Changing Mail Routing

Kelly Ford

20 Jul 2024 20 Jul '24

9:14 p.m.

Hello, Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription. I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net. With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going. If I delete the priority 0 MX record for mail.theideaplace.nethttp://mail.theideaplace.net, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points. Kelly

Show replies by date

Jackie McBride

20 Jul 20 Jul

9:32 p.m.

Hi, Kelly. Let's try that mx record at 5 instead of 10. You should also make sure you've got DKIM & DMARC records published, which at this point you don't, so the mail is likely being rejected, given the new rules that were implemented in Feb. Let us know if that doesn't help, ok? Jackie McBride Proofpoint Certified Email Authentication Specialist 2024 Author 36: Last Hours of a Life Be a hero. Fight Scams. Learn how at www.scam911.org/ Also check out wp4newbs.com brightstarsweb.com mysitesbeenhacked.com On Sat, Jul 20, 2024 at 2:14 PM Kelly Ford via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> wrote:

...

Hello,

Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription.

I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net.

With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going.

If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points.

Kelly

_______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Kelly Ford

9:52 p.m.

Hi Jackie, Do you have an idea what these additional records you mentioned are supposed to say or a pointer? Unless I’m missing something, I don’t see them on my other domains either, such as kellford.comhttp://kellford.com or tptbnl.comhttp://tptbnl.com but I had never redirected the email from the other domains in the first place. I’ve done a bit of reading on the records you mentioned as well. Kelly On Jul 20, 2024, at 4:32 PM, Jackie McBride via Blind-sysadmins wrote: Hi, Kelly. Let's try that mx record at 5 instead of 10. You should also make sure you've got DKIM & DMARC records published, which at this point you don't, so the mail is likely being rejected, given the new rules that were implemented in Feb. Let us know if that doesn't help, ok? Jackie McBride Proofpoint Certified Email Authentication Specialist 2024 Author 36: Last Hours of a Life Be a hero. Fight Scams. Learn how at www.scam911.org/ Also check out wp4newbs.com brightstarsweb.com mysitesbeenhacked.com On Sat, Jul 20, 2024 at 2:14 PM Kelly Ford via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> wrote: Hello, Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription. I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net. With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going. If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points. Kelly _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Andrew Hodgson

10:45 p.m.

Hi. There is a lot to unpack here so probably more questions.

...

Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business >subscription.

So just to clarify in your M365 account you have ideaplace.net set up as an authoritative domain with an active mailbox?

...

I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net.

Well according to the DNS lookup I made just now mail.ideaplace.net doesn't have an "a" record associated with it, so if you set the MX record accordingly mail wouldn't be delivered without the A record being created.

...

With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going.

From what account did you sent the email, was that hosted on the same M365 tenant that ideaplace.net was using? Based on the above information, it sounds to me like the mail got stuck in an outbound queue because there was no A record for mail.ideaplace.net, but that is only a supposition. If you sent the email from an account in the same tenant you used before, be aware that unless you remove ideaplace.net from your M365 tenant it could still be the Microsoft servers will try and deliver that mail locally to Exchange.

...

If I delete the priority 0 MX record for mail.theideaplace.nethttp://mail.theideaplace.net, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points.

Which mail? Did you send another mail once you made the change to the MX record, or did you just end up with your original email just showing up once you deleted mail.ideaplace.net from the MX records? My recommendation would be ensuring mail.ideaplace.net is resolvable in DNS before you set up the 0 priority MX record. Thanks. Andrew. -----Original Message----- From: Kelly Ford via Blind-sysadmins Sent: Saturday, July 20, 2024 10:14 PM To: Mailing list for blind system administrators Cc: Kelly Ford Subject: [Blind-sysadmins] Changing Mail Routing Hello, Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription. I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net. With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going. If I delete the priority 0 MX record for mail.theideaplace.nethttp://mail.theideaplace.net, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points. Kelly _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Jackie McBride

11:03 p.m.

Kelly, my 1st advice is to set up a mailbox on Bluehost. That should set up your records for you. You might wish to go in & edit the mx record, making the priority 5 rather than 0. I could show you records or even set them up for you, but allowing Bluehost to do it automatically is likely less error-prone. You should likely also set up an email address to receive DMARC reports, i.e., dmarc@theideaplace.net It should look like: _dmarc v=DMARC1;p=quarantine; sp=quarantine; rua=mailto: addr@theideaplace.net Your DMARC policy should likely be quarantine till you're sure things are working properly, change to reject once you're sure it's all good. Jackie McBride Proofpoint Certified Email Authentication Specialist 2024 Author 36: Last Hours of a Life Be a hero. Fight Scams. Learn how at www.scam911.org/ Also check out wp4newbs.com brightstarsweb.com mysitesbeenhacked.com On Sat, Jul 20, 2024 at 3:45 PM Andrew Hodgson via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> wrote:

...

Hi.

There is a lot to unpack here so probably more questions.

...
Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business >subscription.

So just to clarify in your M365 account you have ideaplace.net set up as an authoritative domain with an active mailbox?

...
I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net.

Well according to the DNS lookup I made just now mail.ideaplace.net doesn't have an "a" record associated with it, so if you set the MX record accordingly mail wouldn't be delivered without the A record being created.

...
With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going.

From what account did you sent the email, was that hosted on the same M365 tenant that ideaplace.net was using? Based on the above information, it sounds to me like the mail got stuck in an outbound queue because there was no A record for mail.ideaplace.net, but that is only a supposition. If you sent the email from an account in the same tenant you used before, be aware that unless you remove ideaplace.net from your M365 tenant it could still be the Microsoft servers will try and deliver that mail locally to Exchange.

...
If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points.

Which mail? Did you send another mail once you made the change to the MX record, or did you just end up with your original email just showing up once you deleted mail.ideaplace.net from the MX records?

My recommendation would be ensuring mail.ideaplace.net is resolvable in DNS before you set up the 0 priority MX record.

Thanks. Andrew.

-----Original Message----- From: Kelly Ford via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> Sent: Saturday, July 20, 2024 10:14 PM To: Mailing list for blind system administrators < blind-sysadmins@lists.hodgsonfamily.org> Cc: Kelly Ford Subject: [Blind-sysadmins] Changing Mail Routing

Hello,

Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription.

I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net.

With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going.

If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points.

Kelly

_______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Kelly Ford

21 Jul 21 Jul

12:18 a.m.

Thanks to all for hints here. First off, according to the Zone Editor on bluest, all my domains have entires like this, including theideaplace.nethttp://theideaplace.net. Name Mail.theideaplace.net. TTL 14400 Type A Record 50.87.253.68 The entries for all my domains are the same as far as number and types of entries, excluding that the MX record on bluest for theideaplace.nethttp://theideaplace.net points to a Microsoft server. If I create new mailboxes, it makes no changes to any of these records. Interestingly, none of the records for any domain have these newer entries mentioned here that you are supposed to have that I’m finding. I’ll continue to explore this. I don’t do this often and in fact only mades changes once here a while ago to get the mail to show up on a Microsoft server. Undoing that is proving more difficult than making the original change. :) For what it is worth, when I’m testing these changes, I’m sending all mail from another email address that has no association with Microsoft or my own domains. And when I say mail shows up in some of my text, it is new mail. Once a message fails to appear, it never appears and I’m not getting any failure notices. Thank you again for tips. I’m sure this is something not configured correctly on bluest or Microsoft so I’ll continue hunting around. Kelly On Jul 20, 2024, at 6:03 PM, Jackie McBride via Blind-sysadmins wrote: Kelly, my 1st advice is to set up a mailbox on Bluehost. That should set up your records for you. You might wish to go in & edit the mx record, making the priority 5 rather than 0. I could show you records or even set them up for you, but allowing Bluehost to do it automatically is likely less error-prone. You should likely also set up an email address to receive DMARC reports, i.e., dmarc@theideaplace.net It should look like: _dmarc v=DMARC1;p=quarantine; sp=quarantine; rua=mailto: addr@theideaplace.net Your DMARC policy should likely be quarantine till you're sure things are working properly, change to reject once you're sure it's all good. Jackie McBride Proofpoint Certified Email Authentication Specialist 2024 Author 36: Last Hours of a Life Be a hero. Fight Scams. Learn how at www.scam911.org/ Also check out wp4newbs.com brightstarsweb.com mysitesbeenhacked.com On Sat, Jul 20, 2024 at 3:45 PM Andrew Hodgson via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> wrote: Hi. There is a lot to unpack here so probably more questions. Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business >subscription. So just to clarify in your M365 account you have ideaplace.net set up as an authoritative domain with an active mailbox? I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net. Well according to the DNS lookup I made just now mail.ideaplace.net doesn't have an "a" record associated with it, so if you set the MX record accordingly mail wouldn't be delivered without the A record being created. With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going. From what account did you sent the email, was that hosted on the same M365 tenant that ideaplace.net was using? Based on the above information, it sounds to me like the mail got stuck in an outbound queue because there was no A record for mail.ideaplace.net, but that is only a supposition. If you sent the email from an account in the same tenant you used before, be aware that unless you remove ideaplace.net from your M365 tenant it could still be the Microsoft servers will try and deliver that mail locally to Exchange. If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points. Which mail? Did you send another mail once you made the change to the MX record, or did you just end up with your original email just showing up once you deleted mail.ideaplace.net from the MX records? My recommendation would be ensuring mail.ideaplace.net is resolvable in DNS before you set up the 0 priority MX record. Thanks. Andrew. -----Original Message----- From: Kelly Ford via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> Sent: Saturday, July 20, 2024 10:14 PM To: Mailing list for blind system administrators < blind-sysadmins@lists.hodgsonfamily.org> Cc: Kelly Ford Subject: [Blind-sysadmins] Changing Mail Routing Hello, Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription. I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net. With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going. If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points. Kelly _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Andrew Hodgson

11:15 a.m.

Hi. I am now seeing mail.theideaplace.net is resolving correctly. Can you try adding the mail.theideaplace.net as first priority MX record again? DKIM/SPF/DMARC records are more for when you send mail from those domains rather than receiving mail. Thanks. Andrew. -----Original Message----- From: Kelly Ford via Blind-sysadmins Sent: Sunday, July 21, 2024 1:19 AM To: Mailing list for blind system administrators Cc: Kelly Ford Subject: [Blind-sysadmins] Re: Changing Mail Routing Thanks to all for hints here. First off, according to the Zone Editor on bluest, all my domains have entires like this, including theideaplace.nethttp://theideaplace.net. Name Mail.theideaplace.net. TTL 14400 Type A Record 50.87.253.68 The entries for all my domains are the same as far as number and types of entries, excluding that the MX record on bluest for theideaplace.nethttp://theideaplace.net points to a Microsoft server. If I create new mailboxes, it makes no changes to any of these records. Interestingly, none of the records for any domain have these newer entries mentioned here that you are supposed to have that I’m finding. I’ll continue to explore this. I don’t do this often and in fact only mades changes once here a while ago to get the mail to show up on a Microsoft server. Undoing that is proving more difficult than making the original change. :) For what it is worth, when I’m testing these changes, I’m sending all mail from another email address that has no association with Microsoft or my own domains. And when I say mail shows up in some of my text, it is new mail. Once a message fails to appear, it never appears and I’m not getting any failure notices. Thank you again for tips. I’m sure this is something not configured correctly on bluest or Microsoft so I’ll continue hunting around. Kelly On Jul 20, 2024, at 6:03 PM, Jackie McBride via Blind-sysadmins wrote: Kelly, my 1st advice is to set up a mailbox on Bluehost. That should set up your records for you. You might wish to go in & edit the mx record, making the priority 5 rather than 0. I could show you records or even set them up for you, but allowing Bluehost to do it automatically is likely less error-prone. You should likely also set up an email address to receive DMARC reports, i.e., dmarc@theideaplace.net It should look like: _dmarc v=DMARC1;p=quarantine; sp=quarantine; rua=mailto: addr@theideaplace.net Your DMARC policy should likely be quarantine till you're sure things are working properly, change to reject once you're sure it's all good. Jackie McBride Proofpoint Certified Email Authentication Specialist 2024 Author 36: Last Hours of a Life Be a hero. Fight Scams. Learn how at www.scam911.org/ Also check out wp4newbs.com brightstarsweb.com mysitesbeenhacked.com On Sat, Jul 20, 2024 at 3:45 PM Andrew Hodgson via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> wrote: Hi. There is a lot to unpack here so probably more questions. Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business >subscription. So just to clarify in your M365 account you have ideaplace.net set up as an authoritative domain with an active mailbox? I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net. Well according to the DNS lookup I made just now mail.ideaplace.net doesn't have an "a" record associated with it, so if you set the MX record accordingly mail wouldn't be delivered without the A record being created. With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going. From what account did you sent the email, was that hosted on the same M365 tenant that ideaplace.net was using? Based on the above information, it sounds to me like the mail got stuck in an outbound queue because there was no A record for mail.ideaplace.net, but that is only a supposition. If you sent the email from an account in the same tenant you used before, be aware that unless you remove ideaplace.net from your M365 tenant it could still be the Microsoft servers will try and deliver that mail locally to Exchange. If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points. Which mail? Did you send another mail once you made the change to the MX record, or did you just end up with your original email just showing up once you deleted mail.ideaplace.net from the MX records? My recommendation would be ensuring mail.ideaplace.net is resolvable in DNS before you set up the 0 priority MX record. Thanks. Andrew. -----Original Message----- From: Kelly Ford via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> Sent: Saturday, July 20, 2024 10:14 PM To: Mailing list for blind system administrators < blind-sysadmins@lists.hodgsonfamily.org> Cc: Kelly Ford Subject: [Blind-sysadmins] Changing Mail Routing Hello, Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription. I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net. With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going. If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points. Kelly _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Jason J.G. White

23 Jul 23 Jul

2:34 p.m.

I'll add here that Microsoft just released support for inbound DANE and DNSSEC, enabling sending servers to verify the certificate of your domain's mail server via TLSA records. This would be worth setting up after everything else is in place. It involves updating your domain's MX record to refer to a server address under the new mx.microsoft domain, after enabling DNSSEC support in Exchange Online PowerShell. You can then enable DANE support, which creates the TLSA record on the subdomain used for the mail server. DKIM, SPF and DMARC are all crucially importnat nowadays, in my opinion, so I would suggest giving them priority. Since you're using Microsoft 365, there is relevant documentation for all of these capabilities on learn.microsoft.com, specific to the Microsoft environment. On 21/7/24 07:15, Andrew Hodgson via Blind-sysadmins wrote:

...

Hi.

I am now seeing mail.theideaplace.net is resolving correctly. Can you try adding the mail.theideaplace.net as first priority MX record again? DKIM/SPF/DMARC records are more for when you send mail from those domains rather than receiving mail.

Thanks. Andrew.

-----Original Message----- From: Kelly Ford via Blind-sysadmins Sent: Sunday, July 21, 2024 1:19 AM To: Mailing list for blind system administrators Cc: Kelly Ford Subject: [Blind-sysadmins] Re: Changing Mail Routing

Thanks to all for hints here.

First off, according to the Zone Editor on bluest, all my domains have entires like this, including theideaplace.nethttp://theideaplace.net.

Name Mail.theideaplace.net. TTL 14400 Type A Record 50.87.253.68

The entries for all my domains are the same as far as number and types of entries, excluding that the MX record on bluest for theideaplace.nethttp://theideaplace.net points to a Microsoft server.

If I create new mailboxes, it makes no changes to any of these records.

Interestingly, none of the records for any domain have these newer entries mentioned here that you are supposed to have that I’m finding.

I’ll continue to explore this. I don’t do this often and in fact only mades changes once here a while ago to get the mail to show up on a Microsoft server. Undoing that is proving more difficult than making the original change. :)

For what it is worth, when I’m testing these changes, I’m sending all mail from another email address that has no association with Microsoft or my own domains. And when I say mail shows up in some of my text, it is new mail. Once a message fails to appear, it never appears and I’m not getting any failure notices.

Thank you again for tips. I’m sure this is something not configured correctly on bluest or Microsoft so I’ll continue hunting around.

Kelly

On Jul 20, 2024, at 6:03 PM, Jackie McBride via Blind-sysadmins wrote:

Kelly, my 1st advice is to set up a mailbox on Bluehost. That should set up your records for you. You might wish to go in & edit the mx record, making the priority 5 rather than 0. I could show you records or even set them up for you, but allowing Bluehost to do it automatically is likely less error-prone. You should likely also set up an email address to receive DMARC reports, i.e., dmarc@theideaplace.net

It should look like: _dmarc v=DMARC1;p=quarantine; sp=quarantine; rua=mailto: addr@theideaplace.net

Your DMARC policy should likely be quarantine till you're sure things are working properly, change to reject once you're sure it's all good.

Jackie McBride Proofpoint Certified Email Authentication Specialist 2024 Author 36: Last Hours of a Life Be a hero. Fight Scams. Learn how at www.scam911.org/ Also check out wp4newbs.com brightstarsweb.com mysitesbeenhacked.com

On Sat, Jul 20, 2024 at 3:45 PM Andrew Hodgson via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> wrote:

Hi.

There is a lot to unpack here so probably more questions.

Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business >subscription.

So just to clarify in your M365 account you have ideaplace.net set up as an authoritative domain with an active mailbox?

I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net.

Well according to the DNS lookup I made just now mail.ideaplace.net doesn't have an "a" record associated with it, so if you set the MX record accordingly mail wouldn't be delivered without the A record being created.

With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going.

From what account did you sent the email, was that hosted on the same M365 tenant that ideaplace.net was using? Based on the above information, it sounds to me like the mail got stuck in an outbound queue because there was no A record for mail.ideaplace.net, but that is only a supposition. If you sent the email from an account in the same tenant you used before, be aware that unless you remove ideaplace.net from your M365 tenant it could still be the Microsoft servers will try and deliver that mail locally to Exchange.

If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points.

Which mail? Did you send another mail once you made the change to the MX record, or did you just end up with your original email just showing up once you deleted mail.ideaplace.net from the MX records?

My recommendation would be ensuring mail.ideaplace.net is resolvable in DNS before you set up the 0 priority MX record.

Thanks. Andrew.

-----Original Message----- From: Kelly Ford via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> Sent: Saturday, July 20, 2024 10:14 PM To: Mailing list for blind system administrators < blind-sysadmins@lists.hodgsonfamily.org> Cc: Kelly Ford Subject: [Blind-sysadmins] Changing Mail Routing

Hello,

Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription.

I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net.

With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going.

If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points.

Kelly

_______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

_______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

_______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Andrew Hodgson

5:58 p.m.

Hi. Wow thanks for providing this information something I will get onto my end for M365. Andrew. -----Original Message----- From: Jason J.G. White via Blind-sysadmins Sent: Tuesday, July 23, 2024 3:35 PM To: blind-sysadmins@lists.hodgsonfamily.org Cc: Jason J.G. White Subject: [Blind-sysadmins] Re: Changing Mail Routing I'll add here that Microsoft just released support for inbound DANE and DNSSEC, enabling sending servers to verify the certificate of your domain's mail server via TLSA records. This would be worth setting up after everything else is in place. It involves updating your domain's MX record to refer to a server address under the new mx.microsoft domain, after enabling DNSSEC support in Exchange Online PowerShell. You can then enable DANE support, which creates the TLSA record on the subdomain used for the mail server. DKIM, SPF and DMARC are all crucially importnat nowadays, in my opinion, so I would suggest giving them priority. Since you're using Microsoft 365, there is relevant documentation for all of these capabilities on learn.microsoft.com, specific to the Microsoft environment. On 21/7/24 07:15, Andrew Hodgson via Blind-sysadmins wrote:

...

Hi.

I am now seeing mail.theideaplace.net is resolving correctly. Can you try adding the mail.theideaplace.net as first priority MX record again? DKIM/SPF/DMARC records are more for when you send mail from those domains rather than receiving mail.

Thanks. Andrew.

-----Original Message----- From: Kelly Ford via Blind-sysadmins Sent: Sunday, July 21, 2024 1:19 AM To: Mailing list for blind system administrators Cc: Kelly Ford Subject: [Blind-sysadmins] Re: Changing Mail Routing

Thanks to all for hints here.

First off, according to the Zone Editor on bluest, all my domains have entires like this, including theideaplace.nethttp://theideaplace.net.

Name Mail.theideaplace.net. TTL 14400 Type A Record 50.87.253.68

The entries for all my domains are the same as far as number and types of entries, excluding that the MX record on bluest for theideaplace.nethttp://theideaplace.net points to a Microsoft server.

If I create new mailboxes, it makes no changes to any of these records.

Interestingly, none of the records for any domain have these newer entries mentioned here that you are supposed to have that I’m finding.

I’ll continue to explore this. I don’t do this often and in fact only mades changes once here a while ago to get the mail to show up on a Microsoft server. Undoing that is proving more difficult than making the original change. :)

For what it is worth, when I’m testing these changes, I’m sending all mail from another email address that has no association with Microsoft or my own domains. And when I say mail shows up in some of my text, it is new mail. Once a message fails to appear, it never appears and I’m not getting any failure notices.

Thank you again for tips. I’m sure this is something not configured correctly on bluest or Microsoft so I’ll continue hunting around.

Kelly

On Jul 20, 2024, at 6:03 PM, Jackie McBride via Blind-sysadmins wrote:

Kelly, my 1st advice is to set up a mailbox on Bluehost. That should set up your records for you. You might wish to go in & edit the mx record, making the priority 5 rather than 0. I could show you records or even set them up for you, but allowing Bluehost to do it automatically is likely less error-prone. You should likely also set up an email address to receive DMARC reports, i.e., dmarc@theideaplace.net

It should look like: _dmarc v=DMARC1;p=quarantine; sp=quarantine; rua=mailto: addr@theideaplace.net

Your DMARC policy should likely be quarantine till you're sure things are working properly, change to reject once you're sure it's all good.

Jackie McBride Proofpoint Certified Email Authentication Specialist 2024 Author 36: Last Hours of a Life Be a hero. Fight Scams. Learn how at www.scam911.org/ Also check out wp4newbs.com brightstarsweb.com mysitesbeenhacked.com

On Sat, Jul 20, 2024 at 3:45 PM Andrew Hodgson via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> wrote:

Hi.

There is a lot to unpack here so probably more questions.

Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business >subscription.

So just to clarify in your M365 account you have ideaplace.net set up as an authoritative domain with an active mailbox?

I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net.

Well according to the DNS lookup I made just now mail.ideaplace.net doesn't have an "a" record associated with it, so if you set the MX record accordingly mail wouldn't be delivered without the A record being created.

With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going.

From what account did you sent the email, was that hosted on the same M365 tenant that ideaplace.net was using? Based on the above information, it sounds to me like the mail got stuck in an outbound queue because there was no A record for mail.ideaplace.net, but that is only a supposition. If you sent the email from an account in the same tenant you used before, be aware that unless you remove ideaplace.net from your M365 tenant it could still be the Microsoft servers will try and deliver that mail locally to Exchange.

If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points.

Which mail? Did you send another mail once you made the change to the MX record, or did you just end up with your original email just showing up once you deleted mail.ideaplace.net from the MX records?

My recommendation would be ensuring mail.ideaplace.net is resolvable in DNS before you set up the 0 priority MX record.

Thanks. Andrew.

-----Original Message----- From: Kelly Ford via Blind-sysadmins < blind-sysadmins@lists.hodgsonfamily.org> Sent: Saturday, July 20, 2024 10:14 PM To: Mailing list for blind system administrators < blind-sysadmins@lists.hodgsonfamily.org> Cc: Kelly Ford Subject: [Blind-sysadmins] Changing Mail Routing

Hello,

Does anyone have thoughts on what I can try to diagnose a problem I’m having changing the destination for one of my email accounts. I currently have the mx record pointing to a Microsoft server because kelly@theideaplace.netmailto:kelly@theideaplace.net is the account I use with a Microsoft business subscription.

I want to return the mail to the destination where the rest of that domain is hosted on Bluehost. I’ve lowed the priority of the MX record for Microsoft to 10 and added a new MX record at priority 0 pointing to mail.theideaplace.nethttp://mail.theideaplace.net.

With these changes in place, email quits going to Microsoft but it is not showing up on the servers for Bluehost and is not being returned as a problematic address. I have no idea where the mail is actually going.

If I delete the priority 0 MX record for mail.theideaplace.net< http://mail.theideaplace.net>, then my mail shows back up on the Microsoft Exchange server where the lower priority MX record points.

Kelly

_______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

_______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

_______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org _______________________________________________ Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Blind-sysadmins mailing list -- blind-sysadmins@lists.hodgsonfamily.org To unsubscribe send an email to blind-sysadmins-leave@lists.hodgsonfamily.org

Age (days ago)

Last active (days ago)

List overview

Download

8 comments

4 participants

participants (4)

Andrew Hodgson
Jackie McBride
Jason J.G. White
Kelly Ford

Changing Mail Routing

tags

participants (4)