Re: [mailop] Help with icloud

Read this article and follow the instructions to contact the teamPostmaster information for iCloud Mail - Apple Supportsupport.apple.comOn Sep 25, 2024, at 7:24 PM, Francisco via mailop wrote:Hello,We're hoping to get some help with emails to icloud. We've been slowly warming up our IP block, 23.

Re: [mailop] onmicrosoft.com customers forging @microsoft.com addresses for phishing

A quick search on your preferred search engine would take you here: https://learn.microsoft.com/en-us/defender-office-365/message-headers-eop-mdo On 9/23/24 11:27 AM, Gellner, Oliver via mailop wrote: On 20.09.2024 at 19:18 Michael Wise via mailop wrote: X-Forefront-Antispam-Report: …;SFV:SPM;

[mailop] IPv6 syntax in SPF record

Hello all, I've got a question about an IPv6 address on an SPF record. The host in question is: `spf.savea.se` which has the following mechanism "ip6:0:0:0:0:0::5b6a:c61d" A couple of SPF validators throw different sets of warnings: - The address 0:0:0:0:0::5b6a:c61d is not a valid IPv6

Re: [mailop] Delisting for @icloud.com impossible for low volume senders?

You're not listed, so it's not a listing. A listing would cause a 550 bounce at the SMTP transaction with more details. What is happening is that something in the message is being fingerprinted. They use Proofpoint as their main filter, so it's likely their content scanners are not happy with.

Re: [mailop] DMARC p=reject Interaction with security gateways

Yes, you can disregard those. Most customers of security gateways exempt the gateway IPs from further checking on the final mailbox. I don't think any of those gateways use ARC yet, but if they did, that would also help (in case they didn't whitelist their gateway IPs). Here's a good explaine

Re: [mailop] Strange behavior of the Microsoft Blacklist

It actually has more than one hostname, another poster here mentioned having issues too. Removing one of the hostnames the rDNS of the IP points to may fix the issue. On 8/20/24 5:54 PM, Gellner, Oliver via mailop wrote: On 20.08.2024 at 16:40 Tobias Matthaeus via mailop wrote: A server that

Re: [mailop] Yahoo CFL - multiple messages

Yes, and they're aware of it. Lili requested samples in the Email Geeks slack channel, too. On 8/7/24 8:24 PM, Scott Mutter via mailop wrote: Anyone else noticing that Yahoo's Complaint Feedback Loop seems to be sending the same complaint messages over and over again? I seem to be receiving t

Re: [mailop] Moving my domains to a new host, email to gmail times out

mail.gmail.com doesn't exist... the correct host is gmail-smtp-in.l.google.com or any of the other MX records listed in the gmail.com zone On 7/30/24 8:24 PM, Ken Robinson via mailop wrote: I don't get any response at all from gmail.com , it just times out on the connect req

Re: [mailop] Mailserver accepts ssl/tls only

Have you consulted the manual of your MTA as to how you can do so? It is possible, but you haven't told us what you are using or what have you tried so far. You can also use MTA-STS, but that will only work with senders that look for and enforce policies. This is an operational mailing list fo

Re: [mailop] Mailserver software

There's a mailman setting if you go to your web preferences to turn off double copy, FYI. > On Jul 17, 2024, at 6:20 AM, postfix--- via mailop wrote: > > On 2024-07-16 10:43, Odhiambo Washington via mailop wrote: >> https://doc.dovecot.org/2.4/core/config/auth/databases/oauth2.html > > I must

Re: [mailop] Telekom to Yahoo/att

If you do not control the IP space or the MTA, pass the feedback to the postmaster of the MTA - it is unlikely you will be able to do much as an end user. On 7/13/24 2:48 AM, Jeff Pang via mailop wrote: Hello list, I am also using Telekom's email service. But telekom has the issues on sendin

