Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 2nd November 2007, 21:42
andresmontanez andresmontanez is offline
Junior Member
 
Join Date: Aug 2007
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default Problems with Gmail, Yagoo and Hotmail

Hello everyone;

I have a "big" problem. Mails from my server are marked as SPAM by Yahoo and Gmail; Hotmail says it's accepted but never delivered.

I have SPF and DomainKeys working; I had tryed the postmasters of the three providers but nothing. The IP address is clean; and the mails marked are just test mails (eg: Subject: Test number one; plus a few words as body).

Yahoo, the only one who replyed something interesting (Hotmail saied "check the Internet Explorer Options", and Gmail sayed "it's spam but I can't telly why)... sended me an email saying:

"The sender seems to have forged your email address in the "reply-to"
and/or the "from" field of the message they sent out. Please know that
we are currently aware of this type of spam and are investigating it."

I don't know why, this is an example of the mails sended and marked as Spam; and everything seems Fine for my Eye;; anyone can see something more?

Thanks...


########## begin sended mail ##########
Delivered-To: stonetree.technologies@gmail.com
Received: by 10.142.192.1 with SMTP id p1cs98342wff;
Thu, 1 Nov 2007 18:24:29 -0700 (PDT)
Received: by 10.141.79.12 with SMTP id g12mr618936rvl.1193966669497;
Thu, 01 Nov 2007 18:24:29 -0700 (PDT)
Return-Path: <info@stonetree.com.uy>
Received: from excelsior.stonetree.com.uy (excelsior.stonetree.com.uy [71.6.135.103])
by mx.google.com with ESMTP id b39si4293699rvf.2007.11.01.18.24.27;
Thu, 01 Nov 2007 18:24:29 -0700 (PDT)
Received-SPF: pass (google.com: domain of info@stonetree.com.uy designates 71.6.135.103 as permitted sender) client-ip=71.6.135.103;
DomainKey-Status: good
Authentication-Results: mx.google.com; spf=pass (google.com: domain of info@stonetree.com.uy designates 71.6.135.103 as permitted sender) smtp.mail=info@stonetree.com.uy; domainkeys=pass header.From=info@stonetree.com.uy
Received: from excelsior.stonetree.com.uy (localhost.localdomain [127.0.0.1])
by excelsior.stonetree.com.uy (Postfix) with ESMTP id 9F2D78004
for <stonetree.technologies@gmail.com>; Thu, 1 Nov 2007 23:24:05 -0200 (UYST)
DomainKey-Signature: a=rsa-sha1; h=Received:Message-IDate:From:User-Agent:MIME-Version:To:Subject:Content-Type:Content-Transfer-Encoding; b=ozvD8mp5E/Z6OcGL+TBrp3PiqA4ruTjrBS/+YN5x5AEHmCqZVoS7clPAW/EEqE0wf/qaMjbP/qV1hQ0iAaMkur25JgSL1WYpACNdII9eCUAwCAva/Ws7lwg548q/zDfi8UDHApC/qs95nhvldjCwt2HKNeKd8mAloW1X5FQfJoQ=; c=nofws; d=stonetree.com.uy; q=dns; s=dk
Received: from [192.168.0.150] (r190-64-159-48.dialup.adsl.anteldata.net.uy [190.64.159.48])
(Authenticated sender: info@stonetree.com.uy)
by excelsior.stonetree.com.uy (Postfix) with ESMTP id 4D8137FCC
for <stonetree.technologies@gmail.com>; Thu, 1 Nov 2007 23:23:57 -0200 (UYST)
Message-ID: <472A7C23.40509@stonetree.com.uy>
Date: Thu, 01 Nov 2007 23:23:47 -0200
From: Stonetree Technologies <info@stonetree.com.uy>
User-Agent: Thunderbird 2.0.0.6 (X11/20071022)
MIME-Version: 1.0
To: stonetree.technologies@gmail.com
Subject: Prueba dos
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

cambio mydomain
########## end sended mail ##########
Reply With Quote
Sponsored Links
  #2  
Old 3rd November 2007, 11:54
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,745 Times in 2,578 Posts
Default

Hm, looks ok.

Have you checked if your server got blacklisted? http://www.mxtoolbox.com/blacklists.aspx

If not, I'd contact Google and Yahoo.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 4th November 2007, 00:03
andresmontanez andresmontanez is offline
Junior Member
 
Join Date: Aug 2007
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default

All the IPs of the server are Clean (not blacklisted) and they are all in the SPF.
Gmail says DomainKeys Passed; and SPF Passed.

I tryed to contact all providers; and the only one who replyed was Yahoo; saying the above message (forged from or reply-to)... any idea if this is a Postfix problem with authentication?

Thanks.
Reply With Quote
  #4  
Old 4th November 2007, 12:58
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,745 Times in 2,578 Posts
Default

Does this happen as well when you send that mail from mail.stonetree.com.uy (the mail shown here seems to have been sent form a different server)?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 5th November 2007, 01:22
andresmontanez andresmontanez is offline
Junior Member
 
Join Date: Aug 2007
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
Default

I had made a few adjustemns, sent a mail to Yahoo, it was delivered to SPAM folder... the headers are the folowing:

########## BEGIN HEADER ##########
From Stonetree Technologies Sun Nov 4 12:46:29 2007
Return-Path: <info@stonetree.com.uy>
Authentication-Results: mta323.mail.re4.yahoo.com from=stonetree.com.uy; domainkeys=pass (ok)
Received: from 66.240.194.76 (EHLO mx.excelsior.stonetree.com.uy) (66.240.194.76)
by mta323.mail.re4.yahoo.com with SMTP; Sun, 04 Nov 2007 12:46:36 -0800
Received: from mx.excelsior.stonetree.com.uy (localhost [127.0.0.1])
by mx.excelsior.stonetree.com.uy (Postfix) with ESMTP id 97C668004
for <stonetree.technologies@yahoo.com>; Sun, 4 Nov 2007 18:46:35 -0200 (UYST)
DomainKey-Signature: a=rsa-sha1; h=Received:Message-IDate:From:User-Agent:MIME-Version:To:Subject:Content-Type:Content-Transfer-Encoding; b=0V4+YuxKRwWUBN8NJiwbT55sxNf7v3Igzx8yPYGxf6Go7gKA mwZ+CASrlHomm+jc3Rn5eQWQQcY/Ym5raVF9wWnLhpXsDSZiqFbIlqoWlO0zzMtdh+v/JUs6Etx/lviiZOdh+L/26MWNbhrh7sjaBLgEWiK4pWwG03HWK89AkPQ=; c=nofws; d=stonetree.com.uy; q=dns; s=dk
Received: from [192.168.0.150] (r190-64-149-60.dialup.adsl.anteldata.net.uy [190.64.149.60])
(Authenticated sender: info@stonetree.com.uy)
by mx.excelsior.stonetree.com.uy (Postfix) with ESMTP id CC0977FCB
for <stonetree.technologies@yahoo.com>; Sun, 4 Nov 2007 18:46:34 -0200 (UYST)
Message-ID: <472E2FA5.6020705@stonetree.com.uy>
Date: Sun, 04 Nov 2007 18:46:29 -0200
From: Stonetree Technologies <info@stonetree.com.uy>
User-Agent: Thunderbird 2.0.0.6 (X11/20071022)
MIME-Version: 1.0
To: stonetree.technologies@yahoo.com
Subject: Prueba de mail
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
Content-Length: 41
########## END HEADER ##########

The MX record for the domain "stonetree.com.uy" is "mx.excelsior.stonetree.com.uy"; it is in the SPF; everthing is OK.

I have Postfix with Virtual Domains; all domains has the MX to "mx.excelsior.stonetree.com.uy".

All the IP Addresses are clean (not blacklisted).

Any idea why Google and Yahoo mark the mails as Spam? Or why Hotmail doesn't deliver the massage (even if the logs says otherwise).

The messages content is rubish (eg: "This is a testing mail").

Could be somthing wrong configured in the postfix + virtual domains?
Reply With Quote
  #6  
Old 5th November 2007, 09:47
edge edge is offline
Moderator
 
Join Date: Dec 2005
Location: The Netherlands
Posts: 2,037
Thanks: 269
Thanked 154 Times in 133 Posts
Default

Quote:
Originally Posted by andresmontanez
I had tryed the postmasters of the three providers but nothing.
Try again. When I did (long time ago) they all did reply and told me they added my domains to an ok** list.
**With Hotmail (MSN) it's called Sender ID program. I forgot the name from Yahoo.
__________________
Never execute code written on a Friday or a Monday.
Reply With Quote
  #7  
Old 5th November 2007, 17:29
chuckl chuckl is offline
Senior Member
 
Join Date: May 2007
Location: Uxbridge, Middlesex, UK
Posts: 166
Thanks: 1
Thanked 20 Times in 20 Posts
Default

I would guess that this is your problem:

Quote:
Received: from [192.168.0.150] (r190-64-159-48.dialup.adsl.anteldata.net.uy [190.64.159.48])
Looks like mail relaying, it's from a home broadband account, and to any of the big boys, thats spam.
Reply With Quote
  #8  
Old 5th November 2007, 17:34
edge edge is offline
Moderator
 
Join Date: Dec 2005
Location: The Netherlands
Posts: 2,037
Thanks: 269
Thanked 154 Times in 133 Posts
Default

Quote:
Originally Posted by chuckl
I would guess that this is your problem:



Looks like mail relaying, it's from a home broadband account, and to any of the big boys, thats spam.
Thats a good find! Now why did I not see this.
__________________
Never execute code written on a Friday or a Monday.
Reply With Quote
  #9  
Old 5th November 2007, 17:49
chuckl chuckl is offline
Senior Member
 
Join Date: May 2007
Location: Uxbridge, Middlesex, UK
Posts: 166
Thanks: 1
Thanked 20 Times in 20 Posts
Default

Thats why they pay me the big bucks.

I wish.

Rgds,
Chuck
Reply With Quote
  #10  
Old 10th November 2007, 00:20
andresmontanez andresmontanez is offline
Junior Member
 
Join Date: Aug 2007
Posts: 6
Thanks: 0
Thanked 0 Times in 0 Posts
 
Default Findings...

Yes, i'm connected from a xDSL from my Home.
My Thunderbird connects to the mail server (in USA, with static IP, clean as water and reverse dns).
The mail originates from my home; but the sender is the server... could be that? I tryed with others servers and it arrived ok.

I finded that the problem could be the "Message-ID" header...
""Message-ID: <472A7C23.40509@stonetree.com.uy>""

in the postfix page I found this "http://www.postfix.org/BACKSCATTER_README.html"
where it's explained that the Message-ID shoud be "host.domain";
in my case, should be "...@mx.excelsior.stonetree.com.uy",
how is configured the Message id? Or how can this beheavor be changed.

Thanks a lot
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 09:58.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.