Re: [mailop] Microsoft blocking emails

2019-07-25 Thread Michael Hallager via mailop

Hi again all,

Further to my last email-

I have previously raised 2 tickets about this matter and received futile 
responses with the following tagline:


"Please do not reply to this message as it is from an unattended 
mailbox. Any replies to this email will not be responded to or 
forwarded. This service is used for outgoing emails only and cannot 
respond to inquiries."


At this stage it has only gone as far as "respond to the ticket" with 
the Microsoft contact in this group. But how do I respond to a ticket 
when it clearly says the above quote?


Michael Hallager

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Microsoft blocking emails

2019-07-25 Thread Michael Hallager via mailop

Hi all,

Microsoft is intermittent blocking our emails with the message:

: host
hotmail-com.olc.protection.outlook.com[104.47.12.33] said: 550 5.7.1
Unfortunately, messages from [redacted] weren't sent. Please contact
your Internet service provider since part of their network is on our 
block

list (S3150). You can also refer your provider to
http://mail.live.com/mail/troubleshooting.aspx#errors.
[DB3EUR04FT027.eop-eur04.prod.protection.outlook.com] (in reply to 
MAIL

FROM command)

We have joined JMRP. It states no issues.
We use DKIM and SPF and adhere to good practices
We have never been on any RBL's and we monitor this

The nature of this issue indicates it may only affect some email 
server(s) at Outlook. Possibly the IP's were blocked at some time prior 
to us receiving the allocation from APNIC and they have never been 
removed?


This has been happening for as long as we have had this block of IP's 
(since April).


Could someone from Microsoft please contact me?

Michael Hallager


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Who is Secutec.BE?

2019-07-25 Thread Michael Wise via mailop


No. Other reasons.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool ?



-Original Message-
From: mailop  On Behalf Of Michael Peddemors via 
mailop
Sent: Thursday, July 25, 2019 3:18 PM
To: mailop@mailop.org
Subject: Re: [mailop] Who is Secutec.BE?



Judging by the quick google, business been around since 2004, and pushing 
secure DNS services now.. Seems's I have heard their name around... Linked in 
shows about 56 employees..



Are the reasons related to the obvious ransom ware still leaking out your 
network?



(Oh, just giving you a hard time Michael, just happened to do a spam folder 
review today ;)



But it does look like there are a couple of other similarly named companies 
listed as well..







On 2019-07-25 2:59 p.m., Michael Wise via mailop wrote:

> I’m just wondering … for reasons.

>

> Aloha,

>

> Michael.

>

> --

>

> *Michael J Wise*

> MicrosoftCorporation| Spam Analysis

>

> "Your Spam Specimen Has Been Processed."

>

> Got the Junk Mail Reporting Tool

> ?

>

>

> ___

> mailop mailing list

> mailop@mailop.org

> https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C2be3bdb0cd0d4656693708d7114e4e0d%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636996900321480320&sdata=QVo%2Fkpv5Quu%2FtR22%2B9wUKJCSzuBzOGAW5NcjaEC%2Fkds%3D&reserved=0

>







--

"Catch the Magic of Linux..."



Michael Peddemors, President/CEO LinuxMagic Inc.

Visit us at 
https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.linuxmagic.com&data=02%7C01%7Cmichael.wise%40microsoft.com%7C2be3bdb0cd0d4656693708d7114e4e0d%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636996900321480320&sdata=bO3t%2BVlwOO0EdJAlu9SyFPO8p0ag1szN%2FBXaMjZ2IIs%3D&reserved=0
 @linuxmagic

A Wizard IT Company - For More Info 
https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.wizard.ca&data=02%7C01%7Cmichael.wise%40microsoft.com%7C2be3bdb0cd0d4656693708d7114e4e0d%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636996900321480320&sdata=pVK5KSGfEb7QiDJL9oCZHYZ6kf%2BuysQVOHWeELCoJdQ%3D&reserved=0

"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.



604-682-0300 Beautiful British Columbia, Canada



This email and any electronic data contained are confidential and intended

solely for the use of the individual or entity to which they are addressed.

Please note that any views or opinions presented in this email are solely

those of the author and are not intended to represent those of the company.



___

mailop mailing list

mailop@mailop.org

https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=02%7C01%7Cmichael.wise%40microsoft.com%7C2be3bdb0cd0d4656693708d7114e4e0d%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C636996900321480320&sdata=QVo%2Fkpv5Quu%2FtR22%2B9wUKJCSzuBzOGAW5NcjaEC%2Fkds%3D&reserved=0
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Who is Secutec.BE?

2019-07-25 Thread Michael Peddemors via mailop
Judging by the quick google, business been around since 2004, and 
pushing secure DNS services now.. Seems's I have heard their name 
around... Linked in shows about 56 employees..


Are the reasons related to the obvious ransom ware still leaking out 
your network?


(Oh, just giving you a hard time Michael, just happened to do a spam 
folder review today ;)


But it does look like there are a couple of other similarly named 
companies listed as well..




On 2019-07-25 2:59 p.m., Michael Wise via mailop wrote:

I’m just wondering … for reasons.

Aloha,

Michael.

--

*Michael J Wise*
MicrosoftCorporation| Spam Analysis

"Your Spam Specimen Has Been Processed."

Got the Junk Mail Reporting Tool 
?



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop





--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Who is Secutec.BE?

2019-07-25 Thread Michael Wise via mailop

I'm just wondering ... for reasons.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool ?

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Emailed notifications from facebook failing SPF checks

2019-07-25 Thread Udeme Ukutt via mailop
Frank, I forwarded this to someone there to ping you directly.

Udeme

On Thu, Jul 25, 2019 at 9:32 AM Frank Bulk via mailop 
wrote:

> Our spam filtering vendor recently upgraded their platform and has improved
> their SPF checking feature set.  We can now tag on Permanent Failures,
> which
> we couldn't do before.
>
> We also noticed that email from notificat...@facebookmail.com was having a
> Soft Failure.  Turns out that facebook issues "mx-out.facebook.com" on the
> HELO/EHLO, and that FQDN's SPF record doesn't include all the items that
> are
> listed in facebookmail.com's SPF record.
>
> root@nagios:/tmp# dig TXT mx-out.facebook.com +short | grep spf
> "v=spf1 a ~all"
> root@nagios:/tmp# dig TXT facebookmail.com +short | grep spf
> "v=spf1 ip4:66.220.144.128/25 ip4:66.220.155.0/24 ip4:66.220.157.0/25
> ip4:69.63.178.128/25 ip4:69.63.181.0/24 ip4:69.63.184.0/25" "
> ip4:69.171.232.0/24 ip4:69.171.244.0/23 -all"
> root@nagios:/tmp#
>
> Best I can understand from the IETF RFC, it is appropriate to check the
> HELO: https://tools.ietf.org/html/rfc7208#section-2.3
>
> Anyone from fb on this list, or is there someone who knows the email or DNS
> folk at facebook and can forward this to them for consideration?
>
> Regards,
>
> Frank
>
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Emailed notifications from facebook failing SPF checks

2019-07-25 Thread Michael Peddemors via mailop

Speaking about Facebook.. wish they standardized naming conventions ..
They seem to also have a real problem with sending to invalid email 
addresses, of course with their size it could simply be thousands of ppl 
with fat fingers but..


Would be nice to clearly know the behavioral differences between:

66.220.144.1701 
66-220-144-170.mail-campmail.facebook.com
   66.220.144.200 2 
66-220-144-200.mail-pages.facebook.com
   66.220.144.224 1 
66-220-144-224.mail-pages.facebook.com
66.220.155.1703 
66-220-155-170.mail-campmail.facebook.com
   66.220.155.172 7 
66-220-155-172.mail-campmail.facebook.com
   66.220.155.173 7 
66-220-155-173.mail-campmail.facebook.com


 .. and ..

66.220.144.143  (RS)  1   66-220-144-143.mail-mail.facebook.com
   66.220.144.14438   66-220-144-144.mail-mail.facebook.com
   66.220.144.14533   66-220-144-145.mail-mail.facebook.com
   66.220.144.14630   66-220-144-146.mail-mail.facebook.com
   66.220.144.14733   66-220-144-147.mail-mail.facebook.com
   66.220.144.14836   66-220-144-148.mail-mail.facebook.com
   66.220.144.14933   66-220-144-149.mail-mail.facebook.com
   66.220.144.15031   66-220-144-150.mail-mail.facebook.com
66.220.155.1359   66-220-155-135.mail-mail.facebook.com
   66.220.155.136 9   66-220-155-136.mail-mail.facebook.com
   66.220.155.137 8   66-220-155-137.mail-mail.facebook.com
   66.220.155.139 5   66-220-155-139.mail-mail.facebook.com
   66.220.155.140 7   66-220-155-140.mail-mail.facebook.com
   66.220.155.141 9   66-220-155-141.mail-mail.facebook.com
   66.220.155.14210   66-220-155-142.mail-mail.facebook.com
   66.220.155.143 8   66-220-155-143.mail-mail.facebook.com
   66.220.155.144 5   66-220-155-144.mail-mail.facebook.com
   66.220.155.145 8   66-220-155-145.mail-mail.facebook.com
   66.220.155.146 8   66-220-155-146.mail-mail.facebook.com
   66.220.155.147 9   66-220-155-147.mail-mail.facebook.com
   66.220.155.148 9   66-220-155-148.mail-mail.facebook.com
   66.220.155.149 8   66-220-155-149.mail-mail.facebook.com
   66.220.155.15011   66-220-155-150.mail-mail.facebook.com
   66.220.155.15138   66-220-155-151.mail-mail.facebook.com
   66.220.155.15235   66-220-155-152.mail-mail.facebook.com
   66.220.155.153   (RS)  2   66-220-155-153.mail-mail.facebook.com
   66.220.155.15435   66-220-155-154.mail-mail.facebook.com
   66.220.155.15543   66-220-155-155.mail-mail.facebook.com
   66.220.155.15639   66-220-155-156.mail-mail.facebook.com
   66.220.155.15744   66-220-155-157.mail-mail.facebook.com
   66.220.155.15841   66-220-155-158.mail-mail.facebook.com

 .. and ..

69.171.232.128   18   69-171-232-128.mail-mail.facebook.com
   69.171.232.12915   69-171-232-129.mail-mail.facebook.com
   69.171.232.13013   69-171-232-130.mail-mail.facebook.com
   69.171.232.13113   69-171-232-131.mail-mail.facebook.com
   69.171.232.13212   69-171-232-132.mail-mail.facebook.com
   69.171.232.13312   69-171-232-133.mail-mail.facebook.com
   69.171.232.13415   69-171-232-134.mail-mail.facebook.com
   69.171.232.13517   69-171-232-135.mail-mail.facebook.com
   69.171.232.13616   69-171-232-136.mail-mail.facebook.com
   69.171.232.13717   69-171-232-137.mail-mail.facebook.com
   69.171.232.13815   69-171-232-138.mail-mail.facebook.com
   69.171.232.13914   69-171-232-139.mail-mail.facebook.com
   69.171.232.14034   69-171-232-140.mail-mail.facebook.com
   69.171.232.14138   69-171-232-141.mail-mail.facebook.com
   69.171.232.14231   69-171-232-142.mail-mail.facebook.com
   69.171.232.14332   69-171-232-143.mail-mail.facebook.com
   69.171.232.14436   69-171-232-144.mail-mail.facebook.com
   69.171.232.14535   69-171-232-145.mail-mail.facebook.com
   69.171.232.14645   69-171-232-146.mail-mail.facebook.com
   69.171.232.14742   69-171-232-147.mail-mail.facebook.com
   69.171.232.14847   69-171-232-148.mail-mail.facebook.com
   69.171.232.14947   69-171-232-149.mail-mail.facebook.com
   69.171.232.15043   69-171-232-150.mail-mail.facebook.com
   69.171.232.15148   69-171-232-151.mail-mail.facebook.com

As you can see t

[mailop] Emailed notifications from facebook failing SPF checks

2019-07-25 Thread Frank Bulk via mailop
Our spam filtering vendor recently upgraded their platform and has improved
their SPF checking feature set.  We can now tag on Permanent Failures, which
we couldn't do before.

We also noticed that email from notificat...@facebookmail.com was having a
Soft Failure.  Turns out that facebook issues "mx-out.facebook.com" on the
HELO/EHLO, and that FQDN's SPF record doesn't include all the items that are
listed in facebookmail.com's SPF record.  

root@nagios:/tmp# dig TXT mx-out.facebook.com +short | grep spf
"v=spf1 a ~all"
root@nagios:/tmp# dig TXT facebookmail.com +short | grep spf
"v=spf1 ip4:66.220.144.128/25 ip4:66.220.155.0/24 ip4:66.220.157.0/25
ip4:69.63.178.128/25 ip4:69.63.181.0/24 ip4:69.63.184.0/25" "
ip4:69.171.232.0/24 ip4:69.171.244.0/23 -all"
root@nagios:/tmp#

Best I can understand from the IETF RFC, it is appropriate to check the
HELO: https://tools.ietf.org/html/rfc7208#section-2.3

Anyone from fb on this list, or is there someone who knows the email or DNS
folk at facebook and can forward this to them for consideration?

Regards,

Frank 


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop