Control Web Panel
WebPanel => E-Mail => Topic started by: idc on July 09, 2016, 11:27:34 PM
-
Hi
I am getting repeatadly blacklisted on Protected Sky.
I have valid spf, dmarc and rdns set up.
My mail score is 10/10. No OPen Relays..
Checked mail loggs no un authorized mail is being sent.
I have noticed messages where some spammers are pretending to be from my domain, mail server is responding with IP is not from authorized sender and sender not authorized in domain. SPF failed, DMARC failed etc.
Which is what I would expect it to reply. But am still getting lsited.
is there a solution to this?
Thanks
-
spf should do this job I think
How your spf looks like in zone file?
-
Hi
Using mail-tester.com
I get a score 10/10
When using mxtoolbox spf checker.
v version spf1 The SPF record version
+ mx Pass Match if IP is one of the
MX hosts for given domain name
+ a Pass Match if IP has a DNS 'A' record in given domain
+ ip4 xxx.xxx.xxx.xxx/32 Pass Match if IP is in the given range
~ all SoftFail Always matches. It goes at the end of your record.
Test Result
SPF Record Published Record found
SPF Syntax Check The record is valid
SPF Multiple Records Less than two records found
SPF Record Deprecated No deprecated records found
SPF Included Lookups Number of included lookups is OK
Hopefully thats the info you require
-
try to move from softfail to fail cos this emails will be only marked with softfail, but accepted on some servers and delivered to the user...
I used this simple site to generate spf: http://www.spfwizard.net/
-
When Protected Sky list your IP, that mean your server with corresponding ip was really sending spam.... nothing to do with spf, dmarc oti dkim
-
Hi Jae,
Thanks for your comment.
I have run every check I can think of, including rootkit checks on server and nothing is showing.
I have also shut my server down for 48 hrs (shutdown and powered off in hosting control panel), and during this I got blacklisted again.
I also have got dmarc report; which states that over 3100 emails were detected as possibly coming from my domain; but only 30 had fully passed the dmarc and spf checks as valid emails ( which after checking were the 30 I had sent).
Thats means that over 99% of emails dmarc had notices were not from my domain.
This is really anoyhing, and takes a lot of daily checking and delisting.
ANy other ideas?
-
so you are saying even server is offline turned off sends emails from your domain :o
My friend had similar problem but mail server was not secured and its open relay active.
Do you have any bounce back messages with ip's logs to show us or send me pm with that... to check out.