Re: [mailop] Admin: Gmail users of mailop suspended due to bounces.

2019-05-02 Thread Brandon Long via mailop
Forwarding is one of those damned if you do, damned if you don't things.

If you don't rewrite the envelope sender, the spf will fail, and we might
notice better that its forwarded, and we'll ding you potentially less for
forwarding spam to us.

If you do rewrite the envelope sender and do a poor job of filtering spam
before forwarding, then you're forwarding us spam that we then attribute to
your spf.  And if you have a lot of false positives you don't forward,
where are they?  On a spam folder on an account that is literally never
checked?  There's a place that spam folders aren't a good idea.

We typically recommend that most users not rewrite the envelope sender,
unless they know what they're doing.

Anyways, the forwarding question has gone around mailop multiple times.  I
think last time we recommended you forward, don't rewrite, and also pop
fetch to fetch anything that may have been rejected.   Isn't that easy?

OH, and don't forget, ARC may help some day eventually.

Brandon

On Thu, May 2, 2019 at 8:26 AM Grant Taylor via mailop 
wrote:

> On 5/2/19 7:06 AM, Johann Klasek via mailop wrote:
> > Just from our perspective, SRS works well as far as I can see, at
> > least with a minor patched srs-socketmapd for our Sendmail environment.
> > https://jk.kom.tuwien.ac.at/~jklasek/Software/srs-socketmapd/ Because
> > not all of our e-mail addresses are bound to a mail account (with a real
> > UNIX account behind it where one could easily set a new envelope
> sender),
> > we attempted to address this envelope munging in the MTA domain simply
> > to cover every case. And it worked well for a couple of years.
>
> I'm also having good luck with SRS in conjunction with Sendmail.  I
> think I'm using a different version (let me know if you want me to dig
> details).
>
> The things that I like about what I'm using is that it will rewrite
> messages with envelope from addresses that aren't in class w.  I don't
> have to worry about unix accounts vs virtual addresses.
>
>
>
> --
> Grant. . . .
> unix || die
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] AT - Need assistance with /24 listing

2019-05-02 Thread Alex Burch via mailop
Hi Steven,

Did you find any resolution here? We have a similar block on a /24 at
att.net and I'm finding it very difficult to make any progress with
abuse_...@abuse-att.net. Do you have a contact at ATT you can pass along?

Thanks,
Alex


--

Alexander Burch
ActiveCampaign / Deliverability Engineer
abu...@activecampaign.com
1 North Dearborn St Suite 500, Chicago IL, 60602








On Fri, Dec 28, 2018 at 12:22 PM Steven Sarkisian 
wrote:

> Hello,
>
> If anyone is here from AT, help with the following IP listing would be
> greatly appreciated.  I believe the following range is listed:
>
> *216.205.24.0/24 *
>
>
>
> 5.3.0 flph830 DNSBL:RBL 521< 216.205.24.119 >_is_blocked.For assistance
> forward this email to abuse_...@abuse-att.net
>
> AT Postmaster Case: [122818-114924-6950-00]
>
> This is one of the primary delivery ranges for Mimecast, customers are
> relentlessly calling our support line for assistance.  Any help would be
> greatly appreciated.
>
> Thank you!
>
> Steven Sarkisian
>
> Global Manager - Messaging Security
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] provider $X, $Y, et al.

2019-05-02 Thread Grant Taylor via mailop

On 5/2/19 9:55 AM, Rich Kulawiec via mailop wrote:
In addition: thanks to password re-use practices, which are epidemic, 
"giving provider $X a password so that they can POP email from provider 
$Y" is semantically equivalent to "giving provider $X passwords to 
some/most/all other accounts of other descriptions".  Even if we 
presume the most scrupulous behavior by $X and its personnel -- and 
history shows that is often naive and dangerous -- it still increases 
the exposure/risk of the password in question.


To me, provider $X trying $Y's credentials on on provider $Z is 
tantamount to credential stuffing and constitutes hacking in my opinion.


I may have naively given provider $X permission to access my account on 
provider $Y.  But that permission decidedly does NOT extend to /any/ 
other provider.  Period.  End of story.




