Welcome!

Linux Authors: Pat Romanski, Liz McMillan, Patrick Carey, Yeshim Deniz, Peter Silva

Related Topics: Linux, Open Source

Linux: Article

Is Your E-Mail Being Delivered?

Chances are, you just don't know

Considering that e-mail is the killer application of the Internet, this question seems rather unexpected. After all, every time we click the send button, things seem to work. After reading this article you'll be amazed at the journey your e-mail goes through and even more amazed that it sometimes makes its way to the intended recipient at all.

Part of the problem is that the underlying infrastructure of e-mail is almost 25 years old and broken. The famous Sendmail program of Unix was written in 1981, and very little has been done to update it. Other programs, such as qmail and Postfix, have improved on the basic Sendmail, but the work has mainly focused on removing the bugs and making the administration a little bit more tolerable. Considering that 70% of worldwide e-mail is sent using Sendmail, it's actually quite amazing that anything gets delivered.

The first issue is performance. Today, billions of e-mail messages are being sent on a daily basis; the volumes are incredible. Now consider that the average Sendmail implementation can only handle about 7,000 messages an hour. Not that you are going to send that many messages, but just think of a company with 10,000 employees and you can see how quickly the e-mail server can be overloaded on the outbound. Add the inbound flow and you can see how quickly you can get into trouble.

As the people increasingly feel more comfortable with the Internet and conduct more and more business on it, it's not uncommon to see e-commerce Web sites that enjoy 250,000 transactions a day. Each of these transactions involve some sort of an e-mail with a notification or confirmation of the transaction. Assuming that you have resolved the performance issues, probably using brute force and adding more e-mail servers, you still have to contend with another issue, the visibility into the delivery.

Suppose you send a message and it bounces, say because the quota was exceeded at the receiver's end (mailbox full). You read the bounce message and probably make a note to try later. However, if the sender is an application, chances are that the bounced message is lost in the ether of your systems and nothing is being done with it. This is cause for concern as it can negatively affect your business, for example, if the customer purchased a license of your software on your Web site. Suppose the process is that you send a confirmation message with the license key so that the customer can activate the software that was downloaded. Now consider what happens when that confirmation e-mail is not delivered. For one, you cannot recognize the revenues of that transaction, but you don't even know that. After a few days, the customer calls your support center to clear up the matter. That call, which could have been avoided, will cost you at least $20, and a lot more if your support rep cannot locate the e-mail in question. This touches on archiving e-mail messages for legal purposes or just customer support issues, but that is a subject for another article.

The issue of visibility into the delivery sounds simple, but it is rather complicated. When an e-mail server establishes a connection with another server, two things can happen: the message is either accepted or rejected. This rejection is called a synchronous bounce, and can be something as simple as a "user unknown" or "account closed." But even if you don't get this reject notice, you still can't assume successful delivery of your message. The reason is that you can get what is known as an asynchronous bounce, up to four days after your message was supposedly accepted. This bounce can be caused by any number of things, for example, because the recipient's mailbox was full.

You would expect that your e-mail server would take care of this, but the truth of the matter is that most e-mail servers don't give you the required visibility into the delivery of your e-mail. Most e-mail servers don't process the asynchronous bounces and, when they do, the reports aren't combined with your synchronous bounces and don't provide the granularity you require to make an informed decision over the final disposition of the message. For example, an "out of the office" message will be categorized as a soft bounce, when in reality it is not.

To complicate matters a bit more, every bounce has an associated code; however, every domain uses them in a different way, creating their own explanations as the associated text messages for a bounce code. So you are left having to read the actual error message that comes back. While this can be made to work for applications with some fancy programming, it's a moving target, since many domains constantly revise and update their reasons for rejecting messages.

Things will get really ugly when you start resending those messages without actually analyzing why they were rejected in the first place, an unfortunate but understandable mistake under the circumstances. Soon enough the ISPs will consider you a spammer because of your high incidence of "bad" e-mail. Soon thereafter, you will find that the IP address you use for your e-mail server has been blacklisted, with all the negative implications that brings, especially since e-mail is critical to your online business.

Is your e-mail being delivered? You now start wondering. As if the issues explained earlier were not enough, assuming that your e-mail makes it through the receiving e-mail server, now it has to jump hoops trying to avoid all the anti-spam and anti-phishing filters, which can simply drop your message, quarantine it, or place it in the junk folder of the recipient. In the first two cases, the intended recipient will probably never get your message, while in the last case the likelihood of the message being read is rather low.

This brings us to the issue of spam. While legitimate businesses are sending more e-mail for more reasons, the exponential jump in e-mail traffic every year is due to spam. Because of spam there is a very healthy industry dedicated to the creation and maintenance of filters that try to deter the delivery of these messages. The problem is that your message might also fall into this category without you knowing it. JupiterResearch states that 25% of legitimate e-mail goes undelivered. This might not be a big deal when it's personal e-mail, but when it's critical business messages, it becomes a real issue, especially when many users have lost trust in e-mail.

Thanks to spam, there is a change in the e-mail environment. Not only do you have the deliverability issues we already mentioned, but you also have a tough environment that is getting tougher as legislation and self-regulation impose a greater accountability on e-mail senders. Unfortunately, e-mail was not developed with security and accountability in mind. This accountability is crucial in solving the spam crisis and restoring the trust in e-mail that many have lost.

Accountability can be broken down into three efforts:

  1. Authentication: Where the identity of the sender is clearly established. This will deny spammers the ability to hide. There are various authentication standards out there, such as DKIM from Cisco and Yahoo!, and Microsoft's Sender ID, but there is no clear winner yet.
  2. Reputation: Which will associate the identity of the senders with their reputation. Today, reputation systems are mainly internal to the ISPs, where they allow their users to mark messages as spam, which creates a spam score per sender.
  3. Accreditation: If you don't have a reputation yet, or you have managed to damage yours, you can always go to an accreditation vendor, which will review and implement best practices and then allow you to add a special token to your messages that will tell ISPs that you are not spamming, and they will place your messages in the inbox of the intended recipient.
The problem is that spammers won't be the only ones affected by accountability. You will also be directly affected by this. Admittedly, e-mail accountability is still evolving, but this much is clear: authentication will shortly become mandatory. The ISPs and bigger domains will have different access rules, including authentication protocols. The reputation systems will measure customer satisfaction based on the number of complaints on a sender. Customer satisfaction will hinge on sender practices, and best practices will become required practices.

If your business involves sending e-mail blasts, which can go from a simple newsletter to what is known as permission-based direct marketing, you also have to comply with a few laws. In the United States the main law related to e-mail is known as CAN-SPAM. One of the things you have to include in every message in a blast is the ability for the receiver to unsubscribe. Again, this looks rather simple, but when you get around to fully implementing these functionalities, you will notice that it starts touching a larger amount of your current systems and ease of integration is one of those features you really want.

We all know how much easy integration can help us succeed on a software-related project. The e-commerce Web site has to integrate not only with the inventory and shipping systems, but also with the various financial systems. Each of these systems will, under certain circumstances, generate a confirmation or notification that will be sent via e-mail and has to be delivered. Very likely you will want these messages to be personalized, probably with something more sophisticated than "Dear Jane," so now you are talking about adding a few steps in the composition of the actual message, and soon you will find other things that you will want to add or you will be forced to implement in order to comply with legislation. Thus, ease of integration becomes vital.

By the way, if you think that using an e-mail service provider (ESP) is a solution to all these problems, think twice. They also use the same antiquated infrastructure you do.

So, is your e-mail being delivered? Well, chances are that you don't know and, as things get tougher and tougher in the e-mail environment, chances are that you will not be able to deliver anything unless you take action sooner rather than later. You are looking for not only an e-mail server, but an e-mail platform that can:

  • Provide clear visibility and reporting into the delivery of messages
  • Provide future proof support for the still-evolving authentication standards
  • Flexibility for complying with current and future applicable legislation, reputation standards, and best practices
  • Easy to integrate, be it via APIs or Web services
  • High performance to grow with your success
With all the wealth of solutions available in that advanced research laboratory called the open source community, it is rather surprising that there is no solution to the initial question: Is your e-mail being delivered? Luckily enough, this kind of product can be found in the market today.

More Stories By Peter Zadrozny

Peter Zadrozny is CTO of StrongMail Systems, a leader in digital messaging infrastructure. Before joining StrongMail he was vice president and chief evangelist for Oracle Application Server and prior to joining Oracle, he served as chief technologist of BEA Systems for Europe, Middle East and Africa.

Comments (3) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Most Recent Comments
Barzoomian 01/06/06 05:32:58 AM EST

This is an advert, right? What a load of frumptious bollocks!

news desk 01/03/06 09:45:57 PM EST

Considering that e-mail is the killer application of the Internet, this question seems rather unexpected. After all, every time we click the send button, things seem to work. After reading this article you'll be amazed at the journey your e-mail goes through and even more amazed that it sometimes makes its way to the intended recipient at all.

LinuxWorld News Desk 01/03/06 08:42:01 PM EST

Considering that e-mail is the killer application of the Internet, this question seems rather unexpected. After all, every time we click the send button, things seem to work. After reading this article you'll be amazed at the journey your e-mail goes through and even more amazed that it sometimes makes its way to the intended recipient at all.

@ThingsExpo Stories
“In the past year we've seen a lot of stabilization of WebRTC. You can now use it in production with a far greater degree of certainty. A lot of the real developments in the past year have been in things like the data channel, which will enable a whole new type of application," explained Peter Dunkley, Technical Director at Acision, in this SYS-CON.tv interview at @ThingsExpo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Nigeria has the largest economy in Africa, at more than US$500 billion, and ranks 23rd in the world. A recent re-evaluation of Nigeria's true economic size doubled the previous estimate, and brought it well ahead of South Africa, which is a member (unlike Nigeria) of the G20 club for political as well as economic reasons. Nigeria's economy can be said to be quite diverse from one point of view, but heavily dependent on oil and gas at the same time. Oil and natural gas account for about 15% of Nigera's overall economy, but traditionally represent more than 90% of the country's exports and as...
The Internet of Things is a misnomer. That implies that everything is on the Internet, and that simply should not be - especially for things that are blurring the line between medical devices that stimulate like a pacemaker and quantified self-sensors like a pedometer or pulse tracker. The mesh of things that we manage must be segmented into zones of trust for sensing data, transmitting data, receiving command and control administrative changes, and peer-to-peer mesh messaging. In his session at @ThingsExpo, Ryan Bagnulo, Solution Architect / Software Engineer at SOA Software, focused on desi...
"At our booth we are showing how to provide trust in the Internet of Things. Trust is where everything starts to become secure and trustworthy. Now with the scaling of the Internet of Things it becomes an interesting question – I've heard numbers from 200 billion devices next year up to a trillion in the next 10 to 15 years," explained Johannes Lintzen, Vice President of Sales at Utimaco, in this SYS-CON.tv interview at @ThingsExpo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
"For over 25 years we have been working with a lot of enterprise customers and we have seen how companies create applications. And now that we have moved to cloud computing, mobile, social and the Internet of Things, we see that the market needs a new way of creating applications," stated Jesse Shiah, CEO, President and Co-Founder of AgilePoint Inc., in this SYS-CON.tv interview at 15th Cloud Expo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
SYS-CON Events announced today that Gridstore™, the leader in hyper-converged infrastructure purpose-built to optimize Microsoft workloads, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. Gridstore™ is the leader in hyper-converged infrastructure purpose-built for Microsoft workloads and designed to accelerate applications in virtualized environments. Gridstore’s hyper-converged infrastructure is the industry’s first all flash version of HyperConverged Appliances that include both compute and storag...
"People are a lot more knowledgeable about APIs now. There are two types of people who work with APIs - IT people who want to use APIs for something internal and the product managers who want to do something outside APIs for people to connect to them," explained Roberto Medrano, Executive Vice President at SOA Software, in this SYS-CON.tv interview at Cloud Expo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
Today’s enterprise is being driven by disruptive competitive and human capital requirements to provide enterprise application access through not only desktops, but also mobile devices. To retrofit existing programs across all these devices using traditional programming methods is very costly and time consuming – often prohibitively so. In his session at @ThingsExpo, Jesse Shiah, CEO, President, and Co-Founder of AgilePoint Inc., discussed how you can create applications that run on all mobile devices as well as laptops and desktops using a visual drag-and-drop application – and eForms-buildi...
We certainly live in interesting technological times. And no more interesting than the current competing IoT standards for connectivity. Various standards bodies, approaches, and ecosystems are vying for mindshare and positioning for a competitive edge. It is clear that when the dust settles, we will have new protocols, evolved protocols, that will change the way we interact with devices and infrastructure. We will also have evolved web protocols, like HTTP/2, that will be changing the very core of our infrastructures. At the same time, we have old approaches made new again like micro-services...
Code Halos - aka "digital fingerprints" - are the key organizing principle to understand a) how dumb things become smart and b) how to monetize this dynamic. In his session at @ThingsExpo, Robert Brown, AVP, Center for the Future of Work at Cognizant Technology Solutions, outlined research, analysis and recommendations from his recently published book on this phenomena on the way leading edge organizations like GE and Disney are unlocking the Internet of Things opportunity and what steps your organization should be taking to position itself for the next platform of digital competition.
The 3rd International Internet of @ThingsExpo, co-located with the 16th International Cloud Expo - to be held June 9-11, 2015, at the Javits Center in New York City, NY - announces that its Call for Papers is now open. The Internet of Things (IoT) is the biggest idea since the creation of the Worldwide Web more than 20 years ago.
As the Internet of Things unfolds, mobile and wearable devices are blurring the line between physical and digital, integrating ever more closely with our interests, our routines, our daily lives. Contextual computing and smart, sensor-equipped spaces bring the potential to walk through a world that recognizes us and responds accordingly. We become continuous transmitters and receivers of data. In his session at @ThingsExpo, Andrew Bolwell, Director of Innovation for HP's Printing and Personal Systems Group, discussed how key attributes of mobile technology – touch input, sensors, social, and ...
In their session at @ThingsExpo, Shyam Varan Nath, Principal Architect at GE, and Ibrahim Gokcen, who leads GE's advanced IoT analytics, focused on the Internet of Things / Industrial Internet and how to make it operational for business end-users. Learn about the challenges posed by machine and sensor data and how to marry it with enterprise data. They also discussed the tips and tricks to provide the Industrial Internet as an end-user consumable service using Big Data Analytics and Industrial Cloud.
Building low-cost wearable devices can enhance the quality of our lives. In his session at Internet of @ThingsExpo, Sai Yamanoor, Embedded Software Engineer at Altschool, provided an example of putting together a small keychain within a $50 budget that educates the user about the air quality in their surroundings. He also provided examples such as building a wearable device that provides transit or recreational information. He then reviewed the resources available to build wearable devices at home including open source hardware, the raw materials required and the options available to power s...
Things are being built upon cloud foundations to transform organizations. This CEO Power Panel at 15th Cloud Expo, moderated by Roger Strukhoff, Cloud Expo and @ThingsExpo conference chair, addressed the big issues involving these technologies and, more important, the results they will achieve. Rodney Rogers, chairman and CEO of Virtustream; Brendan O'Brien, co-founder of Aria Systems, Bart Copeland, president and CEO of ActiveState Software; Jim Cowie, chief scientist at Dyn; Dave Wagstaff, VP and chief architect at BSQUARE Corporation; Seth Proctor, CTO of NuoDB, Inc.; and Andris Gailitis, C...
There's Big Data, then there's really Big Data from the Internet of Things. IoT is evolving to include many data possibilities like new types of event, log and network data. The volumes are enormous, generating tens of billions of logs per day, which raise data challenges. Early IoT deployments are relying heavily on both the cloud and managed service providers to navigate these challenges. In her session at Big Data Expo®, Hannah Smalltree, Director at Treasure Data, discussed how IoT, Big Data and deployments are processing massive data volumes from wearables, utilities and other machines...
"There is a natural synchronization between the business models, the IoT is there to support ,” explained Brendan O'Brien, Co-founder and Chief Architect of Aria Systems, in this SYS-CON.tv interview at the 15th International Cloud Expo®, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
SYS-CON Media announced that Splunk, a provider of the leading software platform for real-time Operational Intelligence, has launched an ad campaign on Big Data Journal. Splunk software and cloud services enable organizations to search, monitor, analyze and visualize machine-generated big data coming from websites, applications, servers, networks, sensors and mobile devices. The ads focus on delivering ROI - how improved uptime delivered $6M in annual ROI, improving customer operations by mining large volumes of unstructured data, and how data tracking delivers uptime when it matters most.
In this Women in Technology Power Panel at 15th Cloud Expo, moderated by Anne Plese, Senior Consultant, Cloud Product Marketing at Verizon Enterprise, Esmeralda Swartz, CMO at MetraTech; Evelyn de Souza, Data Privacy and Compliance Strategy Leader at Cisco Systems; Seema Jethani, Director of Product Management at Basho Technologies; Victoria Livschitz, CEO of Qubell Inc.; Anne Hungate, Senior Director of Software Quality at DIRECTV, discussed what path they took to find their spot within the technology industry and how do they see opportunities for other women in their area of expertise.
While great strides have been made relative to the video aspects of remote collaboration, audio technology has basically stagnated. Typically all audio is mixed to a single monaural stream and emanates from a single point, such as a speakerphone or a speaker associated with a video monitor. This leads to confusion and lack of understanding among participants especially regarding who is actually speaking. Spatial teleconferencing introduces the concept of acoustic spatial separation between conference participants in three dimensional space. This has been shown to significantly improve comprehe...