Plusnet emails refusing to send.

[andywat]

I can send emails again

[rocketuk36]

Thanks for the alert. I managed to send one this morning. Lets hope it doesn't happen again.

[Annasdad]

I've been getting this problem since the weekend. I use Outlook and when I try to send I get 

Task 'd*****.force9.co.uk - Sending' reported error (0x800CCC78) : 'Cannot send the message. Verify the email address in your account properties. The server responded: 550 <<redacted>@<redacted>.force9.co.uk> sender rejected (blacklisted by local policy)'

I have powered my hub off for over an hour but it came back with the same IP address. I can send emails from webmail.

I spoke to support on Sunday and after them initially telling me it was my problem, they admitted that this was a known problem and that they would contact me when fixed. 

I've heard nothing since.

Dave

Moderator's note:
Personal information removed from a public forum (to an area that staff can see).

[LexLex2020]

Hi everyone.

I am still seeing reports that some may still be affected by this SMTP Authentication issue, most people I can see have said the issue seems to be resolved.

Is anyone still getting the issue? If so can you send me a direct message? 

@Annasdad, are you seeing the SMTP errors others have mentioned previously in this post?

Or if you have seen anyone who is experiencing this problem point them in my directions so I can add them to the list of affected users.

Thanks,

Lex

[Townman]

Folks @LexLex2020 will need the following information to profile issues…

• The email brand
• The error code reported
• The email client (or web browser interface)
• If a client network connection method - via Plusnet or some other including VPN
• Authentication credentials method (email address or account name or none)
• Default or secondary email addresses 

Running the server connection diagnostics (link below) would be helpful.

Not all of the SMTP connection failures are the same 

[sjpbarker]

Hi Lex,
I am still getting the 550 error qualified as a "blacklisted by local policy". I am on free-online. I have not been able to send an email for nearly 3 weeks. Question 250369055 has been raised with help desk.
Thanks,
Simon

[Annasdad]

Lex

Yes still have the problem.

I'm using MS outlook. I'm recieing mail ok but can't send any emails to any users including hotmail and gmail.

Not sure what other SMTP errors you are asking about. Let know if I haven't given you the answers you needed.

Dave

[Annasdad]

Information requested

• The email brand
  • MS Outlook
• The error code reported
  • 
    Task 'd**@***.force9.co.uk - Sending' reported error (0x800CCC78) : 'Cannot send the message. Verify the email address in your account properties. The server responded: 550 <(redacted)@(redacted).force9.co.uk> sender rejected (blacklisted by local policy)'
• The email client (or web browser interface)
  • Don't quite understand the difference from the first question.Does POP/SMTP answer this question
• If a client network connection method - via Plusnet or some other including VPN
  • Via PlusNet
• Authentication credentials method (email address or account name or none)
  • account name (again not sure if I've looked up the correct field)
• Default or secondary email addresses 
  • default email is @a(redacted)@(redacted).force9.co.uk
  • secondary email addresses
    • (redacted)@(redacted).force9.co.uk
    • (Redacted)@(redacted).force9.co.uk
    • (Redacted)@(redacted).force9.co.uk

Will post anything from the diagnostics speratelyseperately 

Moderator's note:
Personal information removed from a public forum (to an area that staff can see).

[Annasdad]

The diagnotics requested

PS C:\Users\Dave> curl.exe -v imaps://imap.force9.net -u d***@***.force9.co.uk
Enter host password for user '<redacted>@'<redacted>.force9.co.uk':
* Host imap.force9.net:993 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.196
* Trying 91.204.208.196:993...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
PS C:\Users\Dave> curl.exe -v pop3s://mail.force9.net -u '<redacted>@'<redacted>.force9.co.uk
Enter host password for user 'd@@@@@@@.force9.co.uk':
* Host mail.force9.net:995 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.196
* Trying 91.204.208.196:995...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
PS C:\Users\Dave> curl.exe -v smtp://relay.force9.net:587 -u d***@***.force9.co.uk --ssl-reqdC****A****
curl: option --ssl-reqdC****A**** is unknown
curl: try 'curl --help' for more information
PS C:\Users\Dave>

[Townman]

@Annasdad 

EDITED - significant change

Excellent - the certificate warnings on IMAP & POP3 are disconcerting.

For some reason something got added to the tail of the SMTP command - I’ve seen variable behaviour - ENTER might need to be pressed to get the 3rd command to execute BEFORE typing what I guess to be your password.

[Annasdad]

Thanks for the quick response

As far as I can tell I don't have encryption set on anything. I've rerun the powershell scripts and now get

PS C:\Users\Dave> curl.exe -v imaps://imap.plus.net -u <redacted>@<redacted>.force9.co.uk
>> curl.exe -v pop3s://mail.plus.net -u <redacted>@<redacted>.force9.co.uk
>> curl.exe -v smtp://relay.plus.net:587 -u <redacted>@<redacted>.force9.co.uk --ssl-reqd
Enter host password for user '<redacted>@<redacted>.force9.co.uk':
* Host imap.plus.net:993 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.26
* Trying 91.204.208.26:993...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
Enter host password for user '<redacted>@l<redacted>.force9.co.uk':
* Host mail.plus.net:995 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.26
* Trying 91.204.208.26:995...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
Enter host password for user '<redacted>@<redacted>.force9.co.uk':
* Host relay.plus.net:587 was resolved.
* IPv6: (none)
* IPv4: 212.159.8.107, 212.159.9.107
* Trying 212.159.8.107:587...
* Connected to relay.plus.net (212.159.8.107) port 587
< 220 avasout-peh-002 smtp relay.plus.net
> EHLO HomePC
< 250-avasout-peh-002 hello [80.229.168.3], pleased to meet you
< 250-HELP
< 250-AUTH LOGIN PLAIN
< 250-SIZE 104857600
< 250-PIPELINING
< 250-8BITMIME
< 250-STARTTLS
< 250 OK
> STARTTLS
< 220 Ready to start TLS
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
PS C:\Users\Dave>

Moderator's note:
Personal information removed from a public forum (to an area that staff can see).

[Townman]

Hi @Annasdad,

There are aspects of your diagnostics which give me some concerns...

1. The manner in which the multi-line commands are being processed
2. The certificate revocation errors

What environment are you running these in?  The prompt suggests PowerShell, but I feel the need to verify the environment so that one can be assured that the odd-ball behaviour of the diagnostics is related to the service, not the diagnostic environment.

For me on Win11 and TERMINAL the following warning is presented when pasting into the PS prompt...

On pressing enter the commands execute in turn, pausing for the password; the last command (SMTP) needs the enter key pressing and then it prompts for the password.

PS C:\Users\******> curl.exe -v imaps://imap.force9.net -u you@youraccount.force9.co.uk
Enter host password for user 'you@youraccount.force9.co.uk':
* Host imap.force9.net:993 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.196
*   Trying 91.204.208.196:993...
* schannel: disabled automatic use of client certificate
* Connected to imap.force9.net (91.204.208.196) port 993
....
PS C:\Users\******> curl.exe -v pop3s://mail.force9.net -u you@youraccount.force9.co.uk
Enter host password for user 'you@youraccount.force9.co.uk':
* Host mail.force9.net:995 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.196
*   Trying 91.204.208.196:995...
* schannel: disabled automatic use of client certificate
* Connected to mail.force9.net (91.204.208.196) port 995
.....
PS C:\Users\******> curl.exe -v smtp://relay.force9.net:587 -u you@youraccount.force9.co.uk --ssl-reqd
Enter host password for user 'you@youraccount.force9.co.uk':
* Host relay.force9.net:587 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.196
*   Trying 91.204.208.196:587...
* Connected to relay.force9.net (91.204.208.196) port 587

Your posts suggests that all three commands are taken as a single command... though they each execute in turn requesting the password.

---

@Annasdad wrote:

PS C:\Users\*****> curl.exe -v imaps://imap.plus.net -u *****@*****.force9.co.uk
>> curl.exe -v pop3s://mail.plus.net -u *****@*****.force9.co.uk
>> curl.exe -v smtp://relay.plus.net:587 -u *****@*****.force9.co.uk --ssl-reqd
Enter host password for user '*****@*****.force9.co.uk':
* Host imap.plus.net:993 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.26
* Trying 91.204.208.26:993...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.

.....

---

At this point of digging, I note that you are testing a FORCE9 email address using the PLUSNET server details - what drew you to select PLUSNET as the email brand rather than FORCE9 ?  IMAP and POP3 appear to log on successfully using cross brand servers, but my tests for SMTP fail.  Please ensure that you are using the correct server settings in your email client.

Yet more diffing on what you are seeing, give rise to other potential issues in YOUR environment.  Are you using Web Shield by Avast Antivirus?  See Avast + Curl SSL Revocation Problem - Microsoft Q&A

If yes, please try disabling it and rerun the tests with the correct server settings.

[sjpbarker]

My diagnostics are:

PS C:\Users\sxx> curl.exe -v imaps://imap.free-online.net -u sxx@syy.free-online.co.uk
>> curl.exe -v pop3s://mail.free-online.net -u sxx@syy.free-online.co.uk
>> curl.exe -v smtp://relay.free-online.net:587 -u sxx@syy.free-online.co.uk --ssl-reqd
Enter host password for user 'sxx@syy.free-online.co.uk':
* Host imap.free-online.net:993 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.193
* Trying 91.204.208.193:993...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
Enter host password for user 'sxx@syy.free-online.co.uk':
* Host mail.free-online.net:995 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.193
* Trying 91.204.208.193:995...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
Enter host password for user 'sxx@syy.free-online.co.uk':
* Host relay.free-online.net:587 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.193
* Trying 91.204.208.193:587...
* Connected to relay.free-online.net (91.204.208.193) port 587
< 220 mail.enmail.co ESMTP ready
> EHLO LAPTOP-SI6ERU89
< 250-mail.enmail.co
< 250-AUTH PLAIN LOGIN
< 250 STARTTLS
> STARTTLS
< 220 2.0.0 Start TLS
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.

I am using Norton for anti-virus on Windows 10. Email addresses have edited.

[Annasdad]

I'm running these commands in Powershell won Windows 10. I use Norton Antivirus - as I have done for years. My email was working fine last week - again has it has done for years.

The only change I have made is to my password as it appeared that someone had spoofed my email address and sent a very large number of emails. I got all the non delivered responses.

I have rerun the diagnostics posting one command at a time. They will be at the end of this post.

Bit confused how I using a plusnet server. My outlook is configured to use

mail.force9.net and relay.force9.net.

Where would I be setting up to use the PlusNet servers?

One thing I have noticed is that my type of service is a POP/SMTP - again as it has always been, but in your test it was a POP3s type. Is this relevant?

PS C:\Users\Dave> curl.exe -v imaps://imap.force9.net -u <redacted>@<redacted>.force9.co.uk
Enter host password for user '<redacted>@<redacted>.force9.co.uk':
* Host imap.force9.net:993 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.196
* Trying 91.204.208.196:993...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
PS C:\Users\Dave> curl.exe -v pop3s://mail.force9.net -u <redacted>@<redacted>force9.co.uk
Enter host password for user '<redacted>@<redacted>.force9.co.uk':
* Host mail.force9.net:995 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.196
* Trying 91.204.208.196:995...
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
PS C:\Users\Dave> curl.exe -v smtp://relay.force9.net:587 -u <redacted>@<redacted>.force9.co.uk --ssl-reqd
Enter host password for user '<redacted>@<redacted>.force9.co.uk':
* Host relay.force9.net:587 was resolved.
* IPv6: (none)
* IPv4: 91.204.208.196
* Trying 91.204.208.196:587...
* Connected to relay.force9.net (91.204.208.196) port 587
< 220 mail.enmail.co ESMTP ready
> EHLO HomePC
< 250-mail.enmail.co
< 250-AUTH PLAIN LOGIN
< 250 STARTTLS
> STARTTLS
< 220 2.0.0 Start TLS
* schannel: disabled automatic use of client certificate
* schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
* closing connection #0
curl: (35) schannel: next InitializeSecurityContext failed: CRYPT_E_NO_REVOCATION_CHECK (0x80092012) - The revocation function was unable to check revocation for the certificate.
PS C:\Users\Dave>

Moderator's note:
Personal information removed from a public forum (to an area that staff can see).

[Townman]

@Annasdad and @sjpbarker 

I have now reproduce the oddity above with pasting the diagnostic commands into Power Shell - Win10 and Win11 behave differently...

• Win11 paste by whatever means gives the warning screen reported above
  • On clicking OK each command is executed in turn prompting for the password for IMAP and POP3
  • Enter needs to be pressed to invoke the SMTP diagnostic before entering the password
• Win10 the warning screen is not presented
  • Paste with right mouse click enters each command in turn as seen in Win11
  • Paste with CTRL/V enters all three commands as shown in your posts - enter needs to be pressed to invoke the commands which then executes as above

Recommendation is that the PASTE should be RIGHT CLICK on the mouse.  I will update the diagnostic guide.

Back to the certificate error - can you both please try this with AV disabled?  I am running McAfee and do not encounter this issue.  As per the post above there is an explicate reference to interference with at least one AV brand.