A friend brought to my attention the following blog post which seems to have started around the same time we started experiencing issues and seems to be the same issue, though it's light on details.

https://tuta.com/blog/outlook-falsely-marks-tutanota-emails-as-junk

On 2023/12/05 00:51, Bradley Silverman via mailop wrote:
Hi gents,

Apologies for the lack of reply, I was waiting for my new account to get send privledges.

As an example header, I have provided one below from a test account.

The thing to note is that the Original server (ending in hostyourservices.net <http://hostyourservices.net>) sends outbound through a mail cluster that we have other servers send through as well, about half end in hostyourservices.net <http://hostyourservices.net> and about half don't. Any domain that does NOT end in 'hostyourservices.net <http://hostyourservices.net>' will happily be received by Outlook at whatever SCL score is appropriate for that email. However anything ending in hostyourservices.net <http://hostyourservices.net> will get a SCL 9. We have moved the domains between the servers and sent the identical emails, and we always find, consistently, that anything ending in hostyourservices.net <http://hostyourservices.net> will get SCL9 and that some domain (we've tried a dozen or so personally) sending from the other server hostname will get a SCL1.

Microsoft is clearing punishing that domain, but we can't for the life of us work out why, and we are having zero luck with their support, whom we've been trying to explain the issue to for months.

Anyone who has a contact with Microsoft that can help would be fantastic, as this happened years ago and the only fix was for microsoft to intervene.


Cheers,

======================
Received: from JH0PR01MB6253.apcprd01.prod.exchangelabs.com <http://JH0PR01MB6253.apcprd01.prod.exchangelabs.com>  (2603:1096:990:9c::13) by SEYPR01MB6185.apcprd01.prod.exchangelabs.com <http://SEYPR01MB6185.apcprd01.prod.exchangelabs.com> with
 HTTPS; Mon, 4 Dec 2023 05:22:54 +0000
Received: from CH0P223CA0030.NAMP223.PROD.OUTLOOK.COM <http://CH0P223CA0030.NAMP223.PROD.OUTLOOK.COM> (2603:10b6:610:116::6)  by JH0PR01MB6253.apcprd01.prod.exchangelabs.com <http://JH0PR01MB6253.apcprd01.prod.exchangelabs.com> (2603:1096:990:9c::13) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7046.33; Mon, 4 Dec
 2023 05:22:44 +0000
Received: from SN1PEPF0002636E.namprd02.prod.outlook.com <http://SN1PEPF0002636E.namprd02.prod.outlook.com>  (2603:10b6:610:116:cafe::27) by CH0P223CA0030.outlook.office365.com <http://CH0P223CA0030.outlook.office365.com>
 (2603:10b6:610:116::6) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7046.33 via Frontend
 Transport; Mon, 4 Dec 2023 05:22:42 +0000
Authentication-Results: spf=pass (sender IP is 110.232.143.186)
 smtp.mailfrom=datamaster.net.au <http://datamaster.net.au>; dkim=pass (signature was verified)  header.d=datamaster.net.au <http://datamaster.net.au>;dmarc=bestguesspass action=none  header.from=datamaster.net.au <http://datamaster.net.au>;compauth=pass reason=109 Received-SPF: Pass (protection.outlook.com <http://protection.outlook.com>: domain of datamaster.net.au <http://datamaster.net.au>
 designates 110.232.143.186 as permitted sender)
 receiver=protection.outlook.com <http://protection.outlook.com>; client-ip=110.232.143.186;
 helo=m4.out3.mxs.au <http://m4.out3.mxs.au>; pr=C
Received: from m4.out3.mxs.au <http://m4.out3.mxs.au> (110.232.143.186) by
SN1PEPF0002636E.mail.protection.outlook.com <http://SN1PEPF0002636E.mail.protection.outlook.com> (10.167.241.139) with Microsoft  SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.7068.20 via Frontend Transport; Mon, 4 Dec 2023 05:22:41 +0000
X-IncomingTopHeaderMarker:
 
OriginalChecksum:8F96A8C1FD1A19AB5E6201A48BFCDE111D7C7542297063C2C4A7F659C437C315;UpperCasedChecksum:EFAA2613BE81E0971DB83B7DCF94896C322AB863DEB0C16D67C74A37F8938E57;SizeAsReceived:2358;Count:23
Received: from syn07be.syd6.hostyourservices.net <http://syn07be.syd6.hostyourservices.net> (syn07be.syd6.hostyourservices.net <http://syn07be.syd6.hostyourservices.net> [110.232.143.84]) by out3.mxs.au <http://out3.mxs.au> (Halon) with ESMTPS (TLSv1.2) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
id 240ba464-9265-11ee-b4c2-00163c573069
for <[email protected]>;
Mon, 04 Dec 2023 16:22:38 +1100 (AEDT)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=datamaster.net.au <http://datamaster.net.au>; s=default; h=Content-Transfer-Encoding:Content-Type:
Message-ID:Subject:To:From:Date:MIME-Version:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=ZyAXWNyS2Wa8EhZsbJxuOR7x/gpVP+u/0b54l7af8VE=; b=gxvFLIJyFqvQ1g6tV/vvOE3V8y
IgtL9DX65LcaKy3ttKitq/JQNiPVi8hru2ckBLKBygjH1da9H2extT+BjAuXwdoUGxLYhH8gW1FhY
NpNOZBuqKI17AvA16pc6e4k3XngPmQKsnZ+JwJOTnFebFwOZhbSuSwBFd5zfMj2lAPv7E27lbeHNi
1KQQ/uiPa8c0I9x/9l7xFnYa5GtVwSefD1vp/3dJAgTc/poMOD0Pd8IAAuUsYTJtlfHh95mKO2kI6
Nt3zq03QSBqLrOsHXPDi1Ah+GtLiC40XsvmprnS3viiNeqkrjNxZerc324YCnM/a/BBrTU1T2w0jP
QxKqI76w==;
Received: from [::1] (port=43518 helo=syn07be.syd6.hostyourservices.net <http://syn07be.syd6.hostyourservices.net>) by syn07be.syd6.hostyourservices.net <http://syn07be.syd6.hostyourservices.net> with esmtpa (Exim 4.96.2)
(envelope-from <[email protected]>)
id 1rA1Pi-004NLx-2d
for [email protected];
Mon, 04 Dec 2023 16:22:38 +1100
Date: Mon, 04 Dec 2023 16:22:38 +1100
From: [email protected]
To: [email protected]
Subject: Follow up for support request 'SYN-E4994732'
User-Agent: Roundcube Webmail/1.6.0
Message-ID: <[email protected]>
X-Sender: [email protected]
Content-Type: text/plain; charset=US-ASCII;
 format=flowed
Content-Transfer-Encoding: 7bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - syn07be.syd6.hostyourservices.net <http://syn07be.syd6.hostyourservices.net>
X-AntiAbuse: Original Domain - outlook.com <http://outlook.com>
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - datamaster.net.au <http://datamaster.net.au> X-Get-Message-Sender-Via: syn07be.syd6.hostyourservices.net <http://syn07be.syd6.hostyourservices.net>: authenticated_id: [email protected] X-Authenticated-Sender: syn07be.syd6.hostyourservices.net <http://syn07be.syd6.hostyourservices.net>: [email protected]
X-Source:
X-Source-Args:
X-Source-Dir:
X-IncomingHeaderCount: 23
Return-Path: [email protected]
X-MS-Exchange-Organization-ExpirationStartTime: 04 Dec 2023 05:22:42.0023
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 bcaee30b-17c4-4a2f-d719-08dbf4890a16
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-TrafficTypeDiagnostic:
 SN1PEPF0002636E:EE_|JH0PR01MB6253:EE_|SEYPR01MB6185:EE_
X-MS-Exchange-Organization-AuthSource:
SN1PEPF0002636E.namprd02.prod.outlook.com <http://SN1PEPF0002636E.namprd02.prod.outlook.com>
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-UserLastLogonTime: 12/4/2023 5:19:32 AM
X-MS-Office365-Filtering-Correlation-Id: bcaee30b-17c4-4a2f-d719-08dbf4890a16
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 110.232.143.186
X-SID-PRA: [email protected]
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-MS-Exchange-Organization-SCL: 9
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 04 Dec 2023 05:22:41.5960
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: bcaee30b-17c4-4a2f-d719-08dbf4890a16
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-AuthSource:
SN1PEPF0002636E.namprd02.prod.outlook.com <http://SN1PEPF0002636E.namprd02.prod.outlook.com>
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
 00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: JH0PR01MB6253
X-MS-Exchange-Transport-EndToEndLatency: 00:00:13.1442523
X-MS-Exchange-Processed-By-BccFoldering: 15.20.7046.032
X-Microsoft-Antispam-Mailbox-Delivery:
ucf:0;jmr:0;ex:0;auth:1;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000305)(920221119095)(90000117)(920221120095)(90005022)(91005020)(90014020)(91030020)(91040095)(9050020)(9100341)(944500132)(2008001134)(4810010)(4910033)(9610028)(9525003)(10140023)(9320005)(9245025)(120001);RF:JunkEmail;
X-Message-Info:
6hMotsjLow+0B7LynIpXRIrQdWNez39fr4TQjRT97gtHuUBMwzMjgCzi02Vrii+8mxh8ecvqKXqIlZDlqL3tdbzeZ/ZbbGJkkypUHKWqyuRU8ytUbNCvaUP4A2ppjko6UAAu5ckYqp3B9yp1zmcI7F2IVIn/VBe01I3JnuEeoQ4JqsT0NTBfrTPjLRWN3lIvf7dO1lO/e+amFRF6wM2K+A==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MjtHRD0xO1NDTD02
X-Microsoft-Antispam-Message-Info:
=?us-ascii?Q?f8/kVxzZnZJsOt1PGr2EBuenRcMPs7i2EitZQO59QbhsqBxquNxr2Uo4Vl/y?=
 =?us-ascii?Q?bvdRmnIHTm9X9JK0Sro/J2vh/F2mhrJzeFBZYDEapuj//sUFNz4QmoXtIYdX?=
 =?us-ascii?Q?bM3oJ9obS8xrl/8cqAX2QwJRXlsh7pZQ0h8lSayTCcPs/J2nY2sI0xusZ9d8?=
 =?us-ascii?Q?KPpoIdBmTsESjYYZ2S74m5ZitDmBo5HaAKU0QxPCKK50Y/XwTC9SJlZplJji?=
 =?us-ascii?Q?y72n43wuftQ2kROuaCI/w3KzEC0YLxpRboNDBaTLdWlUFdrwXtFY3olf6IzM?=
 =?us-ascii?Q?uaarCt0t3bULPBwhM33Sm6ryqQeusVPSPb5fZH0Dld7FffKyKVZGA0S92y30?=
 =?us-ascii?Q?zEyWRVmrUdVvXnw0WOO0jgkuei3U4QjuZdIgN4sQnOJ1nCo5SNQam1pB1Wmj?=
 =?us-ascii?Q?dCX4qK1FdT2lZVWgBqPtYWv9QxzlLpQytPXPobWKqK4qwMAoWGFU5QCfG4uP?=
 =?us-ascii?Q?KL2fB6CwiZqXK7VNm4pcxMuzrdgxrJwFvXMZAQ0wbLC3jq6iSy8LPq/Sn9Fi?=
 =?us-ascii?Q?yOWPsKYn+1wFkM1plrHwAFZu2O8yShUPcbyLtDdq8In1LWo4WwUkODKgnUJH?=
 =?us-ascii?Q?JDyK3jUQ6IJxjSIn4Tku9Gof4HlWjCzch9dibUBnw2Tizr3FSbsOpAB9OEVJ?=
 =?us-ascii?Q?Apc7wBQqpv09eCL5M3y9klUdRVb4W4ocJo/YXcTjum7SemN5Y/GiublQFISk?=
 =?us-ascii?Q?1FdUPlhwlejMrXUufbdoQ226vUmx+9yTPTMMFnk8wZz9rg79ID6U7wsDbF7A?=
 =?us-ascii?Q?V4doP2l6MiA5W6296uaP+GmcbL3EdqpI1aZv/P7CVv8qj4bCiQHLOG0Qwtuu?=
 =?us-ascii?Q?HgvQ43XVktQW2GsvwnNDh4rZlRTCb7g5LoIRcgWCMj7AU5ylblkVYapgJpJu?=
 =?us-ascii?Q?MPskZNAm2W3KkU7j2r4gQFBmuwASoilkF5hDhBpHuWGqNElVKQslCEaGrHT3?=
 =?us-ascii?Q?bpGlDu9bKI+zxRhunMJ72lrHRJSSsl1nMzYDkh7WnJvp7P7A3vLiSmK+DUoP?=
 =?us-ascii?Q?JHdZLhDC0AIbnKamyVm8sT9KZB6Pd7y0Ini8Ab8PrTik2EmowMci0LQRjwqA?=
 =?us-ascii?Q?OlNnNp01CSi/S0a6ygp3DQPiBl+rLY/QoXvczYj99MFeHP63HaE4LkfpDUP4?=
 =?us-ascii?Q?EiffPxaXwjO/VO7TLc9zt7z8Q2JCkgLfxASEgMkS79PKbw2gguM4/AEP/pab?=
 =?us-ascii?Q?1BUestzqXQDPyy+5xX1NCSX4eQ3PIjCqsGcfQSq1h2dLLgBlQ5TUZAM8TVCG?=
 =?us-ascii?Q?7FNMb650Om/JpwmSiNr9bvUsPVbSZvYjAuAQxgy44QCRKmWypAhaVkjfpbH7?=
 =?us-ascii?Q?Ev5NuEiSxOx2Vw04lOq/Ie8cbqPDjnFCMGhlk5WUFTob6B+XItmd9Ie4VWCi?=
 =?us-ascii?Q?L3LzvmAWvjJBrnnjjHgeRgHUS2IlYXnpnDIkAM33d62ZKZJoX9h/Svo+tg8S?=
 =?us-ascii?Q?f7UR0byKUMajAfNnvAp7zluXfXvLoqIR3lPlR5iWBVCYjVGRjCicRvLtnRF8?=
 =?us-ascii?Q?M61u+nngnWNUL5NIFohuJQjio+41SDMOO2hoo/lwMVC0Xwuf37hAYJw6fyRz?=
 =?us-ascii?Q?+hFqtUbayswkes8jzZlW+xczedFutxAi9OTdzI8XY+8x2VxDcpc0j+v+/NBR?=
 =?us-ascii?Q?SrL1Lvmh1QWUAFW/q5bfEwqrUdOPoXNQjiC9+PUs2NguzJz8oadHqeyYx/6i?=
 =?us-ascii?Q?TY8iAl0M7zdj79VgH9eAZINAqzcimLznqrK0lp5TpGrtv/pDNhX2YyOgzXrN?=
 =?us-ascii?Q?ciqUK0Nj7jQ0ngI1W5OyGEVUMIScQmwWYvAOHuJlfo11BwBblXfO/2VDLfuu?=
 =?us-ascii?Q?sqRcgiqLPMBE7vvzVhFb6ekDBOmHvVKVdeLpNNcJl4yD5STQB+4Zv8vNaV56?=
 =?us-ascii?Q?pe8LfXPYlSyuFQNQOv0r4L/sTyYItEWTZFpai1bcml1kTw0XFOZ8p33pDqGI?=
 =?us-ascii?Q?bYRQnI6xOlpaA5VNEVBvuOcS2TAwaEbj1W620h/bWTWMmw/OkVQ3iCBAbyVR?=
 =?us-ascii?Q?qBOixgGk7WC35hdNVB9ejGlJNEp21bIO/w0G/8GrHfYmif4+Iybijimc8DRx?=
 =?us-ascii?Q?/yaPYTIH3dN0WlxnngTfHtzOstj5ig=3D=3D?=
MIME-Version: 1.0



Nexigen Digital logo    

Bradley Silverman
*Head of Infrastructure*
m: +61 418 641 103 <tel:+61418641103>



On Mon, 4 Dec 2023 at 18:17, Grant Gordon via mailop <[email protected]> wrote:

    Hi Robert,

    It's enough that the domain name appears in the server name of one of
    the Recieved headers.

    On 2023/12/02 20:04, Robert L Mathews via mailop wrote:
    > On Nov 30, 2023, at 7:47 PM, Angelo Giuffrida via mailop
    <[email protected]> wrote:
    >> the only reference to the server is in the email header
    > This is unclear, to me at least. Which header? Is it being used
    as the envelope sender MAIL FROM domain name?
    >
    > If you used real domain names and gave copy-and-paste examples,
    people would be able to help more.
    >
    > —
    > Robert L Mathews
    > _______________________________________________
    > mailop mailing list
    > [email protected]
    > https://list.mailop.org/listinfo/mailop

    _______________________________________________
    mailop mailing list
    [email protected]
    https://list.mailop.org/listinfo/mailop


_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to