Hello,
This is not so much a technical question as advice seeking. My apologies if it isn't appropriate for this list.
I am new to mailing list management, though not new to mail server management. I've never run into this problem.
Background is that I am tasked with creating an announcement list for a group. I'm using a dedicated IPv4 which I have controlled for two months and not previously used for outgoing email. I have not idea what its prior "reputation" was. Mailman settings are pretty much default. I have proper SPF and rDNS records.
We have added just short of 1000 members, all by their request at the web interface. A few test messages went out about 4-5 days ago. Since then the only outgoing mails have been signup confirmations and messages to me as list owner.
Despite the relatively low volume, my IP keeps getting listed at Spamhaus CSS (https://www.spamhaus.org/css/). I can manually de-list it but it seems as though whenever we send out any mail we get re-listed. I have tried contacting them but gotten nowhere.
The only other RBL where we are listed is http://www.dnsblchile.org/. I put in a de-listing request with them over the weekend but they only work during the week.
Has anyone dealt with this, and if so, can you offer any ideas?
-- Jim Ohlstein
"Never argue with a fool, onlookers may not be able to tell the difference." - Mark Twain
On 04/25/2016 04:41 AM, Jim Ohlstein wrote:
This is not so much a technical question as advice seeking. My apologies if it isn't appropriate for this list.
I do think it's on topic, but I'm afraid we (or at least I) can't offer much help.
...
Despite the relatively low volume, my IP keeps getting listed at Spamhaus CSS (https://www.spamhaus.org/css/). I can manually de-list it but it seems as though whenever we send out any mail we get re-listed. I have tried contacting them but gotten nowhere.
If you look up your IP at http://www.abuseat.org/lookup.cgi, what do you find?
-- Mark Sapiro mark@msapiro.net The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Hello,
On 4/26/16 4:58 PM, Mark Sapiro wrote:
On 04/25/2016 04:41 AM, Jim Ohlstein wrote:
[snip]
Despite the relatively low volume, my IP keeps getting listed at Spamhaus CSS (https://www.spamhaus.org/css/). I can manually de-list it but it seems as though whenever we send out any mail we get re-listed. I have tried contacting them but gotten nowhere.
If you look up your IP at http://www.abuseat.org/lookup.cgi, what do you find?
IP Address 104.250.154.20 is not listed in the CBL.
However if I search at https://www.spamhaus.org/lookup/ I see:
104.250.154.20 is listed in the SBL, in the following records:
SBLCSS 104.250.154.20 is not listed in the PBL 104.250.154.20 is not listed in the XBL
I am wondering if the IP is or was in a range that has actual spammers.
-- Jim Ohlstein
"Never argue with a fool, onlookers may not be able to tell the difference." - Mark Twain
On 04/26/2016 02:14 PM, Jim Ohlstein wrote:
However if I search at https://www.spamhaus.org/lookup/ I see:
104.250.154.20 is listed in the SBL, in the following records:
SBLCSS 104.250.154.20 is not listed in the PBL 104.250.154.20 is not listed in the XBL
And if you follow the SBLCSS link, it's generic and not particularly helpful.
It looks like your DNS and SPF are OK. Are you DKIM signing your outgoing list mail and does your outgoing MTA identify it self as lists.c2.social? These things can help.
Also, you don't publish a DMARC policy (I don't either), but the lack of one, even if it would be p=none, can count against you. See, e.g., https://support.google.com/mail/answer/81126
-- Mark Sapiro mark@msapiro.net The highway is for gamblers, San Francisco Bay Area, California better use your sense - B. Dylan
Hello,
On 4/26/16 5:35 PM, Mark Sapiro wrote:
On 04/26/2016 02:14 PM, Jim Ohlstein wrote:
However if I search at https://www.spamhaus.org/lookup/ I see:
104.250.154.20 is listed in the SBL, in the following records:
SBLCSS 104.250.154.20 is not listed in the PBL 104.250.154.20 is not listed in the XBL
And if you follow the SBLCSS link, it's generic and not particularly helpful.
Exactly
It looks like your DNS and SPF are OK. Are you DKIM signing your outgoing list mail and does your outgoing MTA identify it self as lists.c2.social? These things can help.
No on DKIM. Evidently Postfix and DKIM are not playing nicely on FreeBSD and would take some hacking. I may switch to Exim where DKIM support is easy to configure.
Yes on MTA identification: # telnet localhost 25 Trying 10.0.250.37... Connected to localhost. Escape character is '^]'. 220 lists.c2.social ESMTP Postfix
Also, you don't publish a DMARC policy (I don't either), but the lack of one, even if it would be p=none, can count against you. See, e.g., https://support.google.com/mail/answer/81126
Google is not blocking our mails. It's Yahoo, Comcast, gmx, etc. They seem to rely on Spamhaus.
I'm thinking this may be because the domain is brand new. Teach me to "volunteer" my time for an organization.
-- Jim Ohlstein
"Never argue with a fool, onlookers may not be able to tell the difference." - Mark Twain
Hello,
On 4/26/16 6:07 PM, Jim Ohlstein wrote:
Hello,
On 4/26/16 5:35 PM, Mark Sapiro wrote:
On 04/26/2016 02:14 PM, Jim Ohlstein wrote:
However if I search at https://www.spamhaus.org/lookup/ I see:
104.250.154.20 is listed in the SBL, in the following records:
SBLCSS 104.250.154.20 is not listed in the PBL 104.250.154.20 is not listed in the XBL
And if you follow the SBLCSS link, it's generic and not particularly helpful.
Exactly
It looks like your DNS and SPF are OK. Are you DKIM signing your outgoing list mail and does your outgoing MTA identify it self as lists.c2.social? These things can help.
No on DKIM. Evidently Postfix and DKIM are not playing nicely on FreeBSD and would take some hacking. I may switch to Exim where DKIM support is easy to configure.
Yes on MTA identification: # telnet localhost 25 Trying 10.0.250.37... Connected to localhost. Escape character is '^]'. 220 lists.c2.social ESMTP Postfix
Also, you don't publish a DMARC policy (I don't either), but the lack of one, even if it would be p=none, can count against you. See, e.g., https://support.google.com/mail/answer/81126
Google is not blocking our mails. It's Yahoo, Comcast, gmx, etc. They seem to rely on Spamhaus.
I'm thinking this may be because the domain is brand new. Teach me to "volunteer" my time for an organization.
I moved the list to a subdomain of a 10 year old domain that I own on an IP on a different /20 in a different datacenter and the problem is resolved. It was either the IP, or more likely, the fact that it was a newly registered domain.
Thanks for your help.
-- Jim Ohlstein
"Never argue with a fool, onlookers may not be able to tell the difference." - Mark Twain
participants (2)
-
Jim Ohlstein -
Mark Sapiro