Related Articles

Host Monitoring: Choose the Right Monitor Type and Use It Wellproduct

A practical guide to mxio's Host Monitoring feature. Learn when to use SMTP, IMAP, HTTPS, IP, or Port monitors, how setup works, and how to use the host dashboard day to day.

SMTP Server Test: Ports 25, 465, 587, STARTTLS, and TLS Certificatesguides

Test SMTP server connectivity on ports 25, 465, and 587. Understand the difference between relay and submission ports, STARTTLS vs implicit TLS, and what certificate warnings mean.

Email Bounce Error Codes Explained: 550, 554, 421 and Moreguides

Complete reference for SMTP bounce codes. Understand what 550 5.7.1, 554 5.7.1, 421 4.7.0 and other email error codes mean and how to fix them.

MTA-STS Policy Not Found: Fixing DNS and HTTPS Deployment Failureserrors

MTA-STS requires two components working together: a DNS TXT record at _mta-sts.example.com and a policy file served over HTTPS at mta-sts.example.com/.well-known/mta-sts.txt. When either component is missing or unreachable, MTA-STS enforcement fails silently — sending servers cannot verify your TLS policy, and your domain loses the protection MTA-STS is designed to provide.

MTA-STS MX Mismatch: Policy Doesn't Cover All Mail Serverserrors

Your MTA-STS policy file lists mx: entries that don't match your domain's actual MX records. Sending servers that enforce MTA-STS compare these two lists — if an MX host isn't covered by the policy, the sender may skip that server or refuse delivery entirely. This is especially dangerous after mail provider migrations or MX record changes.

MTA-STS: Enforcing TLS for Inbound Emailguides

MTA-STS forces sending servers to use TLS when delivering email to your domain, closing the gap left by opportunistic STARTTLS. This guide covers the DNS TXT record, the HTTPS-hosted policy file, testing vs enforce mode, and common deployment mistakes.