Re: [mailop] What is Yahoo TSS09 ?

[John Levine via mailop]

It appears that Farhad Hedayatifard via mailop  said:
>I had this happen with a new IP block a couple of weeks ago as well.

We're all set.  Whenever Yahoo sees mail from a block that's never been
announced before they assume that it's probably an abandoned block that's
been hijacked so they block it.  I can't blame them.

Once I told them, no it's just me and my user Bob, they fixed it and I can
see the mail queues are draining.

R's,
John
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Strange Behavior from Microsoft IP Address

[Mark Milhollan via mailop]

On Tue, 7 May 2024, Vitali Quiering wrote:

We've identified an IP address, notably tied to Microsoft 
(20.203.218.75), executing thousands of hits on our URLs almost 
immediately after dispatching a newsletter. However, the peculiar part 
is the variation in the hash segments they're accessing. The URL 
queries we've seen look something like 
https://sub.customerdomain.tld/info/Mjl2Y3N6ej, which, upon decoding, 
starts off with a familiar segment 29vcsz% but diverges significantly 
right after.


Microsoft performs link scanning.  This seems like they are attempting 
to check for mutated patterns as well, something like John the Ripper.



/mark
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Strange Behavior from Microsoft IP Address

[Atro Tossavainen via mailop]

> To give you a bit of context, we operate as an ESP, facilitating our 
> customers in sending out newsletters.

If you want anybody to have an opinion on this stuff why don't you
identify yourself, the domain names and the IPs involved.

-- 
Atro Tossavainen, Founder, Partner
Koli-Lõks OÜ (reg. no. 12815457, VAT ID EE101811635)
Tallinn, Estonia
tel. +372-5883-4269, https://www.koliloks.eu/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] eu tld have one ipv6 addr not listen to udp

[Marco Moock via mailop]

Am 07.05.2024 um 20:58:29 Uhr schrieb Benny Pedersen via mailop:

> ah now i remember it, its just dnswiz that see that problem, as i 
> remember its a route problem, but outside of dnswiz its works

Can you specify that more precisely, please?

-- 
Gruß
Marco

Send unsolicited bulk mail to 1715108309mu...@cartoonies.org
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] eu tld have one ipv6 addr not listen to udp

[Benny Pedersen via mailop]

Marco Moock via mailop skrev den 2024-05-07 20:24:

Am 07.05.2024 um 20:12:24 Uhr schrieb Benny Pedersen via mailop:


eu zone: The server(s) were not responsive to queries over UDP.
(2001:978:2:1::93:2)

why is it not resolved ?


Works for me, via TCP and UDP.
Maybe was a temporary issue.


ah now i remember it, its just dnswiz that see that problem, as i 
remember its a route problem, but outside of dnswiz its works


i just hope dnswiz solve there own problems


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] eu tld have one ipv6 addr not listen to udp

[Carsten Schiefner via mailop]

Benny -

On 07.05.2024 20:12, Benny Pedersen via mailop wrote:
eu zone: The server(s) were not responsive to queries over UDP. 
(2001:978:2:1::93:2)


why is it not resolved ?


I fail to see any mail ops related issue with this.

Or don't I and there simply isn't any?

Best,

-C.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] eu tld have one ipv6 addr not listen to udp

[Marco Moock via mailop]

Am 07.05.2024 um 20:12:24 Uhr schrieb Benny Pedersen via mailop:

> eu zone: The server(s) were not responsive to queries over UDP. 
> (2001:978:2:1::93:2)
> 
> why is it not resolved ?

Works for me, via TCP and UDP.
Maybe was a temporary issue.

-- 
kind regards
Marco
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] eu tld have one ipv6 addr not listen to udp

[Benny Pedersen via mailop]

eu zone: The server(s) were not responsive to queries over UDP. 
(2001:978:2:1::93:2)


why is it not resolved ?

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Microsoft outages?

[Frost The Fox via mailop]

Everything looks fine from our end on the US east coast, sending to
outlook.com & european TLD variants.

On Tue, May 7, 2024 at 1:29 PM Jarland Donnell via mailop 
wrote:

> Hoping it’s not just me, looking for a sanity check. Our queues today
> are packed with these responses from Microsoft’s mail servers:
>
> 451 4.7.500 Server busy. Please try again later
>
> Hoping, surely, it’s not that they’re deferring email from us and just
> experiencing normal issues.
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Microsoft outages?

[Mark Fletcher via mailop]

On Tue, May 7, 2024 at 10:29 AM Jarland Donnell via mailop <
mailop@mailop.org> wrote:

> Hoping it’s not just me, looking for a sanity check. Our queues today
> are packed with these responses from Microsoft’s mail servers:
>
> 451 4.7.500 Server busy. Please try again later
>
> We are not seeing that error and are not having any issues delivering to
outlook/hotmail/msn at the moment.

Cheers,
Mark
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Microsoft outages?

[Jarland Donnell via mailop]

Hoping it’s not just me, looking for a sanity check. Our queues today 
are packed with these responses from Microsoft’s mail servers:


451 4.7.500 Server busy. Please try again later

Hoping, surely, it’s not that they’re deferring email from us and just 
experiencing normal issues.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Doesn't ARC substitute DKIM at Gmail inbound?

[Alessandro Vesely via mailop]

On Mon 06/May/2024 19:00:24 +0200 Brandon Long wrote:

On Mon, May 6, 2024 at 12:41 AM Alessandro Vesely via mailop 
 wrote:

The question is, since Gmail seems to require a DKIM signature just to 
make sure some domain is responsible for the message, doesn't an ARC seal 
cover the same requirement? >

[...]

The challenge with Gmail's new rules and forwarding is that they want you to 
provide an authentication signal (spf or dkim), but you also don't really 
know what you're sending, so doing so can result in a negative effect on 
your reputation.  How to square that circle is left as an exercise to the 
reader.  DKIM signing or using SPF would potentially solve that.


Fair enough, thank you.  I replace the bounce address (because in case of 
problems I need to inform the recipient rather than the author) so they're 
authenticated, albeit unwillingly and unaligned.


For reputation, I skip forwarding messages with SA score >= 9.

ARC seems to be a useless exercise, for the time being.


The flip-side is if the Gmail "dkim required for major senders" message 
could be talking about the actual source before forwarding, in which case 
adding dkim or spf at the forwarder won't help.  The request then is more 
like DMARC, looking for some level of alignment between the source and 
authentication.  ARC was designed to help for that case, assuming the 
message was DKIM signed in by the sender in the first place. Unfortunately, 
one of the reasons that ARC is experimental is that solving the "trust" part 
on forwarding is non-trivial well, sorta, explicit opt-in of forwarders 
would work fine.  In the case of someone forwarding their mailbox from a to 
b, having that specific account say "I'm forwarding from A, accept forwarded 
mail from them" would solve the issue,at the challenge of requiring user 
opt-in.



Yeah, I briefly discussed with your colleague Wei Chuang about experimenting 
that way to fix forwarding...  But that's another topic.



Best
Ale
--





___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Strange Behavior from Microsoft IP Address

[Vitali Quiering via mailop]

Hello everyone,

I hope you're all doing well! I'm reaching out to the community because we've 
encountered some weird behavior from a source connected to Microsoft, and 
despite our attempts, haven't yet received an explanation from their end. I'm 
curious if anyone here, perhaps from Microsoft or those with similar 
experiences, might shed some light on this matter.

To give you a bit of context, we operate as an ESP, facilitating our customers 
in sending out newsletters. Each email includes tracking URLs with unique 
hashes for analytics. For instance, a typical URL hash on our end appears as 
follows: https://sub.customerdomain.tld/info/29vcszz10k40z1y0c2yqz3.

We've identified an IP address, notably tied to Microsoft (20.203.218.75), 
executing thousands of hits on our URLs almost immediately after dispatching a 
newsletter. However, the peculiar part is the variation in the hash segments 
they're accessing. The URL queries we've seen look something like 
https://sub.customerdomain.tld/info/Mjl2Y3N6ej, which, upon decoding, starts 
off with a familiar segment 29vcsz% but diverges significantly right after.

This pattern strikes us as odd and raises questions regarding the nature of 
these requests. Has anyone observed similar traffic patterns, or can anyone 
from Microsoft provide some clarity on these unusually patterned requests?

Thanks a lot for your time!

Best,
Vitali
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] [E] What is Yahoo TSS09 ?

[Lili Crowley via mailop]

Please contact me off list. thanks!

*Lili Crowley*

she/her

Postmaster








On Mon, May 6, 2024 at 11:48 PM John Levine via mailop 
wrote:

> I am moving my servers to new IP addresses, which is always fun. The
> new block is 192.55.226/24 which was allocated in 1989 and has never
> been live until this week.
>
> So here's what AOL says to innocuous messagee from my users.
>
>  553 5.7.2 [TSS09] All messages from 192.55.226.66 will be permanently
> deferred; Retrying will NOT succeed.
>
> I presume it has something to do with it being a hitherto unseen IP range
>
> The volume is quite low, maybe 200 messages a day including from my
> mailing lists, and does not look spammy. The highest volume list is
> gossip about folk dancing.
>
> Any suggestions?
>
> R's,
> John
>
>
>
> ___
> mailop mailing list
> mailop@mailop.org
>
> https://urldefense.com/v3/__https://list.mailop.org/listinfo/mailop__;!!Op6eflyXZCqGR5I!FzlxEwFGcNfg2EL37uu2cHwjnh0qeKZVclYM7pxi0x3ev2KuQZpLcXumaqZzk7imhp4gLzdyZkpEQYgJkyc$
>
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] What is Yahoo TSS09 ?

[Farhad Hedayatifard via mailop]

I had this happen with a new IP block a couple of weeks ago as well.
Sign up for the Yahoo! Complaint Feedback Loop on
https://senders.yahooinc.com/ and then contact them about your specific
problem using this form https://senders.yahooinc.com/contact/. I guess
you can skip the CFL registration, but from what I've heard having
registered for it will improve your reputation with Yahoo!

They asked a few questions and fixed the problem for my IP block in 3-4
days.

Best,
Farhad


On Mon, 2024-05-06 at 23:43 -0400, John Levine via mailop wrote:
> I am moving my servers to new IP addresses, which is always fun. The
> new block is 192.55.226/24 which was allocated in 1989 and has never
> been live until this week.
> 
> So here's what AOL says to innocuous messagee from my users.
> 
>  553 5.7.2 [TSS09] All messages from 192.55.226.66 will be
> permanently deferred; Retrying will NOT succeed.
> 
> I presume it has something to do with it being a hitherto unseen IP
> range
> 
> The volume is quite low, maybe 200 messages a day including from my
> mailing lists, and does not look spammy. The highest volume list is
> gossip about folk dancing.
> 
> Any suggestions?
> 
> R's,
> John
> 
> 
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop