Click here to close now.

Welcome!

Linux Authors: Carmen Gonzalez, Pat Romanski, AppDynamics Blog, Roger Strukhoff, Hovhannes Avoyan

Related Topics: Linux, Open Source

Linux: Article

Is Your E-Mail Being Delivered?

Chances are, you just don't know

Considering that e-mail is the killer application of the Internet, this question seems rather unexpected. After all, every time we click the send button, things seem to work. After reading this article you'll be amazed at the journey your e-mail goes through and even more amazed that it sometimes makes its way to the intended recipient at all.

Part of the problem is that the underlying infrastructure of e-mail is almost 25 years old and broken. The famous Sendmail program of Unix was written in 1981, and very little has been done to update it. Other programs, such as qmail and Postfix, have improved on the basic Sendmail, but the work has mainly focused on removing the bugs and making the administration a little bit more tolerable. Considering that 70% of worldwide e-mail is sent using Sendmail, it's actually quite amazing that anything gets delivered.

The first issue is performance. Today, billions of e-mail messages are being sent on a daily basis; the volumes are incredible. Now consider that the average Sendmail implementation can only handle about 7,000 messages an hour. Not that you are going to send that many messages, but just think of a company with 10,000 employees and you can see how quickly the e-mail server can be overloaded on the outbound. Add the inbound flow and you can see how quickly you can get into trouble.

As the people increasingly feel more comfortable with the Internet and conduct more and more business on it, it's not uncommon to see e-commerce Web sites that enjoy 250,000 transactions a day. Each of these transactions involve some sort of an e-mail with a notification or confirmation of the transaction. Assuming that you have resolved the performance issues, probably using brute force and adding more e-mail servers, you still have to contend with another issue, the visibility into the delivery.

Suppose you send a message and it bounces, say because the quota was exceeded at the receiver's end (mailbox full). You read the bounce message and probably make a note to try later. However, if the sender is an application, chances are that the bounced message is lost in the ether of your systems and nothing is being done with it. This is cause for concern as it can negatively affect your business, for example, if the customer purchased a license of your software on your Web site. Suppose the process is that you send a confirmation message with the license key so that the customer can activate the software that was downloaded. Now consider what happens when that confirmation e-mail is not delivered. For one, you cannot recognize the revenues of that transaction, but you don't even know that. After a few days, the customer calls your support center to clear up the matter. That call, which could have been avoided, will cost you at least $20, and a lot more if your support rep cannot locate the e-mail in question. This touches on archiving e-mail messages for legal purposes or just customer support issues, but that is a subject for another article.

The issue of visibility into the delivery sounds simple, but it is rather complicated. When an e-mail server establishes a connection with another server, two things can happen: the message is either accepted or rejected. This rejection is called a synchronous bounce, and can be something as simple as a "user unknown" or "account closed." But even if you don't get this reject notice, you still can't assume successful delivery of your message. The reason is that you can get what is known as an asynchronous bounce, up to four days after your message was supposedly accepted. This bounce can be caused by any number of things, for example, because the recipient's mailbox was full.

You would expect that your e-mail server would take care of this, but the truth of the matter is that most e-mail servers don't give you the required visibility into the delivery of your e-mail. Most e-mail servers don't process the asynchronous bounces and, when they do, the reports aren't combined with your synchronous bounces and don't provide the granularity you require to make an informed decision over the final disposition of the message. For example, an "out of the office" message will be categorized as a soft bounce, when in reality it is not.

To complicate matters a bit more, every bounce has an associated code; however, every domain uses them in a different way, creating their own explanations as the associated text messages for a bounce code. So you are left having to read the actual error message that comes back. While this can be made to work for applications with some fancy programming, it's a moving target, since many domains constantly revise and update their reasons for rejecting messages.

Things will get really ugly when you start resending those messages without actually analyzing why they were rejected in the first place, an unfortunate but understandable mistake under the circumstances. Soon enough the ISPs will consider you a spammer because of your high incidence of "bad" e-mail. Soon thereafter, you will find that the IP address you use for your e-mail server has been blacklisted, with all the negative implications that brings, especially since e-mail is critical to your online business.

Is your e-mail being delivered? You now start wondering. As if the issues explained earlier were not enough, assuming that your e-mail makes it through the receiving e-mail server, now it has to jump hoops trying to avoid all the anti-spam and anti-phishing filters, which can simply drop your message, quarantine it, or place it in the junk folder of the recipient. In the first two cases, the intended recipient will probably never get your message, while in the last case the likelihood of the message being read is rather low.

This brings us to the issue of spam. While legitimate businesses are sending more e-mail for more reasons, the exponential jump in e-mail traffic every year is due to spam. Because of spam there is a very healthy industry dedicated to the creation and maintenance of filters that try to deter the delivery of these messages. The problem is that your message might also fall into this category without you knowing it. JupiterResearch states that 25% of legitimate e-mail goes undelivered. This might not be a big deal when it's personal e-mail, but when it's critical business messages, it becomes a real issue, especially when many users have lost trust in e-mail.

Thanks to spam, there is a change in the e-mail environment. Not only do you have the deliverability issues we already mentioned, but you also have a tough environment that is getting tougher as legislation and self-regulation impose a greater accountability on e-mail senders. Unfortunately, e-mail was not developed with security and accountability in mind. This accountability is crucial in solving the spam crisis and restoring the trust in e-mail that many have lost.

Accountability can be broken down into three efforts:

  1. Authentication: Where the identity of the sender is clearly established. This will deny spammers the ability to hide. There are various authentication standards out there, such as DKIM from Cisco and Yahoo!, and Microsoft's Sender ID, but there is no clear winner yet.
  2. Reputation: Which will associate the identity of the senders with their reputation. Today, reputation systems are mainly internal to the ISPs, where they allow their users to mark messages as spam, which creates a spam score per sender.
  3. Accreditation: If you don't have a reputation yet, or you have managed to damage yours, you can always go to an accreditation vendor, which will review and implement best practices and then allow you to add a special token to your messages that will tell ISPs that you are not spamming, and they will place your messages in the inbox of the intended recipient.
The problem is that spammers won't be the only ones affected by accountability. You will also be directly affected by this. Admittedly, e-mail accountability is still evolving, but this much is clear: authentication will shortly become mandatory. The ISPs and bigger domains will have different access rules, including authentication protocols. The reputation systems will measure customer satisfaction based on the number of complaints on a sender. Customer satisfaction will hinge on sender practices, and best practices will become required practices.

If your business involves sending e-mail blasts, which can go from a simple newsletter to what is known as permission-based direct marketing, you also have to comply with a few laws. In the United States the main law related to e-mail is known as CAN-SPAM. One of the things you have to include in every message in a blast is the ability for the receiver to unsubscribe. Again, this looks rather simple, but when you get around to fully implementing these functionalities, you will notice that it starts touching a larger amount of your current systems and ease of integration is one of those features you really want.

We all know how much easy integration can help us succeed on a software-related project. The e-commerce Web site has to integrate not only with the inventory and shipping systems, but also with the various financial systems. Each of these systems will, under certain circumstances, generate a confirmation or notification that will be sent via e-mail and has to be delivered. Very likely you will want these messages to be personalized, probably with something more sophisticated than "Dear Jane," so now you are talking about adding a few steps in the composition of the actual message, and soon you will find other things that you will want to add or you will be forced to implement in order to comply with legislation. Thus, ease of integration becomes vital.

By the way, if you think that using an e-mail service provider (ESP) is a solution to all these problems, think twice. They also use the same antiquated infrastructure you do.

So, is your e-mail being delivered? Well, chances are that you don't know and, as things get tougher and tougher in the e-mail environment, chances are that you will not be able to deliver anything unless you take action sooner rather than later. You are looking for not only an e-mail server, but an e-mail platform that can:

  • Provide clear visibility and reporting into the delivery of messages
  • Provide future proof support for the still-evolving authentication standards
  • Flexibility for complying with current and future applicable legislation, reputation standards, and best practices
  • Easy to integrate, be it via APIs or Web services
  • High performance to grow with your success
With all the wealth of solutions available in that advanced research laboratory called the open source community, it is rather surprising that there is no solution to the initial question: Is your e-mail being delivered? Luckily enough, this kind of product can be found in the market today.

More Stories By Peter Zadrozny

Peter Zadrozny is CTO of StrongMail Systems, a leader in digital messaging infrastructure. Before joining StrongMail he was vice president and chief evangelist for Oracle Application Server and prior to joining Oracle, he served as chief technologist of BEA Systems for Europe, Middle East and Africa.

Comments (3) View Comments

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


Most Recent Comments
Barzoomian 01/06/06 05:32:58 AM EST

This is an advert, right? What a load of frumptious bollocks!

news desk 01/03/06 09:45:57 PM EST

Considering that e-mail is the killer application of the Internet, this question seems rather unexpected. After all, every time we click the send button, things seem to work. After reading this article you'll be amazed at the journey your e-mail goes through and even more amazed that it sometimes makes its way to the intended recipient at all.

LinuxWorld News Desk 01/03/06 08:42:01 PM EST

Considering that e-mail is the killer application of the Internet, this question seems rather unexpected. After all, every time we click the send button, things seem to work. After reading this article you'll be amazed at the journey your e-mail goes through and even more amazed that it sometimes makes its way to the intended recipient at all.

@ThingsExpo Stories
BroadSoft on Tuesday announced that it is a recipient of the 2014 Frost & Sullivan Market Leadership Award in the Hosted/Cloud Internet Protocol (IP) Telephony market for Latin America. According to Frost & Sullivan market research, the Latin America (LATAM) hosted/cloud Internet Protocol (IP) telephony market, including integrated unified communications and collaboration (UC&C) applications, is currently experiencing a rapid growth trajectory and is expected to exhibit a tenfold rise in annual revenues in the 2013-2020 period. With more than 600 cloud deployments internationally, BroadSoft w...
SYS-CON Events announced today that Akana, formerly SOA Software, has been named “Bronze Sponsor” of SYS-CON's 16th International Cloud Expo® New York, which will take place June 9-11, 2015, at the Javits Center in New York City, NY. Akana’s comprehensive suite of API Management, API Security, Integrated SOA Governance, and Cloud Integration solutions helps businesses accelerate digital transformation by securely extending their reach across multiple channels – mobile, cloud and Internet of Things. Akana enables enterprises to share data as APIs, connect and integrate applications, drive part...
Temasys has announced senior management additions to its team. Joining are David Holloway as Vice President of Commercial and Nadine Yap as Vice President of Product. Over the past 12 months Temasys has doubled in size as it adds new customers and expands the development of its Skylink platform. Skylink leads the charge to move WebRTC, traditionally seen as a desktop, browser based technology, to become a ubiquitous web communications technology on web and mobile, as well as Internet of Things compatible devices.
SYS-CON Events announced today that CommVault has been named “Bronze Sponsor” of SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY, and the 17th International Cloud Expo®, which will take place on November 3–5, 2015, at the Santa Clara Convention Center in Santa Clara, CA. A singular vision – a belief in a better way to address current and future data management needs – guides CommVault in the development of Singular Information Management® solutions for high-performance data protection, universal availability and sim...
SYS-CON Events announced today that SafeLogic has been named “Bag Sponsor” of SYS-CON's 16th International Cloud Expo® New York, which will take place June 9-11, 2015, at the Javits Center in New York City, NY. SafeLogic provides security products for applications in mobile and server/appliance environments. SafeLogic’s flagship product CryptoComply is a FIPS 140-2 validated cryptographic engine designed to secure data on servers, workstations, appliances, mobile devices, and in the Cloud.
SYS-CON Events announced today that StorPool Storage will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. StorPool is distributed storage software that allows service providers, enterprises and other cloud builders to run data storage on standard x86 servers, instead of using expensive and inefficient storage arrays (SAN).
GENBAND has announced that SageNet is leveraging the Nuvia platform to deliver Unified Communications as a Service (UCaaS) to its large base of retail and enterprise customers. Nuvia’s cloud-based solution provides SageNet’s customers with a full suite of business communications and collaboration tools. Two large national SageNet retail customers have recently signed up to deploy the Nuvia platform and the company will continue to sell the service to new and existing customers. Nuvia’s capabilities include HD voice, video, multimedia messaging, mobility, conferencing, Web collaboration, deskt...
Sonus Networks introduced the Sonus WebRTC Services Solution, a virtualized Web Real-Time Communications (WebRTC) offer, purpose-built for the Cloud. The WebRTC Services Solution provides signaling from WebRTC-to-WebRTC applications and interworking from WebRTC-to-Session Initiation Protocol (SIP), delivering advanced real-time communications capabilities on mobile applications and on websites, which are accessible via a browser.
SYS-CON Events announced today that Site24x7, the cloud infrastructure monitoring service, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. Site24x7 is a cloud infrastructure monitoring service that helps monitor the uptime and performance of websites, online applications, servers, mobile websites and custom APIs. The monitoring is done from 50+ locations across the world and from various wireless carriers, thus providing a global perspective of the end-user experience. Site24x7 supports monitoring H...
SYS-CON Events announced today that Intelligent Systems Services will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. Established in 1994, Intelligent Systems Services Inc. is located near Washington, DC, with representatives and partners nationwide. ISS’s well-established track record is based on the continuous pursuit of excellence in designing, implementing and supporting nationwide clients’ mission-critical systems. ISS has completed many successful projects in Healthcare, Commercial, Manufacturing, ...
“With easy-to-use SDKs for Atmel’s platforms, IoT developers can now reap the benefits of realtime communication, and bypass the security pitfalls and configuration complexities that put IoT deployments at risk,” said Todd Greene, founder & CEO of PubNub. PubNub will team with Atmel at CES 2015 to launch full SDK support for Atmel’s MCU, MPU, and Wireless SoC platforms. Atmel developers now have access to PubNub’s secure Publish/Subscribe messaging with guaranteed ¼ second latencies across PubNub’s 14 global points-of-presence. PubNub delivers secure communication through firewalls, proxy ser...
SYS-CON Events announced today that B2Cloud, a provider of enterprise resource planning software, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. B2cloud develops the software you need. They have the ideal tools to help you work with your clients. B2Cloud’s main solutions include AGIS – ERP, CLOHC, AGIS – Invoice, and IZUM
SYS-CON Events announced today that Tufin, the market-leading provider of Security Policy Orchestration Solutions, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. As the market leader of Security Policy Orchestration, Tufin automates and accelerates network configuration changes while maintaining security and compliance. Tufin's award-winning Orchestration Suite™ gives IT organizations the power and agility to enforce security policy across complex, multi-vendor enterprise networks. With more than 1...
VoxImplant has announced full WebRTC support in the newest versions of its Android SDK and iOS SDK. The updated SDKs, which enable audio and video calls on mobile devices, are now compatible with the WebRTC standard to allow any mobile app to communicate with WebRTC-enabled browsers, including Google Chrome, Mozilla Firefox, Opera, and, when available, Microsoft Spartan. The WebRTC-updated SDKs represent VoxImplant's continued leadership in simplifying the development of real-time communications (RTC) services for app developers. VoxImplant (built by Zingaya, the real-time communication servi...
SYS-CON Events announced today that Cloudian, Inc., the leading provider of hybrid cloud storage solutions, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. Cloudian, Inc., is a Foster City, California - based software company specializing in cloud storage software. The main product is Cloudian, an Amazon S3-compliant cloud object storage platform, the bedrock of cloud computing systems, that enables cloud service providers and enterprises to build reliable, affordable and scalable cloud storage solu...
SYS-CON Events announced today that Gridstore™, the leader in hyper-converged infrastructure purpose-built to optimize Microsoft workloads, will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. Gridstore™ is the leader in hyper-converged infrastructure purpose-built for Microsoft workloads and designed to accelerate applications in virtualized environments. Gridstore’s hyper-converged infrastructure is the industry’s first all flash version of HyperConverged Appliances that include both compute and storag...
SYS-CON Events announced today that IDenticard will exhibit at SYS-CON's 16th International Cloud Expo®, which will take place on June 9-11, 2015, at the Javits Center in New York City, NY. IDenticard™ is the security division of Brady Corp (NYSE: BRC), a $1.5 billion manufacturer of identification products. We have small-company values with the strength and stability of a major corporation. IDenticard offers local sales, support and service to our customers across the United States and Canada. Our partner network encompasses some 300 of the world's leading systems integrators and security s...
SYS-CON Events announced today the IoT Bootcamp – Jumpstart Your IoT Strategy, being held June 9–10, 2015, in conjunction with 16th Cloud Expo and Internet of @ThingsExpo at the Javits Center in New York City. This is your chance to jumpstart your IoT strategy. Combined with real-world scenarios and use cases, the IoT Bootcamp is not just based on presentations but includes hands-on demos and walkthroughs. We will introduce you to a variety of Do-It-Yourself IoT platforms including Arduino, Raspberry Pi, BeagleBone, Spark and Intel Edison. You will also get an overview of cloud technologies s...
“In the past year we've seen a lot of stabilization of WebRTC. You can now use it in production with a far greater degree of certainty. A lot of the real developments in the past year have been in things like the data channel, which will enable a whole new type of application," explained Peter Dunkley, Technical Director at Acision, in this SYS-CON.tv interview at @ThingsExpo, held Nov 4–6, 2014, at the Santa Clara Convention Center in Santa Clara, CA.
The best mobile applications are augmented by dedicated servers, the Internet and Cloud services. Mobile developers should focus on one thing: writing the next socially disruptive viral app. Thanks to the cloud, they can focus on the overall solution, not the underlying plumbing. From iOS to Android and Windows, developers can leverage cloud services to create a common cross-platform backend to persist user settings, app data, broadcast notifications, run jobs, etc. This session provides a high level technical overview of many cloud services available to mobile app developers, includi...