Re: [mailop] Microsoft/Outlook contact for *.outbound.protection.outlook.com

2024-06-28 Thread Jim P. via mailop
On Sat, 2024-06-29 at 10:31 +1000, Viktor Dukhovni via mailop wrote: > > Reading your first post brought to mind the recent report of potential > issues at Microsoft's outbound servers with "too many" TLSA records > (more than ~12).  I was looking at your TLSA RRset (14 TLSA records): I've been

Re: [mailop] Microsoft/Outlook contact for *.outbound.protection.outlook.com

2024-06-28 Thread Jeff Pang via mailop
smtp-dane not passed? 6/28/2024 8:04:14 PM - Server at PH8PR20MB5100.namprd20.prod.outlook.com returned '550 5.7.324 dnssec-invalid: Destination domain returned invalid DNSSEC records(450 4.7.324 dnssec-invalid: Destination domain returned invalid DNSSEC records)' -- Jeff Pang

Re: [mailop] Microsoft/Outlook contact for *.outbound.protection.outlook.com

2024-06-28 Thread Viktor Dukhovni via mailop
On Fri, Jun 28, 2024 at 07:50:09PM -0400, Jim P. via mailop wrote: > I just received back a bounce that was delivered to my @live.com > address, the one that sent the test message a few days ago. Here is > what it contains: Reading your first post brought to mind the recent report of potential

Re: [mailop] Microsoft/Outlook contact for *.outbound.protection.outlook.com

2024-06-28 Thread Jim P. via mailop
I just received back a bounce that was delivered to my @live.com address, the one that sent the test message a few days ago. Here is what it contains: --- Undeliverable: Test 1 postmas...@outlook.com You Delivery has failed to these recipients or groups: Jim

Re: [mailop] Microsoft/Outlook contact for *.outbound.protection.outlook.com

2024-06-28 Thread Alexander Huynh via mailop
> Microsoft is trying (over and > over) to send me emails, and they get past connect/disconnect. This has > been going on for a few days now, at a rate of once every 5 seconds. I also experience this. In the past, I've filed a support request with Microsoft asking for an explanation, but

[mailop] Microsoft/Outlook contact for *.outbound.protection.outlook.com

2024-06-28 Thread Jim P. via mailop
Hello! I have an odd deliverability problem. Microsoft is trying (over and over) to send me emails, and they get past connect/disconnect. This has been going on for a few days now, at a rate of once every 5 seconds. I've tested verified that everything about my mail flow is working fine and

Re: [mailop] How to respond to a subscription attack

2024-06-28 Thread Grant Taylor via mailop
On 6/28/24 11:00 AM, Al Iverson via mailop wrote: If you want to trust me with the person's email address, I'll pass it to a bunch of ESP deliverability/compliance people and ask them to unsub it en masse, if they can. Some will and it might help. We've done it before for others. Thank you

Re: [mailop] How to respond to a subscription attack

2024-06-28 Thread Al Iverson via mailop
If you want to trust me with the person's email address, I'll pass it to a bunch of ESP deliverability/compliance people and ask them to unsub it en masse, if they can. Some will and it might help. We've done it before for others. Cheers, Al -- Al Iverson // 312-725-0130 // Chicago

Re: [mailop] Cloudmark blocklist

2024-06-28 Thread Scott Mutter via mailop
On Fri, Jun 28, 2024 at 9:24 AM James Hoddinott via mailop < mailop@mailop.org> wrote: > Your main issue is that Transip sure do like to let spammers make use of > many IPs within the /24 that you're in, we'll just need to flag yours as > separate to prevent this from reoccurring. > > Wouldn't

Re: [mailop] Why an SPF hard bounce on ~all ?

2024-06-28 Thread Ted Smith via mailop
Hello, That is very intersting, and would explain what is happening. Thanks for the clarification. Thank you Ted easyDNS Technologies On 2024-06-28 06:06, Alessandro Vesely via mailop wrote: On Thu 27/Jun/2024 21:41:39 +0200 Adam D. Barratt via mailop wrote: On Thu, 2024-06-27 at 14:50

Re: [mailop] Cloudmark blocklist

2024-06-28 Thread Kasper Peeters via mailop
> Your main issue is that Transip sure do like to let spammers make use of > many IPs within the /24 that you're in, we'll just need to flag yours as > separate to prevent this from reoccurring. While I understand some of the logic behind blocking entire /24s, this kind of block makes it very

