Re: [mailop] Hotmail blacklist

2020-04-21 Thread Michael via mailop
Thank you all for the feedback. Yes, it's an AWS server I've had for 
several years. I don't think any actual spam has been sent from the 
server. I don't watch everything my users do, but they just communicate 
with other people they know. We don't send any marketing emails or 
anything unsolicited. My first assumption was that Hotmail had just 
blocked a block of IPs and I got caught up in it, so maybe that's it. 
I'll keep replying to that ticket and see if I can get anywhere.


Interestingly, I'm set up for the Hotmail junk reporting emails for my 
work organization as well, and I notice that a lot of clearly legitimate 
email gets marked as spam. I don't know why recipients do that, maybe 
there's something about Hotmail's UI that leads people to it.




On 2020-04-21 11:05 am, Michael Peddemors via mailop wrote:

I notice that you are using an AWS address..

NetRange:   52.0.0.0 - 52.31.255.255
CIDR:   52.0.0.0/11
NetName:AT-88-Z
NetHandle:  NET-52-0-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType:Direct Allocation
OriginAS:
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:1991-12-19
Updated:2015-03-20
Ref:https://rdap.arin.net/registry/ip/52.0.0.0

Amazon has been REALLY bad lately, and more companies are blocking
larger parts of the AWS space.

Insist that Amazon provide you with 'rwhois' or that they address this
issue for you?  If you are 100% certain you aren't sending suspicious
email activity from that IP Address.

On 2020-04-21 8:52 a.m., Norbert Bollow via mailop wrote:

Maybe it's not specifically you server's IP that's on the blacklist,
but an IP range belonging to your ISP (which includes your server)?

Greetings,
Norbert


On Tue, 21 Apr 2020 10:35:38 -0500
Michael via mailop  wrote:


My server's IP is on the hotmail blacklist. I can't find any details
as to why. I only have four users and we don't send any bulk mail.
Mostly just a small law firm communicating with clients. I'm set up
with SNDS but I don't see any details there that let me track down
the source of the blacklisting. I just set up the junk mail
reporting. I thought I had already done that but I don't remember
ever getting any reports.

Is there any way to get off this list?


I filled out a support request and received this response:

We have completed reviewing the IP(s) you submitted. The following
table contains the results of our investigation.

Not qualified for mitigation
52.10.9.48
Our investigation has determined that the above IP(s) do not qualify
for mitigation.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop





--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and 
intended
solely for the use of the individual or entity to which they are 
addressed.
Please note that any views or opinions presented in this email are 
solely
those of the author and are not intended to represent those of the 
company.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Issues with Microsoft

2020-04-21 Thread Frank Bulk via mailop
Another interesting one today:

 

Site hotmail.com (104.47.58.161) said after data sent: 452 4.3.1
Insufficient system resources (UsedVersionBuckets[D:\queue])
[BN8NAM11HT069.eop-nam11.prod.protection.outlook.com]
[BN8NAM11FT048.eop-nam11.prod.protection.outlook.com]

 

Frank

 

From: mailop  On Behalf Of Frank Bulk via mailop
Sent: Monday, April 20, 2020 3:18 PM
To: 'Evelyn Poon' ; mailop@mailop.org
Subject: Re: [mailop] Issues with Microsoft

 

Yes, definitely seeing issues today . only saw hotmail.com, not any other
Microsoft domains.

 

Site hotmail.com (104.47.56.161) said after data sent: 452 4.3.1
Insufficient system resources (TSTE)
[CO1NAM11HT140.eop-nam11.prod.protection.outlook.com]
[CO1NAM11FT005.eop-nam11.prod.protection.outlook.com]

Site hotmail.com (104.47.58.33) said after data sent: 450 4.7.3 Organization
queue quota exceeded. [DM6NAM10HT131.eop-nam10.prod.protection.outlook.com]
[DM6NAM10FT043.eop-nam10.prod.protection.outlook.com]

Site hotmail.com (104.47.70.33) said after data sent: 450 4.7.3 Organization
queue quota exceeded. [BN7NAM10HT207.eop-nam10.prod.protection.outlook.com]
[BN7NAM10FT054.eop-nam10.prod.protection.outlook.com]

Site hotmail.com (104.47.70.33) said after data sent: 450 4.7.3 Organization
queue quota exceeded. [BN7NAM10HT207.eop-nam10.prod.protection.outlook.com]
[BN7NAM10FT019.eop-nam10.prod.protection.outlook.com]

Site hotmail.com (104.47.70.33) said after data sent: 450 4.7.3 Organization
queue quota exceeded. [BN7NAM10HT222.eop-nam10.prod.protection.outlook.com]
[BN7NAM10FT025.eop-nam10.prod.protection.outlook.com]

Site hotmail.com (104.47.70.33) said after data sent: 450 4.7.3 Organization
queue quota exceeded. [BN7NAM10HT238.eop-nam10.prod.protection.outlook.com]
[BN7NAM10FT065.eop-nam10.prod.protection.outlook.com]

Site hotmail.com (104.47.56.161) said after data sent: 450 4.7.3
Organization queue quota exceeded.
[CO1NAM11HT128.eop-nam11.prod.protection.outlook.com]
[CO1NAM11FT022.eop-nam11.prod.protection.outlook.com]

 

Frank 

 

From: mailop mailto:mailop-boun...@mailop.org> >
On Behalf Of Evelyn Poon via mailop
Sent: Monday, April 20, 2020 2:22 PM
To: mailop@mailop.org  
Subject: [mailop] Issues with Microsoft

 

Hi,

 

Is anyone else seeing a high volume of soft bounces at Microsoft with the
following error codes?

451 4.7.0 Temporary server error. Please try again later
452 4.3.1 Insufficient system resources
450 4.7.3 Organization queue quota exceeded.
451 4.4.25 Message failed to be replicated: No healthy secondary server
available to accept replica at this time.

 

Thanks,

Evelyn Poon

 

Director of Deliverability and Compliance

 

 

  _  

 

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Hehehe.. SenderScore alert.. from March of 2018

2020-04-21 Thread Matt V via mailop
Not a senderscore person... but this is likely this is the result of an 
end user reporting an old email as spam instead of deleting it.


I would hazard the FBL generates based on the date the use takes an 
action regardless of how old the message is - it likely doesn't even 
look at the original send date.


Once it's sent to you, you can decide if you care to process it or not 
if you feel it's to old to action.


--
~
MATT VERNHOUT

On 2020-04-21 1:29 p.m., Michael Peddemors via mailop wrote:

Just arrived in the fbl mailbox..

This is a Mail.Ru Abuse Report for an email message received from 
domain .com, IP 104.128.152.18, on Sat, 24 Mar 2018 06:00:01 
+.



Version: 1
Original-Mail-From: Аврора 
Source: Mail.Ru
Abuse-Type: complaint
Subscription-Link: https://fbl.returnpath.net/manage/subscriptions/498767
Feedback-Type: abuse
User-Agent: ReturnPathFBL/2.0
Arrival-Date: Sat, 24 Mar 2018 06:00:01 +
Original-Rcpt-To: 551e59781913c107bf57e24df614d...@bk.ru
Reported-Domain: REDACTED.com
Source-Ip: 104.128.152.18

We talked about this once before, but I think getting a report from 
TWO (2) years ago is just NOISE...


Any SenderScore ppl can weigh in on this?






___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] bogus DNSBL queries, was contact at google

2020-04-21 Thread Al Iverson via mailop
-> Redirected back to list

To be fair, I don't run APEWS, though. Never had, always thought it
was a bad idea, but people are free to block the whole world if they
want.

Cheers,
Al Iverson

On Tue, Apr 21, 2020 at 4:54 AM Vytis Marciulionis
 wrote:
>
> Hi Al,
>
> To be fair, you may still be getting delisting requests because there are 
> still these miniscule networks that use the APEWS blacklist.
> Here's one error from last week (we get a few of those weekly, so very very 
> miniscule):
> smtp;554 Refused. Your domain name is listed in the RHSBL at l1.apews.org
>
> Regards,
> Vytis Marciulionis
>
>
>
> -Original Message-
> From: mailop  On Behalf Of Al Iverson via mailop
> Sent: Saturday, April 18, 2020 12:44 AM
> To: mailop 
> Subject: Re: [mailop] bogus DNSBL queries, was contact at google
>
> If it makes you feel any better, I still get emailed delisting requests for 
> both your Korea blacklist and APEWS (!).
>
> Al
>
>
> On Fri, Apr 17, 2020 at 5:26 PM John Levine via mailop  
> wrote:
> >
> > In article <2aeca2a6-dbf3-419b-bb62-929aa6877...@billmail.scconsult.com> 
> > you write:
> > >For 15+ years I've tried every form of complaint and DNS trickery I
> > >can think up to make bogus DNSBL queries stop. The only success I've
> > >ever had has been with a couple of dumb cargo-culting "check all the
> > >blacklists" sites that had working contacts I could berate. When I've
> > >managed to get any response from people operating DNS resolver
> > >services, that has basically boiled down to "I guess it sucks to be you."
> >
> > Yeah, tell me about it.  There's a machines in Austria at 193.104.82.1
> > that has been hammering on me with millions of queries per day for
> > years even though it's firewalled and never responds.  There's a few
> > others to which I send fake NS delegations to a dozen name servers,
> > each with a dozen random IP addresses which slows them down somewhat.
> >
> > The Valli site used to show the abuse.net contact lookup, and despite
> > big red text saying "not a blacklist", I got a steady stream of
> > nitwits demanding that I take them off the nonexistent blacklist.
> >
> > I told Mr. Valli to take out the abuse.net queries, he ignored me, so
> > I started sending custom responses to them.  I think the one that did
> > the trick was something like "blacklisted, send $100 to
> > postmas...@valli.org for removal."
> >
> > R's,
> > John
> >
> > PS: If anyone from Cloudflare is reading, I'd really appreciate it if
> > you could make 172.68.49.83 stop sending junk queries to contacts.abuse.net.
> >
> >
> > ___
> > mailop mailing list
> > mailop@mailop.org
> > https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchil
> > li.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=01%7C
> > 01%7Cvytis.marciulionis%40emarsys.com%7C5834f41c8b8743cf338908d7e3211d
> > 1a%7Ce7ce8fb50cee4d798970955cffd362cf%7C0&sdata=aqUJ1rJavxYDxHYpyA
> > ZNX%2F2YZ1Cut%2BBykn7T8l8g2xw%3D&reserved=0
>
>
>
> --
> al iverson // wombatmail // chicago
> dns tools are cool! 
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fxnnd.com%2F&data=01%7C01%7Cvytis.marciulionis%40emarsys.com%7C5834f41c8b8743cf338908d7e3211d1a%7Ce7ce8fb50cee4d798970955cffd362cf%7C0&sdata=9rPXDMJWtgcQF16eUqJrRBPBorYKokoNUX%2F%2B32PdZjg%3D&reserved=0
> Song a day! 
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fxnnd.com%2Fmusic&data=01%7C01%7Cvytis.marciulionis%40emarsys.com%7C5834f41c8b8743cf338908d7e3211d1a%7Ce7ce8fb50cee4d798970955cffd362cf%7C0&sdata=TSSbjYrZ6CgV5UxgkG0TfxMu%2FktThOiKbGW9mYKn%2B%2Bc%3D&reserved=0
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://eur01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fchilli.nosignal.org%2Fcgi-bin%2Fmailman%2Flistinfo%2Fmailop&data=01%7C01%7Cvytis.marciulionis%40emarsys.com%7C5834f41c8b8743cf338908d7e3211d1a%7Ce7ce8fb50cee4d798970955cffd362cf%7C0&sdata=aqUJ1rJavxYDxHYpyAZNX%2F2YZ1Cut%2BBykn7T8l8g2xw%3D&reserved=0



-- 
al iverson // wombatmail // chicago
dns tools are cool! https://xnnd.com
Song a day! https://xnnd.com/music

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Hehehe.. SenderScore alert.. from March of 2018

2020-04-21 Thread Michael Peddemors via mailop

Just arrived in the fbl mailbox..

This is a Mail.Ru Abuse Report for an email message received from domain 
.com, IP 104.128.152.18, on Sat, 24 Mar 2018 06:00:01 +.



Version: 1
Original-Mail-From: Аврора 
Source: Mail.Ru
Abuse-Type: complaint
Subscription-Link: https://fbl.returnpath.net/manage/subscriptions/498767
Feedback-Type: abuse
User-Agent: ReturnPathFBL/2.0
Arrival-Date: Sat, 24 Mar 2018 06:00:01 +
Original-Rcpt-To: 551e59781913c107bf57e24df614d...@bk.ru
Reported-Domain: REDACTED.com
Source-Ip: 104.128.152.18

We talked about this once before, but I think getting a report from TWO 
(2) years ago is just NOISE...


Any SenderScore ppl can weigh in on this?



--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Spam through maildome.com

2020-04-21 Thread Daniele Nicolodi via mailop
Hello,

I am receiving commercial spam of the worst kind from
esperienza-italia.it via maildome.com. Can anyone at Maildome look into
it? I am happy to provide details on the specific messages, but from
what I see I would be very surprised if anything legitimate would come
from this customer.

Thank you.

Cheers,
Dan

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Hotmail blacklist

2020-04-21 Thread Michael Peddemors via mailop

I notice that you are using an AWS address..

NetRange:   52.0.0.0 - 52.31.255.255
CIDR:   52.0.0.0/11
NetName:AT-88-Z
NetHandle:  NET-52-0-0-0-1
Parent: NET52 (NET-52-0-0-0-0)
NetType:Direct Allocation
OriginAS:
Organization:   Amazon Technologies Inc. (AT-88-Z)
RegDate:1991-12-19
Updated:2015-03-20
Ref:https://rdap.arin.net/registry/ip/52.0.0.0

Amazon has been REALLY bad lately, and more companies are blocking 
larger parts of the AWS space.


Insist that Amazon provide you with 'rwhois' or that they address this 
issue for you?  If you are 100% certain you aren't sending suspicious 
email activity from that IP Address.


On 2020-04-21 8:52 a.m., Norbert Bollow via mailop wrote:

Maybe it's not specifically you server's IP that's on the blacklist,
but an IP range belonging to your ISP (which includes your server)?

Greetings,
Norbert


On Tue, 21 Apr 2020 10:35:38 -0500
Michael via mailop  wrote:


My server's IP is on the hotmail blacklist. I can't find any details
as to why. I only have four users and we don't send any bulk mail.
Mostly just a small law firm communicating with clients. I'm set up
with SNDS but I don't see any details there that let me track down
the source of the blacklisting. I just set up the junk mail
reporting. I thought I had already done that but I don't remember
ever getting any reports.

Is there any way to get off this list?


I filled out a support request and received this response:

We have completed reviewing the IP(s) you submitted. The following
table contains the results of our investigation.

Not qualified for mitigation
52.10.9.48
Our investigation has determined that the above IP(s) do not qualify
for mitigation.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop



___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop





--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Hotmail blacklist

2020-04-21 Thread Kieran Cooper via mailop
It’s an IP belonging to Amazon Web Services, and I know that Microsoft have 
been sniffy about those IPs recently because there are so many spammers using 
AWS servers now. You may be able to get MS to remove the block if you keep 
replying to the ticket until you reach a human, but you may find you need to 
change server….

Kieran
SparkPost



> On 21 Apr 2020, at 16:52, Norbert Bollow via mailop  wrote:
> 
> Maybe it's not specifically you server's IP that's on the blacklist,
> but an IP range belonging to your ISP (which includes your server)?
> 
> Greetings,
> Norbert
> 
> 
> On Tue, 21 Apr 2020 10:35:38 -0500
> Michael via mailop  wrote:
> 
>> My server's IP is on the hotmail blacklist. I can't find any details
>> as to why. I only have four users and we don't send any bulk mail.
>> Mostly just a small law firm communicating with clients. I'm set up
>> with SNDS but I don't see any details there that let me track down
>> the source of the blacklisting. I just set up the junk mail
>> reporting. I thought I had already done that but I don't remember
>> ever getting any reports.
>> 
>> Is there any way to get off this list?
>> 
>> 
>> I filled out a support request and received this response:
>> 
>> We have completed reviewing the IP(s) you submitted. The following
>> table contains the results of our investigation.
>> 
>> Not qualified for mitigation
>> 52.10.9.48
>> Our investigation has determined that the above IP(s) do not qualify
>> for mitigation.
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Hotmail blacklist

2020-04-21 Thread Norbert Bollow via mailop
Maybe it's not specifically you server's IP that's on the blacklist,
but an IP range belonging to your ISP (which includes your server)?

Greetings,
Norbert


On Tue, 21 Apr 2020 10:35:38 -0500
Michael via mailop  wrote:

> My server's IP is on the hotmail blacklist. I can't find any details
> as to why. I only have four users and we don't send any bulk mail.
> Mostly just a small law firm communicating with clients. I'm set up
> with SNDS but I don't see any details there that let me track down
> the source of the blacklisting. I just set up the junk mail
> reporting. I thought I had already done that but I don't remember
> ever getting any reports.
> 
> Is there any way to get off this list?
> 
> 
> I filled out a support request and received this response:
> 
> We have completed reviewing the IP(s) you submitted. The following
> table contains the results of our investigation.
> 
> Not qualified for mitigation
> 52.10.9.48
> Our investigation has determined that the above IP(s) do not qualify
> for mitigation.
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] Hotmail blacklist

2020-04-21 Thread Michael Rathbun via mailop
On Tue, 21 Apr 2020 10:35:38 -0500, Michael via mailop 
wrote:

>We have completed reviewing the IP(s) you submitted. The following table 
>contains the results of our investigation.
>
>Not qualified for mitigation
>52.10.9.48
>Our investigation has determined that the above IP(s) do not qualify for 
>mitigation.

As always, reply to the response you got so that a human can review it; the
robots are not terribly stable geniuses.  Make your case as above.

mdr
-- 
 "There are no laws here, only agreements."  
-- Masahiko  


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] Hotmail blacklist

2020-04-21 Thread Michael via mailop
My server's IP is on the hotmail blacklist. I can't find any details as 
to why. I only have four users and we don't send any bulk mail. Mostly 
just a small law firm communicating with clients. I'm set up with SNDS 
but I don't see any details there that let me track down the source of 
the blacklisting. I just set up the junk mail reporting. I thought I had 
already done that but I don't remember ever getting any reports.


Is there any way to get off this list?


I filled out a support request and received this response:

We have completed reviewing the IP(s) you submitted. The following table 
contains the results of our investigation.


Not qualified for mitigation
52.10.9.48
Our investigation has determined that the above IP(s) do not qualify for 
mitigation.


___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop