Re: [mailop] [EXTERNAL] Re: Abuse AUTH from Microsoft outlook IP space

2023-08-18 Thread Dan Malm via mailop
Hi Tarun, While your mitigation has reduced the amount of authentications I see, it's only a partial fix. So far today (since 00:00 UTC) I count: 111000 connections deferred before AUTH 554000 successful authentications 712 emails successfully sent The amount of successful AUTH has been fairl

Re: [mailop] Hotmail's Blocklist and S3150

2023-08-18 Thread Martin Flygenring via mailop
That has usually been our experience as well. There's 2 different blocklists, and usually it's the Hotmail/free side of things that are blocking you. This is the links we have written down on our side. Office 365: https://sender.office.com/ Hotmail and other other free services: https://olcsupp

[mailop] hotmail.com SPF forgot IPv6

2023-08-18 Thread Laurent S. via mailop
Aloha hotmail, It seems since you recently changed your SPF and switched from ~all to -all. It would have been great if you didn't remove at the same time your IPv6 ranges from it. It seems the include:spf.protection.outlook.com was removed during the change. You might want to include it back.

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-18 Thread Mark Alley via mailop
This will definitely showcase how many receivers are still rejecting based on SPF failure by itself. There's already many threads on Reddit about this from regular consumers experiencing bounces they don't know what to do with, it's actually quite sad reading some of them. - Mark Alley On

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-18 Thread L. Mark Stone via mailop
Hi Mark, Perhaps I'm misunderstanding your inference, but are you saying we shouldn't reject based on a hard fail SPF record? Thanks, Mark _ L. Mark Stone, Founder North America's Leading Zimbra VAR/BSP/Training Partner For Com

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-18 Thread Mark Alley via mailop
Well, if you want to accept the overwhelming amount of DMARC passing mail signed with DKIM (which these Hotmail messages are, because they are signed with valid and aligned DKIM)... then you definitely shouldn't be rejecting it based solely on the SPF result. - Mark Alley On 8/18/2023 9:54 AM

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-18 Thread L. Mark Stone via mailop
Got it, thanks. We are concerned about DKIM-replay attacks, so while I now better understand where you are coming from, we would continue to mark such emails as spam and put them in the users' Junk folders. Our view is that reputable senders should be able to manage their DNS accurately, under

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-18 Thread Mark Alley via mailop
Granted, my only point was around message rejection itself with no consideration for other email authentication context. For reference, the M3AAWG BCP section 4 this is based off of

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-18 Thread L. Mark Stone via mailop
Ah! Even better. We are pretty much on the same page then I expect. Regards, Mark _ L. Mark Stone, Founder North America's Leading Zimbra VAR/BSP/Training Partner For Companies With Mission-Critical Email Needs - Original Me

[mailop] Anyone from ATT?

2023-08-18 Thread Judith Villarreal via mailop
Hey all. Is anyone from ATT/SbcGlobal on this list? We're having trouble with IPs being blocked. Been trying to reach them at abuse_...@abuse-att.net but no luck. Thank you so much! All the best, Judith V. Delivery and Compliance @ GoDaddy Email Marketing ESP ___

Re: [mailop] hotmail.com SPF forgot IPv6

2023-08-18 Thread John Levine via mailop
It appears that L. Mark Stone via mailop said: > >Ah! Even better. We are pretty much on the same page then I expect. There's a whole lot of perfectly normal sending situations that SPF can't describe. (They mostly incude the words "relay" or "forward".) So if you reject on -all you'll aways los