SMTP, I give up...

[Straf]

I don't use ISP email as I have my own domains with a hosting package. So I probably won't be much use in testing the emails. But I can PM you an email address you can try sending to.

Is the site hosted on a dedicated server/VPS, or are you hosting it from an ISP's IP pool? Some ISPs reject IP pools automatically. I know AOL used to do that when I ran one of my sites from a server beneath my desk. I was using Exim and that took some tinkering to get it to work in a satisfactory way.

[Robbie]

I don't use ISP email as I have my own domains with a hosting package. So I probably won't be much use in testing the emails. But I can PM you an email address you can try sending to.

Is the site hosted on a dedicated server/VPS, or are you hosting it from an ISP's IP pool? Some ISPs reject IP pools automatically. I know AOL used to do that when I ran one of my sites from a server beneath my desk. I was using Exim and that took some tinkering to get it to work in a satisfactory way.

It's a dedicated server running in a data center so it should be a perfectly acceptable ip address.

Sent from my m8wl using Tapatalk

[Straf]

I notice that you're using SPF and DKIM but you don't seem to have a DMARC implementation. I can't pretend to know anything about it but it seems to form a holy trinity with the other two and from the brief read I made it seems to be more about anti-phishing.

[Straf]

There's an OpenDMARC addon for Postfix
http://www.postfix.org/addon.html

[Robbie]

Dec 19 21:16:40 cartoguild postfix/smtp[27888]: 70A62920016: host mxzhh.bluewin.ch[195.186.227.50] refused to talk to me: 554 Service unavailable from IP: 64.71.79.207. Please refer to http://csi.cloudmark.com/reset-request/?ip=64.71.79.207 if you feel this is in error
Dec 19 21:16:40 cartoguild postfix/smtp[27888]: 70A62920016: to=<emailremoved>, relay=mxzhb.bluewin.ch[195.186.99.50]:25, delay=420379, delays=420378/0.01/1.2/0, dsn=4.0.0, status=deferred (host mxzhb.bluewin.ch[195.186.99.50] refused to talk to me: 554 Service unavailable from IP: 64.71.79.207. Please refer to http://csi.cloudmark.com/reset-request/?ip=64.71.79.207 if you feel this is in error)

There's an example...So frustrating.

I'll check out OpenDMARC

[Slylok]

Dec 19 21:16:40 cartoguild postfix/smtp[27888]: 70A62920016: host mxzhh.bluewin.ch[195.186.227.50] refused to talk to me: 554 Service unavailable from IP: 64.71.79.207. Please refer to http://csi.cloudmark.com/reset-request/?ip=64.71.79.207 if you feel this is in error
Dec 19 21:16:40 cartoguild postfix/smtp[27888]: 70A62920016: to=<emailremoved>, relay=mxzhb.bluewin.ch[195.186.99.50]:25, delay=420379, delays=420378/0.01/1.2/0, dsn=4.0.0, status=deferred (host mxzhb.bluewin.ch[195.186.99.50] refused to talk to me: 554 Service unavailable from IP: 64.71.79.207. Please refer to http://csi.cloudmark.com/reset-request/?ip=64.71.79.207 if you feel this is in error)

There's an example...So frustrating.

I'll check out OpenDMARC

Oh yes! It looks like you're going to have to fill out their "IP Statistics Reset Request". Unless something here may be the case. In which you'll probably have to take care of that first. It seems to be legit

[Straf]

An interesting example:

http://mxtoolbox.com/domain/mxzhb.bluewin.ch/

[Robbie]

so, I of course have been submitting de-list requests often through the link in the log entries...which didn't do anything...

Thanks to the link posted by slylok, I actually submitted a support request to cloudmark and they got back to me late last night and said they'd remove the block and sure enough overnight the server sent out a BUNCH of backed up emails, and is now sending flawlessly. So at this point, as long as everything is set up correctly we should be good...

Thanks for the help...I really just needed some encouragement and a different perspective...because I'm almost certain the server is configured correctly. We'll see!

[Straf]

That's great news Robbie! Even better when you know you don't have to delve into the mail server configuration files. From what I can see from out here is everything is set up as it should be and is responsibly managed. Just keep an eye on updates, especially security ones. The bad side of open source is the code is available and exploits can be found. The good side of open source is the code is available and exploits can be quickly patched by the community.

[Slylok]

Excellent! Well done sirs