r0nmlt

thanks. much appreciated.

Sorry but never got a reminder. Donation paid 6JP84250JW691670D. I put a reminder on my calendar for 1st April 2020 to keep it going and not skip payment again. Thanks.

Thanks

My username is fcsltd and my domain is fcs.com.mt. I have a staitc IP 64.62.151.106. How do I go about setting up a PTR record? Thanks

my $10 went through now. we can maybe forward the confirmation emails to a set up mailbox with username as subject. If forwarded properly the gofundme confirmation email is timestamped with the time of transaction so easy identification is possible.

it does affect mail somewhat. pop3 was down this morning (CET) and you also get this

Yes I think it is down. My emails aren't being forwarded and pop3 access is also affected.

Slightly different subject but shows that forwarders and global email filters are treated differently by spamassassin https://forums.cpanel.net/threads/spamassassin-do-not-forward-mail-to-external-recipients.602763/

Yes that is what is happening, but why are they scanned most of the time and at other times not scanned. Just for the sake of it: The forwarding is being taken care of by the "global email filters" option not by the "forwarders" option in Cpanel. I do remember having problems with the forwarders option and spamassasin and therefore opted for the global filters.

I understand and appreciate that. The weird thing is that these emails do not have a spam score. If spamassasin gives a spamscore of 3 when it should have been 30 it is understandable, but to have an email without a spam score is beyond me. Another email went through with the same issue. I am attaching the email with headers in a txt file. Please note that the email has again been flagged by gmail as: "ECDHE-RSA-AES128-GCM-SHA256:128 CV=yes: SMTP error from remote mail server after end of data: 552-5.7.0 This message was blocked because its content presents a potential\n552-5.7.0 security issue. Please visit\n552-5.7.0 https://support.google.com/mail/?p=BlockedMessage to review our\n552 5.7.0 message content and attachment content guidelines. d2-v6si9568929pla.359 - gsmtp" emailwithheaders.txt This is the trace showing the email without spam score.

Sorry but I forward all mail and do not store it on tommy. So you will see all my mailboxes are empty. I have now amended the rules to keep a store on tommy so that if this happens again you will be able to see the email and its headers. With the filters I had in place, the email was in the process of being forwarded but was refused by gmail. The email was then lost in this process as tommy was being instructed just to forward and not keep a copy. The rules now are forward but keep a copy, so in the event of a similar email, the forwarded email will be lost, but a copy will be stored on a mailbox on tommy. Until then not much can be done, but thank you for the time you put into looking. Will get back to you when it happens again.

The emails addressed to that account are supposedly never stored in the mailbox. They are either forwarded to a gmail account or to the spam account depending on the "spam status" given by spamassassin. There are 3 global email filters which take care of this. The email i highlighted was in the process of being forwaded to gmail only to be refused by gmail. The email was then lost and the only trace of it is this log. I hope this explains better what is happening.

No it's ron

Sorry I didn't mean to sound demanding.

Have I lodged this under the wrong section? As nobody has answered the post after 2 days!

My domain emails are forwarded to a gmail account unless spamassassin flags them as spam in which case they are left in a spam mailbox on tommy which is regularly monitored and emails deleted if spam or forwarded if they are false alerts. This setup tries to avoid having tommy blacklisted by gmail who might think tommy is trying to forward spam. I have noticed from track delivery that some spam mail is being going through spam assassin and the thing that concerns me most is that no spam score is being given to the mail. One mail in particular had "Sanesecurity.Malware.27397.RtfHeur.Zip.UNOFFICIAL" and was refused by gmail. Attached are the screenshots of the said incident. I also tried blacklisting the sender via spamassassin control panel but the incident happened again with the same sender! Can I please get some help in resolving this for the sake of myself and the rest of this community. I'm sure that just as I am getting these forwards others are having the same misses by spamassassin which might result in blacklisting by major email providers. Ron.

Hi done. 8F396106DH717451R. Thanks.

I am. How do I go about paying the fee?

Final update to this problem. I got a reply from Microsoft: "Dear sir We have completed reviewing the IP(s) you submitted. The following table contains the results of our investigation. Not qualified for mitigation 65.19.143.6 Our investigation has determined that the above IP(s) do not qualify for mitigation. Please ensure your emails comply with the Outlook.com policies, practices and guidelines found here: http://mail.live.com/mail/policies.aspx. To have Deliverability Support investigate further, please reply to this email with a detailed description of the problem you are having, including specific error messages, and an agent will contact you. Regardless of the deliverability status, Outlook.com recommends that all senders join two free programs that provide visibility into the Outlook.com traffic on your sending IP(s), the sending IP reputation with Outlook.com and the Outlook.com user complaint rates. Junk Email Reporting program (JMRP) When an Outlook.com user marks an email as "junk", senders enrolled in this program get a copy of the mail forwarded to the email address of their choice. It allows senders to see which mails are being marked as junk and to identify mail traffic you did not intend to send. To join, please visit http://support.msn.com/eform.aspx?productKey=edfsjmrpp&page=support_home_options_form_byemail&ct=eformts. Smart Network Data Services program (SNDS). This program allows you to monitor the ‘health’ and reputation of your registered IPs by providing data about traffic such as mail volume and complaint rates seen originating from your IPs. To register, please visit http://postmaster.live.com/snds/. There is no silver bullet to maintaining or improving good IP reputation, but these programs help you proactively manage your email eco-system to help better ensure deliverability to Outlook.com users. Thank you, Outlook.com Deliverability Support" So in short Tommy is on microsoft's permanent ban and i don't think they will change its status as the email clearly states not qualified for mitigation. This means that anyone sending emails to outlook.com, hotmail.com, msn.com etc will have their emails refused by Microsoft's servers and not delivered. I will be looking into either a forwarding email service or else an email hosting plan. Any advice on these will be appreciated.

Yes you are perfectly right. Tommy is not blacklisted anywhere else. Just on Microsoft's hotmail. I will have to keep filling up their unlisting form maybe someday someone will unlist. Thanks for your support though. Much appreciated.

just wanted to bump this thread, maybe somebody can solve this issue that has been around for quite some time now. The problem with hotmail.com/outlook.com email addresses still persists. Emails are being refused from tommy on the basis of: SMTP error from remote mail server after pipelined MAIL FROM:<***> SIZE=1652: 550 5.7.1 Unfortunately, messages from [65.19.143.6] weren't sent. Please contact your Internet service provider since part of their network is on our block list (AS3150). You can also refer your provider to http://mail.live.com/mail/troubleshooting.aspx#errors. [AM5EUR02FT032.eop-EUR02.prod.protection.outlook.com]

spoke too soon. problem is still on. hotmail is still refusing emails originating from tommy.

Problem resolved itself. Thanks to all that helped

Already gave you this (see anove)and you used it but nothing changed https://support.microsoft.com/en-us/getsupport?oaspworkflow=start_1.0.0.0&wfname=capsub&productkey=edfsmsbl3&ccsid=636568083781148764

The above is the contents of the bounced emails