Re: [mailop] Suggestions for VPS providers in Europe?

2019-12-02 Thread Bressier Simon via mailop
Funny as well, almost 100% of the phishing emails sent against our Mailjet
customers are coming from Linode everyday, dmarc says.


Le mar. 3 déc. 2019 à 03:08, Steve Holdoway via mailop 
a écrit :

> Well, we did leave Amazon SES a couple of years ago, and I haven't used
> them since. Just like my views on KDE, it was crap at version 1, so I've
> never used since (:
>
> Steve
>
> December 3, 2019 2:45 PM, "Michael Peddemors via mailop" <
> mailop@mailop.org> wrote:
>
> > On 2019-12-02 4:53 p.m., Steve Holdoway via mailop wrote:
> >
> >> December 3, 2019 1:46 PM, "Luis E. Muñoz via mailop" 
> wrote:
> >> On 2 Dec 2019, at 15:59, John Levine via mailop wrote:
> >>>
> >>
> >> I warned a guy away from Hetzner and OVH if he wants to send mail so >
> he
> >> reasonably asked what VPS provider in Europe is better for sending >
> mail.
> >>
> >> Any suggestions?
> >>> I'm AWS (IPv4 and IPv6) with good results. I would go with AWS for
> Europe services. Months ago did
> >>> some tests from DigitalOcean ams2 VMs, but for other reasons ended up
> ditching it.
> >>>
> >>> Best regards
> >>>
> >>> -lem
> >>
> >> I use linode. Moved away from Amazon SES with their draconian
> disconnect policies. Alternatively
> >> stay where you are and use a 3rd party - Sendgrid is what we moved to.
> >> Steve
> >
> > Kind of funny, from your side Amazon SES has draconian disconnect, but a
> raging problem from EC2
> > IP(s) now and complaints about slow take downs, quite a disconnect
> between the two sides
> > approaches..
> >
> > But overall Linode is not bad as a suggestion, but often with hosting
> providers, when trying to
> > send email it's your neighbours which will affect your reputation..
> >
> > No matter who you choose, you should ensure that things like PTR/rDNS
> and 'rwhois' are provided so
> > you can be as transparent as possible with your identity, so you don't
> appear to be one of the fly
> > by nighters that often infest VPS networks..
> >
> > SendGrid used to have a great responsive abuse team, but things have
> degraded of late.. If you do
> > go SendGrid, go dedicated IP, and not shared services.. based on our
> reports of increased leakage..
> >
> > -- "Catch the Magic of Linux..."
> > 
> > Michael Peddemors, President/CEO LinuxMagic Inc.
> > Visit us at http://www.linuxmagic.com @linuxmagic
> > A Wizard IT Company - For More Info http://www.wizard.ca
> > "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
> > 
> > 604-682-0300 Beautiful British Columbia, Canada
> >
> > This email and any electronic data contained are confidential and
> intended
> > solely for the use of the individual or entity to which they are
> addressed.
> > Please note that any views or opinions presented in this email are solely
> > those of the author and are not intended to represent those of the
> company.
> >
> > ___
> > mailop mailing list
> > mailop@mailop.org
> > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Looking for a Charter e-mail admin

2019-12-02 Thread Marc Bradshaw via mailop
Would also like to add my name to the list looking for Charter contacts. Thus 
far the usual channels have been ineffective in dealing with deliverability 
problems to charter.

On Tue, 3 Dec 2019, at 9:58 AM, Mark Dale via mailop wrote:
> 
> We're also seeing a sudden spate of bounces with mail to stny.rr.com
> 
> A contact address Charter would be greatly appreciated.
> 
> Thanks,
> Mark Dale
> MailmanLists
> 
> 
> On 3/12/19 2:35 am, Paul Gover via mailop wrote:
> > I'm in search of someone from Charter who can help get a small ISP's
> > email servers off the blacklist for stny.rr.com. If you could reach out
> > off list, it would be much appreciated. (Email to
> > priorityescalationt...@charter.com was rejected as undeliverable.)
> > 
> > Kind regards,
> > Paul Gover, Adams Cable Service
> > 
> > 
> > ___
> > mailop mailing list
> > mailop@mailop.org
> > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
> 

--

 Marc Bradshaw - Deliverability/Abuse at FastMail
m...@fastmailteam.com | @marcbradshaw 

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Suggestions for VPS providers in Europe?

