Sorry - to clarify - Each customer configuration (and dispositions/spam thresholds/policies/DNSBLs used, etc) for POD customers are entirely separate from one another, but PDR info is shared across customers to my knowledge (specific to blocks). I'm not 1000% sure if it applies entirely the same across the board to the deferrals for both PPE and POD customers.
PDR is also configurable per-customer (.pphosted.com), so your experience with one customer may not be identical to another depending on their configuration. That's what I meant by per-customer. It's black-box machine learning, so nobody but Proofpoint knows the exact signals designed for it. >From a customer perspective, all we know is it's largely IP based when it comes to blocking/deferral disposition and looks at volume/spammy-ness/threats, etc from the IPs. I know a rep from PPE is on-list, and can elaborate on the PPE side if they want to. - Mark Alley On Thu, Jul 4, 2024, 11:08 AM Patrick Landolt <patrick.land...@artack.ch> wrote: > Hi Mark > > Thanks for the insight. > > Most deferred mails go to remote mx that do use PP internally and have an > mx that is branded with their domain. > But there are also a good bunch of recievers that have a *.pphosted.com > mx. Thos mails to *pphosted.com are now delivered. > There were less mails to *.ppe-hosted.com mx but there were no deferred > mails there. > > What do you mean that PDR kicks in deferrals per-customer? Would that > affect specific Mail.FROM that would be deferred? > Would love to talk to a PP representative to better understand those > deferrals. > > Best regards, > Patrick > > > > On 4 Jul 2024, at 17:46, Mark Alley <mark.al...@tekmarc.com> wrote: > > > > PP customer here - Do you know what the receiver hostnames are that are > deferring you? And is it all mail to any Proofpoint customer, or to just a > few hosts? > > > > If the MX hostnames end in .ppe-hosted.com, that's Proofpoint > essentials, if it's .pphosted.com, that's an enterprise POD customer. > > > > PDR usually kicks in deferrals per-customer if you're sending large > unexpected volume from an IP address. You'll only show up on the PDR IP > tool if you're actually added to the list for blocking. > > > > - Mark Alley > > > > On Thu, Jul 4, 2024, 9:29 AM Patrick Landolt via mailop < > mailop@mailop.org> wrote: > > Hi > > > > We see a surge of deferred mails because of a proofpoint check resulting > in mta responses like: > > Deferred - see https://ipcheck.proofpoint.com/?ip=[…] > > > > The actual ipcheck on the mentioned domain does - on multiple tested ips > - return that nothing is blocked. > > > > Is there a proofpoint representative here that can contact me off list > to help solve the issue? > > > > Best regards, > > Patrick > > > > -------------------------------------- > > Patrick Landolt > > Leiter Softwareentwicklung > > Mitglied der Geschäftsleitung > > > > mailXpert GmbH > > Schulstrasse 37 > > 8050 Zürich > > > > Tel: +41 44 222 22 14 > > Web: https://www.mailXpert.ch > > -------------------------------------- > > > > www.mailXpert.ch > > Professionelles E-Mail Marketing von ARTACK WebLab GmbH > > > > _______________________________________________ > > mailop mailing list > > mailop@mailop.org > > https://list.mailop.org/listinfo/mailop > >
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
