[mailop] Ask for commercial smtp gateway

[Corey H via mailop]

Hello gurus,

Besides pobox.com and dnsexit.com, do you know any good smtp gateway for 
relaying out my messages? daily sending amount is about 3k ~ 5k (just 
legit messages).


the two I mentioned are not bad, but they have small limits on sending 
amount.


other relays I have tried include smtp2go and sendinblue. These two seem 
to work for bulk sending purpose. They will modify the headers for 
better delivery. For example, smtp2go will change the return-path 
address to a subdomain of the domain. And sendinblue will replace sender 
address with their address totally.


I expect it should be a pure smtp relay, change nothing in headers. We 
can pay for it.


Thanks.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] query for black listed domains

[Corey H via mailop]

On 2024-09-08 05:55, Marco Moock wrote:

Am Sun, 08 Sep 2024 00:57:18 +0200
schrieb Corey H via mailop :


I queried black listed IP on the site of
https://mxtoolbox.com/blacklists.aspx which checks a lot of RBL 
sources

for listing that IP.

For querying black listed domain (for example, my sender domain), do
you know which site is the good one?


https://blacklistalert.org/

offers that.


That's right. Thank you.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] query for black listed domains

[Corey H via mailop]

Hello

I queried black listed IP on the site of 
https://mxtoolbox.com/blacklists.aspx which checks a lot of RBL sources 
for listing that IP.


For querying black listed domain (for example, my sender domain), do you 
know which site is the good one?


Thanks.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Sisimai for analysis of bounce reasons

[H via mailop]

On 07/20/2023 03:17 AM, Lilium via mailop wrote:
>
>
> On 20/07/2023 03:50, H via mailop wrote:
>> On July 18, 2023 1:33:20 PM EDT, Lilium via mailop  wrote:
>>>
>>> This solution is based on Sisimai:
>>> https://realsender.com/for-email-broadcasters/bouncehandler-app/
>>>
>>> It helped a few customers with deliverability issues due to
>>> wrong/inactive recipients in their lists.
>>>
>>> The article "how to handle BOUNCED EMAILS" is a summary of our
>>> experience on this matter:
>>> https://realsender.com/email-trends/2021-how-to-handle-bounced-emails/
>>>
>>> Andrea
>>>
>>>
>>> On 17/07/2023 03:47, H via mailop wrote:
>>>> Is anyone using sisimai to analyze email bounces? I have just began
>>> using it and am interested in sharing experiences etc. as I have not
>>> found any user mailing list or forum on the net (there is commercial
>>> support though.)
>>>>
>>>> ___
>>>> mailop mailing list
>>>> mailop@mailop.org
>>>> https://list.mailop.org/listinfo/mailop
>>>>
>>> ___
>>> mailop mailing list
>>> mailop@mailop.org
>>> https://list.mailop.org/listinfo/mailop
>>
>> Thank you for the links. After letting Sinai extract the bounce information, 
>> I import it into a database for further analysis of the bounce reasons.
>>
>> The two biggest issues analyzing bounces are:
>> - The information returned by different mail handlers is not standardized.
>> - Many bounces are classified as ”undefined” which I have to dig into 
>> further. One reason could be - have not checked this yet - that some mail 
>> handlers may return information in a language different than English and 
>> some return information in English. Our campaigns are in a non-English 
>> speaking country.
>>
>> Do you have any experience with the latter?
>> ___
>
> I haven't made any change in the application settings.
> In RealSender configuration the "undefined" errors are skipped.
>
> If you look at the Github releases page:
> https://github.com/sisimai/p5-sisimai/releases
>
> There are changes like this one, maybe you can find some hints there:
> FrancePTT : add laposte lpn code #441
> https://github.com/sisimai/p5-sisimai/pull/441
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

The accuracy of the Sisimai bounce reasons might depend on where you are 
located geographically and which specific mail handlers are involved. It looks 
like the software is developed in Japan and therefore might handle bounces from 
Japanese mail handlers most accurately.

Looking at a few of the several thousand bounces I have collected, I found that 
the bounce information is not correct, replycode is missing, diagnosticcode is 
missing, rhost is not correct and reason becomes undefined. It is hard to do a 
reliable analysis given this. Hardbounces due to mailboxes missing seems to 
work but that is only a small part of an analysis.

Presumably adding parsing engines for more mail handlers would improve this and 
I have sent an email via their website.


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] !! Sisimai for analysis of bounce reasons

[H via mailop]

On July 18, 2023 1:33:20 PM EDT, Lilium via mailop  wrote:
>
>This solution is based on Sisimai:
>https://realsender.com/for-email-broadcasters/bouncehandler-app/
>
>It helped a few customers with deliverability issues due to 
>wrong/inactive recipients in their lists.
>
>The article "how to handle BOUNCED EMAILS" is a summary of our 
>experience on this matter:
>https://realsender.com/email-trends/2021-how-to-handle-bounced-emails/
>
>Andrea
>
>
>On 17/07/2023 03:47, H via mailop wrote:
>> Is anyone using sisimai to analyze email bounces? I have just began
>using it and am interested in sharing experiences etc. as I have not
>found any user mailing list or forum on the net (there is commercial
>support though.)
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://list.mailop.org/listinfo/mailop
>> 
>___
>mailop mailing list
>mailop@mailop.org
>https://list.mailop.org/listinfo/mailop

Thank you for the links. After letting Sinai extract the bounce information, I 
import it into a database for further analysis of the bounce reasons.

The two biggest issues analyzing bounces are:
- The information returned by different mail handlers is not standardized.
- Many bounces are classified as ”undefined” which I have to dig into further. 
One reason could be - have not checked this yet - that some mail handlers may 
return information in a language different than English and some return 
information in English. Our campaigns are in a non-English speaking country.

Do you have any experience with the latter?
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Sisimai for analysis of bounce reasons

[H via mailop]

Is anyone using sisimai to analyze email bounces? I have just began using it 
and am interested in sharing experiences etc. as I have not found any user 
mailing list or forum on the net (there is commercial support though.)

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] New to mass mailings

[H via mailop]

On 05/08/2023 03:57 AM, Dan Malm via mailop wrote:
> On 5/6/23 17:28, H via mailop wrote:
>> I am new to doing mass mailings to customers and leads - not spam - and am 
>> looking for some introduction how to interpret different types of rejection 
>> messages so we can improve our success rate etc.
>
> Many mailbox providers do at least some things "their own way" so there's no 
> catch-all one-stop for all messages and codes. But a good start for what the 
> different status codes (should) mean is 
> https://www.iana.org/assignments/smtp-enhanced-status-codes/smtp-enhanced-status-codes.xhtml
Thank you.
>
>> SMTP error from remote server for RCPT TO command, host: 
>> xxx.mail.protection.outlook.com (104.47.51.202) reason: 550 5.7.1 Service 
>> unavailable, Client host [74.208.4.197] blocked using Customer Block list 
>> AS(1420) [AM7EUR03FT040.eop-EUR03.prod.protection.outlook.com 
>> 2023-05-05T06:31:14.035Z 08DB4D3079BE1687]
>
> That IP is in at least 15 blacklists: 
> https://multirbl.valli.org/lookup/74.208.4.197.html
mxtoolbox. com only reports one, ZapBL. The link above did not list it on ZapBL 
but on 15 other lists, none that seems recognizable to me (for whatever that is 
worth). I could not find outlook, o365 or microsoft on that list though. It 
seems multirbl.valli.org is a better site to use for blacklisting checks than 
is mxtoolbox.com.
>
> As others have said: If you share your outbound IP with others you share your 
> IP reputation with others. So you will get penalized because your neighbors 
> are spammers. Self hosting is not necessarily the cure for this though as 
> (especially with the "too big to fail" crowd) there might instead be 
> _too_few_ mails coming from your IP to build a reputation which might impact 
> your deliverability to inbox.
>
Understood.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] New to mass mailings

[H via mailop]

On 05/07/2023 12:11 PM, Al Iverson via mailop wrote:
> Here's my Microsoft Deliverability Guide, recently updated:
> https://www.spamresource.com/2023/04/isp-deliverability-guide-microsoft-olc.html
>
> The company I work for, we provide deliverability monitoring software
> and consulting services. Feel free to reach out if either interest
> you. Work email: al AT kickbox.com
> You can probably figure out the website from that, if you want to
> check it out yourself. :)
>
> Cheers,
> Al Iversion
>
Thank you, I'll begin by reviewing the guide you linked to.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] New to mass mailings

[H via mailop]

On 05/06/2023 11:50 PM, Atro Tossavainen via mailop wrote:
>> Understood. We plan to change the setup over the summer but until then we 
>> have to work with what we have. When we change we will probably set up our 
>> own postfix server for mail handling.
> As far as I can tell it's about a two hour job to do the latter.
>
>> I should have added that our future "mass mailings" would be around 1000 
>> emails per week or every two weeks, iow, not too much.
> What I said is not about your proposed activities but the fact that
> you're planning to share the reputation of your sendouts with that of
> any number of other Ionos customers.
>
>> I did check the Ionos sending IP address on a couple of websites, including 
>> mxtoolbox.com, and it is not listed.
> Good for you. That may change at any time for reasons that have nothing
> to do with you, and where the fix is also something you have no control
> over. My €.02 is biting the bullet and deploying your own server PDQ.
> It also makes it possible for you to do the DKIM signing you mentioned.
>
You are right and I agree. We'll look into get postfix up and running on our 
own server ASAP. Two hours might be an understatement, however... :-)

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] New to mass mailings

[H via mailop]

On 05/06/2023 07:49 PM, H wrote:
> On 05/06/2023 03:24 PM, Atro Tossavainen via mailop wrote:
>>> We are mailing from our own CRM system but using Ionos (1and1.com) as our 
>>> mail service.
>> You're setting yourselves up to fail by mailing out of a server shared
>> by thousands of other customers. The error messages you quote testify
>> to that. Don't do it.
>>
> Understood. We plan to change the setup over the summer but until then we 
> have to work with what we have. When we change we will probably set up our 
> own postfix server for mail handling. I should have added that our future 
> "mass mailings" would be around 1000 emails per week or every two weeks, iow, 
> not too much.
>
> I did check the Ionos sending IP address on a couple of websites, including 
> mxtoolbox.com, and it is not listed.
>
I found this site 
https://learn.microsoft.com/en-us/exchange/troubleshoot/email-delivery/ndr/non-delivery-reports-in-exchange-online
 which I hope will help me interpreting the various responses.

Most immediate, of course, is to remove non-existing mailboxes. Sisimai - 
https://libsisimai.org/ - seems like a useful utility to parse bounced email 
messages. Is anyone on the list using it?

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] New to mass mailings

[H via mailop]

On 05/06/2023 03:24 PM, Atro Tossavainen via mailop wrote:
>> We are mailing from our own CRM system but using Ionos (1and1.com) as our 
>> mail service.
> You're setting yourselves up to fail by mailing out of a server shared
> by thousands of other customers. The error messages you quote testify
> to that. Don't do it.
>
Understood. We plan to change the setup over the summer but until then we have 
to work with what we have. When we change we will probably set up our own 
postfix server for mail handling. I should have added that our future "mass 
mailings" would be around 1000 emails per week or every two weeks, iow, not too 
much.

I did check the Ionos sending IP address on a couple of websites, including 
mxtoolbox.com, and it is not listed.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] New to mass mailings

[H via mailop]

On 05/06/2023 02:17 PM, Dan Lester wrote:
> You might want to explore the extent to which ionas might be sending these 
> out with IPs that are spam blacklisted. I just fought off a similar issue 
> with Sender, because they did assign me such an IP. I've also always 
> suspected that IPs are blocked not because they are currently blacklisted, 
> but because they have some history of blacklisting. My understanding is that 
> Microsoft is especially fierce about such things.
>
>
> On 5/6/23 10:28 AM, H via mailop wrote:
>>
>> I am new to doing mass mailings to customers and leads - not spam - and am 
>> looking for some introduction how to interpret different types of rejection 
>> messages so we can improve our success rate etc.
>>
>> We are mailing from our own CRM system but using Ionos (1and1.com) as our 
>> mail service. I have set up SPF and DMARC but it is not possible to have 
>> DKIM signature with Ionos.
>>
>> Our recent mailing this week resulted in a bunch of rejection messages from 
>> outlook.com and later some rejections from mimecast that apparently some 
>> customers use for their mail handling.
>>
>> Two examples from outlook.com are (recipient xxxed out):
>>
>> SMTP error from remote server for RCPT TO command, host: 
>> xxx.mail.protection.outlook.com (104.47.51.202) reason: 550 5.7.1 Service 
>> unavailable, Client host [74.208.4.197] blocked using Customer Block list 
>> AS(1420) [AM7EUR03FT040.eop-EUR03.prod.protection.outlook.com 
>> 2023-05-05T06:31:14.035Z 08DB4D3079BE1687]
>>
>> and
>>
>> SMTP error from remote server for RCPT TO command, host: 
>> xxx.mail.protection.outlook.com (104.47.12.36) reason: 550 5.4.1 Recipient 
>> address rejected: Access denied. AS(201806281) 
>> [DB3EUR04FT050.eop-eur04.prod.protection.outlook.com 2023-05-05T06:31:00.028Z
>>
>> Example from mimecast (recipient xxxed out):
>>
>> Generating server: PAWPR05MB10142.eurprd05.prod.outlook.com
>>
>> *Diagnostic information for administrators:*
>>
>> x...@xxx.tld
>>
>> Receiving server: PAWPR05MB10142.eurprd05.prod.outlook.com
>>
>> 5/6/2023 2:39:35 AM - Server at PAWPR05MB10142.eurprd05.prod.outlook.com 
>> returned '550 5.4.316 Message expired, connection refused(Socket error code 
>> 10061)' 5/6/2023 2:30:01 AM - Server at edge.xxx.tld (104.18.43.156) 
>> returned '450 4.4.316 Connection refused [Message=Socket error code 10061] 
>> [LastAttemptedServerName=edge.xxx.tld] [LastAttemptedIP=104.18.43.156:25] 
>> [SmtpSecurity=-2;-2] [AM6EUR05FT032.eop-eur05.prod.protection.outlook.com 
>> 2023-05-06T02:30:01.780Z 08DB4DA7E366A32E](Socket error code 10061)'
>>
>> In order to improve delivery success rate after cleaning up old information 
>> in the CRM, I need to learn how to better interpret information like above.
>>
>> With the above said, the first kind of message from outlook.com seems to 
>> indicate we are on some kind of blacklist but what does the second 
>> outlook.com message tell me? That the recipeint is no longer with the 
>> company? Or something else?
>>
>> Thank you.
>>
>>
>>
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://list.mailop.org/listinfo/mailop
>
I just checked the Ionos IP address used for sending and it is not listed on 
any blacklists according to mxtoolbox.com and a couple of other sites. I also 
visited sender.office.com which prompted me to enter my email address and the 
IP address for delisting - it did not tell me if it was blacklisted or not 
though. Once submitted I received an email link which when clicked told me that 
my request to have it delisted was denied and did I want to escalate it. I 
confirmed so let‘s see.

It seems you are correct, outlook.com has a more aggressive blacklisting list.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] New to mass mailings

[H via mailop]

I am new to doing mass mailings to customers and leads - not spam - and am 
looking for some introduction how to interpret different types of rejection 
messages so we can improve our success rate etc.

We are mailing from our own CRM system but using Ionos (1and1.com) as our mail 
service. I have set up SPF and DMARC but it is not possible to have DKIM 
signature with Ionos.

Our recent mailing this week resulted in a bunch of rejection messages from 
outlook.com and later some rejections from mimecast that apparently some 
customers use for their mail handling.

Two examples from outlook.com are (recipient xxxed out):

SMTP error from remote server for RCPT TO command, host: 
xxx.mail.protection.outlook.com (104.47.51.202) reason: 550 5.7.1 Service 
unavailable, Client host [74.208.4.197] blocked using Customer Block list 
AS(1420) [AM7EUR03FT040.eop-EUR03.prod.protection.outlook.com 
2023-05-05T06:31:14.035Z 08DB4D3079BE1687]

and

SMTP error from remote server for RCPT TO command, host: 
xxx.mail.protection.outlook.com (104.47.12.36) reason: 550 5.4.1 Recipient 
address rejected: Access denied. AS(201806281) 
[DB3EUR04FT050.eop-eur04.prod.protection.outlook.com 2023-05-05T06:31:00.028Z

Example from mimecast (recipient xxxed out):

Generating server: PAWPR05MB10142.eurprd05.prod.outlook.com

*Diagnostic information for administrators:*

x...@xxx.tld

Receiving server: PAWPR05MB10142.eurprd05.prod.outlook.com

5/6/2023 2:39:35 AM - Server at PAWPR05MB10142.eurprd05.prod.outlook.com 
returned '550 5.4.316 Message expired, connection refused(Socket error code 
10061)' 5/6/2023 2:30:01 AM - Server at edge.xxx.tld (104.18.43.156) returned 
'450 4.4.316 Connection refused [Message=Socket error code 10061] 
[LastAttemptedServerName=edge.xxx.tld] [LastAttemptedIP=104.18.43.156:25] 
[SmtpSecurity=-2;-2] [AM6EUR05FT032.eop-eur05.prod.protection.outlook.com 
2023-05-06T02:30:01.780Z 08DB4DA7E366A32E](Socket error code 10061)'

In order to improve delivery success rate after cleaning up old information in 
the CRM, I need to learn how to better interpret information like above.

With the above said, the first kind of message from outlook.com seems to 
indicate we are on some kind of blacklist but what does the second outlook.com 
message tell me? That the recipeint is no longer with the company? Or something 
else?

Thank you.


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM record IONOS

[H via mailop]

On February 18, 2023 9:08:40 AM EST, Mark Alley via mailop  
wrote:
>On 2/17/2023 9:27 PM, H wrote:
>> On February 16, 2023 8:57:49 PM EST, Mark Alley via
>mailop  wrote:
>>> As long as the organizational domain you want reports for is the
>same
>>> as
>>> you have published in the DMARC RUA/RUF "mailto" tags, then no, you
>do
>>> not
>>> need it to be able to receive said reports.
>>> 
>>> - Mark Alley
>>> 
>>> On Thu, Feb 16, 2023, 7:47 PM H  wrote:
>>> 
>>>> On February 16, 2023 6:37:42 PM EST, Mark Alley via mailop <
>>>> mailop@mailop.org> wrote:
>>>>> You only need to create that record if you are sending the
>>>>> aggregate/failure reports for a particular domain that is
>different
>>>>> from
>>>>> the one the reports are actually on behalf of.
>>>>> 
>>>>> So for example, if you owned domain1.com and wanted to send
>RUA/RUF
>>>>> reports
>>>>> for domain1.com to a mailbox at domain2.com (assuming you own
>>> domain2),
>>>>> you
>>>>> would need to create the TXT record in domain2 -
>>>>> "domain1.com._report._
>>>>> dmarc.domain2.com" IN TXT "v=DMARC1;"
>>>>> 
>>>>> If you're using an external third party for report analysis,
>usually
>>>>> they
>>>>> have a wildcard published in their DNS for this "_report._dmarc"
>>>>> subdomain,
>>>>> so you don't have to worry about it in that case.
>>>>> 
>>>>> 
>>>>> - Mark Alley
>>>>> 
>>>>> 
>>>>> On Thu, Feb 16, 2023, 4:14 PM H via mailop
>>> wrote:
>>>>>> On 02/11/2023 07:42 PM, H wrote:
>>>>>> 
>>>>>> On 02/11/2023 01:55 AM, Gellner, Oliver via mailop wrote:
>>>>>> 
>>>>>> 
>>>>>> On 2023-02-11 02:51 H via mailop wrote:
>>>>>> 
>>>>>> 
>>>>>> On 02/10/2023 10:13 AM, Gellner, Oliver via mailop wrote:
>>>>>> 
>>>>>> On 2023-02-10 04:08, H via mailop wrote:
>>>>>> 
>>>>>> I now did find that resource but it is written as general
>>> information
>>>>> and does not really tell how to get it going with IONOS if they
>run
>>> the
>>>>> email server...
>>>>>> As far as I understood you not only use Ionos as your registrar,
>>> but
>>>>> also use their email server to send your email through. Ionos does
>>> not
>>>>> DKIM sign emails on behalf of its customers, at least they didn't
>do
>>> so
>>>>> in the past. So the answer is simple: You do not set up DKIM or
>>> DMARC
>>>>> at all, because you can't.
>>>>>> The instructions given by Ionos are only valid if your email is
>>> sent
>>>>> and signed by some other server and you want to add the DKIM
>public
>>> key
>>>>> to your domain hosted at Ionos.
>>>>>> --
>>>>>> BR Oliver
>>>>>> 
>>>>>> Thank you, you are starting with the first issue, ie whether I
>can
>>>>> even
>>>>>> have a DKIM record given that the domain is hosted by Ionos as is
>>> the
>>>>> mail
>>>>>> server. Upon my additional research I have come to the same
>>>>> conclusion as
>>>>>> you, ie not possible.
>>>>>> 
>>>>>> By the way, I stumbled across this posting on the net -
>>>>>> 
>>>
>https://serverfault.com/questions/1030262/record-dkim-on-ionos-makes-sense
>>>>>> - that as far as I can tell is still true.
>>>>>> 
>>>>>> So, I will now look at creating a DMARC record given that I have
>>>>>> previously created a SPF record and will not be able to have a
>>> DKIM
>>>>> record.
>>>>>> I recommend against setting up a DMARC record with a policy of
>>>>> quarantine
>>>>>> or reject as long as DKIM signing isn‘t in place. The SPF
>>>>> authentication
>>>>>> will break for all forwarded messages as well as for all
>automatic
>>>>> replies
>>>>>> or non-

Re: [mailop] DKIM record IONOS

[H via mailop]

On February 16, 2023 8:57:49 PM EST, Mark Alley via mailop  
wrote:
>As long as the organizational domain you want reports for is the same
>as
>you have published in the DMARC RUA/RUF "mailto" tags, then no, you do
>not
>need it to be able to receive said reports.
>
>- Mark Alley
>
>On Thu, Feb 16, 2023, 7:47 PM H  wrote:
>
>> On February 16, 2023 6:37:42 PM EST, Mark Alley via mailop <
>> mailop@mailop.org> wrote:
>> >You only need to create that record if you are sending the
>> >aggregate/failure reports for a particular domain that is different
>> >from
>> >the one the reports are actually on behalf of.
>> >
>> >So for example, if you owned domain1.com and wanted to send RUA/RUF
>> >reports
>> >for domain1.com to a mailbox at domain2.com (assuming you own
>domain2),
>> >you
>> >would need to create the TXT record in domain2 -
>> >"domain1.com._report._
>> >dmarc.domain2.com" IN TXT "v=DMARC1;"
>> >
>> >If you're using an external third party for report analysis, usually
>> >they
>> >have a wildcard published in their DNS for this "_report._dmarc"
>> >subdomain,
>> >so you don't have to worry about it in that case.
>> >
>> >
>> >- Mark Alley
>> >
>> >
>> >On Thu, Feb 16, 2023, 4:14 PM H via mailop 
>wrote:
>> >
>> >> On 02/11/2023 07:42 PM, H wrote:
>> >>
>> >> On 02/11/2023 01:55 AM, Gellner, Oliver via mailop wrote:
>> >>
>> >>
>> >> On 2023-02-11 02:51 H via mailop wrote:
>> >>
>> >> 
>> >> On 02/10/2023 10:13 AM, Gellner, Oliver via mailop wrote:
>> >>
>> >> On 2023-02-10 04:08, H via mailop wrote:
>> >>
>> >> I now did find that resource but it is written as general
>information
>> >and does not really tell how to get it going with IONOS if they run
>the
>> >email server...
>> >>
>> >> As far as I understood you not only use Ionos as your registrar,
>but
>> >also use their email server to send your email through. Ionos does
>not
>> >DKIM sign emails on behalf of its customers, at least they didn't do
>so
>> >in the past. So the answer is simple: You do not set up DKIM or
>DMARC
>> >at all, because you can't.
>> >> The instructions given by Ionos are only valid if your email is
>sent
>> >and signed by some other server and you want to add the DKIM public
>key
>> >to your domain hosted at Ionos.
>> >>
>> >> --
>> >> BR Oliver
>> >>
>> >> Thank you, you are starting with the first issue, ie whether I can
>> >even
>> >> have a DKIM record given that the domain is hosted by Ionos as is
>the
>> >mail
>> >> server. Upon my additional research I have come to the same
>> >conclusion as
>> >> you, ie not possible.
>> >>
>> >> By the way, I stumbled across this posting on the net -
>> >>
>> >
>>
>https://serverfault.com/questions/1030262/record-dkim-on-ionos-makes-sense
>> >> - that as far as I can tell is still true.
>> >>
>> >> So, I will now look at creating a DMARC record given that I have
>> >> previously created a SPF record and will not be able to have a
>DKIM
>> >record.
>> >>
>> >> I recommend against setting up a DMARC record with a policy of
>> >quarantine
>> >> or reject as long as DKIM signing isn‘t in place. The SPF
>> >authentication
>> >> will break for all forwarded messages as well as for all automatic
>> >replies
>> >> or non-delivery reports. It will do mire harm than good.
>> >> Of course if you‘re interested in the reporting you can create a
>> >DNARC
>> >> record with a none policy and only change that after you have
>moved
>> >to a
>> >> different email provider who supports DKIM.
>> >>
>> >> —
>> >> BR Oliver
>> >>
>> >> --
>> >> dmTECH GmbH
>> >> Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232
>Karlsruhe
>> >> Telefon 0721 5592-2500 Telefax 0721 5592-2777
>> >> dmt...@dm.de  * www.dmTECH.de <http://www.dmtech.de>
>> >> GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
>> >> Geschäftsführer: Christoph

Re: [mailop] DKIM record IONOS

[H via mailop]

On February 16, 2023 6:37:42 PM EST, Mark Alley via mailop  
wrote:
>You only need to create that record if you are sending the
>aggregate/failure reports for a particular domain that is different
>from
>the one the reports are actually on behalf of.
>
>So for example, if you owned domain1.com and wanted to send RUA/RUF
>reports
>for domain1.com to a mailbox at domain2.com (assuming you own domain2),
>you
>would need to create the TXT record in domain2 - 
>"domain1.com._report._
>dmarc.domain2.com" IN TXT "v=DMARC1;"
>
>If you're using an external third party for report analysis, usually
>they
>have a wildcard published in their DNS for this "_report._dmarc"
>subdomain,
>so you don't have to worry about it in that case.
>
>
>- Mark Alley
>
>
>On Thu, Feb 16, 2023, 4:14 PM H via mailop  wrote:
>
>> On 02/11/2023 07:42 PM, H wrote:
>>
>> On 02/11/2023 01:55 AM, Gellner, Oliver via mailop wrote:
>>
>>
>> On 2023-02-11 02:51 H via mailop wrote:
>>
>> 
>> On 02/10/2023 10:13 AM, Gellner, Oliver via mailop wrote:
>>
>> On 2023-02-10 04:08, H via mailop wrote:
>>
>> I now did find that resource but it is written as general information
>and does not really tell how to get it going with IONOS if they run the
>email server...
>>
>> As far as I understood you not only use Ionos as your registrar, but
>also use their email server to send your email through. Ionos does not
>DKIM sign emails on behalf of its customers, at least they didn't do so
>in the past. So the answer is simple: You do not set up DKIM or DMARC
>at all, because you can't.
>> The instructions given by Ionos are only valid if your email is sent
>and signed by some other server and you want to add the DKIM public key
>to your domain hosted at Ionos.
>>
>> --
>> BR Oliver
>>
>> Thank you, you are starting with the first issue, ie whether I can
>even
>> have a DKIM record given that the domain is hosted by Ionos as is the
>mail
>> server. Upon my additional research I have come to the same
>conclusion as
>> you, ie not possible.
>>
>> By the way, I stumbled across this posting on the net -
>>
>https://serverfault.com/questions/1030262/record-dkim-on-ionos-makes-sense
>> - that as far as I can tell is still true.
>>
>> So, I will now look at creating a DMARC record given that I have
>> previously created a SPF record and will not be able to have a DKIM
>record.
>>
>> I recommend against setting up a DMARC record with a policy of
>quarantine
>> or reject as long as DKIM signing isn‘t in place. The SPF
>authentication
>> will break for all forwarded messages as well as for all automatic
>replies
>> or non-delivery reports. It will do mire harm than good.
>> Of course if you‘re interested in the reporting you can create a
>DNARC
>> record with a none policy and only change that after you have moved
>to a
>> different email provider who supports DKIM.
>>
>> —
>> BR Oliver
>>
>> --
>> dmTECH GmbH
>> Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232 Karlsruhe
>> Telefon 0721 5592-2500 Telefax 0721 5592-2777
>> dmt...@dm.de  * www.dmTECH.de <http://www.dmtech.de>
>> GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
>> Geschäftsführer: Christoph Werner, Martin Dallmeier, Roman Melcher
>> --
>> Datenschutzrechtliche Informationen
>> Wenn Sie mit uns in Kontakt treten, beispielsweise wenn Sie an unser
>> ServiceCenter Fragen haben, bei uns einkaufen oder unser dialogicum
>in
>> Karlsruhe besuchen, mit uns in einer geschäftlichen Verbindung stehen
>oder
>> sich bei uns bewerben, verarbeiten wir personenbezogene Daten.
>> Informationen unter anderem zu den konkreten Datenverarbeitungen,
>> Löschfristen, Ihren Rechten sowie die Kontaktdaten unserer
>> Datenschutzbeauftragten finden Sie hier
>>
><https://www.dm.de/datenschutzerklaerung-kommunikation-mit-externen-493832>
>> .
>>
>>
>> ___
>> mailop mailing
>listmailop@mailop.orghttps://list.mailop.org/listinfo/mailop
>>
>> I see. As I am sure everyone has noticed, I am a complete newbie to
>> SPF/DKIM/DMARC (and a lot of other things.)
>>
>> Understanding your message, creating a DMARC with "none" policy would
>not
>> have any downside? When you say "reporting", what type of reporting
>would
>> that be and how could I benefit from such reporting?
>&

Re: [mailop] DKIM record IONOS

[H via mailop]

On 02/11/2023 07:42 PM, H wrote:
> On 02/11/2023 01:55 AM, Gellner, Oliver via mailop wrote:
>>
>>> On 2023-02-11 02:51 H via mailop wrote:
>>>
>>> 
>>> On 02/10/2023 10:13 AM, Gellner, Oliver via mailop wrote:
>>>> On 2023-02-10 04:08, H via mailop wrote:
>>>>> I now did find that resource but it is written as general information and 
>>>>> does not really tell how to get it going with IONOS if they run the email 
>>>>> server...
>>>> As far as I understood you not only use Ionos as your registrar, but also 
>>>> use their email server to send your email through. Ionos does not DKIM 
>>>> sign emails on behalf of its customers, at least they didn't do so in the 
>>>> past. So the answer is simple: You do not set up DKIM or DMARC at all, 
>>>> because you can't.
>>>> The instructions given by Ionos are only valid if your email is sent and 
>>>> signed by some other server and you want to add the DKIM public key to 
>>>> your domain hosted at Ionos.
>>>>
>>>> --
>>>> BR Oliver
>>>
>>> Thank you, you are starting with the first issue, ie whether I can even 
>>> have a DKIM record given that the domain is hosted by Ionos as is the mail 
>>> server. Upon my additional research I have come to the same conclusion as 
>>> you, ie not possible.
>>>
>>> By the way, I stumbled across this posting on the net - 
>>> https://serverfault.com/questions/1030262/record-dkim-on-ionos-makes-sense 
>>> - that as far as I can tell is still true.
>>>
>>> So, I will now look at creating a DMARC record given that I have previously 
>>> created a SPF record and will not be able to have a DKIM record.
>>>
>> I recommend against setting up a DMARC record with a policy of quarantine or 
>> reject as long as DKIM signing isn‘t in place. The SPF authentication will 
>> break for all forwarded messages as well as for all automatic replies or 
>> non-delivery reports. It will do mire harm than good.
>> Of course if you‘re interested in the reporting you can create a DNARC 
>> record with a none policy and only change that after you have moved to a 
>> different email provider who supports DKIM.
>>
>> — 
>> BR Oliver
>>
>> --
>> dmTECH GmbH
>> Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232 Karlsruhe
>> Telefon 0721 5592-2500 Telefax 0721 5592-2777
>> dmt...@dm.de <mailto:dmt...@dm.de> * www.dmTECH.de <http://www.dmtech.de>
>> GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
>> Geschäftsführer: Christoph Werner, Martin Dallmeier, Roman Melcher
>> --
>> Datenschutzrechtliche Informationen

Re: [mailop] DKIM record IONOS

[H via mailop]

On 02/11/2023 01:55 AM, Gellner, Oliver via mailop wrote:
>
>> On 2023-02-11 02:51 H via mailop wrote:
>>
>> 
>> On 02/10/2023 10:13 AM, Gellner, Oliver via mailop wrote:
>>> On 2023-02-10 04:08, H via mailop wrote:
>>>> I now did find that resource but it is written as general information and 
>>>> does not really tell how to get it going with IONOS if they run the email 
>>>> server...
>>> As far as I understood you not only use Ionos as your registrar, but also 
>>> use their email server to send your email through. Ionos does not DKIM sign 
>>> emails on behalf of its customers, at least they didn't do so in the past. 
>>> So the answer is simple: You do not set up DKIM or DMARC at all, because 
>>> you can't.
>>> The instructions given by Ionos are only valid if your email is sent and 
>>> signed by some other server and you want to add the DKIM public key to your 
>>> domain hosted at Ionos.
>>>
>>> --
>>> BR Oliver
>>
>> Thank you, you are starting with the first issue, ie whether I can even have 
>> a DKIM record given that the domain is hosted by Ionos as is the mail 
>> server. Upon my additional research I have come to the same conclusion as 
>> you, ie not possible.
>>
>> By the way, I stumbled across this posting on the net - 
>> https://serverfault.com/questions/1030262/record-dkim-on-ionos-makes-sense - 
>> that as far as I can tell is still true.
>>
>> So, I will now look at creating a DMARC record given that I have previously 
>> created a SPF record and will not be able to have a DKIM record.
>>
> I recommend against setting up a DMARC record with a policy of quarantine or 
> reject as long as DKIM signing isn‘t in place. The SPF authentication will 
> break for all forwarded messages as well as for all automatic replies or 
> non-delivery reports. It will do mire harm than good.
> Of course if you‘re interested in the reporting you can create a DNARC record 
> with a none policy and only change that after you have moved to a different 
> email provider who supports DKIM.
>
> — 
> BR Oliver
>
> --
> dmTECH GmbH
> Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232 Karlsruhe
> Telefon 0721 5592-2500 Telefax 0721 5592-2777
> dmt...@dm.de <mailto:dmt...@dm.de> * www.dmTECH.de <http://www.dmtech.de>
> GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
> Geschäftsführer: Christoph Werner, Martin Dallmeier, Roman Melcher
> --
> Datenschutzrechtliche Informationen
> Wenn Sie mit uns in Kontakt treten, beispielsweise wenn Sie an unser 
> ServiceCenter Fragen haben, bei uns einkaufen oder unser dialogicum in 
> Karlsruhe besuchen, mit uns in einer geschäftlichen 

Re: [mailop] DKIM record IONOS

[H via mailop]

On 02/10/2023 10:13 AM, Gellner, Oliver via mailop wrote:
> On 2023-02-10 04:08, H via mailop wrote:
>
>>> On February 9, 2023 9:01:38 PM EST, Al Iverson  
>>> wrote:
>>>> Where did you find the Ionos instructions? I have only found
>>>> third-party instructions which I do not consider to be authoritative.
>>>> As I wrote, the instructions I received from them were also different
>>>> suggesting confusion (beyond my own).
>>> https://www.ionos.com/digitalguide/e-mail/e-mail-security/dkim-domainke
>>> ys/ What is a DKIM record and how to create a DKIM record?
>> I now did find that resource but it is written as general information and 
>> does not really tell how to get it going with IONOS if they run the email 
>> server...
> As far as I understood you not only use Ionos as your registrar, but also use 
> their email server to send your email through. Ionos does not DKIM sign 
> emails on behalf of its customers, at least they didn't do so in the past. So 
> the answer is simple: You do not set up DKIM or DMARC at all, because you 
> can't.
> The instructions given by Ionos are only valid if your email is sent and 
> signed by some other server and you want to add the DKIM public key to your 
> domain hosted at Ionos.
>
> --
> BR Oliver
> 
>
> dmTECH GmbH
> Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232 Karlsruhe
> Telefon 0721 5592-2500 Telefax 0721 5592-2777
> dmt...@dm.de<mailto:dmt...@dm.de> * www.dmTECH.de<http://www.dmtech.de>
> GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
> Geschäftsführer: Christoph Werner, Martin Dallmeier, Roman Melcher
> 
> Datenschutzrechtliche Informationen
> Wenn Sie mit uns in Kontakt treten, beispielsweise wenn Sie an unser 
> ServiceCenter Fragen haben, bei uns einkaufen oder unser dialogicum in 
> Karlsruhe besuchen, mit uns in einer geschäftlichen Verbindung stehen oder 
> sich bei uns bewerben, verarbeiten wir personenbezogene Daten. Informationen 
> unter anderem zu den konkreten Datenverarbeitungen, Löschfristen, Ihren 
> Rechten sowie die Kontaktdaten unserer Datenschutzbeauftragten finden Sie 
> hier<https://www.dm.de/datenschutzerklaerung-kommunikation-mit-externen-493832>.
>
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

Thank you, you are starting with the first issue, ie whether I can even have a 
DKIM record given that the domain is hosted by Ionos as is the mail server. 
Upon my additional research I have come to the same conclusion as you, ie not 
possible.

By the way, I stumbled across this posting on the net - 
https://serverfault.com/questions/1030262/record-dkim-on-ionos-makes-sense - 
that as far as I can tell is still true.

So, I will now look at creating a DMARC record given that I have previously 
created a SPF record and will not be able to have a DKIM record.

My interactions with Ionos customer support - now up to a total of four - have 
been thoroughly disappointing with none of the information they have given me 
correct. Amazing since I cannot be the first customer to ask about this!

I can only believe that when ChatGPT and similar take over all types of 
customer support functions the quality of support will be improved - and 
answers consistent... Who knows...

I had already considered moving from Ionos and will now accelerate the process 
but it will still take until summer or so to do it.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM record IONOS

[H via mailop]

On February 9, 2023 9:01:38 PM EST, Al Iverson  wrote:
>
>> I think the selector, if I understood this correctly, is actually
>_domainkey.
>
>Nope. Example:
>x._domainkey.xnnd.com 
>For mine, x is the selctor.
>You _always_ include _domainkey
>
>
>> Where did you find the Ionos instructions? I have only found
>third-party instructions which I do not consider to be authoritative.
>As I wrote, the instructions I received from them were also different
>suggesting confusion (beyond my own).
>
>https://www.ionos.com/digitalguide/e-mail/e-mail-security/dkim-domainkeys/
>What is a DKIM record and how to create a DKIM record?
>ionos.com
>
>
>> And when/how do I use the private key?
>
>Ooh…depends on your mail server. I was assuming you were using somebody
>else’s mail server and you were just adding in the public bit after
>they did the private bit for you.
>
>If not, then … if you’re using something like postfix on *nix, you will
>need to install and configure opendkim. 
>
>See:
>https://www.spamresource.com/2021/11/more-on-opendkim-and-postfix-from.html
>
>Cheers,
>Al Iverson

I now did find that resource but it is written as general information and does 
not really tell how to get it going with IONOS if they run the email server...
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM record IONOS

[H via mailop]

On February 9, 2023 9:01:38 PM EST, Al Iverson  wrote:
>
>> I think the selector, if I understood this correctly, is actually
>_domainkey.
>
>Nope. Example:
>x._domainkey.xnnd.com 
>For mine, x is the selctor.
>You _always_ include _domainkey
>
>
>> Where did you find the Ionos instructions? I have only found
>third-party instructions which I do not consider to be authoritative.
>As I wrote, the instructions I received from them were also different
>suggesting confusion (beyond my own).
>
>https://www.ionos.com/digitalguide/e-mail/e-mail-security/dkim-domainkeys/
>What is a DKIM record and how to create a DKIM record?
>ionos.com
>
>
>> And when/how do I use the private key?
>
>Ooh…depends on your mail server. I was assuming you were using somebody
>else’s mail server and you were just adding in the public bit after
>they did the private bit for you.
>
>If not, then … if you’re using something like postfix on *nix, you will
>need to install and configure opendkim. 
>
>See:
>https://www.spamresource.com/2021/11/more-on-opendkim-and-postfix-from.html
>
>Cheers,
>Al Iverson

Aha, understood.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM record IONOS

[H via mailop]

On February 9, 2023 9:03:26 PM EST, Eric Tykwinski  
wrote:
>I think you are confused about the key signing, the mail server sending
>the email is generating the keys.  They are the ones signing the
>emails.  So if you send emails through Ionos -> receiving MTA, they
>should be the one signing the emails.  This allows them to create the
>keys.  If you are smarthosting emails, ie Ionos -> your MTA ->
>receiving MTA then you would sign the emails.
>
>Sincerely,
>
>Eric Tykwinski
>TrueNet, Inc.
>P: 610-429-8300
>
>> On Feb 9, 2023, at 8:53 PM, H via mailop  wrote:
>> 
>> On 02/09/2023 07:51 PM, Al Iverson wrote:
>>> The DKIM public key is technically a TXT record.
>>> Some people do use a CNAME version, but then yeah, you put in the
>hostname of the real server (real DNS entry) that has the TXT entry.
>>> So in your case, you’re probably looking to paste that key value
>into the TXT record.
>>> 
>>> Your selector is “k1” in this example. That sounds right based on
>Googling the iONOS instructions, I think.
>>> 
>>> Cheers,
>>> Al Iverson
>>> 
>>> 
>>>> On Feb 9, 2023, at 6:41 PM, H via mailop  wrote:
>>>> 
>>>> Having successfully created a SPF record for my domain hosted by
>Ionos, I now wanted to create a DKIM record but have received two
>completely different answers from Ionos.
>>>> 
>>>> The first instruction I received was to create a CNAME record,
>enter k1._domainkey in the Host field, and then a key the Value field.
>Well, there is no Value field, only a Points To field and that seems to
>accept another domain name, not a key.
>>>> 
>>>> I then called the helpline and was told to create a TXT record,
>keep the Host Name field unchanged from the default suggested by Ionos
>and then enter the public DKIM key in the Value field. IOW, no
>particular selector to be entered. Upon inquiring how to use the
>private DKIM key they told me I do not need it for anything...
>>>> 
>>>> By the way, I used easyDmarc.com to create the public/private key
>pair.
>>>> 
>>>> Clearly at most one of the above can be correct - or possibly none
>of the two...
>>>> 
>>>> If anyone could set me straight, it would be greatly appreciated.
>>>> 
>>>> Thanks.
>>>> 
>>>> ___
>>>> mailop mailing list
>>>> mailop@mailop.org
>>>> https://list.mailop.org/listinfo/mailop
>> 
>> I think the selector, if I understood this correctly, is actually
>_domainkey.
>> 
>> Where did you find the Ionos instructions? I have only found
>third-party instructions which I do not consider to be authoritative.
>As I wrote, the instructions I received from them were also different
>suggesting confusion (beyond my own).
>> 
>> And when/how do I use the private key?
>> 
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org <mailto:mailop@mailop.org>
>> https://list.mailop.org/listinfo/mailop
><https://list.mailop.org/listinfo/mailop>

Bringing this back to the list again instead of private email. I sent an email 
from another domain they host for me and checked that particular email upon 
arrival to another of email address I have. No DKIM signature so they do not 
default to DKIM signing. One wonders why not?
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM record IONOS

[H via mailop]

On February 9, 2023 9:03:26 PM EST, Eric Tykwinski  
wrote:
>I think you are confused about the key signing, the mail server sending
>the email is generating the keys.  They are the ones signing the
>emails.  So if you send emails through Ionos -> receiving MTA, they
>should be the one signing the emails.  This allows them to create the
>keys.  If you are smarthosting emails, ie Ionos -> your MTA ->
>receiving MTA then you would sign the emails.
>
>Sincerely,
>
>Eric Tykwinski
>TrueNet, Inc.
>P: 610-429-8300
>
>> On Feb 9, 2023, at 8:53 PM, H via mailop  wrote:
>> 
>> On 02/09/2023 07:51 PM, Al Iverson wrote:
>>> The DKIM public key is technically a TXT record.
>>> Some people do use a CNAME version, but then yeah, you put in the
>hostname of the real server (real DNS entry) that has the TXT entry.
>>> So in your case, you’re probably looking to paste that key value
>into the TXT record.
>>> 
>>> Your selector is “k1” in this example. That sounds right based on
>Googling the iONOS instructions, I think.
>>> 
>>> Cheers,
>>> Al Iverson
>>> 
>>> 
>>>> On Feb 9, 2023, at 6:41 PM, H via mailop  wrote:
>>>> 
>>>> Having successfully created a SPF record for my domain hosted by
>Ionos, I now wanted to create a DKIM record but have received two
>completely different answers from Ionos.
>>>> 
>>>> The first instruction I received was to create a CNAME record,
>enter k1._domainkey in the Host field, and then a key the Value field.
>Well, there is no Value field, only a Points To field and that seems to
>accept another domain name, not a key.
>>>> 
>>>> I then called the helpline and was told to create a TXT record,
>keep the Host Name field unchanged from the default suggested by Ionos
>and then enter the public DKIM key in the Value field. IOW, no
>particular selector to be entered. Upon inquiring how to use the
>private DKIM key they told me I do not need it for anything...
>>>> 
>>>> By the way, I used easyDmarc.com to create the public/private key
>pair.
>>>> 
>>>> Clearly at most one of the above can be correct - or possibly none
>of the two...
>>>> 
>>>> If anyone could set me straight, it would be greatly appreciated.
>>>> 
>>>> Thanks.
>>>> 
>>>> ___
>>>> mailop mailing list
>>>> mailop@mailop.org
>>>> https://list.mailop.org/listinfo/mailop
>> 
>> I think the selector, if I understood this correctly, is actually
>_domainkey.
>> 
>> Where did you find the Ionos instructions? I have only found
>third-party instructions which I do not consider to be authoritative.
>As I wrote, the instructions I received from them were also different
>suggesting confusion (beyond my own).
>> 
>> And when/how do I use the private key?
>> 
>> 
>> ___
>> mailop mailing list
>> mailop@mailop.org <mailto:mailop@mailop.org>
>> https://list.mailop.org/listinfo/mailop
><https://list.mailop.org/listinfo/mailop>

Let's keep this conversation on the list rather than private email. IONOS has 
failed to communicate this to me despite having received information on the 
setup from me.

Any suggestion on how I address this?
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM record IONOS

[H via mailop]

On 02/09/2023 08:53 PM, H wrote:
> On 02/09/2023 07:51 PM, Al Iverson wrote:
>> The DKIM public key is technically a TXT record.
>> Some people do use a CNAME version, but then yeah, you put in the hostname 
>> of the real server (real DNS entry) that has the TXT entry.
>> So in your case, you’re probably looking to paste that key value into the 
>> TXT record.
>>
>> Your selector is “k1” in this example. That sounds right based on Googling 
>> the iONOS instructions, I think.
>>
>> Cheers,
>> Al Iverson
>>
>>
>>> On Feb 9, 2023, at 6:41 PM, H via mailop  wrote:
>>>
>>> Having successfully created a SPF record for my domain hosted by Ionos, I 
>>> now wanted to create a DKIM record but have received two completely 
>>> different answers from Ionos.
>>>
>>> The first instruction I received was to create a CNAME record, enter 
>>> k1._domainkey in the Host field, and then a key the Value field. Well, 
>>> there is no Value field, only a Points To field and that seems to accept 
>>> another domain name, not a key.
>>>
>>> I then called the helpline and was told to create a TXT record, keep the 
>>> Host Name field unchanged from the default suggested by Ionos and then 
>>> enter the public DKIM key in the Value field. IOW, no particular selector 
>>> to be entered. Upon inquiring how to use the private DKIM key they told me 
>>> I do not need it for anything...
>>>
>>> By the way, I used easyDmarc.com to create the public/private key pair.
>>>
>>> Clearly at most one of the above can be correct - or possibly none of the 
>>> two...
>>>
>>> If anyone could set me straight, it would be greatly appreciated.
>>>
>>> Thanks.
>>>
>>> ___
>>> mailop mailing list
>>> mailop@mailop.org
>>> https://list.mailop.org/listinfo/mailop
> I think the selector, if I understood this correctly, is actually _domainkey.
>
> Where did you find the Ionos instructions? I have only found third-party 
> instructions which I do not consider to be authoritative. As I wrote, the 
> instructions I received from them were also different suggesting confusion 
> (beyond my own).
>
> And when/how do I use the private key?
>
>
Perusing the internet a bit more, it seems that the TXT record should contain 
(selector)._domainkey.mydomainname.tld. IOW, since my TXT record I created 
right now contains just _domainkey, I need to change that to 
k1._domainkey.mydomainname.tld.

Would that be correct understanding?

Also, it seems that I need to ask Ionos where/how to put the private key since 
besides hosting the domain I am also using their email server.

Is that also correct understanding?

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] DKIM record IONOS

[H via mailop]

On 02/09/2023 07:51 PM, Al Iverson wrote:
> The DKIM public key is technically a TXT record.
> Some people do use a CNAME version, but then yeah, you put in the hostname of 
> the real server (real DNS entry) that has the TXT entry.
> So in your case, you’re probably looking to paste that key value into the TXT 
> record.
>
> Your selector is “k1” in this example. That sounds right based on Googling 
> the iONOS instructions, I think.
>
> Cheers,
> Al Iverson
>
>
>> On Feb 9, 2023, at 6:41 PM, H via mailop  wrote:
>>
>> Having successfully created a SPF record for my domain hosted by Ionos, I 
>> now wanted to create a DKIM record but have received two completely 
>> different answers from Ionos.
>>
>> The first instruction I received was to create a CNAME record, enter 
>> k1._domainkey in the Host field, and then a key the Value field. Well, there 
>> is no Value field, only a Points To field and that seems to accept another 
>> domain name, not a key.
>>
>> I then called the helpline and was told to create a TXT record, keep the 
>> Host Name field unchanged from the default suggested by Ionos and then enter 
>> the public DKIM key in the Value field. IOW, no particular selector to be 
>> entered. Upon inquiring how to use the private DKIM key they told me I do 
>> not need it for anything...
>>
>> By the way, I used easyDmarc.com to create the public/private key pair.
>>
>> Clearly at most one of the above can be correct - or possibly none of the 
>> two...
>>
>> If anyone could set me straight, it would be greatly appreciated.
>>
>> Thanks.
>>
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://list.mailop.org/listinfo/mailop

I think the selector, if I understood this correctly, is actually _domainkey.

Where did you find the Ionos instructions? I have only found third-party 
instructions which I do not consider to be authoritative. As I wrote, the 
instructions I received from them were also different suggesting confusion 
(beyond my own).

And when/how do I use the private key?


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] DKIM record IONOS

[H via mailop]

Having successfully created a SPF record for my domain hosted by Ionos, I now 
wanted to create a DKIM record but have received two completely different 
answers from Ionos.

The first instruction I received was to create a CNAME record, enter 
k1._domainkey in the Host field, and then a key the Value field. Well, there is 
no Value field, only a Points To field and that seems to accept another domain 
name, not a key.

I then called the helpline and was told to create a TXT record, keep the Host 
Name field unchanged from the default suggested by Ionos and then enter the 
public DKIM key in the Value field. IOW, no particular selector to be entered. 
Upon inquiring how to use the private DKIM key they told me I do not need it 
for anything...

By the way, I used easyDmarc.com to create the public/private key pair.

Clearly at most one of the above can be correct - or possibly none of the two...

If anyone could set me straight, it would be greatly appreciated.

Thanks.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Question of SPF record

[H via mailop]

On 02/06/2023 03:02 AM, Mark Alley via mailop wrote:
> Per their instructions here: 
> https://www.ionos.com/help/domains/configuring-mail-servers-and-other-related-records/using-an-spf-record-to-prevent-spam/
>
> Just add these to your SPF record like so.
>
> v=spf1 a mx include:_spf.perfora.net <http://spf.perfora.net> 
> include:_spf.kundenserver.de <http://spf.kundenserver.de> ~all
>
> You probably don't need the MX mechanism given they publish a different 
> subnet in SPF for their sending MTAs, but feel free to verify by testing if 
> you remove it.
>
> To your original question about IP addresses, the ip4 mechanism allows for 
> singular IP addresses as well as CIDR format to add subnets. (i.e. 
> ip4:74.208.4.192/26 <http://74.208.4.192/26>) But you don't need to do this, 
> as this subnet is covered by the SPF record includes above provided by IONOS.
>
> Thanks,
>
> Mark Alley
>
> On Sun, Feb 5, 2023, 6:44 PM H via mailop  <mailto:mailop@mailop.org>> wrote:
>
> I have a domain with multiple email addresses hosted by Ionos. I have 
> found that outgoing emails can come from a range of Ionos email IPs.
>
> I have created a TXT record for my domain containing one IP4 address but 
> outgoing emails seem to be sent from different IP4 addresses. As an example I 
> now have:
>
> v=spf1 a mx ip4:74.208.4.194 ~all
>
> I know I can add at least one more ip4 address using the same format but 
> I am not sure exactly what the Ionos email ip range might be so:
>
> - Is there a way of saying eg. ip4:72.20.8.*
>
> - Or should I delete the ip4 component and instead add:
>
> include:mydomain.tld (corrected of course)
>
> Suggestions appreciated!
>
> Thanks.
>
> ___
> mailop mailing list
> mailop@mailop.org <mailto:mailop@mailop.org>
> https://list.mailop.org/listinfo/mailop
>
>
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

Thank you, see my reply using the US Ionos configuration.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Question of SPF record

[H via mailop]

On 02/06/2023 04:14 PM, Jarland Donnell via mailop wrote:
> Take this:
>
> v=spf1 a mx ip4:74.208.4.194 ~all
>
> Change it to this:
>
> v=spf1 include:_spf.perfora.net include:_spf.kundenserver.de ~all
>
> Done :)
>
> On 2023-02-05 18:13, H via mailop wrote:
>> I have a domain with multiple email addresses hosted by Ionos. I have found 
>> that outgoing emails can come from a range of Ionos email IPs.
>>
>> I have created a TXT record for my domain containing one IP4 address but 
>> outgoing emails seem to be sent from different IP4 addresses. As an example 
>> I now have:
>>
>> v=spf1 a mx ip4:74.208.4.194 ~all
>>
>> I know I can add at least one more ip4 address using the same format but I 
>> am not sure exactly what the Ionos email ip range might be so:
>>
>> - Is there a way of saying eg. ip4:72.20.8.*
>>
>> - Or should I delete the ip4 component and instead add:
>>
>> include:mydomain.tld (corrected of course)
>>
>> Suggestions appreciated!
>>
>> Thanks.
>>
>> ___
>> mailop mailing list
>> mailop@mailop.org
>> https://list.mailop.org/listinfo/mailop
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

Thank you for all suggestions. My Ionos mail server is located in the US so I 
entered the following SPF record:

"v=spf1 include:_spf-us.ionos.com ~all"

It now passes the SPF check mail-tester.com, next challenge will be to get DKIM 
configured which apparently is required before creating the DMARC record.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Question of SPF record

[H via mailop]

I have a domain with multiple email addresses hosted by Ionos. I have found 
that outgoing emails can come from a range of Ionos email IPs.

I have created a TXT record for my domain containing one IP4 address but 
outgoing emails seem to be sent from different IP4 addresses. As an example I 
now have:

v=spf1 a mx ip4:74.208.4.194 ~all

I know I can add at least one more ip4 address using the same format but I am 
not sure exactly what the Ionos email ip range might be so:

- Is there a way of saying eg. ip4:72.20.8.*

- Or should I delete the ip4 component and instead add:

include:mydomain.tld (corrected of course)

Suggestions appreciated!

Thanks.

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Telstra bigpond - suspicious email activity

[Sascha H via mailop]

Hey Everyone,



I was wondering if anyone else is seeing odd reply messages coming from
Telstra (bigpond) users.

They all are direct replies to our promotional campaigns but parsed with a
bot and modified to look more legit.



All are the same pattern and all have the same link to a OneDrive account
with a VBS script.





*Sascha Huwald*

Senior Manager – Deliverability & Analytics
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop