# alimail-service

Part of **ALIMAIL**

<!-- intent-backlink:auto -->

> 💡 **Path Selection**: This skill is one implementation path for [Resolve email sending failure issues](../../intent/alimail-resolve-failure/SKILL.md). If you're unsure which path to take, check the routing skill first.

# Alibaba Mail Email Configuration Troubleshooting Guide

## Problem Index

| Problem | Symptom | Severity | Solution Summary |
|--------|--------|---------|------------------|
| Unable to Access Mailbox Login Page (e.g., mail.abc.com) | Browser fails to load the login page; connection timeout or DNS error | High | Verify DNS records (A/CNAME), restart local network devices, or contact support |
| Cannot Send Emails via Webmail Due to Account Status | Error when sending: account frozen, blocked, expired, or disabled | High | Use Alibaba Mail console to check status and enable/unblock/renew as needed |
| Historical Emails Unavailable Due to Service Disruption | Error `503` when accessing old emails; inbox appears empty | Medium | Retrieve sender info from mail list avatar and resend critical emails after restoration |

## Problem Details

### Problem 1: Unable to Access Mailbox Login Page (e.g., mail.abc.com)

**Symptoms**
- Error message: Page fails to load in browser (no specific HTTP code provided)
- Behavior: User cannot reach `mail.abc.com` or custom domain login URL
- Context: Occurs after domain setup or during network changes

**Root Cause**
- Incorrect or missing DNS records (A or CNAME) for the mail subdomain
- Local network issues (router cache, ISP DNS propagation delay)
- Temporary service-side routing problems

**Solution**
1. Confirm that a valid DNS record exists for your mail subdomain:
   - For `mail.abc.com`, ensure either:
     - An **A record** pointing to the correct Alibaba Mail server IP, or
     - A **CNAME record** pointing to `alimail.aliyun.com`
2. Flush local DNS cache:
   ```bash
   # On Windows
   ipconfig /flushdns

   # On macOS/Linux
   sudo dscacheutil -flushcache; sudo killall -HUP mDNSResponder
   ```
3. Restart your router or modem to refresh network settings
4. If the issue persists after 1 hour, open a support ticket via the Alibaba Cloud console with details of your domain and DNS configuration

**Verification**
- Use `nslookup` or `dig` to confirm DNS resolution:
  ```bash
  dig mail.abc.com CNAME
  # Expected: mail.abc.com should resolve to alimail.aliyun.com or a valid IP
  ```
- Successfully load `https://mail.abc.com` in a browser

### Problem 2: Cannot Send Emails via Webmail Due to Account Status

**Symptoms**
- Error message: `AccountFrozen`, `AccountBlocked`, `AccountExpired`, or `AccountDisabled`
- Behavior: "Send" button fails silently or shows an error; user can log in but not send
- Context: Often follows security alerts, policy violations, subscription lapse, or admin action

**Root Cause**
- Account was automatically frozen due to suspicious activity
- Account blocked after exceeding sending limits or violating policies
- Subscription expired without renewal
- Administrator manually disabled the account

**Solution**
1. Log in to the **Alibaba Mail console**: https://mail.console.aliyun.com
2. Navigate to **Organizations and Users > Employee Accounts**
3. Locate the affected email account and click on it
4. Depending on the status:
   - **Frozen/Blocked**: Go to **Permission Operation** tab and click **Unblock**
   - **Disabled**: Click **Operation > Enable**
   - **Expired**: Renew the mailbox subscription/license through billing portal
5. If you lack admin privileges, contact your **postmaster administrator** or submit a support ticket with the exact error code

> Note: Only users with postmaster administrator rights can perform unblocking or enabling actions.

**Verification**
- After enabling/unblocking, attempt to send a test email via webmail
- Confirm no error messages appear during send operation
- Check **Employee Accounts** list to verify status is now "Active"

### Problem 3: Historical Emails Unavailable Due to Service Disruption

**Symptoms**
- Error message: `503`
- Behavior: Inbox appears empty; cannot open previously received emails
- Context: Occurs during data center outages or maintenance windows

**Root Cause**
- Temporary unavailability of email storage backend due to infrastructure failure
- Service restoration is in progress, but historical data is not yet accessible

**Solution**
1. Do not wait indefinitely—use the **mail list** to recover sender information:
   - In the Alibaba Mail web interface, go to **Inbox**
   - Find the email entry in the **mail list** (even if content isn’t loading)
   - Click the **sender's avatar** on the left side of the mail list entry
   - The sender’s email address will be displayed
2. Once service is restored (monitor status page or wait for notification):
   - Open the critical email
   - Click the **Resend** button in the top-right corner to retransmit
3. No additional charges apply during disruption; normal billing resumes post-restoration

**Verification**
- Sender’s email address is visible after clicking avatar
- After service recovery, resent email appears in recipient’s inbox and displays correctly
- Full inbox functionality returns (confirmed by opening multiple historical emails)

## FAQ

**Q: How do I check if my email account is frozen, blocked, or disabled?**  
A: Log in to the Alibaba Mail console (https://mail.console.aliyun.com), go to **Organizations and Users > Employee Accounts**, and view the **Status** column for your account. Hover or click for details on why it’s restricted.

**Q: What DNS records are required for Alibaba Mail to work?**  
A: You must configure at least an **MX record** for email delivery and either an **A record** or **CNAME record** for your mail login subdomain (e.g., `mail.yourdomain.com`). The CNAME should point to `alimail.aliyun.com`. SPF, DKIM, and DMARC are recommended for deliverability but not strictly required for basic access.

**Q: Can I enable or unblock my own account if I’m not an admin?**  
A: No. Only a **postmaster administrator** with access to the **Employee Accounts** section in the Alibaba Mail console can enable, unblock, or unfreeze accounts. If you receive an error like `AccountBlocked`, check your inbox for an "[Important] Account Blocking" email that may include self-unblock instructions. Otherwise, contact your admin.

**Q: How long does it take for DNS changes to affect mail login access?**  
A: DNS propagation typically takes 5–60 minutes, but can occasionally take up to 24 hours depending on TTL settings and ISP caching. Use `dig` or online DNS checkers to confirm global propagation before assuming a configuration error.

**Q: Are there sending limits that could cause my account to be blocked?**  
A: Yes. Each mailbox is limited to **1,000 emails per day**. Exceeding this or sending spam-like content may trigger automatic blocking. Review your sending behavior and request unblocking via the console if legitimate.