Re: [mailop] proofpoint - possible missmatch with ipcheck

2024-07-10 Thread Jaren Angerbauer via mailop
On Thu, Jul 4, 2024 at 8:29 AM Patrick Landolt via mailop wrote: > Hi > > We see a surge of deferred mails because of a proofpoint check resulting > in mta responses like: > Deferred - see https://ipcheck.proofpoint.com/?ip=[…] > > The actual ipcheck on the mentioned domain does - on multiple tes

Re: [mailop] proofpoint - possible missmatch with ipcheck

2024-07-09 Thread Paul Gregg via mailop
PPE uses PDR, but we use it to reject the connection with a "550 5.7.1 Service unavailable" We don't defer - so you shouldn't be seeing PPE causing deferrals due to PDR. For PPE at least, this stage is IP reputation only... domain reputation checks happen later in the engine after mail handoff (so

Re: [mailop] proofpoint - possible missmatch with ipcheck

2024-07-04 Thread Mark Alley via mailop
Sorry - to clarify - Each customer configuration (and dispositions/spam thresholds/policies/DNSBLs used, etc) for POD customers are entirely separate from one another, but PDR info is shared across customers to my knowledge (specific to blocks). I'm not 1000% sure if it applies entirely the same ac

Re: [mailop] proofpoint - possible missmatch with ipcheck

2024-07-04 Thread Patrick Landolt via mailop
Hi Mark Thanks for the insight. Most deferred mails go to remote mx that do use PP internally and have an mx that is branded with their domain. But there are also a good bunch of recievers that have a *.pphosted.com mx. Thos mails to *pphosted.com are now delivered. There were less mails to *.

Re: [mailop] proofpoint - possible missmatch with ipcheck

2024-07-04 Thread Mark Alley via mailop
PP customer here - Do you know what the receiver hostnames are that are deferring you? And is it all mail to any Proofpoint customer, or to just a few hosts? If the MX hostnames end in .ppe-hosted.com, that's Proofpoint essentials, if it's .pphosted.com, that's an enterprise POD customer. PDR usu

Re: [mailop] proofpoint - possible missmatch with ipcheck

2024-07-04 Thread Faisal Misle via mailop
In my experience, deferrals don't show up in the tool, only outright blocks. Not sure if bug or by default. But yes, Proofpoint peeps roam this list, so one should be reaching out shortly. Also, in the future, showing us the IP can also help. On 7/4/24 4:17 PM, Patrick Landolt via mailop wrote

[mailop] proofpoint - possible missmatch with ipcheck

2024-07-04 Thread Patrick Landolt via mailop
Hi We see a surge of deferred mails because of a proofpoint check resulting in mta responses like: Deferred - see https://ipcheck.proofpoint.com/?ip=[…] The actual ipcheck on the mentioned domain does - on multiple tested ips - return that nothing is blocked. Is there a proofpoint representati