[amres-info] [rc-admin] Re: Problem sa Gmail-om

Mon Dec 9 14:28:39 CET 2013

Nebi trebalo da to pravi problem, meni ne pravi sa googlom.

Evo mi moj heder

Delivered-To: jelesije at gmail.com
Received: by 10.70.126.99 with SMTP id mx3csp141059pdb;
        Mon, 9 Dec 2013 05:13:42 -0800 (PST)
X-Received: by 10.205.96.67 with SMTP id cf3mr5965067bkc.32.1386594821565;
        Mon, 09 Dec 2013 05:13:41 -0800 (PST)
Return-Path: <perun at etf.rs>
Received: from mx1.etf.bg.ac.rs (mx1.etf.rs. [147.91.14.169])
        by mx.google.com with ESMTPS id uo7si4908772bkb.328.2013.12.09.05.13.40
        for <jelesije at gmail.com>
        (version=TLSv1 cipher=RC4-SHA bits=128/128);
        Mon, 09 Dec 2013 05:13:41 -0800 (PST)
Received-SPF: pass (google.com: domain of perun at etf.rs designates 147.91.14.169 as permitted sender) client-ip=147.91.14.169;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of perun at etf.rs designates 147.91.14.169 as permitted sender) smtp.mail=perun at etf.rs
Received: from localhost (avs2.etf.rs [147.91.14.173])
        by mx1.etf.bg.ac.rs (Postfix) with ESMTP id 434901201C6
        for <jelesije at gmail.com>; Mon,  9 Dec 2013 14:13:40 +0100 (CET)
X-Virus-Scanned: amavisd-new at etf.rs
Received: from mx2.etf.bg.ac.rs ([147.91.14.170])
        by localhost (avs2.etf.rs [147.91.14.171]) (amavisd-new, port 10026)
        with ESMTP id TviP+agt7Wh1 for <jelesije at gmail.com>;
        Mon,  9 Dec 2013 14:13:34 +0100 (CET)
Received: from itacademy.etf.rs (itacademy.etf.rs [147.91.13.41])
        (using TLSv1 with cipher AES128-SHA (128/128 bits))
        (No client certificate requested)
        by mx2.etf.bg.ac.rs (Postfix) with ESMTP id 35E0D600FE
        for <jelesije at gmail.com>; Mon,  9 Dec 2013 14:13:34 +0100 (CET)
Received: from itacademy.rcetf.local ([2002:935b:d29::935b:d29]) by
itacademy.rcetf.local ([2002:935b:d29::935b:d29]) with mapi id

14.03.0123.003; Mon, 9 Dec 2013 14:12:14 +0100

From: =?iso-8859-2?Q?Predrag_Jelesijevi=E6?= <perun at etf.rs>

To: "jelesije at gmail.com" <jelesije at gmail.com>

Subject: gmail

Thread-Topic: gmail

Thread-Index: Ac704EZzuE0I3Nj+QHK13xdC1tx9fw==

Date: Mon, 9 Dec 2013 13:12:13 +0000

Message-ID: <4FC048DD41BD6840A5C57A744DF7CE0C0C4E6F8C at itacademy.rcetf.local>

Accept-Language: en-US

Content-Language: en-US

X-MS-Has-Attach:

X-MS-TNEF-Correlator:

x-originating-ip: [147.91.13.27]

Poz
Pedja

---
Predrag Jelesijević
sistem administrator
perun at etf.bg.ac.rs<mailto:perun at etf.bg.ac.rs>

Računski centar ETF Beograd
http://rc.etf.bg.ac.rs

From: amres-info-bounces at amres.ac.rs [mailto:amres-info-bounces at amres.ac.rs] On Behalf Of Bojan Vitnik
Sent: Monday, December 9, 2013 2:15 PM
To: amres-info at amres.ac.rs
Subject: [rc-admin] Re: [amres-info] Problem sa Gmail-om

Poštovani kolega,

DKIM nije neophodan čak ni za Google a zna da stvori više problema

nego što od njega ima koristi.

Pozdrav.

Bojan Vitnik

On Mon, 09.12.2013 14:05, "Dusan M. Vuckovic" <Dusan.Vuckovic at elfak.ni.ac.rs<mailto:Dusan.Vuckovic at elfak.ni.ac.rs>> wrote:
Ne komuniciraju. Izgleda je u pitanju header koji mail server zalepi na poruku, a koji google tumaci .
Bojim se da ne kontam problem do kraja. Sada je iskrslo jos nesto , a to je ovaj DKIM :

Authentication & Identification

To ensure that Gmail can identify you:
•         Use a consistent IP address to send bulk mail.
•         Keep valid reverse DNS records for the IP address(es) from which you send mail, pointing to your domain.
•         Use the same address in the 'From:' header on every bulk mail you send.

We also recommend publishing an SPF record<http://www.google.com/support/a/bin/answer.py?answer=33786> and signing with DKIM<http://www.dkim.org/>. We do not authenticate DKIM using less than a 1024-bit key.
By authenticating, inline images you send will be shown automatically. Recipients will not need to click the "Display images below<http://support.google.com/mail/bin/answer.py?hl=en&answer=145919>" link.

Learn more<https://support.google.com/mail/answer/180707> about email authentication.

SPF postoji , ali nije “signed” sa DKIM . Tek ulazim u problematiku. Mada mislim da bi bilo moguce resiti problem kreiranjem reverzne zone kod Ratka u JUNIS-u i kreiranjem PTR recorda.

Dušan Vučković M.Sc. MCP_ID:3342085| Faculty of Electronic Engineering |Head of IT
' +381 18 529373   È +381 69 1583000    7 +381 18 588117  | Aleksandra Medvedeva 14, Niš 18000, Serbia

From: amres-info-bounces at amres.ac.rs<mailto:amres-info-bounces at amres.ac.rs> [mailto:amres-info-bounces at amres.ac.rs] On Behalf Of Bojan Vitnik
Sent: Monday, December 9, 2013 12:38 PM
To: amres-info at amres.ac.rs<mailto:amres-info at amres.ac.rs>
Subject: Re: [amres-info] Problem sa Gmail-om

Poštovani kolega,

Ako vam gateway ne podržava IPv6, kako vaši korisnici i/ili mail server

mogu uopšte da komuniciraju sa Google mail serverom preko IPv6?

Pozdrav.

Bojan Vitnik

On Mon, 09.12.2013 08:30, "Dusan M. Vuckovic" <Dusan.Vuckovic at elfak.ni.ac.rs<mailto:Dusan.Vuckovic at elfak.ni.ac.rs>> wrote:
Hvala svima na odgovoru.
SPF record , propisan postoji , ali za IPv4. Trenutno nas gateway ne podrzava IPv6, te @MarkoZivkovic , sta dalje ☺ .
Ratko , mozemo li u tvom DNS-u da postavimo rekorde za nasu reverznu zonu ?  Da li to resave problem , ili nece  moci da nadje server, pa ni to ne resave problem  ?
Za ispadanje “glup u drustvu “ , bez brige. I ja sam rizikovao. Ni meni teorija sa klijentima ne pije vodu, ali izgleda da to resave problem . Na Exchange-u sam aplicirao fiks i to nista nije resilo. Tek kad su klijenti to uradili isto kod sebe, proradilo je. Ajd, sad . Ko ima objasnjenje nek izvoli.
Ono sto je interesanto je da je problem samo sa @gmail.com domenom .  Domeni koji su na GoogleApsps-u , bez problema prihvataju postu. Izgleda je i to kod njih u nekoj eksperimentalnoj fazi , pa je roll out bio delimican .

Dušan Vučković M.Sc. MCP_ID:3342085| Faculty of Electronic Engineering |Head of IT
' +381 18 529373   È +381 69 1583000    7 +381 18 588117  | Aleksandra Medvedeva 14, Niš 18000, Serbia

From: amres-info-bounces at amres.ac.rs<mailto:amres-info-bounces at amres.ac.rs> [mailto:amres-info-bounces at amres.ac.rs] On Behalf Of Bojan Vitnik
Sent: Monday, December 9, 2013 12:11 AM
To: amres-info at amres.ac.rs<mailto:amres-info at amres.ac.rs>
Subject: Re: [amres-info] Problem sa Gmail-om

Poštovani kolega,

Koliko ja vidim problem je što ne postoji reverzna IPv6 DNS zona a verovatno ni AAAA zapis
za mail server. Zašto jednostavno ne napravite reverznu IPv6 DNS zonu za vaš opseg IPv6
adresa i dodate još AAAA zapis u direktnu zonu za vaš mail server i posao je rešen.
Postojanje SPF se podrazumeva.

S druge strane, ne vidim kako IPv6 kod klijenata može da pravi problem ako je na mail
serveru potpuno ugašen IPv6. Klijenti ne šalju direktno mail-ove Google mail serveru
nego preko vašeg mail servera osim ako su vaši korisnici namestili da im mail klijent
koristi Google mail nalog. S druge strane, i ovo je rešivo pomoću DNS-a, doduše malo
teže.

Pozdrav.

Bojan Vitnik, B.Sc.E.E.
Mrežni i sistem administrator Fakulteta za fizičku hemiju

On Sun, 08.12.2013 23:13, "Dusan M. Vuckovic" <Dusan.Vuckovic at elfak.ni.ac.rs<mailto:Dusan.Vuckovic at elfak.ni.ac.rs>> wrote:
Pozdrav svima .
Javio nam se veci broj korisnika prijavljujuci problem sa slanjem poste na Gmail . Naime , posta se vraca i javlja se greska nalik ovoj :

mx.google.com gave this error:
[2002:a063:98f::a063:98f 16] Our system has detected that this message does not meet IPv6 sending guidelines regarding PTR records and authentication. Please review https://support.google.com/mail/?p=ipv6_authentication_error for more information. y12si2880601wiv.74 - gsmtp

Problem je u tome sto je Google pokrenuo prijem poste preko IPv6 protokola i dao mu je prvenstvo u odnosu na IPv4 . Detaljan opis problema mozete naci ovde:

http://tanguy.ortolo.eu/blog/article109/google-ipv6-smtp-restrictions

Resenje problema zahteva i intervenciju na strani klijenta izgleda . Mora da se iskljuci  IPv6 na klijentu, a ne samo na mail serveru , a to se moze jednostavno uraditi pokretanjem OVOG Fix-a<http://go.microsoft.com/?linkid=9728869> koji je Microsoft dao na OVOJ stranici<http://support.microsoft.com/kb/929852> . Tu cete naci i uputstvo kako rucno da uradite isti posao , koji je fixom automatizovan .

Pitanje glasi, kako cemo da resimo ovaj problem ,a ne da koristimo workaround ?

Hvala

Dušan Vučković M.Sc. MCP_ID:3342085| Faculty of Electronic Engineering |Head of IT
' +381 18 529373   M +381 69 1583000    7 +381 18 588117  | Aleksandra Medvedeva 14, Niš 18000, Serbia

_______________________________________________
amres-info mailing list
amres-info at amres.ac.rs<mailto:amres-info at amres.ac.rs>
http://afrodita.rcub.bg.ac.rs/mailman/listinfo/amres-info
_______________________________________________
amres-info mailing list
amres-info at amres.ac.rs<mailto:amres-info at amres.ac.rs>
http://afrodita.rcub.bg.ac.rs/mailman/listinfo/amres-info
_______________________________________________
amres-info mailing list
amres-info at amres.ac.rs<mailto:amres-info at amres.ac.rs>
http://afrodita.rcub.bg.ac.rs/mailman/listinfo/amres-info
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://afrodita.rcub.bg.ac.rs/pipermail/amres-info/attachments/20131209/fb66fccd/attachment-0001.html 