and or logs.

 

[cPanelMichael]

Hello,

Could you let us know the output in /var/log/exim_mainlog for one of the affected messages? EX:

exigrep MSG /var/log/exim_mainlog

Ensure to replace any domain names and IP addresses with examples when pasting the output.

Thank you.

 

[keithalmli]

2017-02-14 14:17:21 1cdib9-0005Gd-Ie => [email protected]domain.tld R=dkim_lookuphost T=dkim_remote_smtp H=domain.tld.protection.outlook.com [xxxxxxxx138] X=TLSv1.2:ECDHE-RSA-AES256-SHA384:256 CV=yes K C="250 2.6.0 <[email protected]> [InternalId=1447403983516, Hostname=MWHPR06MB3167.namprd06.prod.outlook.com] 71963 bytes in 7.208, 9.749 KB/sec Queued mail for delivery"
2017-02-14 14:17:21 1cdib9-0005Gd-Ie Completed

 

[keithalmli]

2017-02-14 14:17:12 1cdib9-0005Gd-Ie <= [email protected]domain.tld H=(EngineeringHP) [xxxxxxxxx95]:56239 P=esmtpsa X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no A=dovecot_login:[email protected]domain.tld S=62554 [email protected]domain.tld T="Test" for [email protected] [email protected]domain.tld
2017-02-14 14:17:12 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1cdib9-0005Gd-Ie
2017-02-14 14:17:12 1cdib9-0005Gd-Ie SMTP connection outbound 1487099832 1cdib9-0005Gd-Ie domain.tld [email protected]domain.tld
2017-02-14 14:17:12 1cdib9-0005Gd-Ie SMTP connection outbound 1487099832 1cdib9-0005Gd-Ie domain.tld [email protected]
2017-02-14 14:17:13 1cdib9-0005Gd-Ie => [email protected] R=dkim_lookuphost T=dkim_remote_smtp H=gmail-smtp-in.l.google.com [74.125.70.26] X=TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128 CV=yes K C="250 2.0.0 OK k21si1777675itb.50 - gsmtp"
2017-02-14 14:17:15 SMTP connection from (EngineeringHP) [xxxxx.95]:56239 closed by QUIT
2017-02-14 14:17:21 1cdib9-0005Gd-Ie =>[email protected]domain.tld R=dkim_lookuphost T=dkim_remote_smtp H=xxxxxx.protection.outlook.com [xxxxxxxxx138] X=TLSv1.2:ECDHE-RSA-AES256-SHA384:256 CV=yes K C="250 2.6.0 <[email protected]domain.tld> [InternalId=1447403983516, Hostname=MWHPR06MB3167.namprd06.prod.outlook.com] 71963 bytes in 7.208, 9.749 KB/sec Queued mail for delivery"
2017-02-14 14:17:21 1cdib9-0005Gd-Ie Completed

 

[cPanelMichael]

Hello,

Could you open a support ticket using the link in my signature so we can take a closer look at your system to see what's happening? You can post the ticket number here so we can update this thread with the outcome.

Thank you.

 

[keithalmli]

Thank you, and this has been done. Support Request ID is: 8254753

I was able to get some marc ids added to the DNS but that didn't change a thing. I also verified that all the Ip's are clean as far as MX blacklist.

 

[cPanelMichael]

Hello,

To update, it looks like the logs show the message successfully left the cPanel server. Thus, it's likely the remote mail server is filtering the message. Contacting the administrator of the remote mail server to determine the cause of issue is the best approach.

Thank you.