[mailop] Contact at Barracuda?? re: IMPORTANT re: MSRBL.net & Barracuda Networks Opened Case #: 03269004

Hello All, Trying to reach someone at Barracuda to escalate this issue to them.  This morning we received this complaint: > <<< 550 Service unavailable; Client host [intel1.peregrinehw.com] blocked by > combined.rbl.msrbl.net; 38.124.232.10 (redacted:blocked) > 554 5.0.0 Service unavailable To

Re: [mailop] Is msrbl alive?

Thanks Tobi, Anyone have Chris' contact information and can reach him?  Regards, KAM On 6/13/2019 9:09 AM, Tobi via mailop wrote: > We just see in our outbound logs that this issue is current again (fits > the date from last time ;-)) > Domain msrbl.net is again parked and replies to any query

Re: [mailop] Contact at Barracuda?? re: IMPORTANT re: MSRBL.net & Barracuda Networks Opened Case #: 03269004

gt; of their customers do use msrbl.net <http://msrbl.net>. > > Best, > > Nick Schafer > Deliverability Engineer, Mailgun <http://www.mailgun.com/> > > > On Thu, Jun 13, 2019 at 8:09 AM Kevin A. McGrail via mailop > mailto:mailop@mailop.org>> wrote: >

Re: [mailop] Contact at Barracuda?? re: IMPORTANT re: MSRBL.net & Barracuda Networks Opened Case #: 03269004

On 6/13/2019 1:06 PM, Erwin via mailop wrote: > That’s ESS, our hosted email filtering service which includes customer > configured list of RBLs. Thanks Erwin. Anyway for you to alert users using msrbl to well, not do so? ___ mailop mailing list

Re: [mailop] Google is refusing DMARC reports

On 9/28/2019 9:37 AM, Andrew C Aitchison via mailop wrote: > On Sat, 28 Sep 2019, Tom Ivar Helbekkmo via mailop wrote: > >> _dmarc.google.com IN TXT "v=DMARC1; p=reject; >> rua=mailto:mailauth-repo...@google.com; >> >> : host aspmx.l.google.com[173.194.73.26] >> said: >>    550-5.2.1 The user you

Re: [mailop] Change at Microsoft on September 4th

Michael, [thanks for your helpful post!] Anytime I try and open a ticket, I just get "We're sorry, but something went wrong on our end. Please try again later" http://go.microsoft.com/fwlink/?LinkID=614866 https://support.microsoft.com/en-us/supportrequestform/ doesn't work any more. I was

[mailop] Anyone from Barracuda to contact please?

Have IPs showing clean from BRBL with tickets open from recipients aka Barracuda customers.  Traceroutes show it gets fair enough that it's unclear if it is an AWS or barracuda issue but we can't get to port 25. Looking for any guidance to find out what might be the issue to help Barracuda

Re: [mailop] [External] sendgrid sending spam claiming to be chase.com

On 12/23/2019 10:42 PM, Carl Byington via mailop wrote: > The spam was sent with a From: header of @email.chase.com. > _dmarc.email.chase.com. has a txt record with p=reject, so it was > rejected here. Sendgrid - you should be able to check that at your end, > and just not send anything that

Re: [mailop] [External] Re: Horrible week for email deliverability - Looking for help with RackSpace/Emailsrvr

On 3/26/2020 12:37 PM, John Levine wrote: > In article <62e55123-d1d0-f67b-9d03-191c8caaa...@pccc.com> you write: > >> We're a small ESP but respected and vigilant anti-spam community >> members.  However, our mail volume is through the roof because of the >> pandemic and we're seeing false

Re: [mailop] [External] Re: Horrible week for email deliverability - Looking for help with RackSpace/Emailsrvr

On 3/26/2020 1:09 PM, Jay Hennigan via mailop wrote: > It's primarily fatigue on how XYZ place is dealing with the virus > where the recipient hasn't heard from XYZ place in the better part of > a decade. We'll agree to disagree.  This isn't spam as there was consent and it's transactional based. 

