Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Stefano Bagnara
On 15 June 2017 at 00:37, Laura Atkins wrote: > > On Jun 14, 2017, at 1:55 PM, Stefano Bagnara wrote: > > Not what I saw here: if I send a message with the same rfc5322.from/to ( > ema...@gmail.com) to ema...@gmail.com I don't see warnings. > > > I think this is where you’re misunderstanding me.

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Laura Atkins
> On Jun 14, 2017, at 1:55 PM, Stefano Bagnara wrote: > > On 14 June 2017 at 22:28, Laura Atkins > wrote: >> On Jun 14, 2017, at 12:52 PM, Stefano Bagnara > > wrote: >> >> BTW please note that the message is "sent from your account." not

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Stefano Bagnara
On 14 June 2017 at 22:28, Laura Atkins wrote: > > On Jun 14, 2017, at 12:52 PM, Stefano Bagnara wrote: > > BTW please note that the message is "sent from your account." not "by > ", so a very specific case. > > > Interesting. When I did it (to myself, from myself from this SMTP server) > the mess

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Laura Atkins
> On Jun 14, 2017, at 12:52 PM, Stefano Bagnara > wrote: > > On 14 June 2017 at 20:51, Laura Atkins > wrote: > Gmail doesn’t say it’s spam. Gmail says: This message may not have been sent > by: > > Isn't this what DMARC/SPF/DKIM are int

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Stefano Bagnara
On 14 June 2017 at 20:33, Mark Milhollan wrote: > I don't have a strong opinion as to the alert Gmail provides when a > message has the From header matching the To header, though it seems to > me most of the time it would result in an SPF failure (whether soft or > hard) and so be problematic. I

Re: [mailop] Question re: AOL will not accept delivery of this message

2017-06-14 Thread Lili Crowley
Ken - responding off list Lili Crowley AOL Postmaster On Wed, Jun 14, 2017 at 3:50 PM, Ken O'Driscoll via mailop < mailop@mailop.org> wrote: > > On Wed, 2017-06-14 at 12:26 -0700, Steve Atkins wrote: > > With Ken not sharing any information about the context it's hard to say > > more. > > Apo

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Stefano Bagnara
On 14 June 2017 at 20:51, Laura Atkins wrote: > Gmail doesn’t say it’s spam. Gmail says: This message may not have been > sent by: > Isn't this what DMARC/SPF/DKIM are intended for and at a very larger scale? BTW please note that the message is "sent from your account." not "by ", so a very sp

Re: [mailop] Question re: AOL will not accept delivery of this message

2017-06-14 Thread Ken O'Driscoll via mailop
On Wed, 2017-06-14 at 12:26 -0700, Steve Atkins wrote: > With Ken not sharing any information about the context it's hard to say > more. Apologies for lack of context. Client (whom I can't mention for data protection reasons) started seeing invoices bounce with this message today. Sending though

Re: [mailop] Question re: AOL will not accept delivery of this message

2017-06-14 Thread Dave Lugo
On Wed, 14 Jun 2017, Steve Atkins wrote: AOL-owned domains, IIRC (cf. the "New gmail warning" thread). Maybe - but the page doesn't mention that at all. With Ken not sharing any information about the context it's hard to say more. Yup. -- ---

Re: [mailop] Question re: AOL will not accept delivery of this message

2017-06-14 Thread Steve Atkins
> On Jun 14, 2017, at 12:17 PM, Dave Lugo wrote: > > On Wed, 14 Jun 2017, Ken O'Driscoll via mailop wrote: >> From https://postmaster.aol.com/error-codes: >> AOL will not accept delivery of this message >> >> This is a permanent bounce due to: >> * RFC2822 From domain does not match the rDNS of

Re: [mailop] Question re: AOL will not accept delivery of this message

2017-06-14 Thread Dave Lugo
On Wed, 14 Jun 2017, Ken O'Driscoll via mailop wrote: From https://postmaster.aol.com/error-codes: AOL will not accept delivery of this message This is a permanent bounce due to: * RFC2822 From domain does not match the rDNS of sending server. * RFC 2822 FROM address does not have an A record a

[mailop] Question re: AOL will not accept delivery of this message

2017-06-14 Thread Ken O'Driscoll via mailop
From https://postmaster.aol.com/error-codes: AOL will not accept delivery of this message This is a permanent bounce due to: * RFC2822 From domain does not match the rDNS of sending server. * RFC 2822 FROM address does not have an A record and is not a valid domain. * IP has a poor reputation an

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Laura Atkins
> On Jun 14, 2017, at 11:34 AM, Michael Peddemors > wrote: > > A couple of points.. simply because the To/From are the same, is not an > absolute guide to spam, as this will often be the case in legitimate email > lists, auto generated messages, web forms, et al.. Gmail doesn’t say it’s spam

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Michael Peddemors
A couple of points.. simply because the To/From are the same, is not an absolute guide to spam, as this will often be the case in legitimate email lists, auto generated messages, web forms, et al.. The reason it is a spammer favourite trick though, is hoping the end user has mistakenly white-l

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Mark Milhollan
On Wed, 14 Jun 2017, Stefano Bagnara wrote: >PS: maybe this list is used to "complaints" and "how to get a contact at a >given provider", so I don't know if this generic discussion about Google >approach to user spam/spoofing warnings is an interesting/appropriate topic. Your thread seems to me t

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Laura Atkins
> On Jun 14, 2017, at 10:24 AM, Stefano Bagnara wrote: > > My question is WHY gmail alert me when from and to are equals and received > from an external server but at the same time doesn't care to alert me if the > from is another gmail address or if the to doesn't contain my address > (becau

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Ken O'Driscoll via mailop
Hi Stefano, Replies inline. On Wed, 2017-06-14 at 19:24 +0200, Stefano Bagnara wrote: > I have a good understanding about what is spoofing and what is DMARC > alignment (i also developed java implementations of SPF and DKIM and an > SMTP server, just to le you know I know the whys and whats of s

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Stefano Bagnara
On 14 June 2017 at 18:04, Ken O'Driscoll via mailop wrote: > Hi Stefano, > > Are you spoofing a Gmail From address so that it matches the To address of > the Gmail user and then wondering why a security alert appears in Gmail? > I have a good understanding about what is spoofing and what is DMAR

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Ken O'Driscoll via mailop
Hi Stefano, Are you spoofing a Gmail From address so that it matches the To address of the Gmail user and then wondering why a security alert appears in Gmail? Apologies if I misunderstand what you are trying to do. Ken. --  Ken O'Driscoll / We Monitor Email t: +353 1 254 9400 | w: www.wemonito

Re: [mailop] New gmail warning about spoofing

2017-06-14 Thread Laura Atkins
> On Jun 14, 2017, at 8:29 AM, Stefano Bagnara wrote: > > Recently (few weeks) we started having reports about this warning on Gmail on > some notification email: > > "This may be a spoofed message. Gmail couldn't verify that it was actually > sent from your account." > > After a few tests w

Re: [mailop] Is rbl.att.net down?

2017-06-14 Thread Dave Lugo
NXDOMAIN here too... On Wed, 14 Jun 2017, Tonya Gordon wrote: Date: Wed, 14 Jun 2017 11:45:41 From: Tonya Gordon To: mailop@mailop.org Subject: [mailop] Is rbl.att.net down? Hello! Is anyone else able to get to rbl.att.net/block_inquiry.html?  We are getting Server Not Found. Thanks! Ton

[mailop] Is rbl.att.net down?

2017-06-14 Thread Tonya Gordon
Hello! Is anyone else able to get to rbl.att.net/block_inquiry.html? We are getting Server Not Found. Thanks! Tonya -- -- TONYA GORDON sr. deliverability analyst www.sparkpost.com twitter @Tonya.Delivers tel 415-578-5222 x402 mobile 469-400-0372 fax 410-872-4913 email tonya.gor...@sparkpost.

[mailop] New gmail warning about spoofing

2017-06-14 Thread Stefano Bagnara
Recently (few weeks) we started having reports about this warning on Gmail on some notification email: "This may be a spoofed message. Gmail couldn't verify that it was actually sent from your account." After a few tests we identified the pattern enabling this error: From: To: with SPF: PASS

Re: [mailop] Is msrbl alive?

2017-06-14 Thread Chris Burton
Hi, > On their website www.msrbl.net they now say: > Due to a recent issue with the domain renewal you may see mail being > rejected where the IP isn't listed. If you're still seeing this I would > advise clearing the DNS cache/resolver used to lookup entries in the RBL due > to the "expired domain

[mailop] cogeco.ca email IT contact

2017-06-14 Thread Matt Rauch
Hello, Does anyone have a contact email for someone who can help troubleshoot issues sending to the cogeco.ca email server from our mail server? Thank you! Matt Rauch ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi

Re: [mailop] Is msrbl alive?

2017-06-14 Thread Stefano Bagnara
On 13 June 2017 at 19:21, Mark Jeftovic wrote: > I think the domain expired, it tripped our RBL alerts this morning for > *everything* and when I looked in a browser the domain was at a parked > page (PPC, probably set automatically by registrar) > > Now it looks back to normal, domain has been r