1
Gmail not accepting our emails any longer
Problem reported by Steve Guluk - 1/26/2023 at 11:41 AM
Resolved
Hello,
Anyone else start getting blocked today to gMail?

We get the following response from gmail asking to set up "Authentication":
https://support.google.com/mail/answer/81126#authentication
We already have SPF in place as shown in the attached screen shot and we route everyone through mail.sgdesign.net rather than using their own domains so we can maintain a SSL Cert on the server.
Any suggestions on how to check for if Google is not seeing our settings or how to check what is needed to make us Google friendly again?  

How does everyone handle multiple domains and SSL Certs? Do you create one for each clients domain or do as we do currently which is force everyone through our one domain and work to keep it up to standards?

8 Replies

Reply to Thread
1
Kyle Kerst Replied
Employee Post
Google is likely requiring you to deploy a DMARC record along with DKIM as they become more and more strict about delivery requirements as time goes on. DMARC/DKIM are pretty standard at this point and allow them to confirm the message is really from who you say it is. The SSL setup here is likely fine, but you'll want to setup wildcard SSL certificates for your customer domains if you want to support MAPI via Autodiscover in the future. If you need a quick and easy solution for that I recommend checking out this KB article here: https://portal.smartertools.com/kb/a3466/securing-smartermail-with-lets-encrypt.aspx
Kyle Kerst System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
1
Steve Guluk Replied
Thank you Kyle. I followed the Google links they returned and it seems they expect everyone to be using their "Google Workspace". I will move to set up DMARC and DKIM (though DKIM is referenced as an alternative to the SPF values I already have in place.

Any good articles to help me on my journey?
0
Zach Sylvester Replied
Employee Post
Zach Sylvester System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
1
Steve Guluk Replied
FYI: This tool helped set up DMARC in a simple manner and is now verifiable in our DNS records:

https://dmarcguide.globalcyberalliance.org/#/
1
Steve Guluk Replied
Thanks for that list Zach.
I do find that mxtoolbox will create a record that makes you rely on their services.
0
Kyle Kerst Replied
Employee Post
You're very welcome Steve.
Kyle Kerst System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
0
Zach Sylvester Replied
Employee Post
Hey Steve, 

Take a look at the domain's general settings. 
So its Manage->click a domain->General->Email Signing. 

Hope this helps. 

Kind Regards, 
Zach Sylvester System/Network Administrator SmarterTools Inc. (877) 357-6278 www.smartertools.com
1
Linda Pagillo Replied
Marked As Resolution
Just chiming in :)

We have been seeing a lot of this lately too. Here is what I have been telling our customers...

Google and other large ESPs are really cracking down on the email they accept. We have determined that the best thing to do in this situation is the following…

1. Check to ensure that your users are not forwarding spam to their own external accounts. We are aware that many users (ours too) forward their mail from our mail servers to Gmail or Yahoo for example. The problem is, if the domain is not set up to not forward the spam too, all of the spam gets forwarded with the good mail and it looks like our server is spamming Gmail’s servers.
 
2. Be sure that you do not have any compromised accounts that could be shooting spam out. Put prevention for this in place such as Declude Hijack, SM Throttling, SM Internal Spammer Notification.  
 
3. Ensure you have proper SPF, DKIM, and DMARC records set up for all of your domains.
 
4. Have SSL/TLS in place for all of your domains and that you are using the secure ports in your email clients to send mail
 
5. Ensure you have proper reverse DNS set up for all of your server IPs
 
6.) Ensure you have a proper HELO set up for each of your domains
 
7.) Sign up for Google’s Postmaster Tools and verify all of your domains.

I hope this helps someone out there!
Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Reply to Thread