New Website - Web Submissions - Postini

[goobernoodles]

My company recently moved to a new website. The website has numerous web submission forms that are set to send to various internal email addresses here. The site was designed using Drupal.

I'm not familiar with how exactly web submission forms work, but apparently an email shows up from "noreply@ourdomain.com".

We're not getting emails from the forms, but if you set the forms to send to outside email addresses (gmail, etc), they go through. Obviously the problem is between the form and our mail server. I would think that Postini will classify any mail showing up from a non-existant user on our domain will be classified as spoofing.

Am I right in this thinking? How do I get around this?

 

[KingGheedora]

Where is the website hosted (what servers are the forms running on)? Are they hosted by a 3rd party service? Or do you have control over those servers? And I'm assuming that you use postini to filter incoming email for your internal address that you want to receive the emails at?

Postini is probably filtering them out because the @yourcompany.com domain name that these emails are being sent from hasn't been set up to allow the servers that send the emails to send stuff on behalf of @yourcompany.com. You might need an SPF record in your DNS entries for yourcompany.com. It can be done in the form of a "TXT" record. It is basically an entry that says the owner of yourdomain.com allows the following hosts and or IP's to send mail on our behalf... (list of IPs/hosts)".

A lot of servers will reject mail where the domain part of the "from" address doesn't have a corresponding SPF record like the one I described above.

 

[goobernoodles]

It's 3rd party hosting. So I assume I would make a TXT DNS entry at our domain name registrar?

How does this look?

“v=spf1 a mx ip4:WEBSERVER_IP include:OURDOMAIN”

I was using this as a reference for creating SPF records: http://www.socketlabs.com/articles/show/email-authentication-guide?page=3

 

[KingGheedora]

I don't remember the syntax off the top of my head. There are online SPF checker tools you can use that will check your entry for you.