2019-12-02 Thread Steve Holdoway via mailop
Well, we did leave Amazon SES a couple of years ago, and I haven't used them 
since. Just like my views on KDE, it was crap at version 1, so I've never used 
since (:

Steve

December 3, 2019 2:45 PM, "Michael Peddemors via mailop"  
wrote:

> On 2019-12-02 4:53 p.m., Steve Holdoway via mailop wrote:
> 
>> December 3, 2019 1:46 PM, "Luis E. Muñoz via mailop"  
>> wrote:
>> On 2 Dec 2019, at 15:59, John Levine via mailop wrote:
>>> 
>> 
>> I warned a guy away from Hetzner and OVH if he wants to send mail so > he
>> reasonably asked what VPS provider in Europe is better for sending > mail.
>> 
>> Any suggestions?
>>> I'm AWS (IPv4 and IPv6) with good results. I would go with AWS for Europe 
>>> services. Months ago did
>>> some tests from DigitalOcean ams2 VMs, but for other reasons ended up 
>>> ditching it.
>>> 
>>> Best regards
>>> 
>>> -lem
>> 
>> I use linode. Moved away from Amazon SES with their draconian disconnect 
>> policies. Alternatively
>> stay where you are and use a 3rd party - Sendgrid is what we moved to.
>> Steve
> 
> Kind of funny, from your side Amazon SES has draconian disconnect, but a 
> raging problem from EC2
> IP(s) now and complaints about slow take downs, quite a disconnect between 
> the two sides
> approaches..
> 
> But overall Linode is not bad as a suggestion, but often with hosting 
> providers, when trying to
> send email it's your neighbours which will affect your reputation..
> 
> No matter who you choose, you should ensure that things like PTR/rDNS and 
> 'rwhois' are provided so
> you can be as transparent as possible with your identity, so you don't appear 
> to be one of the fly
> by nighters that often infest VPS networks..
> 
> SendGrid used to have a great responsive abuse team, but things have degraded 
> of late.. If you do
> go SendGrid, go dedicated IP, and not shared services.. based on our reports 
> of increased leakage..
> 
> -- "Catch the Magic of Linux..."
> 
> Michael Peddemors, President/CEO LinuxMagic Inc.
> Visit us at http://www.linuxmagic.com @linuxmagic
> A Wizard IT Company - For More Info http://www.wizard.ca
> "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
> 
> 604-682-0300 Beautiful British Columbia, Canada
> 
> This email and any electronic data contained are confidential and intended
> solely for the use of the individual or entity to which they are addressed.
> Please note that any views or opinions presented in this email are solely
> those of the author and are not intended to represent those of the company.
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Suggestions for VPS providers in Europe?

2019-12-02 Thread Michael Peddemors via mailop

On 2019-12-02 4:53 p.m., Steve Holdoway via mailop wrote:

December 3, 2019 1:46 PM, "Luis E. Muñoz via mailop"  wrote:


On 2 Dec 2019, at 15:59, John Levine via mailop wrote:


I warned a guy away from Hetzner and OVH if he wants to send mail so > he
reasonably asked what VPS provider in Europe is better for sending > mail.

Any suggestions?


I'm AWS (IPv4 and IPv6) with good results. I would go with AWS for Europe 
services. Months ago did
some tests from DigitalOcean ams2 VMs, but for other reasons ended up ditching 
it.

Best regards

-lem


I use linode. Moved away from Amazon SES with their draconian disconnect 
policies. Alternatively stay where you are and use a 3rd party - Sendgrid is 
what we moved to.

Steve


Kind of funny, from your side Amazon SES has draconian disconnect, but a 
raging problem from EC2 IP(s) now and complaints about slow take downs, 
quite a disconnect between the two sides approaches..


But overall Linode is not bad as a suggestion, but often with hosting 
providers, when trying to send email it's your neighbours which will 
affect your reputation..


No matter who you choose, you should ensure that things like PTR/rDNS 
and 'rwhois' are provided so you can be as transparent as possible with 
your identity, so you don't appear to be one of the fly by nighters that 
often infest VPS networks..


SendGrid used to have a great responsive abuse team, but things have 
degraded of late.. If you do go SendGrid, go dedicated IP, and not 
shared services.. based on our reports of increased leakage..








--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Suggestions for VPS providers in Europe?

2019-12-02 Thread Steve Holdoway via mailop
December 3, 2019 1:46 PM, "Luis E. Muñoz via mailop"  wrote:

> On 2 Dec 2019, at 15:59, John Levine via mailop wrote:
> 
>> I warned a guy away from Hetzner and OVH if he wants to send mail so > he
>> reasonably asked what VPS provider in Europe is better for sending > mail.
>> 
>> Any suggestions?
> 
> I'm AWS (IPv4 and IPv6) with good results. I would go with AWS for Europe 
> services. Months ago did
> some tests from DigitalOcean ams2 VMs, but for other reasons ended up 
> ditching it.
> 
> Best regards
> 
> -lem
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

I use linode. Moved away from Amazon SES with their draconian disconnect 
policies. Alternatively stay where you are and use a 3rd party - Sendgrid is 
what we moved to.

Steve

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Suggestions for VPS providers in Europe?

2019-12-02 Thread Luis E. Muñoz via mailop



On 2 Dec 2019, at 15:59, John Levine via mailop wrote:

I warned a guy away from Hetzner and OVH if he wants to send mail so 
he
reasonably asked what VPS provider in Europe is better for sending 
mail.


Any suggestions?


I'm AWS (IPv4 and IPv6) with good results. I would go with AWS for 
Europe services. Months ago did some tests from DigitalOcean ams2 VMs, 
but for other reasons ended up ditching it.


Best regards

-lem

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] QQ failing Office 365 emails for SPF?

2019-12-02 Thread Jason Carter via mailop
Included the relevant part in my original post, but here it is again in its 
entirety.  I took out any identifying email addresses.


Your message to {blah blah blah}@qq.com couldn't be 
delivered.

qq.com couldn't confirm that your message was sent from a trusted location.

Rhiannon.Paget

Office 365

blah blah blah

Action Required

Recipient











SPF validation error



How to Fix It

Your organization's email admin will have to diagnose and fix your domain's 
email settings. Please forward this message to your email admin.



More Info for Email Admins

Status code: 550 5.7.23

This error occurs when Sender Policy Framework (SPF) validation for the 
sender's domain fails. If you're the sender's email admin, make sure the SPF 
records for your domain at your domain registrar are set up correctly. Office 
365 supports only one SPF record (a TXT record that defines SPF) for your 
domain. Include the following domain name: spf.protection.outlook.com. If you 
have a hybrid configuration (some mailboxes in the cloud, and some mailboxes on 
premises) or if you're an Exchange Online Protection standalone customer, add 
the outbound IP address of your on-premises servers to the TXT record.

For more information and instructions about configuring SPF records see 
Customize an SPF record to validate outbound mail sent from your 
domain and 
also External Domain Name System records for Office 
365.

Original Message Details

Created Date:

12/2/2019 7:38:53 PM

Sender Address:

{blah blah blah}@ringling.org

Recipient Address:

{blah blah blah}@qq.com

Subject:

RE: {subject went here}

Error Details

Reported error:

550 5.7.23 The message was rejected because of Sender Policy Framework 
violation -> 550 DMARC check failed 
[MTIzknf/jEeC0aTwbOXvrBiAcTvXxZqFXcru3oWyMZucp1BLJ8LQWCk= IP: 40.107.82.82]. 
http://service.mail.qq.com/cgi-bin/help?subtype=1&=1001508&=16.

DSN generated by:

BN6PR02MB2308.namprd02.prod.outlook.com

Remote server:

newxmmxszb50.qq.com







Jason Carter
IT Manager
Microsoft Enterprise Applications and Systems
Information Technology Services  |  Florida State University
p  850.645.8069  |  w  its.fsu.edu





From: Michael Wise 
Sent: Monday, December 2, 2019 7:11 PM
To: Jason Carter ; mailop@mailop.org 
Subject: RE: QQ failing Office 365 emails for SPF?




Would need to see the NDR.



Aloha,

Michael.

--

Michael J Wise
Microsoft Corporation| Spam Analysis

"Your Spam Specimen Has Been Processed."

Open a ticket for 
Hotmail
 ?



From: Jason Carter 
Sent: Monday, December 2, 2019 4:08 PM
To: mailop@mailop.org; Michael Wise 
Subject: [EXTERNAL] Re: QQ failing Office 365 emails for SPF?



Well I am not talking about mail sent TO a Office 365 tenant.  It was sent FROM 
a Office 365 tenant to a @QQ.com address, and they bounced it for a SPF 
failure, even though the SPF record for the sending domain clearly includes the 
IP address they said failed SPF.









Jason Carter

IT Manager

Microsoft Enterprise Applications and Systems

Information Technology Services  |  Florida State University

p  850.645.8069  |  w  
its.fsu.edu









From: mailop mailto:mailop-boun...@mailop.org>> on 
behalf of Michael Wise via mailop mailto:mailop@mailop.org>>
Sent: Monday, December 2, 2019 7:02 PM
To: mailop@mailop.org 
mailto:mailop@mailop.org>>
Subject: Re: [mailop] QQ failing Office 365 emails for SPF?





At Microsoft, be that either mail sent to an Office365 tenant or a Hotmail / 
Outlook customer, the DMARC p=reject will *NOT* generate a bounce.

For many, many reasons.



Primarily because the SPF/DKIM/DMARC checks are done *AFTER* the email has been 
received, and the port 25 connection has been closed.

Secondarily because, in light of the above, it would make backscatter issues 
worse, and possibly result in a DDOS attack.

Load concerns makes any other approach impractical.



Aloha,

Michael.

--

Michael J Wise
Microsoft Corporation| Spam Analysis

"Your Spam Specimen Has Been Processed."


Re: [mailop] QQ failing Office 365 emails for SPF?

2019-12-02 Thread Michael Wise via mailop

Would need to see the NDR.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Open a ticket for Hotmail ?

From: Jason Carter 
Sent: Monday, December 2, 2019 4:08 PM
To: mailop@mailop.org; Michael Wise 
Subject: [EXTERNAL] Re: QQ failing Office 365 emails for SPF?

Well I am not talking about mail sent TO a Office 365 tenant.  It was sent FROM 
a Office 365 tenant to a @QQ.com address, and they bounced it for a SPF 
failure, even though the SPF record for the sending domain clearly includes the 
IP address they said failed SPF.






Jason Carter
IT Manager
Microsoft Enterprise Applications and Systems
Information Technology Services  |  Florida State University
p  850.645.8069  |  w  
its.fsu.edu





From: mailop mailto:mailop-boun...@mailop.org>> on 
behalf of Michael Wise via mailop mailto:mailop@mailop.org>>
Sent: Monday, December 2, 2019 7:02 PM
To: mailop@mailop.org 
mailto:mailop@mailop.org>>
Subject: Re: [mailop] QQ failing Office 365 emails for SPF?




At Microsoft, be that either mail sent to an Office365 tenant or a Hotmail / 
Outlook customer, the DMARC p=reject will *NOT* generate a bounce.

For many, many reasons.



Primarily because the SPF/DKIM/DMARC checks are done *AFTER* the email has been 
received, and the port 25 connection has been closed.

Secondarily because, in light of the above, it would make backscatter issues 
worse, and possibly result in a DDOS attack.

Load concerns makes any other approach impractical.



Aloha,

Michael.

--

Michael J Wise
Microsoft Corporation| Spam Analysis

"Your Spam Specimen Has Been Processed."

Open a ticket for 
Hotmail
 ?



From: mailop mailto:mailop-boun...@mailop.org>> On 
Behalf Of Jason Carter via mailop
Sent: Monday, December 2, 2019 3:56 PM
To: mailop@mailop.org
Subject: [外部] [mailop] QQ failing Office 365 emails for SPF?



Any using Office 365 that has a domain at DMARC=REJECT see any bounce backs for 
mail sent to QQ.com addresses for SPF failures, when they IP address they 
mentioned failed is clearly in the SPF record?



Example:



Reported error:

550 5.7.23 The message was rejected because of Sender Policy Framework 
violation -> 550 DMARC check failed 
[MTIzknf/jEeC0aTwbOXvrBiAcTvXxZqFXcru3oWyMZucp1BLJ8LQWCk= IP: 40.107.82.82]. 
http://service.mail.qq.com/cgi-bin/help?subtype=1&=1001508&=16

DMARC指引_QQ邮箱帮助中心

一、DMARC(Domain-based Message Authentication,Reporting & 
Conformance)DMARC是一种基于现有的SPF和DKIM协议的可扩展电子邮件认证协议,在邮件收发双方建立了邮件反馈机制,便于邮件发送方和邮件接收方共同对域名的管理进行完善和监督...

service.mail.qq.com

.

DSN generated by:

BN6PR02MB2308.namprd02.prod.outlook.com

Remote server:

newxmmxszb50.qq.com





40.107.82.82 is within 40.107.0.0/16, which is in the SPF record they ask you 
to use:  spf.protection.outlook.com











Jason Carter

IT Manager

Microsoft Enterprise Applications and Systems

Information Technology Services  |  Florida State University

p  850.645.8069  |  w  
its.fsu.edu




___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] QQ failing Office 365 emails for SPF?

2019-12-02 Thread Jason Carter via mailop
Well I am not talking about mail sent TO a Office 365 tenant.  It was sent FROM 
a Office 365 tenant to a @QQ.com address, and they bounced it for a SPF 
failure, even though the SPF record for the sending domain clearly includes the 
IP address they said failed SPF.




Jason Carter
IT Manager
Microsoft Enterprise Applications and Systems
Information Technology Services  |  Florida State University
p  850.645.8069  |  w  its.fsu.edu





From: mailop  on behalf of Michael Wise via mailop 

Sent: Monday, December 2, 2019 7:02 PM
To: mailop@mailop.org 
Subject: Re: [mailop] QQ failing Office 365 emails for SPF?




At Microsoft, be that either mail sent to an Office365 tenant or a Hotmail / 
Outlook customer, the DMARC p=reject will *NOT* generate a bounce.

For many, many reasons.



Primarily because the SPF/DKIM/DMARC checks are done *AFTER* the email has been 
received, and the port 25 connection has been closed.

Secondarily because, in light of the above, it would make backscatter issues 
worse, and possibly result in a DDOS attack.

Load concerns makes any other approach impractical.



Aloha,

Michael.

--

Michael J Wise
Microsoft Corporation| Spam Analysis

"Your Spam Specimen Has Been Processed."

Open a ticket for Hotmail ?



From: mailop  On Behalf Of Jason Carter via mailop
Sent: Monday, December 2, 2019 3:56 PM
To: mailop@mailop.org
Subject: [外部] [mailop] QQ failing Office 365 emails for SPF?



Any using Office 365 that has a domain at DMARC=REJECT see any bounce backs for 
mail sent to QQ.com addresses for SPF failures, when they IP address they 
mentioned failed is clearly in the SPF record?



Example:



Reported error:

550 5.7.23 The message was rejected because of Sender Policy Framework 
violation -> 550 DMARC check failed 
[MTIzknf/jEeC0aTwbOXvrBiAcTvXxZqFXcru3oWyMZucp1BLJ8LQWCk= IP: 40.107.82.82]. 
http://service.mail.qq.com/cgi-bin/help?subtype=1&=1001508&=16

DMARC指引_QQ邮箱帮助中心

一、DMARC(Domain-based Message Authentication,Reporting & 
Conformance)DMARC是一种基于现有的SPF和DKIM协议的可扩展电子邮件认证协议,在邮件收发双方建立了邮件反馈机制,便于邮件发送方和邮件接收方共同对域名的管理进行完善和监督...

service.mail.qq.com

.

DSN generated by:

BN6PR02MB2308.namprd02.prod.outlook.com

Remote server:

newxmmxszb50.qq.com





40.107.82.82 is within 40.107.0.0/16, which is in the SPF record they ask you 
to use:  spf.protection.outlook.com











Jason Carter

IT Manager

Microsoft Enterprise Applications and Systems

Information Technology Services  |  Florida State University

p  850.645.8069  |  w  
its.fsu.edu




___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] QQ failing Office 365 emails for SPF?

2019-12-02 Thread Michael Wise via mailop

At Microsoft, be that either mail sent to an Office365 tenant or a Hotmail / 
Outlook customer, the DMARC p=reject will *NOT* generate a bounce.
For many, many reasons.

Primarily because the SPF/DKIM/DMARC checks are done *AFTER* the email has been 
received, and the port 25 connection has been closed.
Secondarily because, in light of the above, it would make backscatter issues 
worse, and possibly result in a DDOS attack.
Load concerns makes any other approach impractical.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Open a ticket for Hotmail ?

From: mailop  On Behalf Of Jason Carter via mailop
Sent: Monday, December 2, 2019 3:56 PM
To: mailop@mailop.org
Subject: [外部] [mailop] QQ failing Office 365 emails for SPF?

Any using Office 365 that has a domain at DMARC=REJECT see any bounce backs for 
mail sent to QQ.com addresses for SPF failures, when they IP address they 
mentioned failed is clearly in the SPF record?

Example:


Reported error:

550 5.7.23 The message was rejected because of Sender Policy Framework 
violation -> 550 DMARC check failed 
[MTIzknf/jEeC0aTwbOXvrBiAcTvXxZqFXcru3oWyMZucp1BLJ8LQWCk= IP: 40.107.82.82]. 
http://service.mail.qq.com/cgi-bin/help?subtype=1&=1001508&=16
DMARC指引_QQ邮箱帮助中心
一、DMARC(Domain-based Message Authentication,Reporting & 
Conformance)DMARC是一种基于现有的SPF和DKIM协议的可扩展电子邮件认证协议,在邮件收发双方建立了邮件反馈机制,便于邮件发送方和邮件接收方共同对域名的管理进行完善和监督...
service.mail.qq.com
.

DSN generated by:

BN6PR02MB2308.namprd02.prod.outlook.com

Remote server:

newxmmxszb50.qq.com


40.107.82.82 is within 40.107.0.0/16, which is in the SPF record they ask you 
to use:  spf.protection.outlook.com







Jason Carter
IT Manager
Microsoft Enterprise Applications and Systems
Information Technology Services  |  Florida State University
p  850.645.8069  |  w  
its.fsu.edu



<>___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Suggestions for VPS providers in Europe?

2019-12-02 Thread John Levine via mailop
I warned a guy away from Hetzner and OVH if he wants to send mail so he
reasonably asked what VPS provider in Europe is better for sending mail.

Any suggestions?

Also, how different is it if at OVH and Hetzner if you use their outbound
mail servers rather than trying to send directly?

R's,
John

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Comcast.net contact ? Unusually high amount of email being deferred.

2019-12-02 Thread Jeremy Harris via mailop
On 02/12/2019 17:24, Ken O'Driscoll via mailop wrote:
> On Mon, 2019-12-02 at 17:08 +, Ryan Prihoda via mailop wrote:
>> defer (-53): retry time not reached for any host for 'comcast.net'
> 
> That looks like an MTA (Exim?) error, and not a SMTP 4xx type message.

Correct.  It means you've previously had a 4xx, have cached that
knowlege, and the cache expiry (as set in your Exim config retry
rules) has not yet timed out.
-- 
Cheers,
  Jeremy

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] [EXTERNAL] Comcast.net contact ? Unusually high amount of email being deferred.

2019-12-02 Thread Brotman, Alexander via mailop
All,  generally speaking, you can reach us at 
delivery-supp...@cable.comcast.com 
That goes to a number of engineers, some operational folks, and I think a 
manager or two.  It has pretty good visibility.

I've already reached out to Ryan off-list.


--
Alex Brotman
Sr. Engineer, Anti-Abuse & Messaging Policy
Comcast

From: mailop  On Behalf Of Ryan Prihoda via mailop
Sent: Monday, December 2, 2019 11:01 AM
To: mailop@mailop.org
Subject: [EXTERNAL] [mailop] Comcast.net contact ? Unusually high amount of 
email being deferred.

Hello all,

I have a problem with one of my email servers sending to comcast.net. Every day 
the mail queue backs up for comcast.net to the point where I have around 1700 
emails in the queue build up over the course of the day then eventually get 
flushed after close to 8 hours in queue. What can I do to help ensure prompt 
delivery ? DKIM and DMARC are already in place as well as being signed up for 
the return path FBL. The reputation for this IP is great. I do not know what 
else I could do so hopefully someone on the list can help me out.

Thanks,

-R. Prihoda
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] [EXTERNAL] Re: Best strategy to prune address list

2019-12-02 Thread Michael Wise via mailop


Sorry, was out last week on a much needed bit of Vacationing.



At Microsoft, using this technique will almost certainly cause your IP 
Reputation to suffer greatly.

Also, this does nothing to detect or limit the effect of "One Hit and you're 
Listed" Spamtrap-based DNSBLs.

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Open a ticket for Hotmail ?



-Original Message-
From: mailop  On Behalf Of Jaroslaw Rafa via mailop
Sent: Sunday, November 24, 2019 5:24 AM
To: Tom Ivar Helbekkmo 
Cc: Rolf E. Sonneveld ; Rolf E. Sonneveld via 
mailop 
Subject: [EXTERNAL] Re: [mailop] Best strategy to prune address list



Dnia 23.11.2019 o godz. 20:05:07 Tom Ivar Helbekkmo via mailop pisze:

> In the olden days, one would simply write a script, using expect(1) or

> similar, to go through the addresses, connect to the target MTAs, and

> do an SMTP VRFY on the recipient address.  Today, I suspect that most

> MTAs will refuse to service a VRFY request.



SMTP VRFY was basically never widely adopted. There were always many mail 
servers that didn't accept VRFY.



That's why MTAs that have "sender verification" feature on incoming mail do it 
by just trying to send mail back to the sender and checking the reply they get 
on RCPT command. If RCPT is accepted, they assume the e-mail address exists 
(and accept mail from that sender), if it is rejected, they reject the incoming 
mail too, assuming the sender doesn't exist. After that, they just send RSET, 
cancelling the send attempt.



As someone already noted, there are also standalone tools that implement the 
same technique. However, I don't know what impact on reputation could have a 
large-scale use of this address verification method.

--

Regards,

   Jaroslaw Rafa

   r...@rafa.eu.org

--

"In a million years, when kids go to school, they're gonna know: once there was 
a Hushpuppy, and she lived with her daddy in the Bathtub."



___

mailop mailing list

mailop@mailop.org

https://nam06.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailopdata=02%7C01%7Cmichael.wise%40microsoft.com%7C0581ceb9e9a14eedccf808d770e23798%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637101989210958321sdata=jVBFUIgI2iaSoLrOLat1PYEm7upJU2arYsN86nlHER8%3Dreserved=0
<>___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Looking for a Charter e-mail admin

2019-12-02 Thread Jerry Cloe via mailop
I saw (for at least kc.rr.com) their mx records changed about two weeks ago. Is 
this an ongoing problem or a new problem?

 
I was having trouble before the change, now they seem to pass (although I'm not 
confident they are being delivered to user yet).


 
-Original message-
From:Mark Dale via mailop 
Sent:Mon 12-02-2019 05:04 pm
Subject:Re: [mailop] Looking for a Charter e-mail admin

To:mailop@mailop.org; 

We're also seeing a sudden spate of bounces with mail to stny.rr.com

A contact address Charter would be greatly appreciated.

Thanks,
Mark Dale
MailmanLists


On 3/12/19 2:35 am, Paul Gover via mailop wrote:
> I'm in search of someone from Charter who can help get a small ISP's
> email servers off the blacklist for stny.rr.com. If you could reach out
> off list, it would be much appreciated.  (Email to
> priorityescalationt...@charter.com was rejected as undeliverable.)
> 
> Kind regards,
> Paul Gover, Adams Cable Service
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Looking for a Charter e-mail admin

2019-12-02 Thread Mark Dale via mailop

We're also seeing a sudden spate of bounces with mail to stny.rr.com

A contact address Charter would be greatly appreciated.

Thanks,
Mark Dale
MailmanLists


On 3/12/19 2:35 am, Paul Gover via mailop wrote:
> I'm in search of someone from Charter who can help get a small ISP's
> email servers off the blacklist for stny.rr.com. If you could reach out
> off list, it would be much appreciated.  (Email to
> priorityescalationt...@charter.com was rejected as undeliverable.)
> 
> Kind regards,
> Paul Gover, Adams Cable Service
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Comcast.net contact ? Unusually high amount of email being deferred.

2019-12-02 Thread Russell Clemings via mailop
I see similar things from Comcast occasionally (including this morning).
The "retry time not reached for any host for 'comcast.net'" error does in
fact appear to come from Exim. The error from Comcast is from the first
send attempt: "Remote host closed connection in response to initial
connection."

What I think is happening is this: We try to send initially and get "Remote
host closed connection in response to initial connection" errors on both
mx1.comcast.net and mx2.comcast.net. Then, as we try to send more messages
and get more "Remote host closed connection in response to initial
connection" errors, the retry time (5 minutes in our case) is never reached.

In other words, every time we get a "Remote host closed connection in
response to initial connection" error from Comcast, the clock seems to
reset on the retry time. Eventually, later in the day, traffic slows down
and the queue starts to clear. I also try to flush the queue manually when
I see it starting to grow. Some sends still fail when I do that but some go
through.

At least, that's how it looks from here. The problem isn't new but it comes
and goes. It appears to be just congestion at Comcast. There's a very
helpful Comcast rep on this list and I won't out him but maybe he will
speak up at some point and correct any mistakes I've made here.

rac



On Mon, Dec 2, 2019 at 9:33 AM Ken O'Driscoll via mailop 
wrote:

> On Mon, 2019-12-02 at 17:08 +, Ryan Prihoda via mailop wrote:
> > defer (-53): retry time not reached for any host for 'comcast.net'
>
> That looks like an MTA (Exim?) error, and not a SMTP 4xx type message.
>
> You need to work out if the messages are backing up because a) Comcast are
> throttling you or b) you have a local configuration issue.
>
> If you are being throttled then you'll see an SMTP 4xx type message in your
> logs generated by the Comcast MX servers in response to your attempt to
> deliver to them. The messages will stay in the queue and delivery re-
> attempted as per the local MTA setting.
>
> If the error messages is being generated by the MTA software itself, then
> that could be a local server misconfiguration, network or resource issue.
>
> My advice would be to look at all of your logs, not just the maillog.
>
> Ken.
>
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>


-- 
===
Russell Clemings

===
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Comcast.net contact ? Unusually high amount of email being deferred.

2019-12-02 Thread Ken O'Driscoll via mailop
On Mon, 2019-12-02 at 17:08 +, Ryan Prihoda via mailop wrote:
> defer (-53): retry time not reached for any host for 'comcast.net'

That looks like an MTA (Exim?) error, and not a SMTP 4xx type message.

You need to work out if the messages are backing up because a) Comcast are
throttling you or b) you have a local configuration issue.

If you are being throttled then you'll see an SMTP 4xx type message in your
logs generated by the Comcast MX servers in response to your attempt to
deliver to them. The messages will stay in the queue and delivery re-
attempted as per the local MTA setting.

If the error messages is being generated by the MTA software itself, then
that could be a local server misconfiguration, network or resource issue.

My advice would be to look at all of your logs, not just the maillog.

Ken.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Comcast.net contact ? Unusually high amount of email being deferred.

2019-12-02 Thread Ryan Prihoda via mailop
Thanks Ken. I am familiar with that page and their policies. Although I admit I 
have not verified whether or not we are hitting their thresholds that is 
something I will look into today. here is the message in question:

defer (-53): retry time not reached for any host for 'comcast.net'

Thanks for the suggestions.

From: mailop  on behalf of Ken O'Driscoll via mailop 

Sent: Monday, December 2, 2019 10:26 AM
To: mailop@mailop.org 
Subject: Re: [mailop] Comcast.net contact ? Unusually high amount of email 
being deferred.

On Mon, 2019-12-02 at 16:01 +, Ryan Prihoda via mailop wrote:
> I do not know what else I could do so hopefully someone on the list can
> help me out.

Without knowing exactly what the SMTP message is, I just guessing that
you're being throttled because you are sending too much too quickly.

Take a look at the Comcast Postmaster guidelines:
https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fpostmaster.comcast.net%2Favoidblocks.htmldata=01%7C01%7Crprihoda%40dynaconnections.com%7C6ca33ae3d3d54f7b76b008d77744e7d6%7C274b408f6b2e403e938a0cf0998c9cba%7C0sdata=2PTgKBIDuDKme%2Fm9ywveDxlts3uVPjcxy9JgWoE9FBA%3Dreserved=0

Follow everything on that page especially the sending limits outlined.

Ken.


___
mailop mailing list
mailop@mailop.org
https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailopdata=01%7C01%7Crprihoda%40dynaconnections.com%7C6ca33ae3d3d54f7b76b008d77744e7d6%7C274b408f6b2e403e938a0cf0998c9cba%7C0sdata=%2BxIYFebCiaHwd%2Fd3ok%2Bi%2FQjTDfoAtDWInmzRwyOPXQ4%3Dreserved=0
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Comcast.net contact ? Unusually high amount of email being deferred.

2019-12-02 Thread Ken O'Driscoll via mailop
On Mon, 2019-12-02 at 16:01 +, Ryan Prihoda via mailop wrote:
> I do not know what else I could do so hopefully someone on the list can
> help me out.

Without knowing exactly what the SMTP message is, I just guessing that
you're being throttled because you are sending too much too quickly.

Take a look at the Comcast Postmaster guidelines:
https://postmaster.comcast.net/avoidblocks.html

Follow everything on that page especially the sending limits outlined.

Ken.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Comcast.net contact ? Unusually high amount of email being deferred.

2019-12-02 Thread Ryan Prihoda via mailop
Hello all,

I have a problem with one of my email servers sending to comcast.net. Every day 
the mail queue backs up for comcast.net to the point where I have around 1700 
emails in the queue build up over the course of the day then eventually get 
flushed after close to 8 hours in queue. What can I do to help ensure prompt 
delivery ? DKIM and DMARC are already in place as well as being signed up for 
the return path FBL. The reputation for this IP is great. I do not know what 
else I could do so hopefully someone on the list can help me out.

Thanks,

-R. Prihoda
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Looking for a Charter e-mail admin

2019-12-02 Thread Paul Gover via mailop
I'm in search of someone from Charter who can help get a small ISP's 
email servers off the blacklist for stny.rr.com. If you could reach out 
off list, it would be much appreciated.  (Email to 
priorityescalationt...@charter.com was rejected as undeliverable.)


Kind regards,
Paul Gover, Adams Cable Service


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop