Re: [mailop] Proofpoint Block Issues

[Andrey Oleynik via mailop]

It's just temp limitations, if you can't see them in 5 mins - just retry
email that's all you need to do.
Looks like you are sending too much to proofpoint domains (there are
thousands) in a short time, we run into similar issues and just created a
retry rule.

On Tue, Apr 13, 2021 at 5:13 AM Jason Carter via mailop 
wrote:

> Go to Home | Proofpoint Dynamic Reputation - IP Lookup
>  and put in your IP, then put in a
> ticket they will work with you on the issue.  I have never seen them not be
> responsive on tickets from the PDR lookup tool.
>
>   If you have a Proofpoint customer you are sending to, they can put in a
> ticket on your behalf as well.
> Home | Proofpoint Dynamic Reputation - IP Lookup
> 
> About Proofpoint ® Dynamic Reputation (PDR). Dynamic Reputation leverages
> Proofpoint's machine-learning driven content classification system to
> determine which IPs may be compromised to send spam (i.e. part of a botnet).
> ipcheck.proofpoint.com
>
>
> *Jason Carter*
> IT Manager
> Microsoft/Collaboration Services Infrastructure and Security
> Information Technology Services  |  Florida State University
> *p*  850.645.8069  |  *w*  its.fsu.edu
>
>
>
>
> --
> *From:* mailop  on behalf of Michael Peddemors
> via mailop 
> *Sent:* Monday, April 12, 2021 7:24 PM
> *To:* mailop@mailop.org 
> *Subject:* Re: [mailop] Proofpoint Block Issues
>
> Again, you would save everyone time if you actually posted the ranges
> you are having trouble with..
>
> On 2021-04-12 2:35 p.m., Zachary Sverdrup via mailop wrote:
> > Hi All,
> > We are running into an issue where two of our IP ranges are being
> > randomly(we believe) listed at Proofpoint for the last 3-4 weeks. We
> > have reviewed the client sending out of these ranges and have submitted
> > a few tickets and emailed their postmas...@proofpoint.com
> >  email a
> few times with no response.
> >
> > About 60% of the time when we get these alerts we are checking within 5
> > minutes on their site and they are not showing us as being blocked. We
> > will get 15+ notifications in 10 minutes with not a single one actually
> > being listed and then other times we will be listed briefly and then
> > removed.
> >
> > We have gone through and reviewed multiple clients but cannot figure out
> > why our entire ranges keep getting blocked. Has anyone seen this before
> > or have any idea what we can do about this?
> >
> > Thank you,
> >
> > ___
> > mailop mailing list
> > mailop@mailop.org
> >
> https://urldefense.com/v3/__https://list.mailop.org/listinfo/mailop__;!!PhOWcWs!izkVJPjYgklmao-woaSlABF6DQRmqlc3zvfhON_SantWct07L58j25M23Mpf83-rcQ$
> >
>
>
>
> --
> "Catch the Magic of Linux..."
> 
> Michael Peddemors, President/CEO LinuxMagic Inc.
> Visit us at
> https://urldefense.com/v3/__http://www.linuxmagic.com__;!!PhOWcWs!izkVJPjYgklmao-woaSlABF6DQRmqlc3zvfhON_SantWct07L58j25M23Mp9tYyByw$
> @linuxmagic
> A Wizard IT Company - For More Info
> https://urldefense.com/v3/__http://www.wizard.ca__;!!PhOWcWs!izkVJPjYgklmao-woaSlABF6DQRmqlc3zvfhON_SantWct07L58j25M23MrHPvNW7A$
> "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.
> 
> 604-682-0300 Beautiful British Columbia, Canada
>
> This email and any electronic data contained are confidential and intended
> solely for the use of the individual or entity to which they are addressed.
> Please note that any views or opinions presented in this email are solely
> those of the author and are not intended to represent those of the company.
> ___
> mailop mailing list
> mailop@mailop.org
>
> https://urldefense.com/v3/__https://list.mailop.org/listinfo/mailop__;!!PhOWcWs!izkVJPjYgklmao-woaSlABF6DQRmqlc3zvfhON_SantWct07L58j25M23Mpf83-rcQ$
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>


-- 
Best regards,
Andrii Oliinyk
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Proofpoint Block Issues

[Jaren Angerbauer via mailop]

Hi Zachary,

Will look at this and will follow up with you off list.

Thanks,

--Jaren
Proofpoint Postmaster



On Tue, Apr 13, 2021 at 12:07 PM Zachary Sverdrup via mailop <
mailop@mailop.org> wrote:

> Hey Michael,
>
>  So sorry I thought I had included the IP ranges. The two ranges are
> 96.47.26.0/24 and 96.47.27.0/24.
>
> And Jason we have submitted several tickets over the last few weeks but
> have not gotten any feedback yet. When we are actually blocked and we
> submit a ticket we are removed quickly but that’s really the only response
> we have received.
>
>  In the past they have been responsive but for some reason we haven’t
> gotten a response from any of our tickets which is one reason why im
> reaching out to see if anyone else is having similar issues.
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Proofpoint Block Issues

[Zachary Sverdrup via mailop]

Hey Michael,

 So sorry I thought I had included the IP ranges. The two ranges are
96.47.26.0/24 and 96.47.27.0/24.

And Jason we have submitted several tickets over the last few weeks but
have not gotten any feedback yet. When we are actually blocked and we
submit a ticket we are removed quickly but that’s really the only response
we have received.

 In the past they have been responsive but for some reason we haven’t
gotten a response from any of our tickets which is one reason why im
reaching out to see if anyone else is having similar issues.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] GMail DKIM support for ed25519-sha256

[Stuart Henderson via mailop]

On 2021/04/13 11:11, Wolfgang Rosenauer via mailop wrote:
> Hi,
> 
> I'm seeing issues with GMail not recognizing a valid DKIM signature.
> 
> Message is correctly signed like:
> DKIM-Signature: v=1; a=ed25519-sha256;
> 
> GMail reports
> dkim=neutral (no key)
> 
> while most DKIM validators (incl. dmarcian) are totally fine with the
> provided key.
> The only reason I could imagine is the key/hash format but I haven't seen
> any official documentation from GMail if ed25519-sha256 is supported or not.
> 
> Any ideas or recommendations?

I don't know specifically about gmail, but generally support for ed25519
in DKIM is still a bit lacking, I think the advice for this is still to
dual-sign.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] GMail DKIM support for ed25519-sha256

[Wolfgang Rosenauer via mailop]

Hi,

I'm seeing issues with GMail not recognizing a valid DKIM signature.

Message is correctly signed like:
DKIM-Signature: v=1; a=ed25519-sha256;

GMail reports
dkim=neutral (no key)

while most DKIM validators (incl. dmarcian) are totally fine with the 
provided key.
The only reason I could imagine is the key/hash format but I haven't 
seen any official documentation from GMail if ed25519-sha256 is 
supported or not.


Any ideas or recommendations?


Thanks,
 Wolfgang



OpenPGP_signature
Description: OpenPGP digital signature
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM+DMARC at t-online.de (Deutsche Telekom's ISP branche)

[Lilium via mailop]

On 12/04/2021 22:08, Bob Proulx via mailop wrote:


There are many questions about what will actually be implemented.  It
would be extremely useful if t-online.de provided an automated robot
testing address to which email tests could be conducted.  Being able
to test this to an automated robot address would help the community
understand the restrictions being placed there.



I send test messages to:
a...@t-online.de

Regards
Andrea
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM+DMARC at t-online.de (Deutsche Telekom's ISP branche)

[Tracey Crawford via mailop]

Regarding the statement

Florian.Kunkel--- via mailop wrote:
> unsigned messages, unaligned or messages failing validation otherwise,
will be rejected while in SMTP session.

Can you tell us what the error message will be or will it be the standard,
'A problem occurred. (Ask your postmaster for help or to contact
t...@rx.t-online.de to clarify.'?

Tracey





On Mon, Apr 12, 2021 at 5:46 PM  wrote:

> Send mailop mailing list submissions to
> mailop@mailop.org
>
> To subscribe or unsubscribe via the World Wide Web, visit
> https://list.mailop.org/listinfo/mailop
> or, via email, send a message with subject or body 'help' to
> mailop-requ...@mailop.org
>
> You can reach the person managing the list at
> mailop-ow...@mailop.org
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of mailop digest..."
>
>
> Today's Topics:
>
>1. Re: DKIM+DMARC at t-online.de (Deutsche Telekom's ISP
>   branche) (Luke)
>2. Re: DKIM+DMARC at t-online.de (Deutsche Telekom's ISP
>   branche) (florian.kun...@telekom.de)
>3. Re: DKIM+DMARC at t-online.de (Deutsche Telekom's ISP
>   branche) (Bob Proulx)
>4. Re: [EXTERNAL]  Comcast contact (Mike Reed)
>
>
> --
>
> Message: 1
> Date: Mon, 12 Apr 2021 10:12:16 -0700
> From: Luke 
> To: mailop@mailop.org
> Subject: Re: [mailop] DKIM+DMARC at t-online.de (Deutsche Telekom's
> ISP branche)
> Message-ID:
>  qmeagv2zlych2m-wcems...@mail.gmail.com>
> Content-Type: text/plain; charset="utf-8"
>
> Has anyone gotten a firm answer on these scenarios yet?
>
> 5321.from: boun...@srv12.example.com
> 5322.from: cont...@example.com
>
> The vast majority of our customers will have a subdomain on the 5321 from
> that isn't present on the 5322 from. I'd like to know if this is a problem.
>
> I'd also like to hear confirmation that messages with 2 DKIM signatures
> will still "pass" if one matches the 5322 and one doesn't.
>
> @Florian: How will T-Online handle these two scenarios?
>
> Cheers,
> Luke
>
> On Thu, Apr 8, 2021 at 6:22 AM Matt Gilbert via mailop 
> wrote:
>
> > Hi Florian,
> >
> > Do you have this information posted anywhere online such as in a blog
> post
> > or support article?
> >
> > The information shared in this mailing list is a little disjointed and
> > difficult to follow, so having an article that we can reference that
> > includes the precise requirements you're establishing, and examples would
> > be very helpful. Also, do you have a date for when you are going to begin
> > enforcing this new policy?
> >
> >
> > Thanks,
> >
> > Matt Gilbert
> > - Deliverability Engineer
> > - Mailchimp
> >
> > On Apr 6, 2021, at 5:36 AM, Florian.Kunkel--- via mailop <
> > mailop@mailop.org> wrote:
> >
> > !
> > * to all those sending email without their very own static IP-Address,
> > * and all newly set up MTA infrastructure
> > ... especially ESPs using IP pools professionally for their numerous
> > customers' mail.
> > !
> >
> > As you might already have observed we are evaluating DKIM signatures @
> > t-online.de for a while now.
> > We are starting to expect aforementioned IP infrastructure to have all
> > messages DKIM signed conforming DMARC, so header from and mail from must
> be
> > aligned.
> > unsigned messages, unaligned or messages failing validation otherwise,
> > will be rejected while in SMTP session.
> >
> > worst come first
> > Expect this procedure to hit you the earlier, the more traffic we are
> > already used to reject from your infrastructure.
> >
> > Do not expect DMARC reports anytime soon.
> > Equally we won't check for DMARC policies at the moment; ... but p=reject
> > could become an option.
> >
> >
> > Cheers
> >
> > Florian
> > E-Mail Engineering
> >
> > Deutsche Telekom AG
> > Deutsche-Telekom-Allee 9, 64295 Darmstadt, Germany
> >
> > ___
> > mailop mailing list
> > mailop@mailop.org
> > https://list.mailop.org/listinfo/mailop
> >
> >
> > ___
> > mailop mailing list
> > mailop@mailop.org
> > https://list.mailop.org/listinfo/mailop
> >
> -- next part --
> An HTML attachment was scrubbed...
> URL: <
> https://list.mailop.org/private/mailop/attachments/20210412/a05a93c4/attachment-0001.htm
> >
>
> --
>
> Message: 2
> Date: Mon, 12 Apr 2021 19:37:12 +
> From: 
> To: , 
> Subject: Re: [mailop] DKIM+DMARC at t-online.de (Deutsche Telekom's
> ISP branche)
> Message-ID:
> <
> fr2p281mb04669027239d92981bb26e88e9...@fr2p281mb0466.deup281.prod.outlook.com
> >
>
> Content-Type: text/plain; charset="utf-8"
>
> Hi Luke, *!
>
> /
> Has anyone gotten a firm answer on these scenarios yet?
> 5321.from: mailto:boun...@srv12.example.com
> 5322.from: mailto:cont...@example.com
> The vast majority of our customers wil