--
Grant. . . .
unix || die



smime.p7s
Description: S/MIME Cryptographic Signature
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] openspf.org down

2019-05-02 Thread Laura Atkins via mailop
I just did something similar. 

laura 


> On 2 May 2019, at 16:42, Al Iverson via mailop  wrote:
> 
> Linkedin suggests he works for Agari. I emailed a friend who works
> there and asked her to pass a message along asking about openspf.org.
> I'll share back what I hear. And I'll tell him about the discussion
> here.
> 
> Cheers,
> Al
> 
> On Thu, May 2, 2019 at 11:18 AM Grant Taylor via mailop
>  wrote:
>> 
>> On 5/2/19 4:07 AM, Thomas Walter via mailop wrote:
>>> Speculations:
>>> https://news.ycombinator.com/item?id=19391851
>> 
>> Hum.
>> 
>> IMHO openspf.org is (was?) a somewhat important site.
>> 
>> I wonder if there needs to be a community effort to contact him and
>> recover data to resurrect the site / service.
>> 
>> I wonder if TIA/WM has anything (static).
>> 
>> 
>> 
>> --
>> Grant. . . .
>> unix || die
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
> 
> 
> 
> -- 
> al iverson // wombatmail // miami
> http://www.aliverson.com
> http://www.spamresource.com
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

-- 
Having an Email Crisis?  We can help! 800 823-9674 

Laura Atkins
Word to the Wise
la...@wordtothewise.com
(650) 437-0741  

Email Delivery Blog: https://wordtothewise.com/blog 







___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] forwarding failure, Admin: Gmail users of mailop suspended due to bounces.

2019-05-02 Thread Rich Kulawiec via mailop
On Thu, May 02, 2019 at 11:50:12AM +0100, Andrew C Aitchison via mailop wrote:
> With single-sign-on I need to make it easy for users not to give the
> alternate mail service (and their hackers :-) access to all the
> services I provide, along with POP retrieval.

In addition: thanks to password re-use practices, which are epidemic,
"giving provider $X a password so that they can POP email from provider
$Y" is semantically equivalent to "giving provider $X passwords to
some/most/all other accounts of other descriptions".  Even if we
presume the most scrupulous behavior by $X and its personnel --
and history shows that is often naive and dangerous -- it still
increases the exposure/risk of the password in question.

---rsk

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] openspf.org down

2019-05-02 Thread Al Iverson via mailop
Linkedin suggests he works for Agari. I emailed a friend who works
there and asked her to pass a message along asking about openspf.org.
I'll share back what I hear. And I'll tell him about the discussion
here.

Cheers,
Al

On Thu, May 2, 2019 at 11:18 AM Grant Taylor via mailop
 wrote:
>
> On 5/2/19 4:07 AM, Thomas Walter via mailop wrote:
> > Speculations:
> > https://news.ycombinator.com/item?id=19391851
>
> Hum.
>
> IMHO openspf.org is (was?) a somewhat important site.
>
> I wonder if there needs to be a community effort to contact him and
> recover data to resurrect the site / service.
>
> I wonder if TIA/WM has anything (static).
>
>
>
> --
> Grant. . . .
> unix || die
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop



-- 
al iverson // wombatmail // miami
http://www.aliverson.com
http://www.spamresource.com

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Admin: Gmail users of mailop suspended due to bounces.

2019-05-02 Thread Grant Taylor via mailop

On 5/2/19 7:06 AM, Johann Klasek via mailop wrote:
Just from our perspective, SRS works well as far as I can see, at 
least with a minor patched srs-socketmapd for our Sendmail environment. 
https://jk.kom.tuwien.ac.at/~jklasek/Software/srs-socketmapd/ Because 
not all of our e-mail addresses are bound to a mail account (with a real 
UNIX account behind it where one could easily set a new envelope sender), 
we attempted to address this envelope munging in the MTA domain simply 
to cover every case. And it worked well for a couple of years.


I'm also having good luck with SRS in conjunction with Sendmail.  I 
think I'm using a different version (let me know if you want me to dig 
details).


The things that I like about what I'm using is that it will rewrite 
messages with envelope from addresses that aren't in class w.  I don't 
have to worry about unix accounts vs virtual addresses.




--
Grant. . . .
unix || die



smime.p7s
Description: S/MIME Cryptographic Signature
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] openspf.org down

2019-05-02 Thread Grant Taylor via mailop

On 5/2/19 4:07 AM, Thomas Walter via mailop wrote:

Speculations:
https://news.ycombinator.com/item?id=19391851


Hum.

IMHO openspf.org is (was?) a somewhat important site.

I wonder if there needs to be a community effort to contact him and 
recover data to resurrect the site / service.


I wonder if TIA/WM has anything (static).



--
Grant. . . .
unix || die



smime.p7s
Description: S/MIME Cryptographic Signature
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Seeing broken Content-Type headers from sendgrid

2019-05-02 Thread Ryan Harris via mailop
Hello Tobi,

Your friendly sendgrid community member here. Could you send me headers off
list? Would love to see what you are experiencing.

Thanks for your help.


Ryan

On Mon, Apr 29, 2019, 6:02 AM Tobi via mailop  wrote:

> We're currently seeing quite a bunch of messages from
> no-re...@sendgrid.net which contain broken Content-Type headers like
>
> > Content-Type: multipart/report; report-type=delivery-status;
> > Date: Mon, 29 Apr 2019 10:09:15 UTC
> >  boundary="2821519d3987dfb8"
> > Content-Transfer-Encoding: binary
>
> boundary belongs to Content-Type.
> This will cause problems with any message parsing application that
> expects proper mime structure.
>
> Anyone else seeing such broken headers from sendgrid?
>
> --
> tobi
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Admin: Gmail users of mailop suspended due to bounces.

