Question
Mail from single-droplet getting unauthorized failures from reipient mail servers
- Posted on October 6, 2021
- Ubuntu 18.04DNS
Asked by blgtechnologylimited
I have a single droplet running my application, and hosting a postfix mail server for sending notifications, etc. However, mail is not working.
When I run a cmd-line test mail to a gmail account, I get a rejected response: “The IP you’re using to send mail is not authorized 550-5.7.1 to send email directly to our servers. Please use the SMTP relay at 550-5.7.1 your service provider instead.”
In terms of DNS record set-up: A records are fine for site and mail subdomain, as verified by whatsmydns.net. MX record also verifies (now using main domain) I have three TXT records as follows: main site: v=spf1 ip4:xxx.xxx.xxx.xxx -all mail._domainkey subdomain: “v=DKIM1;h=sha256;k=rsa;p=…” _dmarc subdomain: v=DMARC1;p=quarantine
The DKIM above matches my public/private setup, as per the DO “How To Install and Configure DKIM” tutorial.
I do receive email, I just cannot send any. Help appreciated! Fergus
This textbox defaults to using Markdown to format your answer.
You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!
These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.
Become a contributor for community
Get paid to write technical tutorials and select a tech-focused charity to receive a matching donation.
DigitalOcean Documentation
Full documentation for every DigitalOcean product.
Resources for startups and SMBs
The Wave has everything you need to know about building a business, from raising funding to marketing your product.
The developer cloud
Scale up as you grow — whether you're running one virtual machine or ten thousand.
Get started for free
Sign up and get $200 in credit for your first 60 days with DigitalOcean.*
*This promotional offer applies to new accounts only.
Hello,
It sounds like that your PTR record might be the problem
I could suggest following the steps from this answer here by @alexdo on how to setup a PTR record:
https://www.digitalocean.com/community/questions/how-to-setup-a-ptr-record?answer=65918
Once this is done, you might have to wait for the DNS cache to clear over the Globe, and then you could give it another try.
Let me know how it goes. Best, Bobby
See http://www.spamhaus.org/lookup/