Gmail recently changed how they calculate domain reputation within the last two months. Domains that didn't encounter issues before are now experiencing problems.
I'm not entirely certain about the specific changes on Gmail's end, but I have observed these issues across multiple client domains. ________________________________ From: mailop <mailop-boun...@mailop.org> on behalf of Randolf Richardson, Postmaster via mailop <mailop@mailop.org> Sent: Saturday, December 30, 2023 12:48 PM To: mailop <mailop@mailop.org> Subject: Re: [mailop] Gmail now deferring email which meets their published reqs Iron Wolf Technology EmployeeShield Warning: The sender @mailop@mailop.org might be a spam sender. Block as Spam<https://cloud.graph.us/feedback?msgId=PDY1OTA4MjBGLjM5MDYuMjRCOTFFNUBwb3N0bWFzdGVyLmludGVyLWNvcnBvcmF0ZS5jb20%2B&orgDomain=c2FtdWFsY2FybWFuLmNvbQ%3D%3D&sndr=XQT453x9IWffhC9Z%2BQ%2B5YAwe8%2BWdWk8H0XsnrhYAh3E%3D&rcpnt=XQT453x9IWfVoTCny4c0DF8PXqHJvxjQhuchgjxRyzWIdvIB4MZGMQ%3D%3D&opt=spam> Not a Spam Sender<https://cloud.graph.us/feedback?msgId=PDY1OTA4MjBGLjM5MDYuMjRCOTFFNUBwb3N0bWFzdGVyLmludGVyLWNvcnBvcmF0ZS5jb20%2B&orgDomain=c2FtdWFsY2FybWFuLmNvbQ%3D%3D&sndr=XQT453x9IWffhC9Z%2BQ%2B5YAwe8%2BWdWk8H0XsnrhYAh3E%3D&rcpnt=XQT453x9IWfVoTCny4c0DF8PXqHJvxjQhuchgjxRyzWIdvIB4MZGMQ%3D%3D&opt=notaspam> powered by Graphus® If that's what the problem is, then that can easily be set with the following Postfix setting without the need for customization scripts: default_destination_recipient_limit = 1 Documentation for this setting is available at: https://www.postfix.org/postconf.5.html#default_destination_recipient_ limit It may also be helpful to adjust the delivery rate, which can also be set in Postfix's "default_destination_rate_delay" setting (which defaults to 0 seconds): https://www.postfix.org/postconf.5.html#default_destination_rate_delay (I don't know, off-hand, if other SMTP daemons have such settings.) > I have nearly the exact same setup and usage you do. I got the same deferral when sending an email to <20 friends, of which about 15 were on Gmail. Exactly the same results as you got. > > Fortunately, I found I could schedule one recipient at a time (using opensmtpd) and each message went through without issue (I even scripted the last 10 or so and they all went through in <2s). Seems they don´t like small shops to send to more than one or two Gmail recipients at a time). > > I suppose I should send a similar message to my friends, and include my Gmail account, then see if then I can send the report in. > > Sean > > Typed with my thumb. > > > On Dec 30, 2023, at 05:01, Simon Wilson via mailop <mailop@mailop.org> wrote: > > > > Thanks all. I'll answer comments here in one email. > > I use a single mail host (mail.simonandkate.net) as MX for a range of family domains on a fixed/business IP address through a high quality ISP (not a variable IP, not in a dial-up block). I've had the same IP address for about 7 years. It has a good reputation, sends < 1k emails per week, and I monitor blocklists. Neither the domain nor the IP are on spamhaus or other BLs. My parents' domain is howiesue.net, we've owned it for about 10 years. Its inbound MX and outbound SMTP host is mail.simonandkate.net, which has a valid PTR associated with the IP address noted above (again, which has been in place for many years). > > > > howiesue.net has a valid hard-fail/reject SPF policy for the IP mail host we use, we DKIM sign all outbound messages with a 1024-bit key, and valid DMARC is setup. I have the domain in Google Postmaster Tools, but is too low volume to generate any data. > > > > I'll have a look at DNSWL.org - thank you Randolf for that suggestion. > > > > The error message from Google is specifically: > > > > 421-4.7.28 Gmail has detected an unusual rate of unsolicited mail originating from your SPF domain [howiesue.net 35]. To protect our users from spam, mail sent from your domain has been temporarily rate limited. For more information, go to https://support.google.com/mail/?p=UnsolicitedRateLimitError to review our Bulk Email Senders Guidelines > > > > Google search tells me this is NOT the message they use when the IP address is the issue, but that they are having some unknown issue with the domain. > > > > I've checked my logs, and the domain is not compromised; he's sent a total of 10 emails in the last week lol... This one that Gmail have decided to block is the first to Gmail this week, but he regularly sends to the people on that list. The email contains 15 Gmail recipients, and is still deferred 12 hours later. > > > > I've tested and they accept email from me to individuals on his list from the same mail host from my personal domain - reinforcing that we don't have an IP rep issue. > > > > Randolf - I've reviewed the Google support doc on deferred email, and there is nothing in there that I need to change - we use TLS (with valid certs), have valid PTRs and other DNS records, have SPF (with hard fail / reject requested for non-authorised IPs) and DKIM, DMARC, and are not sending spam, it's personal email not bulk. There is no reason on that page which I can see which gives them reason to defer us. > > > > When I follow their troubleshooter, it drops me to the contact form Randolf mentions, but I cannot achieve any progress because you *have* to include "To help us investigate a message that was rejected or blocked, please provide the full headers from a recent message (less than 12 days old)". That header has to be from the RECEIVED end, i.e. Gmail - which I cannot do because to do that I'd have to actually be able to get an email through from the domain. I tried sending log details of the deferral with info on our compliant setup, and the "ticket" is auto-closed because it doesn't include the headers they "need". > > > > I think I'm just going to need to tell him to set up a different way to contact his friends instead of this list... > > > > If I've missed something, I'd love to hear it. > > > > Simon > > > > > >> On Saturday, December 30, 2023 20:28 AEST, Eduardo Díaz Comellas via mailop <mailop@mailop.org> wrote: > >> > >> > > I've seen problems like this because of ISP listing large net locks as "dialup" and not supposed to send email directly. > > > > Check spamhaus' PBL: > > > > https://www.spamhaus.org/pbl/ > > > > Best regards > > > > El 30 de diciembre de 2023 7:40:59 CET, Simon Wilson via mailop <mailop@mailop.org> escribió: > >> I know, I'm not alone in this... :( > >> > >> I like to think that it's still feasible to run one's own email. I have for many years, and currently manage about a dozen email domains for family and friends. Most of the time all good. > >> > >> Then today my dad says to me "Why am I getting these bounce messages?" > >> > >> I check, and Gmail are deferring an email he sends every week to a group of friends, 20 all up, 15 of them on Gmail, saying his SPF domain is a source of unsolicited email (421-4.7.28). Outlook and Hotmail accept OK. > >> > >> This domain is old, not compromised, has SPF, DKIM (1024bit), DMARC, all valid. We send using TLS. We have correct PTR. His emails go out fully signed and pass checks. We don't send commercial emails, and that domain name is low volume and all emails individually written and sent through a webmail client, none of it is automated. > >> > >> Are we wasting time even trying any more? > >> > >> You can't even submit a request to them for help, because they ignore it unless you attach valid and current mis-classified headers from within gmail. Umm.. how can I do that when they're not accepting the email? > >> > >> Simon Wilson > >> M: 0400 121 116 > > > > -- > > Simon Wilson > > M: 0400 121 116 _______________________________________________ > > mailop mailing list > > mailop@mailop.org > > https://list.mailop.org/listinfo/mailop > -- Postmaster - postmas...@inter-corporate.com Randolf Richardson, CNA - rand...@inter-corporate.com Inter-Corporate Computer & Network Services, Inc. Vancouver, British Columbia, Canada https://www.inter-corporate.com/ _______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
