>From: [email protected] 
>[mailto:[email protected]] On Behalf Of Netsons > Paolo 
>Giustiniani
>Sent: Tuesday, September 10, 2013 5:31 PM
>To: 'Tim Draegen'
>Cc: [email protected]
>Subject: [dmarc-discuss] R: About SPAM Policy
>
>Tim,
>i'm very happy for your reply.
>
>Any email sent from the server is marked as spam by Gmail and inserted into 
>the appropriate folder.
>
>I am puzzled.
>
>The IP is not entered any blacklists
[...]


Hi Paolo,

while your IP is not currently blocklisted by major blocklists, SenderScore 
shows it has a rather low reputation.

The name of the host and the multitude of domains seen sending from it suggest 
it might be a SMTP service for some hosting business.
Initially you said "any email sent from the server is marked as spam by Gmail" 
which seems another pointer to IP-level issues, not domain-level issues.

If this is correct, by cross-referencing data from SenderScore, SenderBase and 
TrendMicro my wild guess is that your server or some of the hosts using it as 
SMTP gateway was hacked in the last weeks and as a result, your IP is suffering 
from bad reputation caused by spam it was sending. It is likely Gmail received 
spam too and their view of the sending IP is similar to others.

In this case - you might want to make sure the incident is actually over, your 
server is now secured and is not sending out spam anymore (your own logs will 
help you see if this is the case). 
Reputation will slowly recover. 

DMARC is not going to help you much with IP reputation, while it can certainly 
help diagnosing if your domain is abused.
Fixing your domain SPF in the meantime might help  Gmail and others decide your 
domain is not actually responsible, but IP-level reputation frequently comes 
into play earlier, and more decisively, than domain-based reputation at large 
receivers.

HTH,
Davide

Davide Migliavacca
cto, ContactLab
Tel +39 02 2831181
www.contactlab.com



_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)

Reply via email to