Mailsending ipv6 to Google-Mailservice fails

Hi!

If I our mailserver sends mails to gmail, the delivering fails. This is the bounce of gMail

Code:

                   The mail system

<[email protected]>: host
    gmail-smtp-in.l.google.com[2a00:1450:4025:402::1a] said: 550-5.7.1
    [2a01:4f8:212:f65::2] Our system has detected that this message does
    550-5.7.1 not meet IPv6 sending guidelines regarding PTR records and
    550-5.7.1 authentication. Please review 550-5.7.1
    https://support.google.com/mail/?p=IPv6AuthError for more information 550
    5.7.1 . w13-20020a05640234cd00b0043bd6cf51d1si5536605edc.530 - gsmtp (in
    reply to end of DATA command)

Reporting-MTA: dns; tesoro2.products4more.at
X-Postfix-Queue-ID: D8ECA4A21450
X-Postfix-Sender: rfc822; [email protected]
Arrival-Date: Sun, 14 Aug 2022 02:16:05 +0200 (CEST)

Final-Recipient: rfc822; [email protected]
Original-Recipient: rfc822;[email protected]
Action: failed
Status: 5.7.1
Remote-MTA: dns; gmail-smtp-in.l.google.com
Diagnostic-Code: smtp; 550-5.7.1 [2a01:4f8:212:f65::2] Our system has detected
   that this message does 550-5.7.1 not meet IPv6 sending guidelines regarding
   PTR records and 550-5.7.1 authentication. Please review 550-5.7.1
   https://support.google.com/mail/?p=IPv6AuthError for more information 550
   5.7.1 . w13-20020a05640234cd00b0043bd6cf51d1si5536605edc.530 - gsmtp

If I check the PTR-Record of our system (https://network-tools.webwiz.net/reverse-dns.htm)
all seems fine. There is a PTR-Record to 2a01:4f8:212:f65:: which we set on the admin-panel of our server-provider. Take a look on this screenshot.
https://ibb.co/myKGZrg [/IMG]

Now lets have a look to

Code:

admin@customermail # ifconfig
enp0s31f6: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500
        inet 136.243.47.106  netmask 255.255.255.192  broadcast 136.243.47.127
        inet6 fe80::921b:eff:fedb:519  prefixlen 64  scopeid 0x20<link>
        inet6 2a01:4f8:212:f65::2  prefixlen 64  scopeid 0x0<global>

Any ideas what is to do, to make the delivering to gmail possible?

Thanks in advance, Martin

 

Thank you - I read this before your post, but I thought in the meanwhile there are some new insights for this google-phenomen.

I did as you described, works well! Thanks again!

 

Hm - the posted solution works for mail pointing directly to gmail but not for domains which are hosted at googleservices.

So, if we send mails to [email protected] there comes the following bounce

Code:

Betreff:     Undelivered Mail Returned to Sender
Datum:     Fri, XX XXXX 2022 14:32:08 +0200 (CEST)
Von:     Mail Delivery System <[email protected]>
An:     [email protected]


This is the mail system at host tesoro2.products4more.at.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

The mail system

<[email protected]>: host ASPMX.L.GOOGLE.COM[2a00:1450:4025:402::1a]
said: 550-5.7.1 [2a01:4f8:212:f65::2] Our system has detected that this
message does 550-5.7.1 not meet IPv6 sending guidelines regarding PTR
records and 550-5.7.1 authentication. Please review 550-5.7.1
https://support.google.com/mail/?p=IPv6AuthError for more information 550
5.7.1 . cr13-20020a170906d54d00b00730632d2a0fsi1725389ejc.452 - gsmtp (in
reply to end of DATA command)

We got 4 such bounces in the last days for different domains, so fixing that with transportmaps is rather cumbersome.

Any other ideas how to fix that ip4/ip6-problem?

TIA, Martin

 

Yes till, you are right - but I did a IPv6-setup as mentioned in my initial post.

Here is another small piece of the puzzle to confirm the correctness of the setup

Code:

#ip -6 addr show scope global
2: enp0s31f6: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 state UP qlen 1000
    inet6 2a01:4f8:212:f65::2/64 scope global
       valid_lft forever preferred_lft forever

and the proof of ptr-check-service

https://ibb.co/BnCMQrg

 

thank you - additional ptr is done. so lets have a look if that helped.

 

Hi Till,
I'm very curious to know how you did it, I read a lot of different way to do that.
I also had an "ipv6 ptr" issue with gmail, so I disabled ipv6 with postfix, but emails are still considered as spam from gmail (I have SPF, DMARC, DKIM), I have no error message from gmail, so I don't know why my emails are considered as spam, and DMARC checks are OK. I want to try to re-enable ipv6 in postfix and add an ipv6 ptr record to see if it solves the problem.

For ipv4 I did that :

Then, inside this zone :


First is it the correct way to do it for ipv4 ? and if so, is it the same way to do it for ipv6 ?
I read that I need a AAAA record (in what zone ?)
here is my ipv6, and it's DNS format :
2001:41d0:e:942::1 in reverse DNS format:
1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.2.4.9.0.e.0.0.0.0.d.1.4.1.0.0.2.ip6.arpa
Thanks for the help !

 

Probably not.
Read my tutorial on name service with ISPConfig, link in my signature.

Same zone as the A record.

 

Hi Taleman,
thanks for your reply !
I read you tutorial, and indeed you said that :

So I connected to my OVH admin panel and I have this :

Unfortunately, if I try to put ns1.vegan.fr as reverse name for ipv6 IP I have this message :


Also, if I can not use my own name server, then what do I have to do in ispconfig ?

 

I added an AAAA record for ns1.vegan.fr, now I have :

it looks like I still have to do something in ispconfig...
edit: I was writing this message while you replied till, thanks for your answer

 

my mistake : I used the ipv6 proposed by default by ispconfig, it seems that it wasn't the good one. Now it works ! Thanks
Do I still have to do something in ispconfig ?
I have to ask OVH to add a PTR record ? everybody does that ?

 

DNS is now OK for IPv6 and PTR. So nothing to do for those. Since you hijacked this old thread, I am not sure if there is some other ultimate problem you are trying to resolve.

From what you wrote in #11 I assumed you understood the PTR record registration? Maybe you should formulate your question more explicitly.

 

That's clear, thank you Taleman and till for your help and sorry for digging this old thread

 

FYI it solved some problem but not all, my emails are still considered as spam from gmail, I'm trying to sign into their "postmater tools" to have some details stats about why emails are seeing as spam from google. Maybe a bad reputation IP, I don't know yet.

 

Yes, SPF and DKIM checks passed, "The Truth Is Out There" !