hi,
You could make your Webservers only consider the 'send transaction' done when they receive the final '250 OK' from the mail server.
If they don't get that, they should retry the send. That should take care fo the lost forever issue when the smtp server fails on the reception.