Re: [mailop] Domains discrimination

Wow... a lot of brands abandoning their branded TLDs. I guess they realized it may be niche and with potential for confusion and not worth the upkeep expense. On 7/11/24 7:01 PM, John Levine via mailop wrote: It appears that Viktor Dukhovni via mailop said: On Wed, Jul 10, 2024 at 04:51:05PM

Re: [mailop] Domains discrimination

.sa.com is $200, but Sav is running a promo for $0.99 the first year and spammers are going to town! On 7/10/24 10:51 PM, John Levine via mailop wrote: It appears that Ralph Seichter via mailop said: If sombody tries to send mail from something.xxx or otherthing.auto, for example, ... Domai

Re: [mailop] Domains discrimination

> Where can I see this statistics or similar reports? Thank you. https://www.spamhaus.org/reputation-statistics/gtlds/domains/ https://info.spamhaus.com/botnet-threat-updates https://info.spamhaus.com/domain-reputation-updates On 7/10/24 9:10 PM, Jeff Pang via mailop wrote: On 2024-07-11 02:58,

Re: [mailop] Yahoo contact address

I'd believe so, given they point to the same MX and one is an alias of the other. You can also always try mail-questi...@yahooinc.com and they'll answer or route your query to the right person. Best, Faisal > On Jul 8, 2024, at 6:54 PM, Jeff Pang via mailop wrote: > > Hello > > I was from

Re: [mailop] proofpoint - possible missmatch with ipcheck

In my experience, deferrals don't show up in the tool, only outright blocks. Not sure if bug or by default. But yes, Proofpoint peeps roam this list, so one should be reaching out shortly. Also, in the future, showing us the IP can also help. On 7/4/24 4:17 PM, Patrick Landolt via mailop wrote

Re: [mailop] strange sender

It depends on your configuration and if you're installing it in Postfix or down the line in a milter like rspamd. I added their query zones in postfix's main.cf in the `smtpd_recipient_restrictions` parameter. Generates this bounce (domain and IP have been redacted): NOQUEUE: reject: RCPT fr

Re: [mailop] strange sender

Probably random botnets trying to deliver spam. I see a bunch of connections from that IP, but they're all getting dropped as soon as they connect because they're listed by Abusix Mail Intelligence as 'exploit'. You will see a lot of that when managing a mail server. Per Abusix: This list is g

Re: [mailop] strange sender

They're also on the Spamhaus DROP list (the worst of the worst) https://check.spamhaus.org/results/?query=SBL642455 On 6/30/24 12:24 AM, Jeff Pang via mailop wrote: I have two different mailservers. both them continue to get the requests from a sender as the following. Jun 30 06:20:51 mx postf

Re: [mailop] AT&T Blocklist

In the past few weeks Lili has replied to *various* threads about ATT blockings. Have you tried reaching out off list to her? On 6/18/24 9:25 PM, Scott Mutter via mailop wrote: What's going on with AT&T? They're blocking our mail servers left and right (IPs aren't on any other blacklist mind

Re: [mailop] IPv6 only MX

Ah, you'd be using Cloudflare's email routing. If Cloudflare's MTA can deliver over IPv6, you should be ok, as only they would be delivering to the subdomain and everyone else would deliver to Cloudflare first.  However, on the outbound, if the mx.myserver.com sends directly, you may run into i

Re: [mailop] Apple/iCloud message blocking

Have you tried contacting them as per their postmaster page?Postmaster information for iCloud Mail - Apple Supportsupport.apple.comBest,FaisalOn Jun 3, 2024, at 7:15 PM, Scott Mutter via mailop wrote:Anyone from Apple/iCloud able to assist with why certain messages from one of our servers - 67.21

Re: [mailop] Yahoo no longer accepting email forwards?

Have you tried reaching out to them directly to get more details? I know they also lurk here, but pretty sure they prefer you contact their team first and then escalate if necessary. https://senders.yahooinc.com/contact/ On 5/21/24 8:01 PM, Mark E. Jeftovic via mailop wrote: Following on my

Re: [mailop] Phishing hosted by Cloudflare-ipfs.com / Abuse Handled by Sparkpostmail.com?

I know Cloudflare uses Sparkpost's infra to send replies from their abuse desk system, which is likely what you're seeing. Received: from mta-87-157.sparkpostmail.com ([192.174.87.157]) by safari.mxrouting.net with esmtps (TLS1.2) tls TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (Ex

Re: [mailop] Sudden TSS04's From Yahoo/AOL Early This Morning

I am of the opinion you should still submit a ticket - their team will have more information as to why it was flagged and if it was a false positive. On 5/13/24 1:46 PM, Michael E. Weisel via mailop wrote: Good morning Mailop friends.  One of our clients suddenly started seeing TSS04’s early

Re: [mailop] Someone at Google (GSuite) with a clue?

Also worth noting that it was not rejected at the SMTP stage because the email address was valid. Google does not check for permissions to post to the Group until after it has accepted and processed the message, hence the delayed NDR. The Google rep also may not have had access to group details

Re: [mailop] "The email didn't arrive" to Office 365

Yes, Microsoft 365 has hosted quarantines. There are two types: user facing where the user gets a digest every day and they can release messages from it and an admin quarantine, where only the tenant admins have access to (usually reserved for malware or other high-risk messages land). > On Ma

Re: [mailop] Sudden spike in Gmail failures ("TempFail – Spam")

> configure DMARC for syniumsoftware.com to accept subdomain signatures. Uh... that's not configured in the DMARC policy. The sp= directive states what action to take from subdomains of a domain when a message fails DMARC. See https://datatracker.ietf.org/doc/html/rfc7489#section-6.3 and http

Re: [mailop] Sudden spike in Gmail failures ("TempFail – Spam")

DKIM is fine at the organizational domain. I do think it's related to the introduction of new identities, and with time the filters will learn the reputation of the new identities. On 4/30/24 12:22 PM, Mendel Kucharzeck via mailop wrote: Am 30.04.2024 um 12:06 schrieb Matus UHLAR - fantomas vi

Re: [mailop] Is forwarding to Gmail basically dead?

It says it on the new sender guidelines, under "Requirements for all senders" "If you regularly forward email, including using mailing lists or inbound gateways, add ARC headers to outgoing email. ARC headers indicate the message was forwarded and identify you as the forwarder. Mailing list send

Re: [mailop] Admin contact for Protonmail

Postmaster is extremely responsive, and if for some reason they don't reply - I know the team personally if you need a hand. Best, Faisal On Wed, Jan 31, 2024, at 3:32 PM, Atro Tossavainen via mailop wrote: > On Wed, Jan 31, 2024 at 02:03:33PM +, Tarun Singh via mailop wrote: >> Hello Folks

Re: [mailop] Comcast issues?

Yes, there's been a few reports elsewhere. As Laura commented somewhere: "Given the amount of mail I'm getting today I suspect it's just "All lines are busy. Please try again."" On Mon, Nov 27, 2023, at 8:01 PM, Jarland Donnell via mailop wrote: > Anyone else seeing issues connecting to comcast.

Re: [mailop] Google not sending DMARC reports since 9/25

They started sending 10/2 reports just now. They may start trickling in again for other days soon. Best, Faisal On Tue, Oct 3, 2023, at 3:38 PM, Jörg Backschues via mailop wrote: > Am 03.10.2023 um 11:59 schrieb Faisal Misle via mailop: > >> We noticed (and looks like so did our cou

[mailop] Google not sending DMARC reports since 9/25

Hi all, We noticed (and looks like so did our counterparts at Dmarcian) that Google has not been sending DMARC reports since last week. I'm going to assume Google is already aware of it and is working to resume sending and we should treat it like a Postmaster Tools or SNDS blip and just go with t

Re: [mailop] Hosteurope contact?

They're owned by GoDaddy - so maybe someone from GD can help make a connection? On Fri, May 5, 2023, at 8:45 AM, Thomas Walter via mailop wrote: > Hello, > > On 04.05.23 10:43, Ken Peng via mailop wrote: >> May 4, 2023 at 4:09 PM, "Thomas Walter via mailop" wrote: >>> >>> I am trying to get in co

[mailop] URIBL/SpamRL contacts?

Hi all, One of our domains, sift [.] red, which we use for our link rewriting was flagged by those two vendors and it's causing issues for some customers. We've requested delistings through their portal, but it's the second time this year and we'd like a contact to discuss it, as we're in the ema

Re: [mailop] DKIM record IONOS

Correct, DMARC at none will only send XML reports that tell you if a message had an aligned SPF/DKIM and if it authenticated properly. It will also show you if anyone else is sending as your domain that you weren't aware of. I highly recommend using a tool like Postmark's free DMARC reporting (o

Re: [mailop] Contact at mxrouting.net / mxroute.com /porkbun.com ?

I see Jarland replied, but the first two are together and run by him. Porkbun is not related to MXroute - it's a domain registrar/email host combo based in Portland, OR. On Tue, Jan 3, 2023, at 9:07 PM, Peter N. M. Hansteen via mailop wrote: > Does anyone have useful contact info for one or m

Re: [mailop] Looks like I am getting blocked by msn.com only.

Just to be sure because I didn't see you mention it, make sure you've contacted them via the form I often see linked so many different ways: https://sender.office.com On Thu, Nov 17, 2022, at 10:26 PM, Ryan Prihoda via mailop wrote: > `Hey all,` > `` > `I received this rejection going to an msn

Re: [mailop] [EXTERNAL] TLS-RPT reporting software

I only know of four providers that send reports (If anyone knows of any others - I'm all ears!) * Google * Microsoft * Comcast * SocketLabs They likely have their own in-house systems, as they have the resources to do so. Best, Faisal On Thu, Nov 17, 2022, at 11:22 PM, Muyeed Ali via mailop

Re: [mailop] How do I break Gmail forwarding?

If you can still find the original authorization email (yes, I know - probably unlikely depending on age of setup), there's a link to break it. Best, Faisal On Mon, Oct 24, 2022, at 3:09 PM, Tara Natanson via mailop wrote: > > At some point someone set up a gmail address which forwards automat

Re: [mailop] Who is Mine/SayMine.com?

They seem to be scanning the inbox for all emails from companies, wether you have an account or not and then sending a removal request. Most companies will comply as they're afraid of GDPR, but sometimes you may not even have the customer in your database. Automated is not the way, and they're

Re: [mailop] FYI - Google/Gmail hard enforcing SPF presence

Does anyone have the bounce message they're sending back handy? On 4/19/22 6:36 PM, Jarland Donnell via mailop wrote: To add +1 experience to this, I've been seeing it intermittently. Some of my customers who lack SPF absolutely cannot deliver mail to Gmail, 100% rejection due to lack of authen

[mailop] MTA-STS Policy File Syntax Question

Hello all, Got a quick question regarding the syntax of an MTA-STS policy file. Example: version: STSv1 mode: testing mx: mx.example.com max_age: 86400 vs. version: STSv1 mode: testing mx: mx.example.com. max_age: 86400 Note the trailing dot on the second policy. Is that a valid MX for the

Re: [mailop] After years of accepting messages, yahoo suddenly stops

I'm going to bet it was a DNS resolution issue, both mgm51.com and mgm51.net were not resolving at all around the time he sent that message. On 3/27/22 10:19 AM, Gary Gapinski via mailop wrote: Your message to the list has the header Received: from oneyou.mgm51.net (*unknown* [174.136.99.202

Re: [mailop] After years of accepting messages, yahoo suddenly stops

Well for starters, I can't resolve mgm51.com's DNS records, which could very well be a factor - unless you're not using that domain to send to him. Second, have you tried opening a ticket with their postmaster team at https://senders.yahooinc.com/contact ? On 3/26/22 9:55 PM, Mike via mailop

Re: [mailop] Anyone from United Airlines ?

That looks like Sendgrid, so they may be able to ping United. I have the contact of their CTO, but you may get quicker help from SendGrid. On 1/20/22 2:04 PM, Glowfish Domainadministrator via mailop wrote: Hi, Emails from united are getting rejected by our postfix mailserver. The mails see

Re: [mailop] And just after I spoke up for Linode being not bad ;)

They do. Those servers then forward to Google Workspace, likely a spam filter or similar. On 1/18/22 9:06 PM, John Levine via mailop wrote: It appears that Michael Peddemors via mailop said: Serious? : host aspmx.l.google.com[2607:f8b0:4023:c0b::1a] said: Why do they have their abuse email a

[mailop] GoDaddy O365 spam?

Hello all, We've been noticing a trend where 'data brokers' with fake americanized names in India buy domains and bundle sign up for Office 365 tenants through GoDaddy and start sending spam. What is the best way to report those? I've reported the tenant to Microsoft and the domain to GoDaddy, bu

Re: [mailop] Google should be burnt or blown up (was: Gmail putting messages to spam)

I agree with Brielle. Couldn't have said it better myself. It is getting tiring. On Mon, Oct 4, 2021 at 4:18 PM, Brielle via mailop wrote: > On 10/4/21 2:46 PM, Jaroslaw Rafa via mailop wrote: >> It's YOU, GOOGLE, who made me that "low reputation" by consistently putting >> my messages to spam.

Re: [mailop] rua report rejected by microsoft

That usually means the address does not exist in Office 365. On Tue, Sep 28, 2021 at 11:37 AM, Slavko via mailop wrote: > Hi, > > my rua report was rejected at RCPT stage with: > > SMTP error from remote mail server after RCPT > TO:: > 550 5.4.1 Recipient address rejected: Access denied. AS(201

Re: [mailop] Recommendation for inbox provider?

+1 for FastMail, can't believe I forgot about them! They're awesome. ‐‐‐ Original Message ‐‐‐ On Monday, September 6th, 2021 at 6:40 PM, Byron Lunz via mailop wrote: > What about fastmail.com ? > > On Mon, Sep 6, 2021 at 3:59 PM Anne P. Mitchell, Esq. via mailop > wrote: > >> All, >>

Re: [mailop] Recommendation for inbox provider?

Apart from the buck a month web hosts, the only one that comes to mind is MXRoute (their main guy is often on this list) I used to recommend Rackspace, but not too sure about the long term future of their email hosting division. (Disclaimer: I worked there for three years) On Mon, Sep 6, 2021 a

Re: [mailop] DMARC: Anyone using pct=n with n !=0 and n !=100?

All of my customers do. We have them ramp up in their policy slowly over 4ish weeks to see if any missed sources get quarantined. On Thu, Aug 19, 2021 at 9:48 PM, John Levine via mailop wrote: > It appears that Zack Aab via mailop said: >> >>It's mostly to assuage the fears of large senders t

Re: [mailop] emailsrvr.com/racksspace running old PBL copy

Hi Liam, I'll send you a contact off-list. *Faisal Misle* Customer Success Engineer | Red Sift On Thu, May 13, 2021 at 4:53 PM, Liam Fisher < mailop@mailop.org > wrote: > > I had my IP range delisted from the Spamhaus PBL a few weeks ago. > Rackspace/emailsrvr.com > ( http://rackspace/emailsr

Re: [mailop] Anyone contact to ESP: MailWizz / pkmedia.us?

.us domains are required to have an open WHOIS this is what I found - looks like a typical indian spam operation: Registrant Name: Anand Mathur Registrant Organization: AMP Registrant Street: Rohini Complex,Shakarpur Khas,New Delhi. Registrant Street: Registrant Street: Registrant City: New De

[mailop] usa.net / mbox.net = BAE Systems?

Hello all, Are the usa.net / mbox.net domains part of BAE's Email Security system? My sleuthing also directed me to a company called SilverSky. Did BAE sell the division to them, or are they just a reseller? Thanks! *Faisal Misle* Customer Success Engineer | Red Sift -- Red Sift is the powe

Re: [mailop] office.com outbound: abuse or chase harder?

Microsoft does do domain verification on Office 365, usually via TXT (MS=9) It's also possible it can be due to a forwarder on one of the recipient's mailboxes. *Faisal Misle* Customer Success Engineer | Red Sift On Mon, Sep 14, 2020 at 12:49 PM Phil Pennock via mailop wrote: > Folks

Re: [mailop] no, target.com contact ?

They seem to be a Cisco shop, so it’s likely the Cisco Appliance is sending them it as it considers the RUA address another user On Fri, Sep 4, 2020 at 12:09 PM, vom513 via mailop wrote: >> On Sep 4, 2020, at 12:30 PM, John Levine via mailop >> wrote: >> >> In article , >> vom513 via mailop

Re: [mailop] Just how does SendGrid fail this badly?

Checking my Proofpoint PPS cluster, a bunch of Sendgrid phishing emails are being rejected by PDR, meaning they're already blocked at the IP level. mxa-0058bc01.gslb.pphosted.com:[205.220.165.245] : 554 Blocked - see https://ipcheck.proofpoint.com/?ip=192.254.123.97 Best, Faisal PGP Key: C8F

Re: [mailop] Microsoft giving Server Busy errors for M365

We usually route them through our TAM and our Premier team when I worked at Rackspace. Don’t think there’s a place for ISPs Best, Faisal PGP Key: [C8FD029B](https://pgp.faisal.ec/) On Fri, Jul 24, 2020 at 3:37 PM, Kevin A. McGrail via mailop wrote: > Microsoft's anti-spam seems to be misfir

Re: [mailop] Google and Spam detection

I also strongly recommend you start signing with DKIM. You may not have had a use for it, but now you do. Best, Faisal PGP Key: [C8FD029B](https://pgp.faisal.ec/) On Fri, Jul 24, 2020 at 4:45 AM, Andrew C Aitchison via mailop wrote: > On Fri, 24 Jul 2020, Klaus Ethgen via mailop wrote: > >>

Re: [mailop] Post-processing Journal-Mails coming from O365, forwardedMail

Have you tried journal rules? https://docs.microsoft.com/en-us/exchange/security-and-compliance/journaling/configure-journaling Best, Faisal Misle MCSA: Office 365 PGP Key: [C8FD029B](https://pgp.faisal.ec/) On Tue, Jul 7, 2020 at 6:20 AM, Stefan Bauer via mailop wrote: > Hi, > > there is a

Re: [mailop] Proofpoint

Have you tried ipcheck.proofpoint.com? Best, Faisal PGP Key: [C8FD029B](https://pgp.faisal.ec/) On Wed, Jun 24, 2020 at 9:36 AM, Kris von Mach via mailop wrote: > Hi, > > Could someone please contact me from Proofpoint off-list. > > It's about a block on one of our IPs. > > I've tried postmas

Re: [mailop] SendGrid and Phishing

I’ve had mixed luck... sometimes it auto replies, sometimes it doesn’t. I sometimes wonder if their Proofpoint gateway is quarantining them - or if they added a bypass rule for their abuse mailbox (as it should be) Best, Faisal PGP Key: [C8FD029B](https://pgp.faisal.ec/) On Wed, Jun 17, 2020 a

Re: [mailop] Sendgrid and phishing

I’ve been seeing it too... Mailgun, PayPal, etc A SG rep replied to a SDLU thread yesterday about the same issue “We are working to get a handle on this on a few fronts. These senders in this thread have been banned. I don't have insight into the compliance side, but it is being worked on." Best