Xink incident

Server-side Mail delivery issue - EU Server

Major Resolved View vendor source →

Xink experienced a major incident on October 20, 2024 affecting Server-side (Re-routing), lasting 3h 41m. The incident has been resolved; the full update timeline is below.

Started
Oct 20, 2024, 10:28 AM UTC
Resolved
Oct 20, 2024, 02:10 PM UTC
Duration
3h 41m
Detected by Pingoru
Oct 20, 2024, 10:28 AM UTC

Affected components

Server-side (Re-routing)

Update timeline

  1. investigating Oct 20, 2024, 10:28 AM UTC

    We are experiencing some problems with the Server-side (rerouting) service. As a result, some of our clients with server-side enabled may experience issues in email delivery. We are currently working on resolving the issue as our TOP PRIORITY. In the meantime, we suggest temporarily disabling the transport rule >https://support.xink.io/support/solutions/articles/1000311916-it-pro-how-to-disable-server-side-transport-rule We will get back with an update when you can re-activate the transport rule. We apologize for this incident and working to resolve it urgently.

  2. identified Oct 20, 2024, 01:21 PM UTC

    Spamhaus (Microsoft's default spam service provider) is blocking our EU IP and some of our clients with rerouting enabled sent messages are not received.

  3. monitoring Oct 20, 2024, 01:25 PM UTC

    EU IP has been delisted with Spamhaus and service is restored.

  4. resolved Oct 20, 2024, 02:10 PM UTC

    This incident has been resolved.

  5. postmortem Oct 22, 2024, 12:38 AM UTC

    Due to SpamHouse \(Microsoft's default spam service provider\) blocking one of our EU IP relay, between October 19, 2024 15:58:51 and October 20, 2024 11:27:37, some of our clients with rerouting enabled received NDRs or were unable to send emails. Below is an error that affected users received. 2024-10-20 11:42:20 1t2UKC-0000000738v-1Zz9 \*\* [xxxx@](mailto:[email protected])domain.com R=dnslookup T=remote\_smtp [H=xxx-nl.mail.protection.outlook.com](http://H=hcs-nl.mail.protection.outlook.com) \[52.101.68.36\] X=TLS1.3:TLS\_AES\_256\_GCM\_SHA384:256 CV=yes: SMTP error from remote mail server after RCPT TO:: 550 5.7.1 Service unavailable, Client host \[40.68.36.243\] blocked using Spamhaus. To request removal from this list see [https://www.spamhaus.org/query/ip/40.68.36.243](https://www.spamhaus.org/query/ip/40.68.36.243) AS\(1440\) \[[DB5PEPF00014B97.eurprd02.prod.outlook.com](http://DB5PEPF00014B97.eurprd02.prod.outlook.com) 2024-10-20T11:42:20.814Z 08DCF05E631C54C6\]