[mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Benoit Panizzon
Hi List Well thank you for all the hints. I also (thanks to Al) found out, that you need to set the browser language to english, to get to the propper help page where the delisting request form can be found. With german, you're lost :-) But I would like to use that topic on a discussion about wha

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Benjamin BILLON
Hi Benoit, I assume you already checked M3AAWG's BCPs? https://www.m3aawg.org/published-documents I'm not familiar with _all_ of them, but that's a good source of ideas anyway. Cheers, -- Benjamin -Original Message- From: mailop On Behalf Of Benoit Panizzon Sent: Monday, 1 October,

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Rob McEwen
Sounds like you're doing MUCH correctly. Here is another suggestion: Start limiting the ability of your end users to set up forwarders for email accounts forwarding to freemail addresses. For starters, I especially highly recommend not allowing anyone to auto-forward their mail to ANY microsoft

[mailop] Facebook Mail Team contact

2018-10-01 Thread Marvin Gaube
Hello, one of my customers has a strange issue with Facebook's mail system: He tries to recover his password, Facebook says mail is sent. But on the side of our mail server, we never receive even an SMTP connect from Facebook. Other alias, same domain works without any problems. Does anybody h

Re: [mailop] Facebook Mail Team contact

2018-10-01 Thread Laura Atkins
Is that mail actually coming from Facebook or are they using an ESP to manage their invites? laura > On 1 Oct 2018, at 16:25, Marvin Gaube wrote: > > Hello, > one of my customers has a strange issue with Facebook's mail system: > He tries to recover his password, Facebook says mail is sent.

Re: [mailop] Facebook Mail Team contact

2018-10-01 Thread Marvin Gaube
Hello, it seems that Facebook is using it's own system, a test mail from another account was delivered via  mx-out.facebook.com (66-220-144-147.mail-mail.facebook.com [66.220.144.147]) Best regards Marvin Gaube Am 01.10.2018 um 18:47 schrieb Laura Atkins: > Is that mail actually coming from Fa

Re: [mailop] How to find 'low flying' spamers?

2018-10-01 Thread Lena
> From: Benoit Panizzon > we mainly get the usual problems with customers who hand out their > email credentials in reply to phishing emails or get trojans who steal > them from their computers. > > To mitigate those problems we have implemented those mechanisms: > * If count(IP) in delta time >

[mailop] sender header and out-of-office replies

2018-10-01 Thread Jonathan Leist
Hello all, We recently removed the Sender header from outgoing emails in favour of x-dkim-options, as the latter offers the ability to more easily switch between selectors. However, following the change, users began reporting an increase in out-of-office replies, ostensibly because some of their s

Re: [mailop] sender header and out-of-office replies

2018-10-01 Thread Luis E. Muñoz via mailop
On 1 Oct 2018, at 10:16, Jonathan Leist wrote: We recently removed the Sender header from outgoing emails in favour of x-dkim-options, as the latter offers the ability to more easily switch between selectors. However, following the change, users began reporting an increase in out-of-office re

Re: [mailop] sender header and out-of-office replies

2018-10-01 Thread Michael Peddemors
On 18-10-01 10:48 AM, Luis E. Muñoz via mailop wrote: On 1 Oct 2018, at 10:16, Jonathan Leist wrote: We recently removed the Sender header from outgoing emails in favour of x-dkim-options, as the latter offers the ability to more easily switch between selectors. However, following the change, u

Re: [mailop] How to find 'low flying' spamers?

2018-10-01 Thread Mark Milhollan
On Mon, 1 Oct 2018, Rob McEwen wrote: >On 10/1/2018 5:23 AM, Benoit Panizzon wrote: >> * Require SMTP Authentication. So much is now via stolen credentials (which your other checks try to handle) that this does nothing to prevent, of course, but it is indeed reasonable and responsible of you to

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Brandon Long via mailop
On Mon, Oct 1, 2018 at 2:35 AM Benoit Panizzon wrote: > Hi List > > Well thank you for all the hints. I also (thanks to Al) found out, that > you need to set the browser language to english, to get to the propper > help page where the delisting request form can be found. With german, > you're los

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Grant Taylor via mailop
On 10/01/2018 03:00 PM, Brandon Long via mailop wrote: We've typically recommended forwarders to not rewrite the envelope sender when forwarding for this reason, but that was mostly pointed at tech folks running their own servers (this page has a section for procmail https://support.google.com/

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Michael Peddemors
On 18-10-01 03:52 PM, Grant Taylor via mailop wrote: On 10/01/2018 03:00 PM, Brandon Long via mailop wrote: We've typically recommended forwarders to not rewrite the envelope sender when forwarding for this reason, but that was mostly pointed at tech folks running their own servers (this page h

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Brandon Long via mailop
On Mon, Oct 1, 2018 at 4:02 PM Grant Taylor via mailop wrote: > On 10/01/2018 03:00 PM, Brandon Long via mailop wrote: > > We've typically recommended forwarders to not rewrite the envelope > > sender when forwarding for this reason, but that was mostly pointed > > at tech folks running their own

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Brandon Long via mailop
On Mon, Oct 1, 2018 at 4:39 PM Michael Peddemors wrote: > On 18-10-01 03:52 PM, Grant Taylor via mailop wrote: > > On 10/01/2018 03:00 PM, Brandon Long via mailop wrote: > >> We've typically recommended forwarders to not rewrite the envelope > >> sender when forwarding for this reason, but that w

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Michael Peddemors
On 18-10-01 04:48 PM, Brandon Long via mailop wrote: Mail servers that believe SPF policies and reject messages because of it are really kidding themselves. This could start a whole thread on it's own.. With all respect, if someone advertises an SPF -all we SHOULD be honouring this.. This w

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread Brandon Long via mailop
On Mon, Oct 1, 2018 at 5:09 PM Michael Peddemors wrote: > On 18-10-01 04:48 PM, Brandon Long via mailop wrote: > > Mail servers that believe SPF policies and reject messages because of it > > are really kidding themselves. > > > > This could start a whole thread on it's own.. > There have been m

[mailop] Speaking of Auto-Response headers.. Apple Store

2018-10-01 Thread Michael Peddemors
Here is their autogenerated messages.. Note, they explicitly set 'donotreply@' in both the From and EnvelopeFrom, good practice.. but.. Date: Tue, 2 Oct 2018 00:28:35 + (GMT) From: Apple Store To: Message-ID: Subject: Get even more from your new iPhone. - Profiter encore plus de votre

Re: [mailop] How to find 'low flying' spamers? (Re: outlook.com blocking reason: S3150 "network is on our block list")

2018-10-01 Thread John Levine
In article <28c04515-a3e2-94bc-9ed2-6505ee089...@linuxmagic.com> you write: >With all respect, if someone advertises an SPF -all we SHOULD be >honouring this.. This was the senders wishes.. Like Brandon said, if it's a plain -all meaning no mail at all, sure. Otherwise, sorry pal, you don't get