Today T-mobile SMTP server starts to validate sender domain for BIS accounts
We had a major software release to our ASP platform early this morning. The ASP services have been monitored closely by an internal Hobbit monitor. During the maintenance window or after, no alert emails ever reached our duty pager, a blackberry 7290 with a T-mobile BIS (Blackberry Internet Email) account. Other alert venues worked as usual. After checking around, I found that the culprit is tmo.blackberry.net, T-mobile’s SMTP server for its BIS accounts. Out of blue, it starts to validates sender domain this morning and rejects any email whose SENDER field fails the new validation. Also described below is how to fix it for Postfix.
The Hobbit Monitor runs on a CentOS 4.4 server. Due to restriction on corporate firewall, it couldn’t send outbound emails directly. Postfix is the MTA on this server. As a work-around, Postfix was configured to relay outbound emails destined to T-mobile BIS accounts through relay1.example.com, an internal email relay server capable of outbound-email. Here is how to configure Postfix to use different relay servers for specific recipient domains.
To troubleshoot, I checked the maillog on the Hobbit Monitor server. Per the log, the internal relay accepted the outbound emails as expected.
Feb 5 03:31:45 hobbitMonitor postfix/smtp[20122]: 2117E180C7F: to=<dutypager12345@tmo.blackberry.net>, orig_to=<alert1@localhost>, relay=relay1.example.com[10.8.8.8], delay=0, status=sent (250 ok 1170664215 qp 7753)
So, I followed the trail to relay1, which uses qmail as the MTA. I checked the remote queue. A bunch of ‘failure-notice’ were found, with error messages like this:
<dutypager12345@tmo.blackberry.net>:
Connected to 216.9.248.36 but sender was rejected.
Remote host said: 553 #5.1.8 Domain of sender address <greenbean@hobbitMonitor.example.com> does not exist
The same email alerts had no problem reaching the blackberry for over half a year now. So, it must be a policy change on T-mobile’s SMTP server which serves their BIS accounts. The change could result from an explicit policy change on the MTA itself, or an inadvertent change due to MTA software upgrade or new/extra/upgraded spam filters. The hobbitMonitor.example.com subdomain or host is resolvable internally, but not on the Internet. So, no surprise it fails the new validation.
Arguably, our Postfix configuration was broken with a non returnable email address as the sender, plus the server doesn’t expect to receive any inbound email anyway. The latter is the default behavior of MTA on a recent CentOS, Fedora Core, and RHEL. MTA will listen to TCP/25 only on the loopback interface for outbound email delivery only. As you can see, a lot of emails would stop to be delivered to T-mobile blackberries if such emails are sent from Linux servers who is not accessible or visible from the Internet. That’d be A LOT! You’d have expected some notification for such a maintenance from a large carrier such as T-Mobile. I guess not many places have decent configuration management or change control after all
To fix it, it is rather simple with Postfix on the Hobbit Monitor server. I just need to change the $myorigin to equal to $mydomain instead of $myhostname, then to restart Postfix. So, the sender changed from “greenbean@hobbitMonitor.example.com” to “greenbean@example.com”.
For your quck reference, here is the excerpt of what $myorigin does in /etc/postfix/main.cf.
# SENDING MAIL
#
# The myorigin parameter specifies the domain that locally-posted
# mail appears to come from. The default is to append $myhostname,
# which is fine for small sites. If you run a domain with multiple
# machines, you should (1) change this to $mydomain and (2) set up
# a domain-wide alias database that aliases each user to
# user@that.users.mailhost.
#
# For the sake of consistency between sender and recipient addresses,
# myorigin also specifies the default domain name that is appended
# to recipient addresses that have no @domain part.
#
#myorigin = $myhostname
myorigin = $mydomain











Liz Cohen said,
February 12, 2007 @ 5:39 am
Hi
I noticed you write about Blackberries on your blog and thought I’d fill you in on Mobile Answers, a phone-friendly version of Answers.com for your Treo, Blackberry or any other smartphone.
Clarify unfamiliar terms you come across in emails from your phone. Settle trivia bets while you’re sitting at the bar. Get familiar with your surroundings on business trips. Mobile Answers is located at mobile.answers.com and makes available the massive, virtual library at Answers.com: 4 million topics, in your pocket, without any downloading.
Try it out, and if you like it, we’d love to see you blog about it. Feel free to pass this to fellow bloggers or submit your blog to the Answers.com Blog Directory.
Liz Cohen
Chief BlogWatcher
Answers.com(tm)”
Submit your blog to the Blog Directory.
0c5b40cc3a94fcf9c233 said,
December 21, 2007 @ 4:53 pm
0c5b40cc3a94fcf9c233
0c5b40cc3a94
adderall without prescription said,
December 22, 2007 @ 7:05 pm
adderall without prescription
news
buy viagra said,
December 22, 2007 @ 7:07 pm
buy viagra
news
ambien side effects said,
December 22, 2007 @ 7:10 pm
ambien side effects
news
buy tramadol said,
December 22, 2007 @ 7:12 pm
buy tramadol
news
buy xanax online said,
December 22, 2007 @ 7:15 pm
buy xanax online
news
liquid cialis said,
December 22, 2007 @ 7:18 pm
liquid cialis
news
zoloft generic said,
December 23, 2007 @ 7:20 pm
zoloft generic
news
ritalin online said,
December 23, 2007 @ 7:24 pm
ritalin online
news
ephedrine said,
December 24, 2007 @ 7:04 pm
ephedrine
news
fioricet plain pill said,
December 24, 2007 @ 7:06 pm
fioricet plain pill
news
xanax effect said,
December 25, 2007 @ 7:05 pm
xanax effect
news
side effects of valium said,
December 25, 2007 @ 7:08 pm
side effects of valium
news
pill propecia said,
December 25, 2007 @ 7:09 pm
pill propecia
news
zoloft said,
December 25, 2007 @ 7:12 pm
zoloft
news
ephedra pills said,
December 25, 2007 @ 7:14 pm
ephedra pills
news
denver ephedra lawyer said,
December 25, 2007 @ 7:17 pm
denver ephedra lawyer
news
tramadol hydrochloride said,
December 25, 2007 @ 7:17 pm
tramadol hydrochloride
news
qftzezva said,
December 25, 2007 @ 10:17 pm
qftzezva
qftzezva
ambien cr said,
December 26, 2007 @ 7:15 pm
ambien cr
news
how long is percocet in your system said,
December 26, 2007 @ 7:18 pm
how long is percocet in your system
news
adderall no prescription said,
December 26, 2007 @ 7:22 pm
adderall no prescription
news
comparative potencies of opioids tramadol said,
December 27, 2007 @ 7:23 pm
comparative potencies of opioids tramadol
news
adderall xr said,
December 27, 2007 @ 7:27 pm
adderall xr
news
cheapest phentermine online said,
December 27, 2007 @ 7:28 pm
cheapest phentermine online
news
buy hydrocodone said,
December 27, 2007 @ 7:31 pm
buy hydrocodone
news
xanax overdose said,
December 27, 2007 @ 7:36 pm
xanax overdose
news
discount ambien said,
December 28, 2007 @ 7:48 pm
discount ambien
news
xanax said,
December 28, 2007 @ 7:52 pm
xanax
news
buy cialis said,
December 28, 2007 @ 7:56 pm
buy cialis
news
vasopro ephedrine said,
December 28, 2007 @ 7:58 pm
vasopro ephedrine
news
will ambien show up in a urine test said,
December 29, 2007 @ 8:02 pm
will ambien show up in a urine test
news
story comparison viagra said,
December 30, 2007 @ 7:57 pm
story comparison viagra
news
propecia said,
December 30, 2007 @ 8:02 pm
propecia
news
valium dosage said,
December 30, 2007 @ 8:09 pm
valium dosage
news
match phone number to name said,
January 9, 2008 @ 10:36 pm
A brief history of Poking
The information commonly found by fingering someone included their real name, office phone number and their idle time. If their
public death record said,
January 9, 2008 @ 10:37 pm
Editorial: State’s public records should
Even before the opening gavel falls on the legislative session, at least two bills that would limit public access to
Amazing flash web site creator said,
January 9, 2008 @ 11:17 pm
RegisterNuke.com Announces Website Tonight® -
WebSite Tonight is a quick and easy tool for building professional-looking Websites. It offers more than 670 template options, 30
New california rn and lvn program said,
January 19, 2008 @ 10:14 am
Theme Parties: The New Fountain
Kermit was one of several people who came in costume to a theme party Friedman had hosted to honor the
c19dafdb0e1cab1a7616264560cd645c said,
January 26, 2008 @ 11:06 pm
c19dafdb0e1cab1a7616264560cd645c
c19dafdb0e1cab1a7616264560cd645c
college course book said,
February 6, 2008 @ 3:20 am
Desert Events - 01-27 -
A discussion group at College of the Desert will run through March 20 at $60 for the series and
best camera digital kid said,
February 13, 2008 @ 9:14 am
Epoch Times New York Staff
Epoch Times New York StaffThe Epoch Times Ireland, Ireland -9 hours agoShot over the course of nine concerts, the film features the
Classy small business loan for real estate said,
February 17, 2008 @ 10:35 am
Comerica Reports Fourth Quarter and
Comerica Reports Fourth Quarter and 2007 EarningsCNNMoney.com -Jan 17, 2008″We increased the provision for loan losses by $63 million from the
free tranny said,
March 1, 2008 @ 9:55 am
free tranny
free tranny - http://groups.google.com/group/unieonpyvy/web/free-tranny
amoxicillin trihydrate blog said,
April 25, 2008 @ 7:31 pm
amoxicillin trihydrate…
amoxicillin trihydrate…
adderall without a prescription blog said,
April 26, 2008 @ 7:13 pm
adderall without a prescription…
adderall without a prescription…
cheap phentermine blog said,
April 27, 2008 @ 7:44 pm
cheap phentermine…
cheap phentermine…
long term use of percocet blog said,
April 28, 2008 @ 8:59 pm
long term use of percocet…
long term use of percocet…
buy ambien blog said,
April 29, 2008 @ 9:48 pm
buy ambien…
buy ambien…
no prescription drug said,
September 29, 2008 @ 6:54 pm
no prescription drug…
Where can I find no prescription drug? I\’m looking for a good online pharmacy….