Messages considered as spam by Hotmail
Hi,
All messages sent on my mailman server are considered as spam by Hotmail. My reverse DNS is correctly configurer, IPv4 and IPv6 I have a SPF record and on mail-tester.com I have a 8/10 graduation with mail sent from my server (as root, not with mailman list) : http://www.mail-tester.com/web-qqEoc0
Here a source message, considered as spam :
==========================
Received: from DB5PR06MB1557.eurprd06.prod.outlook.com (10.164.40.155) by VI1PR06MB1568.eurprd06.prod.outlook.com (10.164.86.158) with Microsoft SMTP Server (TLS) id 15.1.447.15 via Mailbox Transport; Sat, 9 Apr 2016 12:56:30 +0000 Received: from DB5PR06CA0042.eurprd06.prod.outlook.com (10.162.165.52) by DB5PR06MB1557.eurprd06.prod.outlook.com (10.164.40.155) with Microsoft SMTP Server (TLS) id 15.1.453.26; Sat, 9 Apr 2016 12:56:30 +0000 Received: from VE1EUR01FT021.eop-EUR01.prod.protection.outlook.com (2a01:111:f400:7e01::208) by DB5PR06CA0042.outlook.office365.com (2a01:111:e400:52c2::52) with Microsoft SMTP Server (TLS) id 15.1.453.26 via Frontend Transport; Sat, 9 Apr 2016 12:56:30 +0000 Received: from COL004-MC6F7.hotmail.com (10.152.2.54) by VE1EUR01FT021.mail.protection.outlook.com (10.152.2.223) with Microsoft SMTP Server (TLS) id 15.1.453.6 via Frontend Transport; Sat, 9 Apr 2016 12:56:29 +0000 Received: from listes.np11.org ([46.226.109.222]) by COL004-MC6F7.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143); Sat, 9 Apr 2016 05:56:26 -0700 Received: from listes.np11.org (listes.np11.org [127.0.0.1]) by listes.np11.org (Postfix) with ESMTP id 9B446200F2; Sat, 9 Apr 2016 14:56:25 +0200 (CEST) Received: from relay2-d.mail.gandi.net (relay2-d.mail.gandi.net [217.70.183.194]) by listes.np11.org (Postfix) with ESMTPS id 826E8200F2 for test@listes.np11.org; Sat, 9 Apr 2016 14:56:24 +0200 (CEST) Received: from mfilter30-d.gandi.net (mfilter30-d.gandi.net [217.70.178.161]) by relay2-d.mail.gandi.net (Postfix) with ESMTP id 692F3C5A5A for test@listes.np11.org; Sat, 9 Apr 2016 14:56:24 +0200 (CEST) X-Virus-Scanned: Debian amavisd-new at mfilter30-d.gandi.net Received: from relay2-d.mail.gandi.net ([IPv6:::ffff:217.70.183.194]) by mfilter30-d.gandi.net (mfilter30-d.gandi.net [::ffff:10.0.15.180]) (amavisd-new, port 10024) with ESMTP id WCaR2GfLUlAg for test@listes.np11.org; Sat, 9 Apr 2016 14:56:22 +0200 (CEST) X-Originating-IP: 78.213.138.119 Received: from [192.168.0.3] (cza11-1-78-213-138-119.fbx.proxad.net [78.213.138.119]) (Authenticated sender: hedy.dargere@spheerys.fr) by relay2-d.mail.gandi.net (Postfix) with ESMTPSA id A2870C5A4F for test@listes.np11.org; Sat, 9 Apr 2016 14:56:22 +0200 (CEST) To: test@listes.np11.org From: =?UTF-8?Q?Hedy_Darg=c3=a8re?= hedy.dargere@spheerys.fr Openpgp: id=FAB74B3806526349E53118C11D6619713F1C174C Message-ID: 5708FC00.2030709@spheerys.fr Date: Sat, 9 Apr 2016 14:56:32 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.7.1 Subject: [Test] test 14h56 X-BeenThere: test@listes.np11.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: <test.listes.np11.org> List-Unsubscribe: http://listes.np11.org/options/test, mailto:test-request@listes.np11.org?subject=unsubscribe List-Archive: http://listes.np11.org/pipermail/test/ List-Post: mailto:test@listes.np11.org List-Help: mailto:test-request@listes.np11.org?subject=help List-Subscribe: http://listes.np11.org/listinfo/test, mailto:test-request@listes.np11.org?subject=subscribe Content-Type: multipart/mixed; boundary="===============3666055440594428480==" Errors-To: test-bounces@listes.np11.org Sender: Test test-bounces@listes.np11.org Return-Path: test-bounces@listes.np11.org X-OriginalArrivalTime: 09 Apr 2016 12:56:26.0712 (UTC) FILETIME=[3A3D9D80:01D1925F] X-MS-Exchange-Organization-Network-Message-Id: 37610e95-fe3b-4a4d-6bbd-08d360765ee2 X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming CMM-sender-ip: 46.226.109.222 CMM-sending-ip: 46.226.109.222 CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is 46.226.109.222) smtp.mailfrom=test-bounces@listes.np11.org; dkim=none header.d=spheerys.fr; x-hmca=pass header.id=test-bounces@listes.np11.org CMM-X-SID-PRA: test-bounces@listes.np11.org CMM-X-AUTH-Result: PASS CMM-X-SID-Result: PASS CMM-X-Message-Status: n:n CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0xO0Q9MjtHRD0xO1NDTD0w CMM-X-Message-Info: /3z5fcrqMMVgdSeliANhf6SipXkYjPkSzV/42OK5Zc78e63cmyqwAQQBRq/T4aRhF2EBmNv980CloV+keIQZSHCVijiJC4gO3ETyg6zd8GsMzbvuRbzcRI8Csba8KT6BUgpvGHi1qDOY4gQuEOuwxtcQ1n2q4HPo6laJjTaYBShEzonz3rvyQJabNhdsnzrTQ4WmKCqruuK4lbL6hm09qxjEmldF5neL8kpIYhK1/cN9tMV/fyJFdw== X-MS-Exchange-Organization-PCL: 2 X-Forefront-Antispam-Report: EFV:NLI;SFV:SPM;SFS:(28900001);DIR:INB;SFP:;SCL:5;SRVR:DB5PR06MB1557;H:COL004-MC6F7.hotmail.com;FPR:;SPF:None;MLV:ovr;LANG:fr; X-MS-Office365-Filtering-Correlation-Id: 37610e95-fe3b-4a4d-6bbd-08d360765ee2 X-Microsoft-Exchange-Diagnostics: 1;DB5PR06MB1557;2:WAoK+fvDmPqsuNEdi+ENUpgCGd2blOTJpVUq+ow2OC2bU5RI3Fb1Vv1qLGNiqDrKlU7+Wf0yHdmYRo1PB3Sgq8Mw25gTIUMTxSTAJ/MdPQ9n8jX1YPU0oYq7T4ge+0cfhYStJ4L5I2Jylq9lCeTO4OG9ALjAVUNURuq3ynF9gMqUJgw6Tcwwj9JP7tpBscd5X4QVwiD2ixbT8lScO1UPEg==;3:kvxIJ8U7Jf3huWFdL5n2lIKGN9CBqAeQmWcG+srZYbT2mgXVThZGJUZOnN5VRKP47RJyFDgnVSeQVlFDf7lBRZQ7lvPMeObxFZqtThqdNANXfG8J6POFdC+EoanOIIw7HPu4IeGmlx9BHVOK7NNT5Rr9WXZ0xNz4tQSzjz3VJak=;25:7WWGndmXVL/SpMpQSztO0vI7/qnJc50UX87TUpeyCkjiemTRc+EaUtYbTLw05Xu8j0LfvhK9tekfI9FUBD3PLJnS6ZmnisrYtmiJc2788fIKy0RqzNzDqDLQ6Hb5G4hASeInrzpDT69B4MDJHTN6GhiECCZlga/QfX7Xc0BiuOI4cencLgjhqr/wPOcZ13nKxnlflMfEFdhmFUE3anVDibLfXalPy/wqgyZIUYG7IKFS4nEi0FEEqaubdlZFxLljrTo1TW9lIW45lvQVzO85aLeus+2W7F3qluRnJYuMYOZCrmt7OQWFmeTn4u2Q4H5Ocq7QuKzTF1a13GIXYmoIEtsBzYyQnbwZwzew68qDEvM= X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(8291501002);SRVR:DB5PR06MB1557; X-MS-Exchange-Organization-AVStamp-Service: 1.0 X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(102415293)(102615271)(82015046);SRVR:DB5PR06MB1557;BCL:0;PCL:0;RULEID:;SRVR:DB5PR06MB1557; X-Microsoft-Exchange-Diagnostics: 1;DB5PR06MB1557;4:U7OQztpmGpZrrvDZK2+Q7nYBE3EDUOPpk76PoJobIXgRPQrsXyzL1Pz/mhr8c1jVFgBvldMmSZnq4Z7MdZi8YDTXxBm6TtywgwJMsdF8EqyhwqwwEC3XGKyPwKu/iMkYT/p3HzHKookU8qh3EFUjey4VKKBh/AXedJezCwpaF7w2ojc8OAEnrrV9B+ELQj6WgrlOVGxm7xchbiqJrL8lHqSqnJX1mFpIvhPa1twPScVfY4hrwNRWZHCZ2SF6cYq/VXwj9Oa4N+g9QOdMfDh4SAzT8KUmaduc8iVSEwZMcl6DtuYvxpy4ONWotXKo8uBP;23:aBrzPfHWp6tvooIhU+mQ7cPO7BhAt/esI85T0AptTn34wMdpjIncSLO/496NB2q+UY1/6pnk+3LpW/Pj7MxtqOZt6jrDHl85tMLeT2IjsfPUQkq97SraUntYA8RXdI6GcQ1bH27KrvPqtgzmYCBWCIiWJfXtkEvDzbadijL9T+BK+FKatHguM4+zIADBgaqj2HeqyCvhIRw8KQInAbrM9ywD/PJOnsa4QidH2N35zTI=;5:nrQL++wIxRgheTKmpmNZJO8QumpdyTI+698LeWu4L4txuWV3/hNPEbRt/c29XPrmhQQOU9s0lwRZwXMpczmDqX573tNpIht06Yq6VtYxkoRH6IRmJJiV/gCNur4D28bdblbxZviEK+mEXbGk4vuRAw==;24:CItutFerK6ai9MTKiyxp5SZaZa5S/l8YThVue2N34W6lU+H3vN+sIYTFcr4ltxz0V0oXCH9eLldLBMLx2v5+fA== X-MS-Exchange-Organization-SCL: 5 SpamDiagnosticOutput: 1:22 SpamDiagnosticMetadata: 00000000%2D0000%2D0000%2D0000%2D000000000000 X-MS-Exchange-CrossTenant-OriginalArrivalTime: 09 Apr 2016 12:56:29.1957 (UTC) X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5PR06MB1557 X-MS-Exchange-Organization-AuthSource: VE1EUR01FT021.eop-EUR01.prod.protection.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.4604566 MIME-Version: 1.0
--===============3666055440594428480== Content-Type: multipart/alternative; boundary="------------010607070600040401090505"
--------------010607070600040401090505
I don't understand what's append...
Do you have ant idea ?
Hedy
On 09/04/16 17:25, Hedy Dargère wrote:
All messages sent on my mailman server are considered as spam by Hotmail. My reverse DNS is correctly configurer, IPv4 and IPv6 I have a SPF record and on mail-tester.com I have a 8/10 graduation with mail sent from my server (as root, not with mailman list) : http://www.mail-tester.com/web-qqEoc0
So you suspect Hotmail thinks there's something spammy about Mailman? Maybe you can test yourself including things like the Mailman footer and any URIs that might be dirtylisted to work out what factor is affecting Hotmail's "spam confidence level".
Here a source message, considered as spam :
[snips]
Received: from listes.np11.org ([46.226.109.222]) by COL004-MC6F7.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143); Sat, 9 Apr 2016 05:56:26 -0700
Connecting IP 46.226.109.222 seems clean.
X-Originating-IP: 78.213.138.119 Received: from [192.168.0.3] (cza11-1-78-213-138-119.fbx.proxad.net [78.213.138.119]) (Authenticated sender: hedy.dargere@spheerys.fr) by relay2-d.mail.gandi.net (Postfix) with ESMTPSA id A2870C5A4F for test@listes.np11.org; Sat, 9 Apr 2016 14:56:22 +0200 (CEST)
SURBL/PhishTank says proxad.net is a domain abused for phishing, but that shouldn't be a significant problem.
To: test@listes.np11.org From: =?UTF-8?Q?Hedy_Darg=c3=a8re?= hedy.dargere@spheerys.fr
Date: Sat, 9 Apr 2016 14:56:32 +0200 User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:38.0) Gecko/20100101 Thunderbird/38.7.1 Subject: [Test] test 14h56 X-BeenThere: test@listes.np11.org X-Mailman-Version: 2.1.18
List-Unsubscribe: http://listes.np11.org/options/test, mailto:test-request@listes.np11.org?subject=unsubscribe
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is 46.226.109.222) smtp.mailfrom=test-bounces@listes.np11.org; dkim=none header.d=spheerys.fr; x-hmca=pass header.id=test-bounces@listes.np11.org
CMM-X-AUTH-Result: PASS
Confirms problem is not SPF or DKIM.
X-MS-Exchange-Organization-PCL: 2 X-Forefront-Antispam-Report: EFV:NLI;SFV:SPM;SFS:(28900001);DIR:INB;SFP:;SCL:5;SRVR:DB5PR06MB1557;H:COL004-MC6F7.hotmail.com;FPR:;SPF:None;MLV:ovr;LANG:fr;
OK, so Forefront thinks the message is "SPM" with a Confidence Level of 5 (suspect spam).
https://technet.microsoft.com/en-us/library/dn205071%28v=exchg.150%29.aspx https://technet.microsoft.com/en-us/library/jj200686%28v=exchg.150%29.aspx
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(8291501002);SRVR:DB5PR06MB1557; X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(102415293)(102615271)(82015046);SRVR:DB5PR06MB1557;BCL:0;PCL:0;RULEID:;SRVR:DB5PR06MB1557;
...
X-MS-Exchange-Organization-SCL: 5 SpamDiagnosticOutput: 1:22
Not regarded as bulk or phishing, so seems like a false positive from MS Forefront/Cloudmark. How to report this? Well, maybe your recipients marking as not spam and moving the message to the inbox will help a little. Or any recipients using a paid MS service like Office 365 may be able to raise a support ticket. Or there's a submission form for Cloudmark at https://www.cloudmark.com/en/support/cloudmark-authority. If none of that works, try to find someone at Hotmail or microsoft.com who might help.
I don't think it's particularly Mailman related.
CK
On 04/09/2016 09:25 AM, Hedy Dargère wrote:
Hi,
All messages sent on my mailman server are considered as spam by Hotmail.
See the FAQ article at http://wiki.list.org/x/4030690.
participants (3)
-
Cedric Knight -
Hedy Dargère -
Mark Sapiro