Getting blacklisted

Hi
I am getting repeatadly blacklisted on Protected Sky.
I have valid spf, dmarc and rdns set up.
My mail score is 10/10. No OPen Relays..
Checked mail loggs no un authorized mail is being sent.
I have noticed messages where some spammers are pretending to be from my domain, mail server is responding with IP is not from authorized sender and sender not authorized in domain. SPF failed, DMARC failed etc.
Which is what I would expect it to reply. But am still getting lsited.

is there a solution to this?

Thanks

spf should do this job I think
How your spf looks like in zone file?

Hi

Using mail-tester.com
I get a score 10/10

When using mxtoolbox spf checker.

v    version    spf1       The SPF record version
+    mx       Pass    Match if IP is one of the
MX hosts for given domain name
+    a       Pass    Match if IP has a DNS 'A' record in given domain
+    ip4    xxx.xxx.xxx.xxx/32    Pass    Match if IP is in the given range
~    all       SoftFail    Always matches. It goes at the end of your record.
   Test    Result
   SPF Record Published    Record found
   SPF Syntax Check    The record is valid
   SPF Multiple Records    Less than two records found
   SPF Record Deprecated    No deprecated records found
   SPF Included Lookups    Number of included lookups is OK

Hopefully thats the info you require

try to move from softfail to fail cos this emails will be only marked with softfail, but accepted on some servers and delivered to the user...
I used this simple site to generate spf: http://www.spfwizard.net/

When Protected Sky list your IP, that mean your server with corresponding ip was really sending spam....  nothing to do with spf, dmarc oti dkim

Hi Jae,

Thanks for your comment.
I have run every check I can think of, including rootkit checks on server and nothing is showing.
I have also shut my server down for 48 hrs (shutdown and powered off in hosting control panel), and during this I got blacklisted again.

I also have got dmarc report; which states that over 3100 emails were detected as possibly coming from my domain; but only 30 had fully passed the dmarc and spf checks as valid emails ( which after checking were the 30 I had sent).
Thats means that over 99% of emails dmarc had notices were not from my domain.

This is really anoyhing, and takes a lot of daily checking and delisting.

ANy other ideas?

so you are saying even server is offline turned off sends emails from your domain 

My friend had similar problem but mail server was not secured and its open relay active.

Do you have any bounce back messages with ip's logs to show us or send me pm with that... to check out.