Hey guys, I am currently running exchange 2010, I have implemented SPF record, and tried to implement dkim/domain keys using domain sink, but it doesn't seem to work. The problem I am having is that all my emails go to spam, whenever I email some one whether it is msn/yahoo/gmail. For Msn i fixed it, since I subscribed to senders framework program.
here are the orignal copies of Gmail and yahoo:
Yahoo: From Sami Sheikh Wed Jan 27 14:15:51 2010 X-Apparently-To: sunny_3000ca@yahoo.ca via 98.136.167.166; Wed, 27 Jan 2010 06:19:52 -0800 Return-Path: X-YahooFilteredBulk: 67.55.9.182 X-YMailISG: 58M0TdIWLDvbv_d_qz4ABPsuq0Fmn1fLYMy08ZnNKPgA1aH3sVNx_KKFsiBK8ZOTBVDwBVnpTvRNkuTZc2UDsNMbj6nV9hfE43MQz3tXRV3.rh62wcp4oqT8AuzKKU5JSxU5g2AH4NzOmT5nGNiRyNEi6xazlMZTDm0rnfWbVECGV4RHzwM1TEadla6Bq_itel6hNinq_6MnPRxu2vX_fddmlCAG1Fi6X0ivjkKPqSr..MvpO8MnlTQTZZjRSoxLZUOqg0vjTPEPary5d_xf3MaS6IsRIScPMMk- X-Originating-IP: [67.55.9.182] Authentication-Results: mta1066.mail.mud.yahoo.com from=; domainkeys=neutral (no sig); from=SamChrisNetwork.info; dkim=neutral (no sig) Received: from 127.0.0.1 (EHLO sam.samchrisnetwork.info) (67.55.9.182) by mta1066.mail.mud.yahoo.com with SMTP; Wed, 27 Jan 2010 06:19:52 -0800 Received: from Sam.SamChrisNetwork.info ([fe80::b8d3:44f5:68fe:dc55]) by Sam.SamChrisNetwork.info ([fe80::b8d3:44f5:68fe:dc55%24]) with mapi; Wed, 27 Jan 2010 09:15:52 -0500 From: Sami Sheikh To: "sunny_3000ca@yahoo.ca" Subject: Test Thread-Topic: Test Thread-Index: AcqfWzrrj8hB3VnJTHC0K4Ev4D+qpw== Date: Wed, 27 Jan 2010 14:15:51 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-ID: <660dccae-e8e8-4aa0-b13d-5c57052b5335> Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 Content-Length: 26
Gmail:
Delivered-To: sampimpinthug@gmail.com Received: by 10.204.102.18 with SMTP id e18cs53728bko; Thu, 28 Jan 2010 09:58:46 -0800 (PST) Received: by 10.224.116.70 with SMTP id l6mr6467857qaq.157.1264701525683; Thu, 28 Jan 2010 09:58:45 -0800 (PST) Return-Path: Received: from sam.samchrisnetwork.info (dsl-67-55-9-182.acanac.net [67.55.9.182]) by mx.google.com with ESMTP id 15si2150271qyk.91.2010.01.28.09.58.45; Thu, 28 Jan 2010 09:58:45 -0800 (PST) Received-SPF: pass (google.com: domain of SheikhS@samchrisnetwork.info designates 67.55.9.182 as permitted sender) client-ip=67.55.9.182; Authentication-Results: mx.google.com; spf=pass (google.com: domain of SheikhS@samchrisnetwork.info designates 67.55.9.182 as permitted sender) smtp.mail=SheikhS@samchrisnetwork.info Received: from Sam.SamChrisNetwork.info ([fe80::b8d3:44f5:68fe:dc55]) by Sam.SamChrisNetwork.info ([fe80::b8d3:44f5:68fe:dc55%24]) with mapi; Thu, 28 Jan 2010 12:58:15 -0500 From: Sami Sheikh To: "sampimpinthug@gmail.com" Subject: test Thread-Topic: test Thread-Index: AcqgQ3ZLj8tW8+jFSA+Vgz5dd1gwMQ== Date: Thu, 28 Jan 2010 17:58:14 +0000 Message-ID: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_D8C475B722E95D449334E73DD06751ECB0AF10SamSamChrisNetwor_" MIME-Version: 1.0
--_000_D8C475B722E95D449334E73DD06751ECB0AF10SamSamChrisNetwor_ Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
test
--_000_D8C475B722E95D449334E73DD06751ECB0AF10SamSamChrisNetwor_ Content-Type: text/html; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
test<= /p>=
--_000_D8C475B722E95D449334E73DD06751ECB0AF10SamSamChrisNetwor
report from Port25:
This message is an automatic response from Port25's authentication verifier service at verifier.port25.com. The service allows email senders to perform a simple check of various sender authentication mechanisms. It is provided free of charge, in the hope that it is useful to the email community. While it is not officially supported, we welcome any feedback you may have at .
Thank you for using the verifier,
The Port25 Solutions, Inc. team
==========================================================
Summary of Results
SPF check: pass DomainKeys check: neutral DKIM check: neutral Sender-ID check: pass SpamAssassin check: ham
==========================================================
Details:
HELO hostname: sam.samchrisnetwork.info Source IP: 67.55.9.182 mail-from: SheikhS@SamChrisNetwork.info
SPF check details:
Result: pass ID(s) verified: smtp.mail=SheikhS@SamChrisNetwork.info DNS record(s): SamChrisNetwork.info. 3600 IN TXT "v=spf1 ip4:67.55.9.182/24 mx a:sam.samchrisnetwork.info mx:mail.samchrisnetwork.info mx:sam.samchrisnetwork.info ~all"
DomainKeys check details:
Result: neutral (message not signed) ID(s) verified: header.From=SheikhS@SamChrisNetwork.info DNS record(s):
DKIM check details:
Result: neutral (message not signed) ID(s) verified:
NOTE: DKIM checking has been performed based on the latest DKIM specs (RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for older versions. If you are using Port25's PowerMTA, you need to use version 3.2r11 or later to get a compatible version of DKIM.
Sender-ID check details:
Result: pass ID(s) verified: header.From=SheikhS@SamChrisNetwork.info DNS record(s): SamChrisNetwork.info. 3600 IN TXT "v=spf1 ip4:67.55.9.182/24 mx a:sam.samchrisnetwork.info mx:mail.samchrisnetwork.info mx:sam.samchrisnetwork.info ~all"
SpamAssassin check details:
SpamAssassin v3.2.5 (2008-06-10)
Result: ham (0.6 points, 5.0 required)
pts rule name description
-0.0 SPF_PASS SPF: sender matches SPF record -0.7 BAYES_20 BODY: Bayesian spam probability is 5 to 20% [score: 0.1146] 1.4 AWL AWL: From: address is in the auto white-list
========================================================== Explanation of the possible results (adapted from
draft-kucherawy-sender-auth-header-04.txt):
"pass" the message passed the authentication test.
"fail" the message failed the authentication test.
"softfail" the message failed the authentication test, and the authentication method has either an explicit or implicit policy which doesn't require successful authentication of all messages from that domain.
"neutral" the authentication method completed without errors, but was unable to reach either a positive or a negative result about the message.
"temperror" a temporary (recoverable) error occurred attempting to authenticate the sender; either the process couldn't be completed locally, or there was a temporary failure retrieving data required for the authentication. A later retry may produce a more final result.
"permerror" a permanent (unrecoverable) error occurred attempting to authenticate the sender; either the process couldn't be completed locally, or there was a permanent failure retrieving data required for the authentication.
==========================================================
Original Email
Return-Path: Received: from sam.samchrisnetwork.info (67.55.9.182) by verifier.port25.com (PowerMTA(TM) v3.6a1) id hc0mn60hse8h for ; Wed, 27 Jan 2010 07:11:31 -0500 (envelope-from ) Authentication-Results: verifier.port25.com smtp.mail=SheikhS@SamChrisNetwork.info; mfrom=pass; Authentication-Results: verifier.port25.com header.From=SheikhS@SamChrisNetwork.info; domainkeys=neutral (message not signed); Authentication-Results: verifier.port25.com; dkim=neutral (message not signed); Authentication-Results: verifier.port25.com header.From=SheikhS@SamChrisNetwork.info; pra=pass; Received: from Sam.SamChrisNetwork.info ([fe80::b8d3:44f5:68fe:dc55]) by Sam.SamChrisNetwork.info ([fe80::b8d3:44f5:68fe:dc55%24]) with mapi; Wed, 27 Jan 2010 09:12:06 -0500 From: Sami Sheikh To: "check-auth@verifier.port25.com" Subject: Test Thread-Topic: Test Thread-Index: AcqfWrTNJAbICp6MQsiQwUi89zjagw== Date: Wed, 27 Jan 2010 14:12:04 +0000 Message-ID: <7F8B8F33-B676-4736-8F74-AA7B40777F20@SamChrisNetwork.info> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: text/plain; charset="us-ascii" Content-ID: Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0
Test
Sent from my iPhone
-
The following is based off of the IP I see in your logs as the mail sending IP of 67.55.9.182.
You have a PTR entry, which is good.
;; ANSWER SECTION: 182.9.55.67.in-addr.arpa. 14400 IN PTR dsl-67-55-9-182.acanac.net.However your forward and reverse should match ideally. The reverse entry leads me to believe that you are running this off of a DSL ISP connection. That is enough to get your mail marked as spam in some systems. They do not like seeing mail coming from "home" or "consumer" connections.
Your IP is also listed in several blacklists:
67.55.9.182 is listed in dnsbl-3.uceprotect.net 67.55.9.182 is listed in bl.spamcannibal.orgThis will also result in your mail being sent to the spam bin.
Resolve the above issues and you will likely see your mail being accepted as ham. Hope that helps and let me know if you have any questions.
Dave Drager : Reverse DNS is handled by your ISP. Any PTR is likely not delegated to your local Windows Server 2k8 and any that you add would not be recognized across the internet. Unless you have some special setup from your ISP.From Dave Drager -
Can you check out now, the ptr is pointing to samchrisnetwork.info, and I have tried to incorporate DKIM, and domainkeys but still my mails are going to spam for gmail and yahoo!
here are the spam reports:
I am an MDaemon DKIM/SIDF reflector running at dkim-test@altn.com
The Authentication-Results header(s) below contain the results of various tests performed on your original message.
If your message was DKIM signed then the canonicalized form I computed for my verifier MIGHT be attached for debugging (depending upon local configuration options).
-----8<--------- Authentication-Results: c3po.altn.com spf=pass smtp.mail=Test@SamChrisNetwork.info; x-ip-ptr=pass dns.ptr=samchrisnetwork.info (ip=67.55.9.182); x-ip-helo=pass smtp.helo=exchange.samchrisnetwork.info (ip=67.55.9.182); x-ip-mail=pass smtp.mail=Test@SamChrisNetwork.info (ip=67.55.9.182); x-vbr=hardfail header.vbr-info=SamChrisNetwork.info (domain not recognized); domainkeys=hardfail header.from=Test@SamChrisNetwork.info (missing required signature)
-----8<--------- X-MDAV-Processed: c3po.altn.com, Sun, 21 Feb 2010 10:01:59 -0600 Return-path: Received: from exchange.samchrisnetwork.info (samchrisnetwork.info [67.55.9.182]) by altn.com (c3po.altn.com) (Cipher TLSv1:RC4-MD5:128) (MDaemon PRO v11.0.0rc5) with ESMTP id md50004331974.msg for ; Sun, 21 Feb 2010 10:01:58 -0600 Authentication-Results: c3po.altn.com spf=pass smtp.mail=Test@SamChrisNetwork.info; x-ip-ptr=pass dns.ptr=samchrisnetwork.info (ip=67.55.9.182); x-ip-helo=pass smtp.helo=exchange.samchrisnetwork.info (ip=67.55.9.182); x-ip-mail=pass smtp.mail=Test@SamChrisNetwork.info (ip=67.55.9.182); x-vbr=hardfail header.vbr-info=SamChrisNetwork.info (domain not recognized); domainkeys=hardfail header.from=Test@SamChrisNetwork.info (missing required signature) Received-SPF: pass (c3po.altn.com: domain of Test@SamChrisNetwork.info designates 67.55.9.182 as permitted sender) x-spf-client=MDaemon.PRO.v11.0.0rc5 receiver=c3po.altn.com client-ip=67.55.9.182 envelope-from= helo=exchange.samchrisnetwork.info X-Spam-Level: X-Spam-Status: No, score=-15.10 required=4.4 X-Spam-Report: * 1.0 MDAEMON_DK_FAIL MDaemon: failed DomainKeys verification * -20 USER_IN_WHITELIST_TO address is listed in 'whitelist_to' * 0.0 HTML_MESSAGE BODY: HTML included in message * 1.6 BAYES_50 BODY: Bayesian spam probability is 40 to 60% * [score: 0.5201] * 2.2 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO X-Spam-Processed: c3po.altn.com, Sun, 21 Feb 2010 10:01:58 -0600 (processed during SMTP session) X-MDPtrLookup-Result: pass dns.ptr=samchrisnetwork.info (ip=67.55.9.182) (c3po.altn.com) X-MDHeloLookup-Result: pass smtp.helo=exchange.samchrisnetwork.info (ip=67.55.9.182) (c3po.altn.com) X-MDMailLookup-Result: pass smtp.mail=Test@SamChrisNetwork.info (ip=67.55.9.182) (c3po.altn.com) X-MDDK-Result: fail (c3po.altn.com) X-MDDKIM-Result: neutral (c3po.altn.com) X-MDVBR-Result: not certified (c3po.altn.com) X-MDSPF-Result: unapproved (c3po.altn.com) X-Rcpt-To: dkim-test@altn.com X-MDRcpt-To: dkim-test@altn.com X-MDRemoteIP: 67.55.9.182 X-Return-Path: Test@SamChrisNetwork.info X-Envelope-From: Test@SamChrisNetwork.info X-MDaemon-Deliver-To: dkim-test@altn.com Received: from EXCHANGE.SamChrisNetwork.info ([fe80::78b9:5051:6d:147e]) by Exchange.SamChrisNetwork.info ([fe80::78b9:5051:6d:147e%20]) with mapi; Sun, 21 Feb 2010 11:00:35 -0500 From: "Sami M. Sheikh" To: "dkim-test@altn.com" , "check-auth@verifier.port25.com" Subject: test Thread-Topic: test Thread-Index: AcqzC6QJJUSeGA/vTyus3Oox+jj62AAA1Ewm Date: Sun, 21 Feb 2010 16:00:15 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_E4AFF5AF0A049F49A1A5AA6D16E15554B0EE65ExchangeSamChrisN_" MIME-Version: 1.0
-----8<---------
This message is an automatic response from Port25's authentication verifier service at verifier.port25.com. The service allows email senders to perform a simple check of various sender authentication mechanisms. It is provided free of charge, in the hope that it is useful to the email community. While it is not officially supported, we welcome any feedback you may have at .
Thank you for using the verifier,
The Port25 Solutions, Inc. team
==========================================================
Summary of Results
SPF check: pass DomainKeys check: neutral DKIM check: neutral Sender-ID check: pass SpamAssassin check: ham
==========================================================
Details:
HELO hostname: exchange.samchrisnetwork.info Source IP: 67.55.9.182 mail-from: Test@SamChrisNetwork.info
SPF check details:
Result: pass ID(s) verified: smtp.mail=Test@SamChrisNetwork.info DNS record(s): SamChrisNetwork.info. 3600 IN TXT "v=spf1 ip4:67.55.9.182/24 a mx a:exchange.samchrisnetwork.info mx:exchange.samchrisnetwork.info ?all"
DomainKeys check details:
Result: neutral (message not signed) ID(s) verified: header.From=Test@SamChrisNetwork.info DNS record(s):
DKIM check details:
Result: neutral (message not signed) ID(s) verified:
NOTE: DKIM checking has been performed based on the latest DKIM specs (RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for older versions. If you are using Port25's PowerMTA, you need to use version 3.2r11 or later to get a compatible version of DKIM.
Sender-ID check details:
Result: pass ID(s) verified: header.From=Test@SamChrisNetwork.info DNS record(s): SamChrisNetwork.info. 3600 IN TXT "v=spf1 ip4:67.55.9.182/24 a mx a:exchange.samchrisnetwork.info mx:exchange.samchrisnetwork.info ?all"
SpamAssassin check details:
SpamAssassin v3.2.5 (2008-06-10)
Result: ham (-0.1 points, 5.0 required)
pts rule name description
-0.0 SPF_PASS SPF: sender matches SPF record 0.0 HTML_MESSAGE BODY: HTML included in message 2.2 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% [score: 0.0070] 0.3 AWL AWL: From: address is in the auto white-list
========================================================== Explanation of the possible results (adapted from
draft-kucherawy-sender-auth-header-04.txt):
"pass" the message passed the authentication test.
"fail" the message failed the authentication test.
"softfail" the message failed the authentication test, and the authentication method has either an explicit or implicit policy which doesn't require successful authentication of all messages from that domain.
"neutral" the authentication method completed without errors, but was unable to reach either a positive or a negative result about the message.
"temperror" a temporary (recoverable) error occurred attempting to authenticate the sender; either the process couldn't be completed locally, or there was a temporary failure retrieving data required for the authentication. A later retry may produce a more final result.
"permerror" a permanent (unrecoverable) error occurred attempting to authenticate the sender; either the process couldn't be completed locally, or there was a permanent failure retrieving data required for the authentication.
==========================================================
Original Email
Return-Path: Received: from exchange.samchrisnetwork.info (67.55.9.182) by verifier.port25.com (PowerMTA(TM) v3.6a1) id hg4u780hse8v for ; Sun, 21 Feb 2010 09:00:20 -0500 (envelope-from ) Authentication-Results: verifier.port25.com smtp.mail=Test@SamChrisNetwork.info; mfrom=pass; Authentication-Results: verifier.port25.com header.From=Test@SamChrisNetwork.info; domainkeys=neutral (message not signed); Authentication-Results: verifier.port25.com; dkim=neutral (message not signed); Authentication-Results: verifier.port25.com header.From=Test@SamChrisNetwork.info; pra=pass; Received: from EXCHANGE.SamChrisNetwork.info ([fe80::78b9:5051:6d:147e]) by Exchange.SamChrisNetwork.info ([fe80::78b9:5051:6d:147e%20]) with mapi; Sun, 21 Feb 2010 11:00:35 -0500 From: "Sami M. Sheikh" To: "dkim-test@altn.com" , "check-auth@verifier.port25.com" Subject: test Thread-Topic: test Thread-Index: AcqzC6QJJUSeGA/vTyus3Oox+jj62AAA1Ewm Date: Sun, 21 Feb 2010 16:00:15 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: Content-Type: multipart/alternative; boundary="_000_E4AFF5AF0A049F49A1A5AA6D16E15554B0EE65ExchangeSamChrisN_" MIME-Version: 1.0
--_000_E4AFF5AF0A049F49A1A5AA6D16E15554B0EE65ExchangeSamChrisN_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
test
--_000_E4AFF5AF0A049F49A1A5AA6D16E15554B0EE65ExchangeSamChrisN_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
P { MARGIN-TOP: 0px; MARGIN-BOTTOM: 0px } test
--_000_E4AFF5AF0A049F49A1A5AA6D16E15554B0EE65ExchangeSamChrisN_--
Did I implement it wrong or what?
Thanks.
0 comments:
Post a Comment