Re: [mailop] what is spam was Re: [External] Re: Horrible week for email deliverability - Looking for help with RackSpace/Emailsrvr

On 3/27/2020 5:21 PM, Grant Taylor via mailop wrote: > I believe that what the consent covers needs to be refined. > > Consent to receive transactional email is not implicit consent to > receive non-transactional emails. For non transaction emails like adverts afterwards, I typically look in

Re: [mailop] [External] Re: Horrible week for email deliverability - Looking for help with RackSpace/Emailsrvr

On 3/27/2020 6:25 AM, Paul Smith via mailop wrote: >> If the original poster meant something different by ESP, I >> misunderstood their terminology. >> > That's fine. It's worth clarifying terminology. Hi All, Great point about terminology.  I'm the CEO emeritus for Peregrine Computer

Re: [mailop] what is spam was Re: [External] Re: Horrible week for email deliverability - Looking for help with RackSpace/Emailsrvr

On 3/27/2020 11:43 AM, John Levine via mailop wrote: > In article > you write: >> -=-=-=-=-=- >> -=-=-=-=-=- >> >> On 3/26/20 11:20 AM, John R Levine via mailop wrote: >>> As I'm sure you're aware, we've seen way too much spam from people who >>> imagine that COVID is an excuse to reanimate

Re: [mailop] [External] Re: Horrible week for email deliverability - Looking for help with RackSpace/Emailsrvr

On 3/27/2020 4:32 AM, Laura Atkins wrote: > All in all, I think you need to look a lot harder at what your free > customers are sending to their “friends and family” and think harder > about restricting their ability to cause problems for your paying > customers. Just a note, we don't have free

[mailop] Barracuda ESS is mass-accessing websites on my server, why?

Anyone from Barracuda on the list or have a contact? I have a screenshot and logs showing a lot of concurrent accesses from 209.222.82.X which appears to be IPs for ess barracuda.  I'd normally call it a DOS attack.  Looks like robots gone bad but they aren't using a proper robot tag or honoring

Re: [mailop] [External] Re: Barracuda ESS is mass-accessing websites on my server, why?

On 4/1/2020 5:22 PM, Jay Hennigan via mailop wrote: > On 4/1/20 13:16, Kevin A. McGrail via mailop wrote: >> Anyone from Barracuda on the list or have a contact? >> >> I have a screenshot and logs showing a lot of concurrent accesses >> from 209.222.82.X which appears

Re: [mailop] [External] Re: Barracuda ESS is mass-accessing websites on my server, why?

te: >> On 4/1/20 13:16, Kevin A. McGrail via mailop wrote: >>> Anyone from Barracuda on the list or have a contact? >>> >>> I have a screenshot and logs showing a lot of concurrent accesses >>> from 209.222.82.X which appears to be IPs for ess barracuda.  I'

[mailop] Horrible week for email deliverability - Looking for help with RackSpace/Emailsrvr

Hi All, We're a small ESP but respected and vigilant anti-spam community members.  However, our mail volume is through the roof because of the pandemic and we're seeing false positive issues with deliverability.  Currently having mail rate limited with emailsrvr.com.  Tried to report an issue to

Re: [mailop] [External] Re: Google DMARC reports

+1 here.  I sent an oob note to a Googler who might help. Regards, KAM On 4/23/2020 10:55 AM, Ewald Kessler | Webpower via mailop wrote: > Seeing it too. Received the last one on Tuesday 11:41 AM (CET). Don't > see anything reported after April 21 in GPT either. > > Regards, > Ewald > > On Thu,

[mailop] Mail.com Contact?

Hi All, Seeing a blacklist on one of our SMTP IPs with mail.com (which powers email.com and gmx.de from our issues). Can't find our IP on a blacklist and no response from the postmaster contact sent to https://postmaster.mail.com/en/contact Anyone here on list have a good contact or can figure

Re: [mailop] [External] Re: Google DMARC reports

Just an update that we got a flurry of Google DMARC reports a few hours ago. On 4/23/2020 12:59 PM, Brandon Long wrote: > Thanks for the note, we're looking into it. > > Brandon > > On Thu, Apr 23, 2020 at 8:19 AM Kevin A. McGrail via mailop > mailto:mailop@mailop.org>> wr

Re: [mailop] [External] Re: SendGrid Abuse unresponsive

On 5/5/2020 5:50 PM, Carl Byington via mailop wrote: > On Tue, 2020-05-05 at 07:48 -0700, Michael Peddemors via mailop wrote: > > This is a little too obvious, and while historically SendGrid ran a > > tight ship, and got a little lee way from spam auditors.. it's getting > > very bad, and going

Re: [mailop] [External] Who runs the mailspike BL and why are they blocking Yahoo?

On 3/19/2020 2:40 PM, John Levine via mailop wrote: > One of my users reported that I was rejecting mail from Yahoo, and I found it > was because at least one of Yahoo's outbound addresses 74.6.128.32 is listed > at bl.mailspike.net. > I sent a heads-up to mailspike about this email. Regards,

Re: [mailop] [External] SNDS Down?

On 5/7/2020 8:56 AM, Mike Hammett via mailop wrote: > Is SNDS down? I'm unable to login.  > I just logged into it and it worked.  ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] [External] dcc down / dead?

On 5/23/2020 7:23 AM, Stefan Bauer via mailop wrote: > > Hi, > > > seems like the main DCC servers are down (dcc1-6.dcc-servers.net), > also the website. > > Archive last mails are from end 19. > > > Anybody knows more? Did i miss some announcement? > Stefan, hi, I run a DCC mirror and not aware

Re: [mailop] [External] dcc down / dead?

> The DNS zone dcc-servers.net expired: > > Registrar Registration Expiration Date: 2020-05-22T17:54:35Z Thanks.  I've email Vernon to let him know! Regards, KAM ___ mailop mailing list mailop@mailop.org

Re: [mailop] [External] dcc down / dead?

Vernon has emailed me that everything is renewed.  Can you confirm it looks good now? ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] [External] antispamcloud.com (SpamExperts) forensics reports format

On 9/9/2020 1:12 PM, Sébastien Riccio via mailop wrote: > We are parsing dmarc reports using parsedmarc and the forensics > reports coming from antispamcloud.com seems not to follow the > recommended reporting format (AFRF) and therefore are considered invalid. > > Maybe is there anyone from

[mailop] Seeing a 255.255.255.255 ip in received header from Microsoft

Howdy Mailopers, Anyone seen a received header like this before with the from on quad 255's from an email from hotmail? Received: from 255.255.255.255 (255.255.255.255) by MN2PR10CA0026.namprd10.prod.outlook.com (2603:10b6:208:120::39) with Microsoft SMTP Server (version=TLS1_2,

Re: [mailop] [EXTERNAL] Seeing a 255.255.255.255 ip in received header from Microsoft

Hi Michael, On 9/2/2020 10:05 PM, Michael Wise via mailop wrote: > That means it was local. Pay it no mind, unless you like blocking all traffic > that was entered via the UX. Well, I noticed today that the stock SpamAssassin rules will mark it as a illegal IP in the Received header.  Can I

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

They know about the issue and are working on a new server infrastructure.  I've bcc'd them to see if there are new updates to share. Regards, KAM On 10/13/2020 12:21 PM, Mark G Thomas via mailop wrote: > Hi, > > On Thu, Sep 24, 2020 at 02:21:00PM -0400, Kevin A. McGrail via mai

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

They know about the issue and are working on a new server infrastructure.  I've bcc'd them to see if there are new updates to share. Regards, KAM On 10/13/2020 12:21 PM, Mark G Thomas via mailop wrote: > Hi, > > On Thu, Sep 24, 2020 at 02:21:00PM -0400, Kevin A. McGrail via mai

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

Just an update from lashback: We're in the midst of a total migration to the cloud. Things should be back to normal soon. Regards, KAM ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] [External] sendgrid.net

On 9/25/2020 9:36 AM, Michael via mailop wrote: > What's the consensus on sendgrid.net? I don't know anything about > them, but I had the impression that they were a reputable company. > Lately, I've noticed a lot of phishing emails coming from them. Does > anyone just block them completely? >

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

On 9/24/2020 12:22 PM, Robert L Mathews via mailop wrote: > We use the Lashback UBL described at as > a (small part of) scoring incoming mail. The actual list domain name is > "unsubscore.com". > > About 10 days ago I noticed that the timestamps on their rsyncable

[mailop] How to do Outbound Relay from M365 previously O365

Hello Mailoppers, I might have asked this before but I've been going round and round with Microsoft tech support on SMTP basics.  Microsoft has, no joke, been working on answer this questions since June 30th.  It's been a very bad shotgun approach of sending random knowledge bases, doing

Re: [mailop] [External] Re: How to do Outbound Relay from M365 previously O365

On 9/18/2020 11:51 AM, Andrew C Aitchison via mailop wrote: > As I say, I am not sure that any of this will directly help with your > issue. As you say, not directly because I'm worried about outbound not inbound.  However, this article [1] seems to back up the fact that they turned off the

Re: [mailop] [External] Re: How to do Outbound Relay from M365 previously O365

On 9/18/2020 10:18 AM, Ken O'Driscoll via mailop wrote: > You need to set up mail flow connectors in Exchange Online. > Authentication is certificate and/or IP based. > > I think this explains it fairly well:  >

[mailop] Outbound from M365 to relay off our SMTP with SMTPAUTH

Hi All, I've got a long outstanding Anyone out there know what I'm missing in trying to have M365 relay all outgoing mail through our on-premise SMTP servers? I've opened support tickets but they went to evolveip.net with no response. Here's what I used to do:   - Admin | Exchange -> Mail Flow

Re: [mailop] [External] Re: This is..Concerning: DatabaseUSA Wins Case Against The Spamhaus Project

On 8/4/2020 12:24 PM, Rob Nagler via mailop wrote: > It is actually more sinister than anybody realizes. I did some > research into Charles "Charlie" Benn.  > > He is working on new technology  to > get spam into the UK and the EU. He works undercover for a real

Re: [mailop] [External] Gmail IMAP xyzzy ?

On 8/2/2020 6:43 PM, John Levine via mailop wrote: > When I connect to Gmail's IMAP server, one of the capbilities it advertises > is "xyzzy". Anyone know what that is? > > I know the etymology (same place as plugh) but what's it supposed to do? > > Signed, > Wondering John/Wondering, Just an

Re: [mailop] [EXTERNAL] Re: Attention Michael Wise - need your assistance

On 6/18/2020 7:11 AM, Stefano Bagnara via mailop wrote: > On Thu, 18 Jun 2020 at 13:00, Abuse via mailop wrote: >> It is clear, but what must we do when the front door is closed too? >> I used the Support Funnel but didn't get any responses, not even the first >> response from the robot giving

Re: [mailop] [External] Re: Microsoft Block list (S3150)

The SNDS/JMRP program used to.  Anecdotally, the feedback loop disappeared with the advent of GDRP and/or CCPA early this year. Regards, KAM On 6/29/2020 7:16 AM, Laura Atkins via mailop wrote: > On the advice of their lawyers Microsoft doesn’t share that > information with senders.  > > laura 

[mailop] Microsoft giving Server Busy errors for M365

Microsoft's anti-spam seems to be misfiring again but for once it is on the m365 paid customer.  Seeing deferred messages like dsn=4.0.0, stat=Deferred: 451 4.7.500 Server busy. Please try again later from [38.124.232.13]. (S77714) [CO1NAM04FT003.eop-NAM04.prod.protection.outlook.com] Anyone know

[mailop] [Off-Topic] Happy Thanksgiving and Announcing the Apache SpamAssassin Channel for the KAM Rule Ser

Morning all, I wanted to share the news from https://mcgrail.com/newsmanager/news_article.cgi?template=news.template_id=11 with you all.  We'll also have a mailing list up soon too. Thanks to the sponsors and to Georgia Smith and Karsten Bräckelmann who worked hard on setting up the

Re: [mailop] [External] Anyone from BlueHost on this list?

On 12/21/2020 1:56 PM, Eric Tykwinski via mailop wrote: Just a heads up: v=spf1 include:spf2.bluehost.com include:_spf.qualtrics.com include:_spf.google.com include:_spf.salesforce.com include:sparkpostmail.com include:spf.mailjet.com -all evaluating... Results - PermError SPF Permanent

Re: [mailop] [External] Anyone from BlueHost on this list?

On 12/22/2020 2:54 AM, Sidsel Jensen via mailop wrote: Is this still a valid limit? I’d like to hear your thoughts about it. IMO know. It hasn't been valid for years in the real-world.  See https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7182 for more background when the Apache SpamAssassin

Re: [mailop] [External] Fake fax spam from sendgrid

On 10/19/2020 8:29 PM, John Levine via mailop wrote: > I'm getting a steady stream of spam from Sendgrid purporting to be > Efax messages, with what appears to be an XLS spreadsheet attached. > The return addresses are all over the place but they all come through > Sendgrid, e.g., John, Sendgrid

Re: [mailop] [External] Sendgrid again...

On 1/22/2021 9:08 AM, Hans-Martin Mosner via mailop wrote: Well I'm not complaining about the spam from them - it's a steady flow, nothing new. But it looks like they have filters on their abuse box now to reduce the amount of abuse reports: Of course, that would be my next step in their

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

On 1/6/2021 10:19 AM, randy via mailop wrote: A little late to the thread here, but I found it because I had the same question. I emailed lashback (bugs at lashback.com ), and this was their reply: "Greetings, the blacklist has been retired for the time being. These

[mailop] Any Postmaster from ATT.NET?

Hello all, if anyone from AT is here, the @mms.att.net gateway to email is using an SPF record with ?ALL [ip4:166.216.152.0/24  ?all] and blocked by invaluement RBL. Regards, KAM ___ mailop mailing list mailop@mailop.org

Re: [mailop] [External] Re: Any Postmaster from ATT.NET?

On 2/3/2021 10:06 AM, Rob McEwen via mailop wrote: On 2/3/2021 8:57 AM, Kevin A. McGrail via mailop wrote: Hello all, if anyone from AT is here, the @mms.att.net gateway to email is using an SPF record with ?ALL [ip4:166.216.152.0/24 ?all] and blocked by invaluement RBL. Kevin, It was 1 IP

[mailop] U.S. DoJ will elevate rasonware attacks to the same priority as terrorism

I thought this news was very welcome today: https://twitter.com/RichardEscobedo/status/1400529641065140225 “The U.S. Department of Justice is elevating investigations of ransomware attacks to a similar priority as terrorism in the wake of the Colonial Pipeline hack and mounting damage caused

Re: [mailop] [External] Huh?

On 4/30/2021 10:50 AM, Chris Kolbenschlag via mailop wrote: I got an email from a small receiver that they are blocking one of our /24s because of spam.  I looked up the email address they referenced and found the contact signed up on their website 2 years ago, has a 41% open rate, a 17% click

Re: [mailop] [External] Office 365 issues

Thanks Frank.  We had just opened a ticket about this internally and thought it was something on our end.  Appreciate your heads-up and the mailop list! Regards, KAM On 4/22/2021 11:02 AM, Frank Bulk via mailop wrote: I presume most of you are aware of issues sending to domains hosted with

Re: [mailop] [External] Reg. Virginmedia SMC Policy Violation bounce error

On 3/17/2021 9:33 PM, Vaibhav via mailop wrote: Hi, We're an ESP sending emails on behalf of clients who are receiving the following bounce error from virgin media domains (blueyonder.co.uk , ntlworld.com , virginmedia.com

[mailop] MailOp Postmaster - reason: 554 5.7.1 [C9] Missing reverse DNS for ...)

Trying to reach a Qwest/CenturyLink/CenturyNet posthandler. We have been seeing sporadic and inaccurate errors about missing reverse DNS for about a week with them.  I believe they have a problem somewhere on one of their networks/DNS servers. Seeing errors like  (reason: 554 5.7.1 [C9]

Re: [mailop] [External] SURBL.org mirror broken

On 2/22/2021 6:41 PM, Lyle Giese via mailop wrote: 38.124.232.194 is answering correctly. .193 is still malfunctioning and b.surbl.org is showing 34.124.232.193 as one of the A record. Thanks.  I bcc'd the email yesterday and will follow-up. ___

Re: [mailop] [External] SURBL.org mirror broken

Fixed. Lyle Thanks for raising the issue! ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Re: Good Hosting Suggestions?

On 2/19/2021 10:43 PM, John Levine via mailop wrote: Once again, people sending you an abuse report are doing you a favor. In my experience, If you can't figure out how to deal with attachments, I doubt you can manage your network. I have lost track of which provider we are discussing BUT I

Re: [mailop] [External] SURBL.org mirror broken

Lyle, that's the mirror my firm runs and we "fixed" a networking issue which likely broke this. Can you query from 38.124.232.194?  I'll ask them to update b.surbl.org to include 38.124.232.194 instead of .193. Thanks for raising the red flag on this. Regards, KAM On 2/22/2021 4:48 PM,

Re: [mailop] [External] What's w/ .bl.score.senderscore.com?

Andreas, Senderscore is part of Validity which is now the product Everest.  They worked with us to update some rules on the SpamAssassin project.  I'll bcc some contacts there to see if they can relay/post some information about this! Regards, KAM On 4/21/2021 10:30 AM, Andreas Schamanek

Re: [mailop] [External] Hotmail spam (again)

On 8/15/2021 8:05 AM, Markus E. via mailop wrote: How do you guys combat Hotmail spam? Markus, I did not see anything in the snippet that you posted that was of help to block the emails.  Perhaps you were just showing the IPs but I think you will find that hotmail/live/msn/outlook use all

Re: [mailop] [External] Hotmail spam (again)

Good morning, Yes sorry. That's my point. You cannot filter MS junk by its headers (as far as I know) No, but there are techniques in SpamAssassin for things such as transaction reputation and whether it's coming from a freemail provider.  This is not a new phenomenon in the anti-spam world

Re: [mailop] [External] Re: Microsoft Complaint Rate Increase

Interesting. We're seeing oddities with M365 with customers with connectors for our IPs getting S77719.  I'm still gathering information about to open a ticket but this is just started today. Regards, KAM On 9/2/2021 5:42 PM, yitzi--- via mailop wrote: We've been seeing much higher

Re: [mailop] Off-topic re: hosting recommendation (contains a response pitching my firm) was Re: Recommendation for inbox provider?

(Resending without the attachment per the Ops request but just email me if you are interested :-) ) I would love to throw my firm's hat in the rink.  For those who know PCCC, we are experts in open source work, cyber security, anti-spam and anti-phishing and have done so since 1998 including

Re: [mailop] [External] Xfinity / Comcast / rsys5.com

On 9/15/2021 2:55 AM, Daniele Nicolodi via mailop wrote: I understand that industry back practice recommends to have "unsubscribe" links in promotional bulk messages. Shouldn't these links direct to some form that effectively allows to remove the recipient address from the distribution list?

Re: [mailop] [External] Re: Recommendation for inbox provider?

Agreed.  I thought Yen's statements about it were excellent: https://protonmail.com/blog/climate-activist-arrest/ On 9/8/2021 5:07 AM, Mary via mailop wrote: I think protonmail's business model is about being secure and private within the bounds of Swiss law. The case you mention, is about

[mailop] Anyone here from SiteGround or .mailspamprotection.com?

Hello, working on a delivery error that to me looks like there might be DNS issues.  Very unusual. Regards, KAM ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Re: Fighting spam

On 10/15/2021 4:57 AM, Brent Clark via mailop wrote: Are you using KAM rules. I.e. http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf Just a note that the much better way to use the rules is with the KAM Channel, see https://mcgrail.com/template/kam.cf_channel Regards, KAM

Re: [mailop] Feasibility of a private DNSBL

Good idea.  RBLs are brilliant but when Vixie invented the idea and the Apache SpamAssassin team implemented it some 2 decades ago, I wrote something to the effect of what a (brilliant) hack. We need to replace this with something in a year. Now, many many years later and several DDOSes

Re: [mailop] [External] Help with listing on Invaluement

On 10/7/2021 11:54 AM, Lyle Lamb via mailop wrote: Hello there, Is there a rep on the list with Invaluement that can reach out to me off list about some domain listings we are seeing? Lyle, I gave Rob a heads-up on your email. Regards, KAM ___

Re: [mailop] [External] Re: Anyone here from SiteGround or .mailspamprotection.com?

Just to be clear because I'm selfish and trying to fix the issue I'm having, is SiteGround using SMTP EXPN / VRFY commands when they try to deliver mail but failing if they don't work?  I do use the privacy option of goaway for Sendmail. Regards, KAM

[mailop] [OT] Dell EMC PowerSwitch N3248TE-ON anyone out there using them?

Hi Mailop, We're evaluating the Dell EMC PowerSwitch N3248TE-ON for a 10G network and having some issues with how you get updates, etc. for the device.  We bought one as an open-box and wondering if anyone out here on MailOp has experience with them. Regards, KAM

Re: [mailop] [External] Re: Google DNS Quad 8 Outage tonight

Kevin A. McGrail via mailop wrote: Anyone out there see any Quad 8 outages from about 20:25PM Eastern to 21:16PM Eastern? Regards, KAM ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Re: Google DNS Quad 8 Outage tonight

On 11/22/2021 12:25 AM, Luke Thompson via mailop wrote: We tend to run Cloudflare quad-1 rather than Google's quad-8, though have hit instabilities with it, too. This was odd because it was a server or two setup to use Google's servers by a lazy admin.  We have a full DNS infrastructure but

[mailop] Google DNS Quad 8 Outage tonight

Anyone out there see any Quad 8 outages from about 20:25PM Eastern to 21:16PM Eastern? Regards, KAM ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Info on deluxe.com

I just received my first ever spam from |info.deluxe.com|, sent to a tagged address used exclusively for online banking. Does anyone have a contact at deluxe so that inquiries can be sent? Lem: Any chance you use that account with an accounting software that has ToS that allow for the

Re: [mailop] [External] Re: IP Reputation Services

On 4/4/2022 11:59 AM, micah via mailop wrote: More general information about the IADB is here: https://www.isipp.com/for-isps/ FWIW - spamassassin checks the ISIPP by default since 3.10 and reduces the score if your address is found there. And I can vouch for Anne Mitchell and the ISIPP. 

Re: [mailop] [External] Need Help with Google Deliverability Issue

Mark, was there a bounce message with any information? Send a message to raptorloopb...@raptoremailsecurity.com and that will tell you what that spam scanner sees to check your SPF, DKIM, DMARC, etc. Regards, KAM On 10/26/2023 3:13 PM, Mark Stanley via mailop wrote: I have recently

[mailop] gmail deliverability issue was mailop Digest, Vol 39, Issue 48

Hi Mark, I saw this and your test from the loopback. Everything looked good from ARC/DKIM/SPF/DMARC.  We've been seeing Google requiring DKIM authentication lately so we wanted to confirm that wasn't the issue. Are you sending bulk emails? I noticed it's the BBB and they send a lot of

Re: [mailop] [External] FYI - Google/Gmail hard enforcing SPF presence

Interesting note that we also saw this a few weeks ago too and had to add DKIM to get mail to work to domains that only had SPF. On 4/19/2022 3:20 AM, Andre van Eyssen via mailop wrote: A little testing shows that gmail appears to be rejecting all mail from domains with no SPF record. Having

Re: [mailop] [External] Re: FYI - Google/Gmail hard enforcing SPF presence

I don't think this is accurate. It seemed to trigger right around the start of Russia's invasion of the Ukraine.  I don't think it's consistent or has the rhyme/reason you are trying to apply to it in your tests.  I would simply say if you have issues with delivery to Google, look at your

Re: [mailop] [External] Re: FYI - Google/Gmail hard enforcing SPF presence

While you are likely right about RFCs, general mail administrator hygiene like having rptr's, etc. is something we've all had to work on since the days of AOL being the 1000lb gorilla and enforcing postmaster guidelines.  RFCs typically codify real-world practices not drive them. My argument

Re: [mailop] [External] Re: Microsoft CERT Report Response Marked As Spam

I wouldn't agree with that.  Microsoft sending emails with invalid dates alone would put this under the threshold. -KAM On 11/9/2023 1:41 PM, Jarland Donnell via mailop wrote: A score of 5.8 on SpamAssassin rules is fairly low. It would be more advisable for you to consider adjusting your

Re: [mailop] [External] Re: dmarcian Probe

NOTE: I got one of these probes as well about 2  weeks and flagged it to watch. Thanks for posting about it. -KAM On 6/25/2022 11:54 AM, L. Mark Stone via mailop wrote: RAPTOR REMARK: Alert! Please be careful! This email is from an EXTERNAL sender. Be aware of impersonation and credential

Re: [mailop] [EXTERNAL] Re: Moving email server to new IP

On 7/8/2022 11:23 AM, Russell Clemings via mailop wrote: We use spamhaus zen, spamcop, and barracuda , along with spamassassin, but some still gets through. Russell and others, re: Spam getting through.  We've been publishing the KAM ruleset now for Apache SpamAssassin for going on 18 years

Re: [mailop] [External] Google Workspace Account Deliverability Issues

On 7/25/2022 1:46 PM, Jenny Nespola via mailop wrote: I was approached today by a potential client asking why one account in their Workspace is bulking, while none of the others are. Granted that one user could be generating complaints, but (from what was shared with me) it doesn't seem to be

Re: [mailop] [External] Re: Did Google become stricter about RFC 5322?

On 7/13/2022 11:18 AM, Miles Fidelman via mailop wrote: It's been over a month now, since Google became hostile to email lists.  I'm still dealing with the aftermath. Do you mean their stricter requirements around SPF and DKIM? ___ mailop mailing

Re: [mailop] [External] Google Workspace support? Off-list...

This is a common question over at the Google Workspace community: https://www.googlecloudcommunity.com/ Two recommendations: See https://support.google.com/a/answer/33561?hl=en=1 And if it's enabled, and you are on the domain you might figure out the account from the directory:

Re: [mailop] [External] I received a scam letter from Paypal

We've seen quite a few of these.  They are abusing paypal's system, sending invoices, etc.  Agreed, it's a very good scam and leverages PayPal's real comms. -KAM On 12/28/2022 1:14 PM, Cyril - ImprovMX via mailop wrote: What I'm saying here, is what the hell? How a scam can come from Paypal

Re: [mailop] [External] Re: verizon email-to-text gateway mail deferred evening and night

On 1/6/2023 9:34 PM, John Levine via mailop wrote: WHen you use someone else's free e-mail gateway, it shouldn't be surprising that sometimes you only get what you paid for. I would just point out that the gateway I use is part of my cell service so I don't consider it free but part of the

Re: [mailop] [External] Re: RackSpace Security Issue

Here, here! On 12/5/2022 5:11 PM, William Kern via mailop wrote: best wishes to the poor sysadmins at Rackspace who are not having a good weekend/week. ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Anyone from Spamhaus?

Quick note from SH: "Sorry for the delay, we have too many people out sick right now! This was caused by a rule that we determined was not working as desired. It's been pulled. Please accept our apologies for the aggravation." Regards, KAM On 1/19/2023 11:20 PM, Mark Fletcher via mailop

Re: [mailop] [External] Re: Try to understand *.onmicrosoft.com

Just a note that it is not necessarily a free trial.  It's the onboarding domain for M365. I would NOT agree that it reflects legitimate traffic and have rules in the KAM ruleset for the onmicrosoft domains.  They are being abused. Regards, KAM On 11/8/2022 7:01 PM, Suresh Ramasubramanian

Re: [mailop] [External] Re: Question of SPF record

To add onto this, rarely will you want to divine the IP addresses of your service providers.  Contact them for their include record.  From searching the interweb, it seems these are likely what you want: *//*include:_spf.perfora.net include:_spf.kundenserver.de include:spf.mailjet.com If

[mailop] [Off-Topic] Blog from KAM on Cybersecurity and Looking for Hecklers for my workshop at InboxExpo

Hi Mailopers, Thanks to Inbox Expo for publishing my 2 Secrets to Streamline Cybersecurity Projects. You can read it at https://inboxexpo.com/2-secrets-from-from-kam/ and no registration or silliness required! I will also be presenting the keynote and a workshop for InboxExpo.com on

Re: [mailop] [External] Re: United Airlines / mileageplus DNS/rDNS mismatch issue

On 5/9/2023 4:17 PM, Gellner, Oliver via mailop wrote: I’d be surprised if there are many members on this list whose systems do not penalize connections from IP addresses without a fully confirmed reverse DNS entry one way or the other. Maybe I‘m wrong, but then I‘d like to hear from them.

Re: [mailop] [External] seeking a spamtrap milter

Hi folks, I suspect this exists, but can't come up with the right search. I have domains that should never receive mail. I'd like a milter that looks for mail to those domains and feeds the IP of the sender to an outside program. Surely someone wrote this spamtrap software? Or does everyone

[mailop] OT re Munging was Re: Extortion spam from OVH-hosted *.sbs domains

Hi MailOp, I thought I would send a note that emails about this topic with OVH and SBS domains have sometimes been going into spam because some emails mention URIs that are on blocklists. At the Apache SpamAssassin project we typical discuss things with [] brackets or the word munge to

  1   2   >