1
mailing list bounces redux
Problem reported by Eric Bourland - 10/28/2014 at 4:06 AM
Submitted
SmarterMail 12.4

Hi friends. I'm getting a bunch of bounces again for multiple addresses on my mailing list @careplanners.net. I've done all the usual steps: rDNS, SPF, DKIM/DomainKeys, DMARC. It looks like Comcast, AOL, Outlook.com, sbcglobal.net, and others are routinely bouncing mailing list messages again.
 
Bounces for this mailing list have been consistent over time; recently the bounce rate has increased dramatically and people are getting upset at me.
 
I don't think I have made any changes to the configuration of the domain.
 
I don't see in the delivery or SMTP logs any of the addresses that are bounced on the mailing list -- no delivery problems reported.
 
Any idea why these mailing list messages are getting bounced at my domain @careplanners.net?

Thank you as always for your help.
 
Eric

1 Reply

Reply to Thread
0
Eric Bourland Replied
Here's the UnlockTheInbox output for domain careplanners.net:

Publication: RFC 822
Header Information
Name Value
return-path <sgrisham@careplanners.net>
received from tarsier.viviotech.net (tarsier.viviotech.net [205.210.188.179]) by mail.unlocktheinbox.com with SMTP (version=TLS\Tls cipher=Rc4 bits=128); Tue, 28 Oct 2014 07:44:06 -0400
x-smartermail-authenticated-as sgrisham@careplanners.net
domainkey-signature a=rsa-sha1; c=nofws; q=dns; d=careplanners.net; s=selector; h=received:from:to:subject:date:reply-to:message-id:mime-version :content-type:x-originating-ip; b=PgMK2Dzdukl671qSZFBuPatm7J0v9o+xh0HCqTacFauqJsCJdJCatp5H3ddmtpTzb Fzu67Nc/3xDrsVaiTC3aoOHFQWzHwDSAyMFBcdZPdvbYmtWTo4waHdu9oqWXuE0Sh 2kWsQi/KqJ8txTUYNBdbxtifJUsz9kxqsgtgg2GxE=
dkim-signature v=1; a=rsa-sha256; c=relaxed/relaxed; d=careplanners.net; s=selector; h=x-originating-ip:content-type:mime-version:message-id:reply-to :date:subject:to:from; bh=SIHxm875VumE333SK2hNurj16vLz6Ki1P1N7GeCDPpQ=; b=TG2gfnDPXjt8qstiVRK1zqFsZKkgDayFER95X682PXYlCa4AL1dz2naGgfFILQcSq nvAybzm8ZrOZT3cSTQIP8QbQJbmahnT89PoXSDTchHv0EgiGykA9XX3sGqULODdwp 6kMn9Pg2xeVaWWx0ZwVDiEcyqD0xxAneUiXSgaBmg=
received by tarsier.viviotech.net via HTTP; Tue, 28 Oct 2014 07:44:04 -0400
from "Susan Grisham" <sgrisham@careplanners.net>
to <mailtest@unlocktheinbox.com>
subject
date Tue, 28 Oct 2014 07:44:04 -0400
reply-to sgrisham@careplanners.net
message-id <5d80ad3ad4454047b0e5ede31929d59d@careplanners.net>
mime-version 1.0
content-type multipart/alternative; boundary=0494fa96cba145da8c744927ae2b4943
x-originating-ip [69.250.144.41]

Authoritative DNS Server (SOA) Check for: careplanners.net
SOA Server Results
ns1.viviotech.net Passed

MX Records
Pref Value Blacklists
10 mail.careplanners.net Check for Blacklists
20 mail.careplanners.net Check for Blacklists
30 mail.careplanners.net Check for Blacklists
40 mail.careplanners.net Check for Blacklists

Information: PTR Records
rDNS PTR Records
Type Mail Domain ARPA Record Results
MX mail.careplanners.net [205.210.188.179] 179.188.210.205.in-addr.arpa. Passed
MX mail.careplanners.net [205.210.188.179] 179.188.210.205.in-addr.arpa. Passed
MX mail.careplanners.net [205.210.188.179] 179.188.210.205.in-addr.arpa. Passed
MX mail.careplanners.net [205.210.188.179] 179.188.210.205.in-addr.arpa. Passed
LSIP tarsier.viviotech.net [205.210.188.179] 179.188.210.205.in-addr.arpa. Passed

Mail Flow
Mail Domain IP Address
tarsier.viviotech.net 205.210.188.179
Unknown Unknown

Email Port Checks for: mail.careplanners.net
Protocol Results
SMTP (Port 25): Connection Established
- Extensions: SIZE, AUTH, 8BITMIME, OK
- SSL Valid: No SSL Certificate Found

SMTP SSL (Port 465): Unable to Establish Connection

POP3 (Port 110): Connection Established
- Extensions: TOP, USER, UIDL, IMPLEMENTATION
- SSL Valid: No SSL Certificate Found

POP3 SSL (Port 995): Unable to Establish Connection

IMAP (Port 143): Connection Established
- Extensions: IMAP4rev1, UIDPLUS, XLIST
- SSL Valid: No SSL Certificate Found

IMAP SSL (Port 993): Unable to Establish Connection

Email Port Checks for: mail.careplanners.net
Protocol Results
SMTP (Port 25): Connection Established
- Extensions: SIZE, AUTH, 8BITMIME, OK
- SSL Valid: No SSL Certificate Found

SMTP SSL (Port 465): Unable to Establish Connection

POP3 (Port 110): Connection Established
- Extensions: TOP, USER, UIDL, IMPLEMENTATION
- SSL Valid: No SSL Certificate Found

POP3 SSL (Port 995): Unable to Establish Connection

IMAP (Port 143): Connection Established
- Extensions: IMAP4rev1, UIDPLUS, XLIST
- SSL Valid: No SSL Certificate Found

IMAP SSL (Port 993): Unable to Establish Connection

Email Port Checks for: mail.careplanners.net
Protocol Results
SMTP (Port 25): Connection Established
- Extensions: SIZE, AUTH, 8BITMIME, OK
- SSL Valid: No SSL Certificate Found

SMTP SSL (Port 465): Unable to Establish Connection

POP3 (Port 110): Connection Established
- Extensions: TOP, USER, UIDL, IMPLEMENTATION
- SSL Valid: No SSL Certificate Found

POP3 SSL (Port 995): Unable to Establish Connection

IMAP (Port 143): Connection Established
- Extensions: IMAP4rev1, UIDPLUS, XLIST
- SSL Valid: No SSL Certificate Found

IMAP SSL (Port 993): Unable to Establish Connection

Email Port Checks for: mail.careplanners.net
Protocol Results
SMTP (Port 25): Connection Established
- Extensions: SIZE, AUTH, 8BITMIME, OK
- SSL Valid: No SSL Certificate Found

SMTP SSL (Port 465): Unable to Establish Connection

POP3 (Port 110): Connection Established
- Extensions: TOP, USER, UIDL, IMPLEMENTATION
- SSL Valid: No SSL Certificate Found

POP3 SSL (Port 995): Unable to Establish Connection

IMAP (Port 143): Connection Established
- Extensions: IMAP4rev1, UIDPLUS, XLIST
- SSL Valid: No SSL Certificate Found

IMAP SSL (Port 993): Unable to Establish Connection

Publication: RFC 4408
SPF Records
ARSoft Check: Passed
SmarterMail Check: Passed
SpamAssassin Check: Passed
SPF DNS Location: Click Here: careplanners.net
SPF Record in TXT (TYPE 16): v=spf1 a mx ip4:205.210.188.179 -all
(TYPE 16) Syntax: Passed
SPF Record in SPF (TYPE 99): Not Found - Learn about SPF (TYPE 99) Click Here

Information: Identifier Alignments
SPF Alignment Test (Used in DMARC ASPF Test)
Mail From/Return Path Domain: careplanners.net
From Domain: careplanners.net
SPF Identifier Alignment: Strict

Publication: RFC 4406
Sender ID
Sender ID Check: Passed
Sender ID Record: Uses SPF implementation above

Publication: RFC 4870
Domain Keys Additional Information (Obsolete)
Tag Value
Key Algorithm: a=rsa-sha1
Canonicalization: c=nofws
Query Method: q=dns
Domain Name: d=careplanners.net
Selector: s=selector
Signed Headers: h=received:from:to:subject:date:reply-to:message-id:mime-version :content-type:x-originating-ip
Signature Data: b=PgMK2Dzdukl671qSZFBuPatm7J0v9o+xh0HCqTacFauqJsCJdJCatp5H3ddmtpTzb Fzu67Nc/3xDrsVaiTC3aoOHFQWzHwDSAyMFBcdZPdvbYmtWTo4waHdu9oqWXuE0Sh 2kWsQi/KqJ8txTUYNBdbxtifJUsz9kxqsgtgg2GxE=

Domain Keys Check (Obsolete)
Signature Found: Yes
SM Signature Verification: Passed
From Signed: Yes
Restricted Headers Signed: Yes - Return-Path, Received, Comments, Keywords, Bcc, Resent-Bcc, DKIM-Signature should not be signed.

Public Domain Key (Obsolete)
Selector Location: Click Here: selector._domainkey.careplanners.net
DNS Record Found: Yes
Record Syntax: p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC95lwgnJSu+HxVtDKd/RWfl9vkV/KOjnNF+8hhIV9ooMaGdz0AkP3LaMojPwQkGNDoyOmNHsdSdQz+IgWGwTFeUm03nKXbHRhwXQpy+6RcImvautzGagAQiEB44gKTJF3I1dee9oDFx0RUX5R7nOtkD5P1wd2XZKNMaz7y3pLVkwIDAQAB
Key Size: 1024

Publication: RFC 6376
DKIM Signature Additional Information
Tag Value
Version: v=1
Key Algorithm: a=rsa-sha256
Canonicalization: c=relaxed/relaxed
Domain Name: d=careplanners.net
Selector: s=selector
Signed Headers: h=x-originating-ip:content-type:mime-version:message-id:reply-to :date:subject:to:from
Body Hash: bh=SIHxm875VumE333SK2hNurj16vLz6Ki1P1N7GeCDPpQ=
Signature Data: b=TG2gfnDPXjt8qstiVRK1zqFsZKkgDayFER95X682PXYlCa4AL1dz2naGgfFILQcSq nvAybzm8ZrOZT3cSTQIP8QbQJbmahnT89PoXSDTchHv0EgiGykA9XX3sGqULODdwp 6kMn9Pg2xeVaWWx0ZwVDiEcyqD0xxAneUiXSgaBmg=

Publication: RFC 6376
DKIM Check
Signature Found: Yes
SmarterMail DKIM Test: Passed
LimiLabs DKIM Test: Passed
SpamAssassin DKIM Test: Passed
From Signed: Yes
Restricted Headers Signed: No

Public DKIM Key
Selector Location: Click Here: selector._domainkey.careplanners.net
DNS Record Found: Yes
Record Syntax: p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC95lwgnJSu+HxVtDKd/RWfl9vkV/KOjnNF+8hhIV9ooMaGdz0AkP3LaMojPwQkGNDoyOmNHsdSdQz+IgWGwTFeUm03nKXbHRhwXQpy+6RcImvautzGagAQiEB44gKTJF3I1dee9oDFx0RUX5R7nOtkD5P1wd2XZKNMaz7y3pLVkwIDAQAB
Key Size: 1024 bits

Information: Identifier Alignments
DKIM Alignment Test (Used in DMARC ADKIM Test)
DKIM d= Tag: careplanners.net
From Domain: careplanners.net
DKIM Identifier Alignment: Strict

Draft Publication: DMARC Base-00-02
DMARC Check
Record Syntax: Passed
DKIM Test: Passed
SPF Test: Passed
ADKIM Test: Passed
ASPF Test: Passed
RUA Test: Failed
The 'rua' tag value is not allowed to receive the report - Dmarc Draft 2 Change
The 'ruf' tag value is not allowed to receive the report - Dmarc Draft 2 Change
RUF Test: Failed
DMARC Passed: Yes
DMARC Record Location: Click Here: _dmarc.careplanners.net
DMARC Record: v=DMARC1; p=none; sp=none; rua=mailto:postmaster@tarsier.viviotech.net!10m; ruf=mailto:postmaster@tarsier.viviotech.net!10m; rf=afrf; pct=100; ri=86400

Publication: RFC 5617
ADSP (Author Domain Signing Policy) Check
ADSP Record: Not Found - Learn how to set up your ADSP record by clicking here: ADSP Record
ADSP Record Syntax: Not Found

Publication: RFC 822 (6.3), RFC 1123 (5.2.7), RFC 2821 (4.5.1)
Acceptance of Postmaster Address
postmaster@careplanners.net Passed

Acceptance of Abuse Address
abuse@careplanners.net Passed

Spam Assassian Results
Content analysis details: (You scored 2.2 points, 5.0 or higher is considered to be spam)

Pts Rule Name Description
-0.0 SPF_PASS SPF: sender matches SPF record
-0.0 BAYES_40 BODY: Bayes spam probability is 20 to 40%
[score: 0.2677]
0.0 HTML_MESSAGE BODY: HTML included in message
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
Subject: text
0.0 FROM_12LTRDOM From a 12-letter domain

Email Authentication Knowledge Base
If you failed any of the tests above, please visit our Email Authentication Knowledge Base.

Reply to Thread