Email From My Cloud Hosted Website is Blocked by Cornell
How to fix the issue where accounts with a Cornell email address block email sent by your cloud hosted website
An email account from my website that is hosted in the cloud (Pantheon, Acquia, Media3, or another external hosting service) sends mail to users with a Cornell.edu address, but none of the email is delivered.
What Is Happening
Your website is hosted on a server that is currently blocked or blacklisted by Cornell.edu. This can happen even if your website sends legitimate emails, but another website hosted by the same service is sending spam messages to Cornell.edu addresses.
How to Solve this Problem
Create a verified account to send mail to Cornell.edu addresses.
Create an Exchange Group Account (https://eam.exchange.cornell.edu/).
- Assign email addresses to the account that will be used as the FROM address.
Have the account verified by Identity Management and given a password (email@example.com).
Example email to send:
Dear Identity Management,
I am the owner of the EGA ga."ega-mail". I am requesting a password on this EGA because we need to configure our website that is hosted outside of Cornell to use authenticated SMTP to send emails successfully. I understand that policy 5.10 prohibits the use of shared accounts and passwords with the central authentication system, except where it is not technically possible to provision individual accounts. I attest that it is not technically possible to use an individual account in this case. I attest that, in compliance with policy 5.10, I will maintain a local inventory of who has access to the account and change the password when there is any change in personnel or access requirements.
- Example email to send:
- Configure your mail settings:
- Servername: smtp.office365.com
- User name: firstname.lastname@example.org (the full GA name with @cornell.edu appended; this will be different for every site.)
- Password: as security office assigns
- If there is an option for TLS, enable it. Authentication will not work without TLS/STARTTLS support.
- Server Port: 587