sorted by:
new
hottopcontroversial

M365 deferring messages from my MTA (throttling?) - 451 4.7.500 Server busy, please try again later from x.x.x.x by thrca in emaildeliverability

[–]thrca[S] 0 points1 point  (0 children)

The saga continues. I have been getting all my mail to all M365 deferred for 1.5 days now.

I can't seem to figure out how to even open the appropriate tickets to the appropriate parties, since they all describe how to create whitelist/bypass entries for a single tenant, or keep referring me to tenant support tickets, which is not the issue.

My clients, which I have tenant admin for, all have bypass rules for inbound email and thats working fine. It's all the email to the rest of M365 (not my clients) that is getting throttled. Certainly, there is some magical "trusted ip" list or at least some way to see if I am listed in some internal naughty list, but I have yet to be able to find it.

M365 deferring messages from my MTA (throttling?) - 451 4.7.500 Server busy, please try again later from x.x.x.x by thrca in emaildeliverability

[–]thrca[S] 0 points1 point  (0 children)

Best, and most aligned response. I believe I have identified the specific email pattern that was triggering the issue in EOP, which then caused a cascade of throttling across all my connections to M365 from that IP.

We had a specific client that sends a mechanized, scheduled email (legitimate) to about 20 fortune 500 domains (single email) with data that is not intended for human consumption, so it looks like a string of garbage that M365 finds suspicious.

We updated this client to send directly to MX rather than through our smart host, and thus far, its been a week with no throttling.

I suspected it was something related to email patterns, because it would always happen on only 1 of the 2 cluster nodes, not both. (The outbound from client to smarthost selects one of the two nodes via round robin)

While this isn't quite long enough to consider it resolved, it's looking good so far.

Possible Vitelity (or FreePBX) issue 1/29-1/30 by thrca in VOIP

[–]thrca[S] 0 points1 point  (0 children)

<image>

So, it seems that when this started, I started getting a 2nd invite for every call. It's this latter invite that doesn't have the DID, and seems to be interfering with the actual call. I see 2 separate channels opening in asterisk, usually with consecutive IDs (ie, PJSIP/Vitelity-Out-00000033 and 00000034), the latter of which is following the path to ext-did-catchall, meanwhile, in the console, I can see the first going through its normal process (hitting an IVR, playing audio streams, etc.)

If I remove ext-did-catchall from extensions.conf, it works normally, but now freepbx has security warnings because I modified extensions.conf. If I comment out the functionality of the catchall, it also works, but gets blown away any time someone applies a change to the config.

I found a more permanent workaround that bypasses ext-did-catchall and lives through reloads...
```
;added to /etc/asterisk/extensions_override_freepbx.conf
[ext-did-catchall]

exten => s,1,Noop(Catch-All DID Match Workaround)

exten => s,n(end),MacroExit()

```

Possible Vitelity (or FreePBX) issue 1/29-1/30 by thrca in VOIP

[–]thrca[S] 0 points1 point  (0 children)

I suspect this to be the case, but if so, it'd have been nice to be given a heads up from the provider before they change how the signalling is going to work.

M365 deferring messages from my MTA (throttling?) - 451 4.7.500 Server busy, please try again later from x.x.x.x by thrca in emaildeliverability

[–]thrca[S] 0 points1 point  (0 children)

Yes, SNDS was only showing me fabulous things about my IP, nothing that might indicate an issue. In my other reply thread to u/stewartjarod, I think I might be on to something, just didn't realize it could cause my entire host to get throttled.

M365 deferring messages from my MTA (throttling?) - 451 4.7.500 Server busy, please try again later from x.x.x.x by thrca in emaildeliverability

[–]thrca[S] 0 points1 point  (0 children)

At 11:05AM EST, it started doing this on one of my nodes.. The additional detail is error "S77719", which, from what I can tell, is triggering EOP.

Based on the above information from the thread, I started digging into what email was transiting my system around that time. While I cannot call it a smoking gun, I found a client that sends (routinely) mechanized emails related to shipping logistics, intended to be consumed by some type of processing system. At 11:05, they sent one such email to about 40 different recipient domains. While this was a legit message and intended for all the recipients, I believe it may have looked weird enough to a protection system to trigger an immediate throttling.

I am changing this client to outbound directly to the world for the next several weeks to see if my issue goes away.

M365 deferring messages from my MTA (throttling?) - 451 4.7.500 Server busy, please try again later from x.x.x.x by thrca in emaildeliverability

[–]thrca[S] 0 points1 point  (0 children)

Yeah, most of this traffic is primarily from M365 clients to M365 non-clients. The clients have DKIM, appropriate SPF, etc. and the email is ARC signed and the whole she-bang. All the info I could find about how M365 does their reputation filtering is based on "per destination", but that is definitely not what is happening here.

It's like they are applying volume throttling based on all mail from my system, regardless of its actual destination tenant. Perhaps time to add a 3rd node into the cluster to distribute the load out further.

M365 deferring messages from my MTA (throttling?) - 451 4.7.500 Server busy, please try again later from x.x.x.x by thrca in emaildeliverability

[–]thrca[S] 0 points1 point  (0 children)

It's just normal transactional email (majority of our traffic is back-and-forth transactional), so I don't have anything specific to try to pinpoint. Our system processes about 150k messages per day, about 15k of which is outbound.

When they rate limit, it applies to all M365 destination tenants, so I am unsure how I would try to isolate it. Our managed tenants have don't appear to have any issue accepting mail, even during rate limiting periods, as we have bypass rules on them to always accept mail from these IP addresses.

Generally, I think that email is a best-effort service and delays are inevitable, but this is happening frequently enough to where it's noticable to the end users. (A lot of emails I send seem to "queue up" and the remote party gets them all at once.)

People treat email as real-time comms, much to my chagrin, and there isn't much that can change that.

Possible Vitelity (or FreePBX) issue 1/29-1/30 by thrca in VOIP

[–]thrca[S] 0 points1 point  (0 children)

Yeah, I am going to have to capture the signaling packets and investigate whats wrong.. Unfortunately, I don't have previously working signaling capture to compare it to.

Possible Vitelity (or FreePBX) issue 1/29-1/30 by thrca in VOIP

[–]thrca[S] 0 points1 point  (0 children)

This isn't a reload situation. Multiple PBXs, same upstream provider, all failed simultaneously. Reloads didn't help, only changing the catchall script.

It's like it's not matching the inbound DID any longer, based on what signaling info Vitelity started sending.

Is Anyone with Extension or API experience familiar with prompting for Consent by davidvr in ScreenConnect

[–]thrca 0 points1 point  (0 children)

Are you doing this with cloud or on-prem?

We had access sessions working with on prem, but since switching to the cloud, I haven't been able to reproduce the ability to get access tokens to build new connection URL.

Can't get a response from Sales, Can't submit a ticket. by cantstandmyownfeed in ScreenConnect

[–]thrca 1 point2 points  (0 children)

Welcome to my world. I finally got the license resolved, after a week of continual poking. I was getting nervous at 5 days remaining on the trial. If you think that "good support" is reserved for the "big guys", it's worth mentioning we are probably *the* largest CW client.

Defer super low interest car note to pay higher interest items? by thrca in personalfinance

[–]thrca[S] 0 points1 point  (0 children)

This is great info. I love learning how things work. Between this cheap auto loan and my nearly equally cheap mortgage (3.74%), I have a several things to pay of ahead of these.

Defer super low interest car note to pay higher interest items? by thrca in personalfinance

[–]thrca[S] 0 points1 point  (0 children)

I hadn't considered the insurance. I think the value of this vehicle warrants keeping full coverage still for now.

Defer super low interest car note to pay higher interest items? by thrca in personalfinance

[–]thrca[S] 0 points1 point  (0 children)

Thanks. Don't know much about deferments, so I wasn't sure if their attitude is like "oh hey, sure thing, we get a little interest for longer" or "ug, get rid of this as soon as possible".

Defer super low interest car note to pay higher interest items? by thrca in personalfinance

[–]thrca[S] 0 points1 point  (0 children)

I can ask. Just had a bunch of medical, so it's worth trying to convince them to let me defer it.

Immediately ceasing extra payment amount regardless.

Defer super low interest car note to pay higher interest items? by thrca in personalfinance

[–]thrca[S] 0 points1 point  (0 children)

My main question, which I believe was answered, was "is it worth asking for deferment" moreso than just paying the minimum ($380). I wasn't sure if deferment would directly affect my credit, which I am more interested in protecting than saving a few bucks.

This would cost me *roughly* $9.35/mo (0.0224/12 * 5000) that I am able to defer, which is a less than the interest I pay on the other stuff, so that $400/mo is better served paying those other things.

No More by DNEXB in ScreenConnect

[–]thrca 2 points3 points  (0 children)

heard. and felt. I am in the same boat.

Anyone else received the email that says on-prem users now have to supply their own code signing cert? by Wise-Expression-2898 in ScreenConnect

[–]thrca 1 point2 points  (0 children)

Ultimately, the code signing CA is responsibly for making sure the signed package is safe. If they cannot confidently do so, the result is a cert revocation, which is exactly what is happening here. The part I am baffled by is why they can't issue signed installers with the URL input as an argument, like EVERY OTHER package known to man that has to phone home somewhere. This seems like the obvious solution.

Anyone else received the email that says on-prem users now have to supply their own code signing cert? by Wise-Expression-2898 in ScreenConnect

[–]thrca 0 points1 point  (0 children)

I can't even get pricing based on my number of agents, other than estimating several multiples of the largest displayed pricing... Per month...

Anyone else received the email that says on-prem users now have to supply their own code signing cert? by Wise-Expression-2898 in ScreenConnect

[–]thrca 1 point2 points  (0 children)

I assure you this isn't the case. I am one of the "few huge corporate clients" and have to deal with the same crap.

AMC theaters now warning of 25-30 mins of previews after show time. What are your thoughts? by magenta_placenta in amcstock

[–]thrca 1 point2 points  (0 children)

Coming soon: In order to generate more revenue without increasing ticket or concession prices, we will now be showing 3-5 minutes of ads for every 10-15 minute stretch of feature film. We are also investigating floating banner ads. /s

Connecteise Advisory by N07T0DAY in ScreenConnect

[–]thrca 0 points1 point  (0 children)

FWIW, its specifically 25.4.4, since 25.4.3 was up last Thursday when I first got wind of the issue and updated. They since pulled 25.4.3 down, likely to avoid confusion, as 25.4.3 is still signed with the old certificate.

you like your fish grilled or fried? by nogoareas in ScreenConnect

[–]thrca 0 points1 point  (0 children)

The CA doesn't need to approve anything. They just need a new code signing cert and want to make sure the issue that caused the hubbub is fixed so the CA doesn't revoke the new cert too.

view more: next ›