Re: [mailop] Cloudmark blocklist

2024-06-28 Thread James Hoddinott via mailop
Your main issue is that Transip sure do like to let spammers make use of many IPs within the /24 that you're in, we'll just need to flag yours as separate to prevent this from reoccurring. On Fri, 28 Jun 2024 at 10:19, Kasper Peeters via mailop wrote: > Is there anyone from Cloudmark on the

Re: [mailop] Cloudmark blocklist

2024-06-28 Thread Scott Undercofler via mailop
Replied offlist Sent from my iPhone > On Jun 28, 2024, at 4:22 AM, Kasper Peeters via mailop > wrote: > > Is there anyone from Cloudmark on the list who can help getting > 37.97.176.137 off the blocklist? This server does not send mass/unsollicited > email, has correct SPF/DKIM/DMARC, is

Re: [mailop] How to respond to a subscription attack

2024-06-28 Thread Mark Alley via mailop
Adding to Taavi's List-Unsub condition - I've had similar success with List-unsubscribe identification for transactional-volume attacks, and also with a few additional indicators for transactional mail that are below. These are Proofpoint-specific conditions, but can be (mostly) translated to

Re: [mailop] Why an SPF hard bounce on ~all ?

2024-06-28 Thread Alessandro Vesely via mailop
On Thu 27/Jun/2024 21:41:39 +0200 Adam D. Barratt via mailop wrote: On Thu, 2024-06-27 at 14:50 -0400, Ted Smith via mailop wrote: That conbined with the hard fail indicated could account for the rejection of the message, except that I don't understand why the SPF check would be done for the

Re: [mailop] Large Volume of Emails in Violation of Acceptable Use Policies

2024-06-28 Thread Alessandro Vesely via mailop
On Fri 28/Jun/2024 11:34:13 +0200 Richard Clayton via mailop wrote: Finally, you may be seeing X emails per time period from Y people. Messages sent from Y machines are a different matter, methinks. Except for expressly requested monitoring services, automatically generated messages should

Re: [mailop] Large Volume of Emails in Violation of Acceptable Use Policies

2024-06-28 Thread Richard Clayton via mailop
In message , Ferris, Rhys (SCC) via mailop writes >In the last 24 hours we have received 693,937 emails >from select freemail domains with top senders having sent between 500 and 800 >emails in a single day. This has been ongoing and in the last 30 days we have >received 23,196,000+ emails

[mailop] Cloudmark blocklist

2024-06-28 Thread Kasper Peeters via mailop
Is there anyone from Cloudmark on the list who can help getting 37.97.176.137 off the blocklist? This server does not send mass/unsollicited email, has correct SPF/DKIM/DMARC, is not on any other blocklist (as far s I can see) and there is no evidence of abuse in the logs. I have filled out the

Re: [mailop] How to respond to a subscription attack

2024-06-28 Thread Taavi Eomäe via mailop
The best method we've found was to reject all letters with List-Unsubscribe header (or similar) sent to that victim. This obviously has side-effects, but they're tolerable compared to the flood of letters. I should note that these letters are usually sent in order to cover up something like

Re: [mailop] Request: UTF-8 email address?

2024-06-28 Thread Viktor Dukhovni via mailop
On Fri, Jun 28, 2024 at 08:40:20AM +0200, Benny Pedersen via mailop wrote: > > Does anyone here have a UTF-8 email address you'd let me send some > > test messages to? > > so you know any dns servers that support utf-8 ? [ Benny, here and on postfix-users, I'd like to encourage you to refrain

Re: [mailop] Why an SPF hard bounce on ~all ?

2024-06-28 Thread Alexander Robohm via mailop
Hi, for a bit of background: RFC 7208, which defines SPF, defines two kinds of identity, namely the "MAIL FROM identity" and the "HELO identity", in sections 2.3 and 2.4 respectively. The HELO identity is the HELO hostname, assuming that is is a valid domain name. The MAIL FROM identity is the

Re: [mailop] Request: UTF-8 email address?

2024-06-28 Thread Benny Pedersen via mailop
Christine Borgia via mailop skrev den 2024-06-27 21:55: Does anyone here have a UTF-8 email address you'd let me send some test messages to? so you know any dns servers that support utf-8 ? dns servers that set the glue record must support utf-8, not just idn, what will happend if both idn