Re: [mailop] 550 sending to hotmail.com

[SM]

Hi Michael,
At 12:47 PM 26-10-2017, Michael Wise wrote:

Ticket numbers are ALWAYS helpful... even if not for me.


The ticket number is SRX1402095036ID

Regards,
-sm 



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] 550 sending to hotmail.com

[SM]

Hi Chris,
At 12:32 PM 26-10-2017, Chris Truitt wrote:
Had this happen a coule of weeks ago.  Highly unusual for us.  No 
spikes in complaints and no real explanation from Outlook for it. To 
their credit, the team was responsive to my removal request.


I found it unusual given that there wasn't any complaint.


Did you substantially increase sending volume?


No, the sending volume to hotmail.com is very low.

Regards,
-sm 



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] 550 sending to hotmail.com

[Michael Wise via mailop]

Ticket numbers are ALWAYS helpful... even if not for me.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool ?



-Original Message-
From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of SM
Sent: Thursday, October 26, 2017 9:12 AM
To: mailop@mailop.org
Subject: [mailop] 550 sending to hotmail.com



Hello,



The hotmail.com mail server is rejecting messages from my mail server

with the following error message:



   "550 5.7.1 Unfortunately, messages from [162.213.2.210] weren't

sent. Please contact your Internet

se...ail.live.com/mail/troubleshooting.aspx#errors.

[SN1NAM04FT051.eop-NAM04.prod.protection.outlook.com]"



Would it be possible to have the IP address mitigated [1] as it is

not used for sending "unwanted" emails?



Regards,

-sm



1. I'll provide a ticket number if it that would be useful.





___

mailop mailing list

mailop@mailop.org

https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop=02%7C01%7Cmichael.wise%40microsoft.com%7C0a34c0003225482c9c9408d51c8fb788%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636446325951600890=T59GST5yAdezlRp0HCKCq8MoKFHNKuo5qqKX%2FCGPqC0%3D=0
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] 550 sending to hotmail.com

[Chris Truitt]

Had this happen a coule of weeks ago.  Highly unusual for us.  No spikes in 
complaints and no real explanation from Outlook for it. To their credit, the 
team was responsive to my removal request.

Did you substantially increase sending volume?

Chris Truitt


From: mailop  on behalf of SM 
Sent: Thursday, October 26, 2017 12:12:07 PM
To: mailop@mailop.org
Subject: [mailop] 550 sending to hotmail.com

Hello,

The hotmail.com mail server is rejecting messages from my mail server
with the following error message:

   "550 5.7.1 Unfortunately, messages from [162.213.2.210] weren't
sent. Please contact your Internet
se...ail.live.com/mail/troubleshooting.aspx#errors.
[SN1NAM04FT051.eop-NAM04.prod.protection.outlook.com]"

Would it be possible to have the IP address mitigated [1] as it is
not used for sending "unwanted" emails?

Regards,
-sm

1. I'll provide a ticket number if it that would be useful.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] outlook.com and greylisting

[Klaus Ethgen]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA512

Hi,

Am Di den 24. Okt 2017 um 10:06 schrieb Mark Foster:
> I run a personal MTA but I host a few not-for-profits and such.
> Recently one of my users reported substantial delays on inbound emails, so I
> had a quick look... it turns out email from outlook.com was being seriously
> hindered by Greylisting.
> The retry rate on a 4xx error seems to be very slow (almost precisely an
> hour between retry attempts) and of course, the source IP address changes
> with each retry, so the Greylisting timers are always reset to zero...
> clearly I don't do enough mail volume to keep the timers up to a point where
> I know i'm getting 'clean' email.

Well, i mostly only get spam from outlook.com. So it might be no false
positive to blacklist them completly. More over, they don't react on
postmaster mails (if you ever get lucky to get them delivered).

However, since years I do not do a simple greylist approach as that is
not needed and to "stupid". I like and use the way, grossd is helping.
Only if the host is on two low priority blacklist or on one high trusted
blacklist, I do greylist them. All other mais don't get delayed.

A note about dnswl. I "missuse" one of their categories to blacklist
self tagged marketing provider. That is very efficient with simply no
false positive. (127.0.15.0/24)

On the other hand, not delaying all spf matches does not help as there
are spammers out there with a proper spf record.

Regards
   Klaus
- -- 
Klaus Ethgen   http://www.ethgen.ch/
pub  4096R/4E20AF1C 2011-05-16Klaus Ethgen 
Fingerprint: 85D4 CA42 952C 949B 1753  62B3 79D0 B06F 4E20 AF1C
-BEGIN PGP SIGNATURE-
Comment: Charset: ISO-8859-1
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=1bBo
-END PGP SIGNATURE-

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] strange mailop message

[Rob McEwen]

I just spotted a strange mailop message... it had no FROM and no SUBJECT 
line in the message header. (not even a blank subject line in the 
header, just no subject line at all) If the sender has been having 
problems - if their system is doing stuff like that, maybe that is part 
of their problem. (I don't know... just speculating) Or could that have 
been a mailop list server malfunction?
NOTE: In the content of the message, it discussed another message, and 
gave an example of a header. I'm NOT talking about that message being 
discussed - I'm talking about the actual message received from mailop.

--Rob McEwen

On 10/26/2017 12:48 PM, - wrote:

  Content preview:  On 10/24/2017 05:06 AM, Mark Foster wrote: > Hi All, > > I
 run a personal MTA but I host a few not-for-profits and such. > Recently
one of my users reported substantial delays on inbound > emails, so I had
a quick look... it turns out email from outlook.com > was being seriously
hindered by Greylisting. > The retry rate on a 4xx error seems to be very
slow (almost precisely > an hour between retry attempts) and of course, the
 source IP address > changes with each retry, so the Greylisting timers are
 always reset to > zero... clearly I don't do enough mail volume to keep the
 timers up to > a point where I know i'm getting 'clean' email. > > The only
 way I can see to reliably resolve this is to try to whitelist > the sending
 IP's (is this even practical?)Â It'd be nice of messages > from outlook.com
 were retried from the same source IP... this behavior > seems to make 
greylisting
 on relatively low-volume mail servers > something of a hassle, and across
 many years of running the MTA > configured essentially this way, this is
the first time i've had this > sort of behavior reported. > > Cheers, > 
Mark.
 > > > > mailop mailing list > mailop@mailop.org > 
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
 [...]
  
  Content analysis details:   (-2.8 points, 5.0 required)
  
   pts rule name  description

   -- --
  -1.0 ALL_TRUSTEDPassed through trusted hosts only via SMTP
  -1.9 BAYES_00   BODY: Bayes spam probability is 0 to 1%
  [score: 0.]
   0.1 AWLAWL: Adjusted score from AWL reputation of From: 
address
Subject: Re: [mailop] outlook.com and greylisting
X-BeenThere: mailop@mailop.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: For mail operators 
List-Unsubscribe: ,
  
List-Archive: 
List-Post: 
List-Help: 
List-Subscribe: ,
  
From: James Michael Keller via mailop 
Reply-To: James Michael Keller 
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: mailop-boun...@mailop.org
Sender: "mailop" 

T24gMTAvMjQvMjAxNyAwNTowNiBBTSwgTWFyayBGb3N0ZXIgd3JvdGU6Cj4gSGkgQWxsLAo+Cj4g
SSBydW4gYSBwZXJzb25hbCBNVEEgYnV0IEkgaG9zdCBhIGZldyBub3QtZm9yLXByb2ZpdHMgYW5k
IHN1Y2guCj4gUmVjZW50bHkgb25lIG9mIG15IHVzZXJzIHJlcG9ydGVkIHN1YnN0YW50aWFsIGRl
bGF5cyBvbiBpbmJvdW5kCj4gZW1haWxzLCBzbyBJIGhhZCBhIHF1aWNrIGxvb2suLi4gaXQgdHVy
bnMgb3V0IGVtYWlsIGZyb20gb3V0bG9vay5jb20KPiB3YXMgYmVpbmcgc2VyaW91c2x5IGhpbmRl
cmVkIGJ5IEdyZXlsaXN0aW5nLgo+IFRoZSByZXRyeSByYXRlIG9uIGEgNHh4IGVycm9yIHNlZW1z
IHRvIGJlIHZlcnkgc2xvdyAoYWxtb3N0IHByZWNpc2VseQo+IGFuIGhvdXIgYmV0d2VlbiByZXRy
eSBhdHRlbXB0cykgYW5kIG9mIGNvdXJzZSwgdGhlIHNvdXJjZSBJUCBhZGRyZXNzCj4gY2hhbmdl
cyB3aXRoIGVhY2ggcmV0cnksIHNvIHRoZSBHcmV5bGlzdGluZyB0aW1lcnMgYXJlIGFsd2F5cyBy
ZXNldCB0bwo+IHplcm8uLi4gY2xlYXJseSBJIGRvbid0IGRvIGVub3VnaCBtYWlsIHZvbHVtZSB0
byBrZWVwIHRoZSB0aW1lcnMgdXAgdG8KPiBhIHBvaW50IHdoZXJlIEkga25vdyBpJ20gZ2V0dGlu
ZyAnY2xlYW4nIGVtYWlsLgo+Cj4gVGhlIG9ubHkgd2F5IEkgY2FuIHNlZSB0byByZWxpYWJseSBy
ZXNvbHZlIHRoaXMgaXMgdG8gdHJ5IHRvIHdoaXRlbGlzdAo+IHRoZSBzZW5kaW5nIElQJ3MgKGlz
IHRoaXMgZXZlbiBwcmFjdGljYWw/KcKgIEl0J2QgYmUgbmljZSBvZiBtZXNzYWdlcwo+IGZyb20g
b3V0bG9vay5jb20gd2VyZSByZXRyaWVkIGZyb20gdGhlIHNhbWUgc291cmNlIElQLi4uIHRoaXMg
YmVoYXZpb3IKPiBzZWVtcyB0byBtYWtlIGdyZXlsaXN0aW5nIG9uIHJlbGF0aXZlbHkgbG93LXZv
bHVtZSBtYWlsIHNlcnZlcnMKPiBzb21ldGhpbmcgb2YgYSBoYXNzbGUsIGFuZCBhY3Jvc3MgbWFu
eSB5ZWFycyBvZiBydW5uaW5nIHRoZSBNVEEKPiBjb25maWd1cmVkIGVzc2VudGlhbGx5IHRoaXMg
d2F5LCB0aGlzIGlzIHRoZSBmaXJzdCB0aW1lIGkndmUgaGFkIHRoaXMKPiBzb3J0IG9mIGJlaGF2
aW9yIHJlcG9ydGVkLgo+Cj4gQ2hlZXJzLAo+IE1hcmsuCj4KPgo+IF9fX19fX19fX19fX19fX19f
X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fCj4gbWFpbG9wIG1haWxpbmcgbGlzdAo+IG1h

Re: [mailop] spamalarm.org

[Rob McEwen]

On 10/26/2017 12:52 PM, Richard W wrote:

I can confirm we (SpamCop) have never heard of them or have any 'deals'
with them.



Same for the invaluement DNSBLs. I can confirm the exact same for 
invaluement.


--
Rob McEwen, CEO of invaluement.com


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] outlook.com and greylisting

[Renaud Allard via mailop]

On 26/10/2017 18:48, James Michael Keller via mailop wrote:

On 10/24/2017 05:06 AM, Mark Foster wrote:

Hi All,

I run a personal MTA but I host a few not-for-profits and such.
Recently one of my users reported substantial delays on inbound
emails, so I had a quick look... it turns out email from outlook.com
was being seriously hindered by Greylisting.
The retry rate on a 4xx error seems to be very slow (almost precisely
an hour between retry attempts) and of course, the source IP address
changes with each retry, so the Greylisting timers are always reset to
zero... clearly I don't do enough mail volume to keep the timers up to
a point where I know i'm getting 'clean' email.

The only way I can see to reliably resolve this is to try to whitelist
the sending IP's (is this even practical?)  It'd be nice of messages
from outlook.com were retried from the same source IP... this behavior
seems to make greylisting on relatively low-volume mail servers
something of a hassle, and across many years of running the MTA
configured essentially this way, this is the first time i've had this
sort of behavior reported.

Cheers,
Mark.



You can whitelist based on spf records, that's what I was doing when 
using greylisting.




smime.p7s
Description: S/MIME Cryptographic Signature
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] spamalarm.org

[Richard W]

> Might be legit.  But:

I can confirm we (SpamCop) have never heard of them or have any 'deals'
with them.

Check out there data input:  "Recipient address", "Specified sender".

Clicking "Continue" opens a page with variable progress bars as the data
is "sent to" blacklist operators, ISPs, network agencies.  No place to
input headers, no place to input message body.

Thanks to me nob...@example.com will never get spam from
spam...@hotmail.com again  ;-)

> I'm highly skeptical.

I'm not.  It's a scam and probably data mining.

Richard

On 2017-10-26 5:56 AM, Rich Kulawiec wrote:
> 
> Might be legit.  But:
> 
>   - does not know the difference between "spam" and "SPAM"
>   - gets the definition of spam wrong
>   - it's not clear how they plan to conduct message analysis
>   on the basis of the information they collect
>   - purports to be able to initiate legal action on behalf
>   of reporters, which it can't
>   - purports to be able to initiate legal action in jurisdictions
>   where there's not possible 
>   - operates a whitelist with a $50 listing fee
> 
> I'm highly skeptical.
> 
> ---rsk
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
> 

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] 550 sending to hotmail.com

[SM]

Hello,

The hotmail.com mail server is rejecting messages from my mail server 
with the following error message:


  "550 5.7.1 Unfortunately, messages from [162.213.2.210] weren't 
sent. Please contact your Internet 
se...ail.live.com/mail/troubleshooting.aspx#errors. 
[SN1NAM04FT051.eop-NAM04.prod.protection.outlook.com]"


Would it be possible to have the IP address mitigated [1] as it is 
not used for sending "unwanted" emails?


Regards,
-sm

1. I'll provide a ticket number if it that would be useful.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Contact at Mxtoolbox?

[Todd Herr via mailop]

Hello.

Anyone have a contact at Mxtoolbox? We had a buggy script that sent way too
many API calls their way, and now it looks like they're blocking our source
IP.

We've fixed the script and started engaging through regular channels, but
I'm hoping to short-circuit the mitigation process.

Thanks.

-- 

*todd herr*

*sr. delivery engineer www.sparkpost.com *
*twitter* @toddherr @sparkpost

*tel* 415-578-5222 x477
*mobile* 703-220-4153
*email* todd.h...@sparkpost.com 
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] spamalarm.org

[Bill Cole]

On 26 Oct 2017, at 7:56, Rich Kulawiec wrote:


Might be legit.


Not really.

Many of the blacklists which they claim to feed have one or more of 
these features:


1. Do not use input from external sources.
2. Would violate their own claimed purposes by using this fraud's 
4th-party reports.

3. Forbid external contributors from disclosing their participation.
4. Depend functionally on data that cannot be discerned from a delivered 
spam.


Also, anyone claiming to be operating an anti-spam service from Damascus 
hosted at HostEurope on an IP with a recent SBL listing and a decade of 
SORBS listings strains credulity.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] SENDERSCORE

[timrutherford]

Would you like me to resend the original message in its entirety or just a 
message like this coming through the same mail server as the original?  

 

If the former, I assume I should send direct to your gmail address (as opposed 
to sending via the mailop list a second time)

 

Thanks,

Tim

 

From: mailop [mailto:mailop-boun...@mailop.org] On Behalf Of Tom Bartel
Sent: Wednesday, October 25, 2017 5:57 PM
To: valdis.kletni...@vt.edu
Cc: mailop ; Anne P. Mitchell Esq. 
Subject: Re: [mailop] SENDERSCORE

 

I didn't get it even in spam (in my gmail account).  Can OP resend?  I'm happy 
to dig in and or respond with regard to Sender Score.

 

Tom

 

On Wed, Oct 25, 2017 at 5:00 PM,  > wrote:

On Wed, 25 Oct 2017 12:50:16 -0600, "Anne P. Mitchell Esq." said:
> Weirdly, every single email in this particular thread ended up in Gmail's
> spam folder.  Any good guesses as to why?

My email is also hosted at GMail, but none of the thread ended up in my
spam folder.  So whatever it was, it must be something subtle...


___
mailop mailing list
mailop@mailop.org  
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop





 

-- 

--

Twitter: @barteltom

Instagram: https://instagram.com/bartel__tom 

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] spamalarm.org

[Rich Kulawiec]

Might be legit.  But:

- does not know the difference between "spam" and "SPAM"
- gets the definition of spam wrong
- it's not clear how they plan to conduct message analysis
on the basis of the information they collect
- purports to be able to initiate legal action on behalf
of reporters, which it can't
- purports to be able to initiate legal action in jurisdictions
where there's not possible 
- operates a whitelist with a $50 listing fee

I'm highly skeptical.

---rsk

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] spamalarm.org

[ComKal Networks]

> spamalarm.org

Creation Date: 2017-07-25T10:15:18Z
Registry Expiry Date: 2018-07-25T10:15:18Z
Country: Syria (Damaskus)

> The sender pretends to co-operate with and antispam reporting
> organization http://spamalarm.org and recommends that recipients not
> wanting his emails should report them there.

possibly because the spammer knows it will not achieve anything.



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] spamalarm.org

[Ken O'Driscoll]

On Thu, 2017-10-26 at 12:35 +0200, Benoit Panizzon wrote:
[...snip...]
> 
> Anyone else having heard of them?
> 

Never heard of them but the mere mention of their URL twice flagged this
email as being possibly spam, so somebody's heard of them!

It's certainly an interesting approach but not a new one. I recall several
years ago a wave of spams including a link to a "Internet Email Master Opt-
Out" site or similar.

If I was a spammer selling anti-spam software, it really is a great lead-
gen exercise...

Ken.

-- 
Ken O'Driscoll / We Monitor Email
t: +353 1 254 9400 | w: www.wemonitoremail.com

Need to understand deliverability? Now there's a book:
www.wemonitoremail.com/book


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] spamalarm.org

[Benoit Panizzon]

Dear Fellow Mailops

Today I came across and interesting statement in a spam email.

The sender pretends to co-operate with and antispam reporting
organization http://spamalarm.org and recommends that recipients not
wanting his emails should report them there.

Well they do seem to forward the complaints to a serious number of
other blacklist operators:

http://spamalarm.org/en/pg01.htm

Strange, I operate the SWINOG Blacklist and also my own 'Woodys SMTP
Blacklists' and I have never heard of them or received any report about
them.

So I suppose it's reasonable to blacklist their URI in said
blacklists :-)

Anyone else having heard of them?

-Benoît Panizzon-
-- 
I m p r o W a r e   A G-Leiter Commerce Kunden
__

Zurlindenstrasse 29 Tel  +41 61 826 93 00
CH-4133 PrattelnFax  +41 61 826 93 01
Schweiz Web  http://www.imp.ch
__

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop