1
Why is this message going to Junk mail?
Question asked by Joe Burkhead - 9/3/2015 at 11:52 AM
Unanswered
Have a friend who emails me occasionally from his gmail account. All of a sudden these messages all are going into my Junk folder. Here is the SMTP log of an incoming message, and I cannot see anything that would cause it to be classified as junk.
 
[2015.09.03] 14:32:03 [209.85.213.46][28238044] rsp: 220 Mail.mydomain.org
[2015.09.03] 14:32:03 [209.85.213.46][28238044] connected at 9/3/2015 2:32:03 PM
[2015.09.03] 14:32:03 [209.85.213.46][28238044] cmd: EHLO mail-vk0-f46.google.com
[2015.09.03] 14:32:03 [209.85.213.46][28238044] rsp: 250-Mail.mydomain.org Hello [209.85.213.46]250-SIZE250-AUTH LOGIN CRAM-MD5250-STARTTLS250-8BITMIME250 OK
[2015.09.03] 14:32:03 [209.85.213.46][28238044] cmd: STARTTLS
[2015.09.03] 14:32:03 [209.85.213.46][28238044] rsp: 220 Start TLS negotiation
[2015.09.03] 14:32:04 [209.85.213.46][28238044] cmd: EHLO mail-vk0-f46.google.com
[2015.09.03] 14:32:04 [209.85.213.46][28238044] rsp: 250-Mail.mydomain.org Hello [209.85.213.46]250-SIZE250-AUTH LOGIN CRAM-MD5250-8BITMIME250 OK
[2015.09.03] 14:32:04 [209.85.213.46][28238044] cmd: MAIL FROM:<sender@gmail.com> SIZE=17358
[2015.09.03] 14:32:05 [209.85.213.46][28238044] rsp: 250 OK <sender@gmail.com> Sender ok
[2015.09.03] 14:32:05 [209.85.213.46][28238044] cmd: RCPT TO:<MyMail@mydomain.org>
[2015.09.03] 14:32:05 [209.85.213.46][28238044] rsp: 250 OK <MyMail@mydomain.org> Recipient ok
[2015.09.03] 14:32:05 [209.85.213.46][28238044] cmd: DATA
[2015.09.03] 14:32:05 [209.85.213.46][28238044] rsp: 354 Start mail input; end with <CRLF>.<CRLF>
[2015.09.03] 14:32:05 [209.85.213.46][28238044] rsp: 250 OK
[2015.09.03] 14:32:05 [209.85.213.46][28238044] Data transfer succeeded, writing mail to 383146627.eml
[2015.09.03] 14:32:05 [209.85.213.46][28238044] cmd: QUIT
[2015.09.03] 14:32:05 [209.85.213.46][28238044] rsp: 221 Service closing transmission channel
[2015.09.03] 14:32:05 [209.85.213.46][28238044] disconnected at 9/3/2015 2:32:05 PM
 
I also don't see any indication of any spam tests being run on this message...curious.
 
Anyone have a clue?

4 Replies

Reply to Thread
0
Matt Petty Replied
Employee Post
Can you go to the message and grab the headers, I would redact any email addresses or anything else identifying from the header.
Matt Petty Senior Software Developer SmarterTools Inc. www.smartertools.com
0
Joe Burkhead Replied
Matt...
Here is the header. Interesting, if I am reading this correctly, Gmail's DKIM is failing. Is that right???

Return-Path: <sender@gmail.com>
Received: from mail-vk0-f51.google.com (mail-vk0-f51.google.com [209.85.213.51]) by Mail.MyDomain.org with SMTP
(version=TLS\Tls
cipher=Aes128 bits=128);
Thu, 3 Sep 2015 15:02:43 -0400
Received: by vkbc123 with SMTP id c123so29940858vkb.3
for <MyMail@MyDomain.org>; Thu, 03 Sep 2015 12:02:43 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20120113;
h=mime-version:in-reply-to:references:date:message-id:subject:from:to
:content-type;
bh=s9LoNUvHcqJ8j8MLPw0xCLzB8nTPLmWrstvfGSnX8ck=;
b=SDDqRhb9TH14SyrEdoa2/b/vfyZasVIFTMM7ZZn/xdD4O5raVdOxuJZnHFZdzKx5SU
hnIz/2jl+vnnSKkOfEYiUBE7sKBcZREpzCKwYvzWwPivjRzbdRqwrve40wtkNpbzwCTF
W0SEhFxRMcYKa8w/+kJPmdFIrWBbR4CzLHD6zF34lEFTYCbqIVyMCRBChFFUJHJ7WIjy
YohqkgITOBG+rB2yvLPPJ443RBPCL75HH6mMY4+curXJShX+RbTiCthn7KiDY/o8Gnx3
PurZXEwW4L5IA6vdPGQfhJYepghduEuRs8/9Y05Aow8hFBquX/OhROLBV0DYQu6MXadg
sPMA==
MIME-Version: 1.0
X-Received: by 10.53.1.166 with SMTP id bh6mr49264042vdd.25.1441306963126;
Thu, 03 Sep 2015 12:02:43 -0700 (PDT)
Received: by 10.31.89.68 with HTTP; Thu, 3 Sep 2015 12:02:42 -0700 (PDT)
Received: by 10.31.89.68 with HTTP; Thu, 3 Sep 2015 12:02:42 -0700 (PDT)
In-Reply-To: <CAJa-fh52Yp0AESxBFQtzVhGUiXVuxVbvAC7faxXeEcvJFkze6Q@mail.gmail.com>
References: <ce013a40e0ff4b67862c0e1c2b9ea5f7@MyDomain.org>
<55e888f8.2758320a.589fd.ffffc6ac@mx.google.com>
<ab2c203773634369a473075110524bb7@MyDomain.org>
<CAJa-fh52Yp0AESxBFQtzVhGUiXVuxVbvAC7faxXeEcvJFkze6Q@mail.gmail.com>
Date: Thu, 3 Sep 2015 15:02:42 -0400
Message-ID: <CAJa-fh5b4c8_8h2d501OEMu_CkO7PWJjhy9t+c=WuQm5NV3cug@mail.gmail.com>
Subject: RE: email
From: Sender <sender@gmail.com>
To: Me <MyMail@MyDomain.org>
Content-Type: multipart/alternative; boundary=001a1133555c8cb06e051edc6db7
X-SmarterMail-Spam: Message Sniffer 0 [code:0], ISpamAssassin 0 [raw: 0], SPF_Pass, DK_None, DKIM_Fail
X-MessageSniffer-ResultCode: 0
X-SmarterMail-TotalSpamWeight: 0
0
Matt Petty Replied
Employee Post
Yea, there have been some recent DKIM posts
http://portal.smartertools.com/community/a86807/sm-14_2_5704-huge-increase-of-inbound-dkim-failures___.aspx
and
http://portal.smartertools.com/community/a86827/smartermail-observation-about-dkim-with-and-without-a-subject_.aspx
Matt Petty Senior Software Developer SmarterTools Inc. www.smartertools.com
0
Joe Burkhead Replied
Doing further testing...entered my friend as a trusted sender so we can communicate. During our back and forth today I have received 4 messages from him...all from different IP's (servers). Out of the 4, 3 of them had a DKIM_Fail, one was a DKIM_None.
Geez, if Google can't get this stuff right, how do the rest of us stand a chance?

Reply to Thread