EFA Configuration - Senders receiving bounce messages

[drmoorenz]

Hi guys,

I setup EFA and configured EFA to filer email to my hosted exchange by adding the domain and the host to the Transport Settings. It worked ok but then I noticed EFA was showing email's in the list that were clean and for some reason weren't arriving in my mailbox. I then found that a lot of email senders were receiving bounce back messages when they attempt to email me. Others make it through without any issues at all.

I have since removed EFA and email is being passed directly back to my hosted exchange system - no issues at all.

I would like to use EFA but I need a hand in getting my configuration nailed down. I have tried playing around the SPF stuff to make it work but I am getting no where.

I have an internal domain and the EFA box lives on this network - my hosted exchange system is in a data centre overseas - mx records tell email to flow to my EFA box here, then pass it to hosted exchange overseas. EFA is receiving the email, sending a bounce back and these emails are not making it to my inbox?

[shawniverson]

What are you seeing in /var/log/maillog for a message that bounces?

[drmoorenz]

The bounce back on the senders end was about Sender ID Not Permitted.
I will dig through the mail log and retrieve the log relating to the bounce back. Sorry I disabled it a few days ago!

[drmoorenz]

I have attached a capture of my SSH session to my EFA box. These messages were bounced back to the Sender.

[shawniverson]

Okay...

550 5.7.1 Sender ID (PRA) Not Permitted (in reply to end of DATA command)

This response is coming from your Exchange server. You have Sender ID checking enabled on Exchange. Disable it.

https://technet.microsoft.com/en-us/lib ... .150).aspx

[drmoorenz]

Thanks will have that disabled

[drmoorenz]

My hosted exchange provider says they can not disable Sender ID Checking?

Will that mean I am up a river without a paddle and need to move providers?

[shawniverson]

Sender ID checking relies on SPF checks of the sender. When you put EFA in line, the SPF check will fail because the email is coming from EFA, not the originator. So yeah, you have a bit of a problem here. EFA needs to be doing the SPF checking, not Exchange.

[drmoorenz]

No worries - I will be deploying in-house Exchange Server shortly so will switch EFA back on then...