2019-05-02 Thread Johann Klasek via mailop
On Tue, Apr 30, 2019 at 09:08:34AM +0200, Thomas Walter via mailop wrote:
[..]
> We have a lot of students forwarding their emails to external mailboxes
> (usually freemailers even though they have more options here).

Same problem here...
and it was very annoying and support consuming.

[..]
> I can show you all kinds of examples where the forwarding is rejected in
> those cases because the new "sending IPs" are from our machines, not the
> ones listed in the From's SPF record.
> 
> And no, I don't do SRS, because I don't want to do workarounds to
> support a protocol that was broken by design in the first place.
[..]

Just from our perspective, SRS works well as far as I can see, at least
with a minor patched srs-socketmapd for our Sendmail environment.
https://jk.kom.tuwien.ac.at/~jklasek/Software/srs-socketmapd/
Because not all of our e-mail addresses are bound to a mail account (with
a real UNIX account behind it where one could easily set a new envelope
sender), we attempted to address this envelope munging in the MTA domain
simply to cover every case. And it worked well for a couple of years.

-- 
Johann E. Klasek  IT Solutions - Application Management
Technische Universität Wien Tel: +43 1 58801- 42049
A-1040 Wien, Operngasse 11/020 (DF0421) Fax: +43 1 58801-942049

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Gmail Contact?

2019-05-02 Thread Brett Schenker via mailop
I've had similar issues with a few of our clients and have had them focus
on sending to openers and clickers for Gmail. The clickers/openers universe
gets 30-46% open rates. For the rest when we test "inactive" for Gmail
after about two weeks the open rate has increased from 2% to 8%.

I think this is generally the right strategy, it just takes a while. For
volume total we're looking at about 1500 individuals between
openers/clickers so far.

On Thu, May 2, 2019, 7:10 AM Mark | Uniform Benefits via mailop <
mailop@mailop.org> wrote:

> Rather than open up a new thread I hope I can pop this in here:
>
>
>
> We’ve been working very hard to bring our email up to scratch using all
> available best practice and some very good advice form this group.
>
> Microsoft – green now, Yahoo delivering well. Most other ISP seems in good
> shape, It looks like we may still in business and we get to keep the roof
> over our heads.
>
>
>
> Now moving back to Gmail (26% of our base c. 161k). Sending an identical
> campaign to a Microsoft campaign sent at the same time to the same level of
> engaged users (those that had completed the transactional welcome program
> and clicked through it) give these results - Microsoft OPR 42% so far,
> Gmail 0%
>
>
>
> We sent it to 10 users then crept it up to 29 TTL now figuring numbers are
> not high enough to generate any opens potentially.
>
>
>
> I’m not asking for direct help in any secret button pushing but if anyone
> can provide insight into the best way to move this forward to start mail
> delivering so we can incrementally work to a full campaign (removing
> non-engaged users as we go) I’d take any feedback positive or negative with
> gratitude. I’ve submitted the form below with the headers etc though unsure
> if that goes the same way as the Microsoft Mitigation process.
>
>
>
> Thank you
>
> Mark
>
>
>
>
>
> *From:* mailop  *On Behalf Of *Brandon Long
> via mailop
> *Sent:* 16 April 2019 17:03
> *To:* Brian Kantor 
> *Cc:* mailop 
> *Subject:* Re: [mailop] Gmail Contact?
>
>
>
> Filling out the form multiple times is unlikely to help.
>
>
>
> Policies don't change very often, but rules and ML models do.  The policy
> is still "if receivers mark your mail as spam, you're going to have a bad
> time".  The addenda would be "if we don't know who you are, we aren't going
> to accept a lot of it" followed by "don't be too similar to the bad guys"
>
>
>
> Without info to investigate, not much we can do
>
>
>
> Brandon
>
>
>
> On Tue, Apr 16, 2019, 7:39 AM Brian Kantor  wrote:
>
> I do not *know*, but mail that some months ago stopped going into
> spam mail folders has recently resumed being 100% shunted as spam,
> resulting in my inability to communicate directly with many clients.
> - Brian
>
>
> On Tue, Apr 16, 2019 at 10:12:26AM -0400, Rob Heilman via mailop wrote:
> > Thanks, we started those last night.  Might make it into an hourly
> routine.  Would be nice if their form had an incident ID to help correlate
> the reports.
> >
> > Does anyone know if they recently made changes to their inbound policies
> for DMARC/SPF/DKIM?
> >
> > -Rob Heilman
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
> [image:
> https://t.sidekickopen78.com/s1t/o/5/f18dQhb0S7kC8dDMPbW2n0x6l2B9gXrN7sKj6v5KRN6W56jNpn1p1n7nN3LvrVv2W45jf197v5Y04?si=72240246=cd1f8474-ef69-4f47-8477-181139b5aad7]
>
>
> 
>  Virus-free.
> www.avg.com
> 
> <#m_-8842178866879233033_DAB4FAD8-2DD7-40BB-A1B8-4E2AA1F9FDF2>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Gmail Contact?

2019-05-02 Thread Mark | Uniform Benefits via mailop
Rather than open up a new thread I hope I can pop this in here:

 

We've been working very hard to bring our email up to scratch using all
available best practice and some very good advice form this group.

Microsoft - green now, Yahoo delivering well. Most other ISP seems in good
shape, It looks like we may still in business and we get to keep the roof
over our heads.

 

Now moving back to Gmail (26% of our base c. 161k). Sending an identical
campaign to a Microsoft campaign sent at the same time to the same level of
engaged users (those that had completed the transactional welcome program
and clicked through it) give these results - Microsoft OPR 42% so far, Gmail
0%

 

We sent it to 10 users then crept it up to 29 TTL now figuring numbers are
not high enough to generate any opens potentially. 

 

I'm not asking for direct help in any secret button pushing but if anyone
can provide insight into the best way to move this forward to start mail
delivering so we can incrementally work to a full campaign (removing
non-engaged users as we go) I'd take any feedback positive or negative with
gratitude. I've submitted the form below with the headers etc though unsure
if that goes the same way as the Microsoft Mitigation process.

 

Thank you

Mark

 

 

From: mailop  On Behalf Of Brandon Long via
mailop
Sent: 16 April 2019 17:03
To: Brian Kantor 
Cc: mailop 
Subject: Re: [mailop] Gmail Contact?

 

Filling out the form multiple times is unlikely to help.

 

Policies don't change very often, but rules and ML models do.  The policy is
still "if receivers mark your mail as spam, you're going to have a bad
time".  The addenda would be "if we don't know who you are, we aren't going
to accept a lot of it" followed by "don't be too similar to the bad guys"

 

Without info to investigate, not much we can do

 

Brandon

 

On Tue, Apr 16, 2019, 7:39 AM Brian Kantor mailto:br...@ampr.org> > wrote:

I do not *know*, but mail that some months ago stopped going into
spam mail folders has recently resumed being 100% shunted as spam,
resulting in my inability to communicate directly with many clients.
- Brian


On Tue, Apr 16, 2019 at 10:12:26AM -0400, Rob Heilman via mailop wrote:
> Thanks, we started those last night.  Might make it into an hourly
routine.  Would be nice if their form had an incident ID to help correlate
the reports. 
> 
> Does anyone know if they recently made changes to their inbound policies
for DMARC/SPF/DKIM?
> 
> -Rob Heilman

___
mailop mailing list
mailop@mailop.org  
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

 
 



---
This email has been checked for viruses by AVG.
https://www.avg.com
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] forwarding failure, Admin: Gmail users of mailop suspended due to bounces.

2019-05-02 Thread Andrew C Aitchison via mailop

On Tue, 30 Apr 2019, John Levine via mailop wrote:


I've been encouraging my users not to forward their mail, and if they want
to consolidate it at Gmail or Yahoo or whatever, set the other service up
to do POP retrieval.  Works fine, at the cost of a slight delay in getting
some of the mail.


With single-sign-on I need to make it easy for users not to give the
alternate mail service (and their hackers :-) access to all the
services I provide, along with POP retrieval.

--
Andrew C. Aitchison Cambridge, UK
and...@aitchison.me.uk

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] openspf.org down

2019-05-02 Thread Thomas Walter via mailop


On 02.05.19 11:48, lukn via mailop wrote:
> Hello mailops
> 
> openspf.org seems to have been down for quite some time now, "the
> internet" (as in reddit, twitter and friends) are wondering why - but
> nobody knows anything.
> 
> does anyone have some (shareable) insight? speculations?

Speculations:
https://news.ycombinator.com/item?id=19391851

Regards,
Thomas Walter

-- 
Thomas Walter
Datenverarbeitungszentrale

FH Münster
- University of Applied Sciences -
Corrensstr. 25, Raum B 112
48149 Münster

Tel: +49 251 83 64 908
Fax: +49 251 83 64 910
www.fh-muenster.de/dvz/

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] openspf.org down

2019-05-02 Thread lukn via mailop
Hello mailops

openspf.org seems to have been down for quite some time now, "the
internet" (as in reddit, twitter and friends) are wondering why - but
nobody knows anything.

does anyone have some (shareable) insight? speculations?

thx
lukn

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop