Re: [mailop] New *.outbound.protection.outlook.com servers without PTR

2018-05-23 Thread Bill Cole

On 22 May 2018, at 6:41 (-0400), Bernhard Schmidt wrote:


Hi,

recently (about a week ago) *.outbound.protection.outlook.com started
sending from three new /24 without valid FCrDNS


That strikes me as a hint from MS. In the past, their DNS & HELO names 
have been almost always simple and correct on their 'clean' outlets and 
odd or broken in various ways on their sewer outlets.


It has always been entirely reasonable to refuse all mail from IP's that 
authoritatively lack PTRs, especially when the same operator has PTRs 
for their other mail outlets and the nameless range is clearly a cutout 
with named IPs.


You do not owe MS customers deliverability.


--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Currently Seeking Steadier Work: https://linkedin.com/in/billcole

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] New *.outbound.protection.outlook.com servers without PTR

2018-05-22 Thread Michael Wise via mailop

Those responsible have been poked. 😊

Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Got the Junk Mail Reporting 
Tool<http://www.microsoft.com/en-us/download/details.aspx?id=18275> ?

From: mailop  On Behalf Of Vladimir Gabrielescu
Sent: Tuesday, May 22, 2018 3:44 AM
To: Bernhard Schmidt ; mailop@mailop.org
Subject: Re: [mailop] New *.outbound.protection.outlook.com servers without PTR


You are not alone, we've seen this too.


From: mailop mailto:mailop-boun...@mailop.org>> on 
behalf of Bernhard Schmidt 
mailto:bernhard.schm...@lrz.de>>
Sent: Tuesday, May 22, 2018 6:41:18 AM
To: mailop@mailop.org<mailto:mailop@mailop.org>
Subject: [mailop] New *.outbound.protection.outlook.com servers without PTR

Hi,

recently (about a week ago) *.outbound.protection.outlook.com started
sending from three new /24 without valid FCrDNS

40.92.73.0/24
40.92.74.0/24
40.92.75.0/24

i.e. EUR04-HE1-obe.outbound.protection.outlook.com (HELO) sending from
40.92.73.10

The /16 is delegated to msft.net

We have added them to the whitelist for scoring, but unfortunately the
whitelist for Greylisting (which is necessary because the servers retry
from different IPs) is FCrDNS based.

Best Regards,
Bernhard

--
Bernhard Schmidt  Netzbetrieb / IPv6 / DNSSEC
Leibniz-Rechenzentrum   Leibniz Supercomputing Centre
Boltzmannstr. 1  D-85748 Garching b. Muenchen
Tel: +49 89 35831-7885 E-Mail/Jabber: 
bernhard.schm...@lrz.de<mailto:bernhard.schm...@lrz.de>
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


Re: [mailop] New *.outbound.protection.outlook.com servers without PTR

2018-05-22 Thread Vladimir Gabrielescu
You are not alone, we've seen this too.


From: mailop  on behalf of Bernhard Schmidt 

Sent: Tuesday, May 22, 2018 6:41:18 AM
To: mailop@mailop.org
Subject: [mailop] New *.outbound.protection.outlook.com servers without PTR

Hi,

recently (about a week ago) *.outbound.protection.outlook.com started
sending from three new /24 without valid FCrDNS

40.92.73.0/24
40.92.74.0/24
40.92.75.0/24

i.e. EUR04-HE1-obe.outbound.protection.outlook.com (HELO) sending from
40.92.73.10

The /16 is delegated to msft.net

We have added them to the whitelist for scoring, but unfortunately the
whitelist for Greylisting (which is necessary because the servers retry
from different IPs) is FCrDNS based.

Best Regards,
Bernhard

--
Bernhard Schmidt  Netzbetrieb / IPv6 / DNSSEC
Leibniz-Rechenzentrum   Leibniz Supercomputing Centre
Boltzmannstr. 1  D-85748 Garching b. Muenchen
Tel: +49 89 35831-7885 E-Mail/Jabber: bernhard.schm...@lrz.de

___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop


[mailop] New *.outbound.protection.outlook.com servers without PTR

2018-05-22 Thread Bernhard Schmidt
Hi,

recently (about a week ago) *.outbound.protection.outlook.com started
sending from three new /24 without valid FCrDNS

40.92.73.0/24
40.92.74.0/24
40.92.75.0/24

i.e. EUR04-HE1-obe.outbound.protection.outlook.com (HELO) sending from
40.92.73.10

The /16 is delegated to msft.net

We have added them to the whitelist for scoring, but unfortunately the
whitelist for Greylisting (which is necessary because the servers retry
from different IPs) is FCrDNS based.

Best Regards,
Bernhard

-- 
Bernhard Schmidt  Netzbetrieb / IPv6 / DNSSEC
Leibniz-Rechenzentrum   Leibniz Supercomputing Centre
Boltzmannstr. 1  D-85748 Garching b. Muenchen
Tel: +49 89 35831-7885 E-Mail/Jabber: bernhard.schm...@lrz.de



smime.p7s
Description: S/MIME Cryptographic Signature
___
mailop mailing list
mailop@mailop.org
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop