google's receiving policies

2022-12-09 Thread Henry R
t-online has no SPF & DMARC & DKIM settings. but google try to maintain a 
reliable sender IP list for them.

if you forward a message which is original from t-online to gmail, if you don't 
have SRS enabled for this forwarding, gmail will just reject it.

as far as I know, many ISP level forwardings have NO SRS setup, including 
Mail.ru, Freenet.de, and even Outlook.

since there is no spf, no dkim for t-online, how google know it's coming from a 
valid IP? the only reason I can image is that google help maintain that a ip 
list for t-online itself.

how do you think of this?

Thanks & regards.


Re: relay server port listening on all or local?

2022-12-01 Thread Henry R
One way is webmail I may think.


> 
> On 01.12.22 10:02, linux...@gmx.net wrote:
> 
> > 
> > I am using postfix as mail relay which is deployed on gateway for internal 
> > users.
> > This relay send mail out only, doesn't accept messages.
> > My question is, do I need to make the relay server port 25 listened on > 
> > 0.0.0.0? or just 127.0.0.1 should work?
> > 
> 
> how do internal users connect to your mail gateway?
> 
> -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
> Warning: I wish NOT to receive e-mail advertising to this address.
> Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
> How does cat play with mouse? cat /dev/mouse
>


delivery capacity reports

2022-11-30 Thread Henry R
Hello,

We have good delivery capacity to these providers for now,

- Gmail
- Outlook/Hotmail
- Yahoo
- iCloud
- ATT/Currently
- AOL
- GMX/Web.de
- T-Online
- Vodafone
- Mail.de
- Freenet.de
- Free.fr

Thanks for everyone's helps in the past.
If you have found our server has delivery issues to others (the account can be 
registered for free), please let me know.

Regards
Henry Roth


Re: how to deal with t-online's blocking

2022-11-30 Thread Henry R
I was once charter's customer.
But I leave them since charter was bought by Spectrum.
And spectrum blocks all IP from DO and Linode.

Thanks 


> 
> > 
> > "Henry" == Henry R  writes:
> > 
> >  My mailserver once had some issues on sending messages to different
> >  providers. I have contacted the provders and most of them were kind
> >  enough to resolve the blocking issue. Thanks for them (ATT, GMX,
> >  1and1 etc).
> > 
> 
> I'm in the same boat with one provider, charter.net, to shame them
> publicly. They block my mail host (with proper SPF records, reverse
> DNS) mail.stoffel.org for some reason. Probably because the block all
> of linode's address space. Jerks. 
> 
> > 
> > But t-online.de keep blocking me. I have contacted them twice and got the 
> > same answer:
> > 
> >  We only allow evidently commercial or similar operators to connect
> >  to our mailservers. So, as a private user please use an SMTP relay
> >  or e-mail gateway of your hoster or ISP, that you can use as part of
> >  your contract with them. Their support will surely help you to
> >  configure your system accordingly.
> > 
> 
> Oh well... 
> 
> > 
> > That's so strange policy to permit only commercial company to send
> >  messages to them. But there are many small companies/org who have
> >  their own mailservers, which can't send messages to t-online
> >  directly.
> > 
> >  How do you think of this behavior?
> > 
> 
> It sucks big time. But unfortunately I can see more and more large
> providers going this route. 
> 
> I wonder if they block hosts in the .edu domains as well like this?
>


Re: how to deal with t-online's blocking

2022-11-30 Thread Henry R
The issue has been resolved by getting reply from t-online:

"We will unblock your IP. Please notice that it may take up to 24 hours
until the change shows acute effect. Please excuse any inconveniences,
but we do not see other possibilities to react to the millions of
junkmails we receive at present. Thank you for your appreciation."


Thank you buddies.
Henry 


> 
> Those are obligations for web sites. But what about a mail sending domain 
> without web site ?
>


Re: how to deal with t-online's blocking

2022-11-30 Thread Henry R
Thank you Jaroslaw. following your suggestion i am giving another try.


> 
> Dnia 30.11.2022 o godz. 02:08:57 Henry R pisze:
> 
> > 
> > That's so strange policy to permit only commercial company to send messages 
> > to them.
> >  But there are many small companies/org who have their own mailservers, 
> > which can't send messages to t-online directly.
> >  
> >  How do you think of this behavior?
> > 
> 
> This has been discussed a lot on "mailop" list recently.
> Yes, they do have a strange policy indeed. Probably no other large email
> provider behaves like this.
> From the discussion on that list it turns out, that the condition under
> which they consider a server to be "commercial" is to provide so called
> "imprint" on the website associated with the domain, with full contact
> details (your name, street address and telephone number!). After you request
> that they unblock your IP, they check manually for existence of that
> "imprint", and if it satisfies their requirements, they'll unblock you.
> -- 
> Regards,
>  Jaroslaw Rafa
>  r...@rafa.eu.org
> --
> "In a million years, when kids go to school, they're gonna know: once there
> was a Hushpuppy, and she lived with her daddy in the Bathtub."
>


Re: AW: how to deal with t-online's blocking

2022-11-30 Thread Henry R
The mail log did say:

Nov 30 12:17:08 mx3 postfix/smtp[220173]: EEF9C9F07F: host 
mx01.t-online.de[194.25.134.72] refused to talk to me: 554 IP=xx.xx.xx.xx - 
None/bad reputation. Ask your postmaster for help or to contact 
t...@rx.t-online.de for reset. (NOWL)

I use the contact from the returned message.

Thanks


> 
> Hi,
> 
> I remember writing to TOL on behalf of a .net organisation. And request they 
> whitelist the new IP of their server. That worked.
> 
> The address should be in your logfile with the reject.
> 
> Did you use that or some other channel to talk to them?
> 
> So many companies ignore basic things like abuses. Or in this case invent 
> their own whitelist.
> I bet nothing of all this gets them on a RFC-ignorant style list, where they 
> belong IMO.
> 
> Greets,
> Ludi
> 
> -Ursprüngliche Nachricht-
> Von: owner-postfix-us...@postfix.org  Im 
> Auftrag von Henry R
> Gesendet: Mittwoch, 30. November 2022 03:09
> An: postfix-users@postfix.org
> Betreff: how to deal with t-online's blocking
> 
> Hello,
> 
> My mailserver once had some issues on sending messages to different 
> providers. I have contacted the provders and most of them were kind enough to 
> resolve the blocking issue. Thanks for them (ATT, GMX, 1and1 etc).
> 
> But t-online.de keep blocking me. I have contacted them twice and got the 
> same answer:
> 
> We only allow evidently commercial or similar operators to connect to our 
> mailservers. So, as a private user please use an SMTP relay or e-mail gateway 
> of your hoster or ISP, that you can use as part of your contract with them. 
> Their support will surely help you to configure your system accordingly.
> 
> That's so strange policy to permit only commercial company to send messages 
> to them.
> But there are many small companies/org who have their own mailservers, which 
> can't send messages to t-online directly.
> 
> How do you think of this behavior?
> 
> Thanks.
>


Re: how to deal with t-online's blocking

2022-11-30 Thread Henry R
Thank you very much. i will improve my site to fill their requirement.


> 
> > 
> > But t-online.de keep blocking me. I have contacted them twice and got the 
> > same answer:
> >  
> >  We only allow evidently commercial or similar operators to connect to
> >  our mailservers. So, as a private user please use an SMTP relay or
> >  e-mail gateway of your hoster or ISP, that you can use as part of your
> >  contract with them. Their support will surely help you to configure your
> >  system accordingly.
> > 
> 
> It is common that even german datacenter ip-addresses are blocked by t-online,
> but they are usually fast to respond and unblock, given sufficent legal info.
> 
> You should qualify for "commercial or similar operator" but you don't tell
> them who you are:
> 
> https://openmbox.net/contact.html
> "Henry R, who has 10+ years experience in email industry, owns and operates 
> the platform."
> 
> "Henry R" is lacking full name, adress, phone number, ...
> 
> Non-private websites require a site notice (also called legal info or imprint)
> in Germany / European Union, mentioning a person that is legally responsible.
> Providing an email service to anybody is probably considered commercial, even
> if you don't do it for profit.
> 
> Most mailserver operators do not demand that, but t-online does.
> 
> An example for what they expect:
> https://www.hetzner.com/legal/legal-notice
> 
> More information about Impressum:
> https://www.ionos.com/digitalguide/websites/digital-law/a-case-for-thinking-global-germanys-impressum-laws/
> 
> Best regards
> Gerald
>


Re: AW: how to deal with t-online's blocking

2022-11-30 Thread Henry R
I am trying to ecnrypt email storage at rest, such as Two-way encryption and 
decryption.

Thanks :)


> 
> Hello Henry,
> I am running my own email-server as well and can connect to t-online. I 
> assume Viktor is right that they somehow check the imprint of a parallel web 
> site. My website does not indicate I am offering email service commercially, 
> which in fact I do only to organizations I know personally.
> I did get blocked by Outlook though and changed ip address to resolve that. 
> Your data center might be suspect to them. You may want to try a VPN to a 
> different one that has better reputation.
> Btw - what "encryption" are you doing?
> Regards,
> Joachim
> 
> -Ursprüngliche Nachricht-
> Von: owner-postfix-us...@postfix.org  Im 
> Auftrag von Viktor Dukhovni
> Gesendet: Mittwoch, 30. November 2022 07:55
> An: postfix-users@postfix.org
> Betreff: Re: how to deal with t-online's blocking
> 
> On Wed, Nov 30, 2022 at 02:08:57AM +, Henry R wrote:
> 
> > 
> > But t-online.de keep blocking me. I have contacted them twice and got the 
> > same answer:
> >  
> >  We only allow evidently commercial or similar operators to connect
> >  to our mailservers. So, as a private user please use an SMTP relay
> >  or e-mail gateway of your hoster or ISP, that you can use as part
> >  of your contract with them. Their support will surely help you to
> >  configure your system accordingly.
> >  
> >  That's so strange policy to permit only commercial company to send 
> >  messages to them. But there are many small companies/org who have 
> >  their own mailservers, which can't send messages to t-online directly.
> > 
> 
> Most likely this is not their actual policy, but rather a way for some 
> underpaid level-1 tech support staffer to close your issue.
> 
> See https://postmaster.t-online.de/#t4 for what appear to be the actual 
> requirements. They do appear to expect sending domains to have a website, 
> public contact addresses, ... but a requirement to be a commercial operator 
> isn't there, best I can tell.
> 
> You could try to escalate after politely pointing to the above page and 
> pointing out that it does not in fact prohibit suitably operated personal 
> mail servers.
> 
> -- 
>  Viktor.
>


how to deal with t-online's blocking

2022-11-29 Thread Henry R
Hello,

My mailserver once had some issues on sending messages to different providers. 
I have contacted the provders and most of them were kind enough to resolve the 
blocking issue. Thanks for them (ATT, GMX, 1and1 etc).

But t-online.de keep blocking me. I have contacted them twice and got the same 
answer:

We only allow evidently commercial or similar operators to connect to
our mailservers. So, as a private user please use an SMTP relay or
e-mail gateway of your hoster or ISP, that you can use as part of your
contract with them. Their support will surely help you to configure your
system accordingly.


That's so strange policy to permit only commercial company to send messages to 
them.
But there are many small companies/org who have their own mailservers, which 
can't send messages to t-online directly.

How do you think of this behavior?

Thanks.


Re: questions to postfix's behavior

2022-10-21 Thread Henry R

I have postfix with opendkim and policyd-spf enabled.
when a message incomes they do check SPF and DKIM (for which I can 
verify the results in messages header).
I don't know how to configure postfix to take actions on these failed 
messages, such as reject them.


Thank you


Jaroslaw Rafa wrote:

You have to use additional software to check DKIM/SPF/DMARC.


questions to postfix's behavior

2022-10-21 Thread Henry R

Hello list,

As a receiver MTA (postfix), if DKIM, SPF or DMARC has got failed to the 
sender domain, what action postfix will take for this incoming message? 
reject or greylist it?


I have setup the mail system (as this domain openmbox.net) but not sure 
about it. thanks.



regards
Henry