[mailop] (More) Outlook/Hotmail Deliverability issues

[Chris Malton (Delta V)]

Hi all,

Seems like we're hitting the dreaded S3150 block list again having 
introduced a new server our mail pool.


I've already logged two tickets with MS support about this, and 
bizarrely email from us towards one of our Office 365 customers is fine 
(but others aren't!), and we can't send anything to hotmail/outlook/live 
at all.  We're trying to get the addresses delisted and we're not 
getting very far.


I'm also finding it impossible to add my entire AS, or even the entire 
/22 my company has to SNDS.  It always declares that "no such host is 
known" or "Sorry whois.ripe.net will not let us do any more lookups 
today".  I then have to re-add all the IPs I just removed.


Having attempted this at various times of day, I am coming to the 
conclusion that, actually, you can't add an AS to SNDS at all, and 
adding a range of IPs requires rDNS for every IP in the block. That's 
not the case in my network, because some of the blocks have extra IPs 
that are not in use.


As I know we have at least one Microsoft person here, I appreciate that 
you, personally, may not be able to do much about either of these.  
However, my general frustration is at seemingly not being able to 
communicate with anyone about this issue at all any more is a much 
bigger issue than the underlying fault.  It's costing my business 
clients who are leaving because they can't deliver mail to Microsoft for 
what (to them) is no obvious reason.  I appreciate you want to fight 
spam, and I understand the fine lines you tread.  But, getting no 
response to a ticket from last week, filing a new one last night, 
getting no response to that with in the "expect response within" 
timeframe, etc, is getting tedious.


If anyone has any hints how to add an AS or a netblock to SNDS, that 
would be fantastic.


Regards,

Chris Malton

--
Delta V Technologies Limited
0 402 406www.deltav-tech.co.uk
Office: 17 Elm Close, Southampton, SO16 7DT
Company No. 11006104 Registered in England and Wales


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] charter.net contact

[Marc Bradshaw via mailop]

Hi,

I'm looking for a contact at charter.net to talk about a deliverability issue 
we are having with forwarded mail.
If you are such a person (or know of one) could you please contact me off list 
via the fastmailteam.com address in my signature.
Thanks.

--

 Marc Bradshaw - Deliverability/Abuse at FastMail
m...@fastmailteam.com | @marcbradshaw 

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] IP Listed with Microsoft

[Michael Wise via mailop]

Is this for Office365 or Hotmail?
The process is different depending.

What IPs?
Did you get a ticket from the support system (if Hotmail) ?

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool ?

From: mailop  On Behalf Of Luana Patel
Sent: Thursday, March 14, 2019 8:32 AM
To: mailop@mailop.org
Subject: [mailop] IP Listed with Microsoft


Hello,
I need help with delisting an IP range from Microsoft. I sent them couple 
e-maisl along with my co-workers also sending them e-mails and nothing.
Anyone with ideas or that can assist?
We had two customers with bad mail loops, so not spam and not intentional.

I appreciate the assistance.

Luana

Luana Patel

supp...@mimecast.com

www.mimecast.com

Messaging Security Analyst (Level 1)

p:

Address click 
here


[http://www.mimecast.com/]




[LinkedIn]


[YouTube]


[Facebook]


[Blog]


[Twitter]






[Your Needs, Our 
Focus]

Re: [mailop] Issue receiving fbl reports from laposte.net

[Al Iverson]

Yep, we're seeing that here as well. Both for LaPoste and for
OpenSRS/Tucows.

Cheers,
Al Iverson
Salesforce Marketing Cloud


On Thu, Mar 14, 2019 at 2:56 PM Mathew Hodges via mailop 
wrote:

> Hello,
>
> I'm a deliverability engineer with Mailchimp. We noticed that on March 11
> we stopped receiving fbl reports from laposte.net. Our last message came
> in at Mon, 11 Mar 2019 13:04:20 +. We aren't noticing any lack of data
> from other domains, including those serviced by Return Path.
> I reached out to Return Path customer service and they mentioned
> everything was enabled and active on their end to send fbl reports. I have
> also been able to confirm that our inbox that receives these fbl reports
> isn't full and is receiving messages successfully. Our fbl is still
> registered and active for our full IP range.
> For reference, our sending IP ranges are as follows:
> 205.201.128.0/20
> 198.2.128.0/18
> 148.105.0.0/16
> Our sending domains are:
> mandrillapp.com
> rsgsv.net
> mcsv.net
> mcdlv.net
> mctxapp.net
> mailchimpapp.net
> I wanted to check if anyone else was seeing the same issue? If so, was
> anyone able to find a resolution?
>
> --
> Mathew Hodges
> Deliverability Engineer
> mathew.hod...@mailchimp.com
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>


-- 
al iverson // wombatmail // miami
http://www.aliverson.com
http://www.spamresource.com
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Issue receiving fbl reports from laposte.net

[Mathew Hodges via mailop]

Hello,

I'm a deliverability engineer with Mailchimp. We noticed that on March 11
we stopped receiving fbl reports from laposte.net. Our last message came in
at Mon, 11 Mar 2019 13:04:20 +. We aren't noticing any lack of data
from other domains, including those serviced by Return Path.
I reached out to Return Path customer service and they mentioned everything
was enabled and active on their end to send fbl reports. I have also been
able to confirm that our inbox that receives these fbl reports isn't full
and is receiving messages successfully. Our fbl is still registered and
active for our full IP range.
For reference, our sending IP ranges are as follows:
205.201.128.0/20
198.2.128.0/18
148.105.0.0/16
Our sending domains are:
mandrillapp.com
rsgsv.net
mcsv.net
mcdlv.net
mctxapp.net
mailchimpapp.net
I wanted to check if anyone else was seeing the same issue? If so, was
anyone able to find a resolution?

-- 
Mathew Hodges
Deliverability Engineer
mathew.hod...@mailchimp.com
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] IP Listed with Microsoft

[Luana Patel]

Hello,
I need help with delisting an IP range from Microsoft. I sent them couple 
e-maisl along with my co-workers also sending them e-mails and nothing.
Anyone with ideas or that can assist?
We had two customers with bad mail loops, so not spam and not intentional.

I appreciate the assistance.

Luana


[ YouTube: http://www.youtube.com/user/mimecast#p/u/15/_523kC3lcNQ]  [ Twitter: 
http://twitter.com/mimecast ]  [ Our Blog: http://blog.mimecast.com/ ] 

Luana Patel
Messaging Security Analyst (Level 1)
c: 
p: 
http://www.mimecast.com

Johannesburg Map 
GPS: 26' 05.940" S, 18o 28' 04.278" E
(http://maps.google.com/maps/ms?hl=en&ie=UTF8&msa=0&msid=104153695170153523925.000469102c74a808b138c≪=-26.099685,28.069403&spn=0.011986,0.026178&z=16)

Cape Town Map
GPS: 33o 56.068" S, 18o 28.320" E
(http://maps.google.com/maps/ms?source=s_q&hl=en≥ocode=&mrt=all&ie=UTF8&g=Fir+Street,+Observatory,Cape+Town&msa=0≪=-33.934753,18.4721&spn=0.00413,0.009656&z=17&msid=100887237870528382628.00046a80a3916c933dad3)



Disclaimer

This email, sent at 15:31:59 on 2019-03-14 from lpa...@mimecast.com to 
mailop@mailop.org has been scanned for viruses and malware by Mimecast, an 
innovator in software as a service (SaaS) for business. 's email continuity, 
security, archiving and compliancy is managed by Mimecast's unified email 
management platform. 
To find out more, email i...@mimecast.co.za or request a demo.

Mimecast SA (Pty) Ltd is a registered company within the Republic of South 
Africa, company registration number: 2004/000965/07  VAT No. 4650210547


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Spamhaus Blocking SBLCSS - Need assistance

[Michael Rathbun]

On Thu, 14 Mar 2019 09:58:45 -0500, Michael Rathbun  wrote:

>>The IPs are from different networks and being used by different customers...

And I should have mentioned that "same spam from different networks, from same
sending operation" is one of the most instantaneous ways of getting CSS
listed.  I have seen it take as short as eleven minutes for a newly-initiated
/24 to go from pristine to CSS listed for this reason.  (The .sig is
apposite.)

mdr
-- 
   If Jurassic Park had been about email, Jeff Goldblum would be known 
   for saying "Spammers, uh, find a way".

  -- David Carriger of Infusionsoft, after noting that some spammers
 they hosed off the deck had found a new home elsewhere.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Spamhaus Blocking SBLCSS - Need assistance

[Michael Rathbun]

On Thu, 14 Mar 2019 13:27:30 +, Jan Mollenhauer via mailop
 wrote:

>Hello,
>
>we are an email service provider. Our customers use our software to send 
>newsletter.
>Our software and servers are configured with all best practices like SPF, 
>DKIM, DMARC, RDNS. We have also processes implemented for processing bounces, 
>feedbackloops, unsubscribes and DOI subscriptions.
>
>Now we are getting blocked by Spamhaus SBLCSS with almost all of our ip 
>addresses.
>The IPs are from different networks and being used by different customers of 
>us over multiple servers and for different subscribers.

The CSS is a "snowshoe" list -- IPs that have been used to send spam in ways
that are an apparent attempt to spread out the sending in such a way that it
evades spam filters, or persists until the sending IPs/domains are blacklisted
six ways from Sunday.

One way for this to happen to an otherwise innocent ESP is if some of your
clients have been sending out their spam from different ESPs.  In my CSS spam
sump, most of the "newsletters" this week are for the latest prices on
Erectile Dysfunction remedies, tactical flashlights and bogus stock offerings.
In many cases the identical "newsleetter" will come from several different
sources, some of which appear to be ESPs.

When the spam stops, the listings will expire.

mdr
-- 
   "There will be more spam."
  -- Paul Vixie


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] cloudfilter.net/sprintpcs.com MX servers giving 250 with ESMTP server not available

[Josiah Ritchie]

Found out that this was the result of some new features in our software
digging up and using old sms email addresses. Consequently, we had the
appearance of directory harvesting due to many bad numbers. Working that
out, just wish the errors had been more clear in the error that this was
"rate limiting" instead of just dropping us silently.

On Tue, Mar 12, 2019 at 3:25 PM Josiah Ritchie <
jritc...@churchcommunitybuilder.com> wrote:

> All our outbound mail servers have seen strange responses to messages to
> sprintpcs.com, vmobl.com, sms.myboostmobile.com and message.ting.com.
> They are delivered to postmark's spr-sms.mx.a.cloudfilter.net MX servers
> and frequently given a 250 with the message "ESMTP server not available".
> Our postfix servers assume that means delivered, but in testing we're
> finding that they are not actually arriving. We're estimating approximately
> 1/3rd of our messages to those domains are impacted. We do not see it on
> other domains using cloudfilter.net.
>
> Example:
> Mar 5 16:07:20 mailout-i-008204 postfix/smtp[14802]: 9DF126126B: to=<
> 555...@messaging.sprintpcs.com>, 
> relay=spr-sms.mx.a.cloudfilter.net[52.23.25.191]:25,
> delay=2.9, delays=0.05/0/0.44/2.4, dsn=2.0.0, status=sent (250 2.0.0 ESMTP
> server not available)
>
> Anyone know what is actually going on here? Seems like a conflicting
> response and I'm not sure what they want me to think about it.
>
> Thanks,
> Josiah Ritchie
>


-- 
Josiah Ritchie
Church Community Builder
(719) 266-2888
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] Spamhaus Blocking SBLCSS - Need assistance

[Olaf Petry - Hornetsecurity]

Hi,

>> Now we are getting blocked by Spamhaus SBLCSS with almost all of our ip 
>> addresses.
You don't get blocked by SBLCSS but only listed. Any recipient / provider is 
responsible for using the list on its own.

According to the Spamhaus site, you get listed because:
- Email showing indications of unsolicited nature;
- Broad-spectrum aggregated views of email deliveries;
- Having poor list-hygiene;
- Sending out bad email due to a compromise (compromised account, webform or 
CMS);
- Other indicators of low reputation or abuse.

According to your description (sending newsletter, different customer) your IPs 
are predestined to get listed there if you don't take care.
Have you checked each of this points? Did you contact Spamhaus support?

As you name no affected IP or range or sending hostname it is difficult to give 
you a hint.

Mit freundlichen Grüßen / Kind Regards
Olaf Petry


From: mailop  On Behalf Of Jan Mollenhauer via mailop
Sent: Thursday, March 14, 2019 2:28 PM
To: mailop@mailop.org
Subject: [mailop] Spamhaus Blocking SBLCSS - Need assistance

Hello,

we are an email service provider. Our customers use our software to send 
newsletter.
Our software and servers are configured with all best practices like SPF, DKIM, 
DMARC, RDNS. We have also processes implemented for processing bounces, 
feedbackloops, unsubscribes and DOI subscriptions.

Now we are getting blocked by Spamhaus SBLCSS with almost all of our ip 
addresses.
The IPs are from different networks and being used by different customers of us 
over multiple servers and for different subscribers.

The only thing they have in common is that all IPs are registered by our 
company.

We already tried the delisting process but with no luck and no further response 
from Spamhaus.
The delisting process ist now being blocked. With message: CSS removal denied. 
xxx.xxx.xxx.xxx cannot be removed at this time.

Maybe someone from Spamhaus is listening to this and can contact us or somone 
else can give some guidance?

Any help appreciated.


Best regards

--
Jan Mollenhauer

http://atpscan.global.hornetsecurity.com/index.php?atp_str=VbQbLPaBjvZyi7ZkkM65OBOXpx2FF8E6oBNTfGMzRYKxTMwHwS9VwUiIpWClvmoO5xTzdi-VnyapL1SGI5m4MTfI3x_ucyYlIRA5DSQqJ6k7iwKak3_OfQu7C9xHhKH_sGuZsftuOs0xHSWjoZswGxF57Y39tmm4ADNuaksHrWBhaeFkdKR256ROGUy_5_r2OkDPxmNCcV0CmU03tTJejm-9uLBUZz_onSlRXBf8GkZ-YgXvT5DpmvvMwNmi5Bv__ai7ZXlA-ys4Fcxubjg12NfyxqKoMaMRctcp9AOUgYkkG7MBz8H_LXXLfyM6OiNlY2I1NmYyNjZjYmQjOjojt2-jqdrWSE2H14CFkpvcaw

BACKCLICK GmbH
Brabandtstrasse 8
38100 Braunschweig
Telefon: +49 531 615 63 - 200
Fax: +49 531 615 63 - 179
http://atpscan.global.hornetsecurity.com/index.php?atp_str=z2OGpzdLrqayOvrky5REkW-9DaIwt5J90Z-GBcE9wyw8n6aQfhegqzlt1aHg5sS3EJPRp-j7QvEvfoxZmINSVS3VuBHl_Jakd4MIlk3uuOtZybMDD_wLc5zbn07uakgJ46p8gw9ZvTUNhPCQgQFXkbfdc4aU-D8bOxanT3n104VXBapU_sKa9oiD5icanu_nztFdLrZncwMJGZRRV5RUxSUBCYR5PpecbfiM8yAA7BK_1xloeuSQvbyg0WKRf737FilLs0tosqjGItGsU96ufxi5w4uoMRNGZ34qz8Cu1SM6OiM0MDUzNTEzODM5Y2MjOjojIw-ew5gsWCJdVT0JbQhWeQ
mailto:j.mollenha...@backclick.de


smime.p7s
Description: S/MIME cryptographic signature
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] Spamhaus Blocking SBLCSS - Need assistance

[Jan Mollenhauer via mailop]

Hello,

we are an email service provider. Our customers use our software to send 
newsletter.
Our software and servers are configured with all best practices like SPF, DKIM, 
DMARC, RDNS. We have also processes implemented for processing bounces, 
feedbackloops, unsubscribes and DOI subscriptions.

Now we are getting blocked by Spamhaus SBLCSS with almost all of our ip 
addresses.
The IPs are from different networks and being used by different customers of us 
over multiple servers and for different subscribers.

The only thing they have in common is that all IPs are registered by our 
company.

We already tried the delisting process but with no luck and no further response 
from Spamhaus.
The delisting process ist now being blocked. With message: CSS removal denied. 
xxx.xxx.xxx.xxx cannot be removed at this time.

Maybe someone from Spamhaus is listening to this and can contact us or somone 
else can give some guidance?

Any help appreciated.


Best regards

--
Jan Mollenhauer

[Beschreibung: 
backclick_logo_120x45_transparent]

BACKCLICK GmbH
Brabandtstrasse 8
38100 Braunschweig
Telefon: +49 531 615 63 - 200
Fax: +49 531 615 63 - 179
http://www.backclick.de
mailto:j.mollenha...@backclick.de

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop