Spam filtering - Bruce vs. Mail's Best Friend?

Question asked by Emmet McGovern - 1/23/2018 at 12:43 PM

Answered

Has anyone compared Bruce's spam results with Mail's Best Friends spam results? They are quite a bit different on weights. The last copy of Bruces document does not seem to be very effective recently. I'm finding a large mix of spam and ham that are weighted 10 equally. MBF's weighs seem a little bit more granular. I haven't tried theres yet, thats why I'm asking.

http://know.mailsbestfriend.com/papers/SmarterMail-Antispam-Settings.shtml

98 Replies

Reply to Thread

Von-Austin See Replied

1/23/2018 at 4:06 PM

Employee Post Marked As Answer

Emmet,

I would suggest Mail's best friends recommendations for RBL's over Bruce's simply due to the fact that Bruce's guide hasn't been updated in quite some while and contain some outdated RBL's.

Von See

Technical Support Supervisor

SmarterTools Inc.

(877) 357-6278

www.smartertools.com

Emmet McGovern Replied

1/23/2018 at 5:41 PM

I'll give them a try and report back. One thing i just noticed is there are no spam probability weight thresholds on their setup. Maybe Linda can chime in here with suggestions on those.

Linda Pagillo Replied

1/24/2018 at 10:38 AM

Hi Emmet. I will be happy to help you with this. Please allow me just a bit of time to review our paper and make the necessary adjustments. I will also add the spam weight thresholds to the paper. Working on it now. I will chime back in once I have it updated. Thanks for your patience.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Emmet McGovern Replied

1/24/2018 at 10:57 AM

Thanks Linda.

Linda Pagillo Replied

1/24/2018 at 11:14 AM

Emmet, the paper has been updated with the most current configuration that we find to work the most effectively. Check it out here: http://know.mailsbestfriend.com/papers/SmarterMail-Antispam-Settings.shtml and please let me know if you have any questions. Thanks!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Emmet McGovern Replied

1/24/2018 at 11:22 AM

Awesome. I'll convert our settings over later this evening and report back.

Emmet McGovern Replied

1/24/2018 at 11:52 AM

Is %SENDERHOST% a variable that works in v15? I didn't even know you could use vars in SM for anything other than events.

Linda Pagillo Replied

1/24/2018 at 12:14 PM

I believe it does work. Please let me know if you see otherwise. Thanks.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/24/2018 at 12:14 PM

Sounds great!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

echoDreamz Replied

1/24/2018 at 2:26 PM

We had previously asked SM if there was any variables like this and we were told there was not.

Linda Pagillo Replied

1/24/2018 at 2:42 PM

Stand by and I will give it a quick test over here on SM 15x.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/24/2018 at 2:50 PM

It's working. Here is an entry from my SM delivery log:

[2018.01.24] 16:49:23 [85049] Spam check results: [SEM-TEST2: passed]

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

echoDreamz Replied

1/24/2018 at 3:34 PM

Just received confirmation from SmarterTools, SmarterMail DOES NOT support any sort of variables for RBLs / URIBLs lookups.

And the above item where it simply says "passed". I mean, I did a hostname of blahblahblahblahblahblah.com and SM said "Passed", so that doesnt mean anything. All it means is that the result of the lookup did not match the required lookup value, thus it passes.

[2018.01.24] 15:32:42 [61493] Spam check results: [BLAH: passed]

I set a URIBL lookup called blah, with a hostname of blahblahblahblahblahblah.com with a required value of 127.0.0.2, clearly this is not a valid URIBL, but the lookup passes because it doesnt return a matching lookup value.

echoDreamz Replied

1/24/2018 at 3:35 PM

%SENDERHOST% though is a variable that declude knows - http://mailsbestfriend.com/downloads/docs/Declude_JunkMail_Manual.pdf so I assume this is what the above URL is referencing.

Linda Pagillo Replied

1/24/2018 at 4:14 PM

Yes, Declude knows variables such as %SENDERHOST%. I apologize, but I was told at one time that SM supported those as well. Since you have verified with them that this is not the case, I have removed those 3 tests from the paper that I edited today. Thanks for the info Echo!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

echoDreamz Replied

1/24/2018 at 4:47 PM

SM needs these though. Like %SENDERHOST% and %FROMDOMAIN% etc. etc.

Gabriele Maoret Replied

1/25/2018 at 4:19 AM

Many Many Thanks to Linda and her work!

Linda Pagillo Replied

1/25/2018 at 6:33 AM

My pleasure Gabriele!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Employee Replied

1/25/2018 at 1:24 PM

Employee Post

I am adding the variables use into our feature request list for further consideration by the dev team.

kevind Replied

1/25/2018 at 6:39 PM

Robert, if you want to improve spam filtering, then here's a simple change that would probably be easier to implement and more effective:
https://portal.smartertools.com/community/a88965/reverse-dns-check-improvements.aspx

With 18 votes, it's on the top 10 list! Not sure why SmarterMail isn't jumping all over this. It would be easy for customers to use and would be highly effective at stopping spam. Thanks for the consideration.

Employee Replied

1/25/2018 at 6:54 PM

Employee Post

Kevin, that is at the top of the list for spam filter additions we'll be implementing. Thank you for all of your suggestions.

kevind Replied

1/25/2018 at 7:01 PM

Awesome! Seems like we've missed you. Did you take some time off or something? Anyway, it's great having you engaged in the portal and responding to customers!

echoDreamz Replied

1/25/2018 at 10:36 PM

Thanks kevind - I quit pushing it lol. I am really hoping it makes it into SmarterMail 17 or atleast before I retire...

kevind Replied

1/26/2018 at 12:04 PM

Yeah, and it's not even my idea. :) But it's a great idea, long overdue, and hope to see it soon!

Hemen Shah Replied

1/30/2018 at 5:08 AM

Linda, thank you for sharing the info, just wanted to check i dont see Spamhaus (zen) in your effective list, is there any specific reason to that.

Thanks

Linda Pagillo Replied

1/30/2018 at 6:30 AM

Hi Hemen. Zen is on the list. I have it listed as Zen, not Spamhaus.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

1/30/2018 at 8:07 AM

Yes got that, if i see your page 2, point 3 where it says to enable
"Incoming SMTP Blocking with following weights"
then its mentioned barracuda weight 10 but in first page barracuda is given 15 , similarly others and i dont think we can set RBL with 2 different weights for filtering and incoming smtp blocking so how is that !!

Gabriele Maoret Replied

1/30/2018 at 8:24 AM

That guide seems to be made for v. 15 and older AntiSpam Settings.
Do you have plan to make a guide even for v. 16 ?

Linda Pagillo Replied

1/30/2018 at 9:16 AM

Hemen, if you are using Zen for filtering, the weight should be 15. If you are using for Incoming SMTP Blocking, you should use weight 10. If you are using it for both, I see what you mean about only being allowed to have one weight for it. You are correct. In this case, we suggest weight 10 for filtering and SMTP blocking.

Gabriele, you can use this guide for both 15x and 16x. What made you think it was only for 15x or below? I would like to know because if you are feeling this way, there are others who are feeling this way and I want to adjust the paper accordingly so it is less confusing to all.

Thanks!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

1/30/2018 at 9:37 AM

Linda thanks for quick response, my concern here is about "outgoing smtp blocking" i am on 15.7.6572 and since then getting frequent complaints about mails landing in recipient's junk folder , this happens mails sent from one to another on same SM server and even though sending via webmail/outlook (imap)
So as per your document, do you recomment enabling outgoing smtp blocking for rbls

Linda Pagillo Replied

1/30/2018 at 10:15 AM

We currently do not and have never used the Outgoing smtp blocking feature in SmarterMail. We haven't had the need for it. We find that Declude Hijack, SM's Internal Spammer Notification and SM's throttling feature are a great combo to use to stop a compromised account from sending spam out from a SM server.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

David Fisher Replied

1/30/2018 at 11:58 AM

Hi Linda,

Thank you so much for updating this list of yours.. I have a few points :

1) Are IP4R = "Add RBL" & RHSBL = "Add URIBL"

2) If you are, Adding URIBL what is the maximum weight this is a required field

3) Like addressed above already, I do see the weights have different values for Incoming SMTP blocking vs just filtering, most of us use one entry for both.

4) Can you please put a Revision Date on site?

5) Can you export the antispam settings as SM v15+ supports that, I have not seen anyone so far upload a XML file of their settings so people can easily import them.

Thank You,

-dave

Hemen Shah Replied

1/31/2018 at 12:06 AM

I am trying to validate specific case where, email sent to domain on google apps is landing in junk/spam folder, i have disabled all Outgoing SMTP blocking, as per declude log it says "01/30/2018 10:09:21.963 261111352 SKIPPING Junk Mail scanning for outgoing E-mail"

So is it that incoming checks at google apps is happening on ISP IP rather than SM IP and due to which it is landing in junk folder ? any solution to this !!!

Gabriele Maoret Replied

1/31/2018 at 6:02 AM

Hi linda, in the next days I will try to write the reasons because I feel that your guide is not well worthy for v16...

I'm sorry if I ask you to be patient, but these days I'm very busy ...

Linda Pagillo Replied

1/31/2018 at 6:09 AM

Hemen, there are several reasons why your user's mail could be landing in someone's spam folder when they send to a Google hosted email address. It could be the IP, but if your sending IP is clean, I doubt that is the problem. It could be caused by the content of the email or the person with the Google hosted address could have their spam settings too strong etc... Can you post a header here from a message that your user sent to a Google hosted account, but it went to the spam folder? Perhaps I can help you to determine the cause. Thanks.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/31/2018 at 6:12 AM

No worries Gabriele. I'm going to take another look at the paper today and verify that it can be used for version 16x. If not, I will adjust it accordingly. Thanks!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/31/2018 at 6:52 AM

Hi Dave. To answer your questions...

1) Are IP4R = "Add RBL" & RHSBL = "Add URIBL"

I'm not understanding what you are asking. Can you please be more specific?

2) If you are, Adding URIBL what is the maximum weight this is a required field

Again, please explain number 1 a bit more in-depth and that will allow me to answer #2.

3) Like addressed above already, I do see the weights have different values for Incoming SMTP blocking vs just filtering, most of us use one entry for both.

That's fine. If you use a test for both, use a weight of 10.

4) Can you please put a Revision Date on site?

Done.

5) Can you export the antispam settings as SM v15+ supports that, I have not seen anyone so far upload a XML file of their settings so people can easily import them.

Please allow me some time to look into this and get it done. Thanks!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

David Fisher Replied

1/31/2018 at 11:11 AM

Hi Linda,

Sorry that I wasn't very clear, on your website you have a column called IP4R and RHBL, what does that mean?

I heard of RBL and URIBL, in SmarterMail we are given two options, we can Add a RBL or URIBL, the URIBL has one additional field called Max Weight (Along with Min Weight), so it is kind of hard to understand what to type in each field.

I appreciate your HARD work on making this handy website, but I would think it would be clearer for SmarterMail, telling people what to type in each field, and if they are to Add a RBL or Add a URIBL.

Thank again for all the hard work you put into maintaining this for the SmarterMail community.

Thanks,
-dave

Linda Pagillo Replied

1/31/2018 at 11:50 AM

My pleasure! Thanks for the additional info and for your suggestions. I appreciate it very much. I will be looking at the paper later today and I'm planning on making some adjustments to make it more user-friendly. I'm also going to make it more user-friendly for SM 16x.

As for RHSBL, they should be URIBL in my document. I will change that today too. Thanks again!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/31/2018 at 3:06 PM

David, I have updated the paper accordingly. Please let me know if my changes are easier to understand: http://know.mailsbestfriend.com/papers/SmarterMail-Antispam-Settings.shtml Thanks!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

1/31/2018 at 11:05 PM

Below is the original header of email received at google hosted account and landed in junk, message content was simple of test message

Delivered-To: abc@xyz.com (google hosted)
Received: by 10.25.232.28 with SMTP id f28csp5430671lfh;
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
X-Google-Smtp-Source: AH8x224Nq9690JIf9NC6aJOYx8OxI2SldgRClyeR8RwKDkdhlbc2IBZBABKQcGeCLCtwGDu5U5fa
X-Received: by 10.129.45.135 with SMTP id t129mr19385800ywt.64.1517328764637;
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517328764; cv=none;
d=google.com; s=arc-20160816;
b=khKlAtzKKDHtDmBpNgq/yU2KGHrMmnP1QDVQLGb30meRxVrAJPaL2HfGnaEnfUHB4v
arWqd+T+3RT5zh7pjhN05PlVNkjFD0hDSIE/h2evjKqb/id+S0BP0kq8TQMCAWTPdLRa
/WFtBCn+xu7UkPvU8TKWmyWa4mEqiUb3STdp0qsMRAGU/4gwWJEHNdertAZIl+vz/FAv
IUnS7T5J+DoUNL5gEopvKYMGf73J7FCoKV3hT/zzMcn1WO41sdNI7vc4KBKMfK97JVX0
3+faDhmUhwGaGyiiqsApW4dJRojLYVFXOzUSVKcvJhmilJ65XjRnoUA8bC+nMWVzL5p0
gmfg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=disposition-notification-to:mime-version:message-id:reply-to:date
:subject:to:from:dkim-signature:arc-authentication-results;
bh=ovPrdncvFR9qbCdZyvmeItHWW0YlaAvI74MmFdcGENk=;
b=m7xAhcgrP1Mh6BxRxJqNyiYmzLd77sAJIHMsEun/7VvnPW2OuLKPjnIOaD6Jf3+r7F
ZH6W3SB8fMfbFMWOORPtbFhSj288DSFG3Wrc7NnPU8NEfJaLcYwQOVCGFR7C3ktzISCl
+OPU5bd3IgUGzVgbiq94T6JCT1H+7VsrdDbpVKo9+HvYM7kScyakrVodcSORZn3ZDd42
H9FVLCFOfWHcWaHl17B8BnM8vRlSwSP8w5bZjwRED/vjkro6j3uq5kGejtZV34Br1G1H
tPHM+lr1PY7PsseHoE4p4QJtRnnz+wXCrClU6qkdRpAtq3iOw/JXc0hV4p9HkAjgRTfF
L2YA==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=f8Hry+NC;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id x6si2656696ywb.259.2018.01.30.08.12.43
for <abc@xyz.com (google hosted)>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=f8Hry+NC;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:x-declude-sender:disposition-notification-to
:x-originating-ip:x-exim-id:content-type:mime-version:message-id
:reply-to:date:subject:to:from;
bh=EgJits735l4+6gD1TGTpafUF1TwxZW5AMtmY2mcPiFI=;
b=f8Hry+NC7TFedILPzxb0tO7lROyV2E1Krv6q+vO0EovLxwhR4cPaaYXy57cSPfsHP
7jej/GK2KdNU+JI32UKVJRj5HyHp4YWKpspQNeD9VumAa7NcP3fG+9/RmHnb4HDbH
SJPDy1nlOBdL/Awm1PEy3DKxJK6bXdGfbR26ROS+g=
Received: by mail.virtualnethosting.net via HTTP; Tue, 30 Jan 2018 11:12:25 -0500
From: Route Hosting <admin@routehosting.com>
To: <abc@xyz.com (google hosted)>
Subject: Re: Test again
Date: Tue, 30 Jan 2018 11:12:25 -0500
Reply-To: admin@routehosting.com
Message-ID: <02bd916941664cc2a50baf2b348128ad@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=fa9239da80a1463286e34104fb60f022
X-Exim-Id: 02bd916941664cc2a50baf2b348128ad
X-Originating-IP: [45.112.144.13]
Disposition-Notification-To: "Route Hosting" <admin@routehosting.com>
X-Declude-Sender: admin@routehosting.com [45.112.144.13]
X-Declude-Spoolname: 261111591.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:12:27 on 30 Jan 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO:
X-Identity: 45.112.144.13 |
| mpuh.org

--fa9239da80a1463286e34104fb60f022
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Test Mail again

Thanks
Hemen S

--fa9239da80a1463286e34104fb60f022
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<span style=3D"font-family: Arial, Helvetica, Sans-Serif; font-size: 12px">=
<div>Test Mail again</div>

<div> </div>

<div> </div>

<div>Thanks</div>

<div>Hemen S</div></span>

--fa9239da80a1463286e34104fb60f022--

Gabriele Maoret Replied

2/1/2018 at 12:29 AM

Thx Linda. Very good work as always!

Linda Pagillo Replied

2/1/2018 at 7:07 AM

My pleasure, Gabriele!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Linda Pagillo Replied

2/1/2018 at 7:17 AM

Thanks Hemen. I ran the sending IP (45.112.144.13) through a blacklist check of over 300 blacklists and the IP is listed on 14 blacklists some of which are the most widely used RBLs across the world. In other words, the sending IP is dirty so that is my educated guess as to why mail from that user is landing in Google hosted email junk mailboxes. The IP needs to be removed from those RBLs. The ones to worry about are as follows...

Barracuda Reputation Block List
CBL
SORBS Aggregate zone
SORBS Spamhost (any time)
SORBS Spamhost (last year)
Spamhaus SBL-XBL Combined Block List
Spamhaus XBL Exploits Block List
Spamhaus ZEN Combined Block List
UCEPROTECT Level 2
UCEPROTECT Level 3

If you would like to check for yourself, go to http://multirbl.valli.org/ and have a look. There are links there which will take you to each RBLs website where you can request removal. I hope this helps. Please let me know if you have any questions. Thanks.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

2/1/2018 at 7:28 AM

Thanks Linda and i did noticed that but as said before that is my Internet Provider IP and not my SM IP, usually internet provider ip's will be listed somewhere wont be 100% clean, so is there anyways to counter this.

Linda Pagillo Replied

2/1/2018 at 9:20 AM

Hemen, can you please do something for me as a test? Open your Declude's global.cfg file. Find the following line: XSENDER ON. Change it to XSENDER OFF or just comment it out with a #. Next find the following line: XINHEADER X-Identity: %REMOTEIP% | %REVDNS% | %REMOTEHOST%. Comment that out with a #. Once those 2 things are done, please send the exact same test message from admin@routehosting.com to the Google hosted address. Please let me know if it lands in the Inbox or the Junk box and either way, paste the header here. Thanks!

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

2/1/2018 at 10:36 AM

Linda, as requested # both the lines and sent test mail TO and FROM same id, still landed in junk, header below

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1465505lfh;
Thu, 1 Feb 2018 08:50:02 -0800 (PST)
X-Google-Smtp-Source: AH8x225afooR3imU9iz7ZPkro6snCshb/8CbIpM25XJ5cQKDo3qI/fm+VjMgAkyto6+WaUIsDLUe
X-Received: by 10.13.243.198 with SMTP id c189mr25926492ywf.141.1517503802246;
Thu, 01 Feb 2018 08:50:02 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517503802; cv=none;
d=google.com; s=arc-20160816;
b=XknuCuQHH6B2QODHKeMOoZ/2QFNxAOLGPfzLzKqEG/puRxgktjbj/XUyyOiI6/7b1+
S/gNSJYN50bLyCiOZ5YWHv7c/IGreu5m16tFy1bEJv8XKlcq8SXdBoUuYnz+dZNXdIyX
dCR/0nr7uBqtWS8DDRwVCcYLpAgUebiEnoEBTJTPqibN+6TodNVAKtq2oAmVlMAZ8NR/
+q3znF2j6D9d1Y9Sl6QoLzUZuVTBnyv5BuZ1oQlyglpE2wE2s5d+PgnSrCyRACZ6reF6
gGL5Eohd6OwD0xN0CcnH91RSXoQnUSs6ohiXWVDtnO8KgNxXndwsZ3BugMyjmA9YTkRH
pzWw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=A8dTrUDP6q0SZep2HDs2CivAcosG+g0SYgEWCJChi0A=;
b=vPgSulSZ3EYn5PsjA7HqVtAPo5Yp4v/OiAFxfuSMFlqxe5E3zxtVEZg/xaDQ/2SMD9
2nF8ZfYmnrdFzVM6h/J1DTlaFOeQIrwcDFJLOlcNUfNe8SPS9VOwhClZfHgtVHKEVu4u
pWdXnx876sVIhkMJ8dTp1EteY2+c3GrYv9ab0HjMQajQs8qYSrKvtDuXkc6jXDqvmU+u
r6PAVB1ZoJegjEJBnRQhu0Ogx6vOr9VyRL1xIfLE3JtaVojg7r7aspm2cQKOSGahdg3S
ineTIhqdV6ivY0bjYXTEGm14SvATxRsvcMDQ5ksQjy33UH4NCqPSC/bPFL7KIK9bxiq1
dYmQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=RH3Q18QA;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id q186si917948ywf.582.2018.02.01.08.50.01
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 01 Feb 2018 08:50:02 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=RH3Q18QA;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:content-language:thread-index:x-mailer
:content-type:mime-version:message-id:organization:date:subject
:to:from:reply-to;
bh=asH3LGGP2+KzDmZ4rsKZxZe5WBuoEC8ixkWyPnD5bOc=;
b=RH3Q18QAGA2FGTxEITRV1D8UpsqUrpdWICBUQk4H1qh8IdsM82z6CHDpcCRRUjYZt
i0C1+bacJaqlqH6rPIsSusrX7NFElOId9x4WVQYArLaH3JMc2GLMHbBt/yFYvje3o
Y2UhejJfk+4N7iPeF86NVIrSLsIXIoBXr43sxIX6c=
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net with SMTP (version=TLS\Tls12 cipher=Aes256 bits=256);
Thu, 1 Feb 2018 11:49:38 -0500
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Re: test mail
Date: Thu, 1 Feb 2018 22:19:46 +0530
Organization: Route Hosting
Message-ID: <001c01d39b7c$b0245f20$106d1d60$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_001D_01D39BAA.C9DC9B20"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdObfKSP0oVZYqcKQWmw7s/6g5+fbA==
Content-Language: en-us
X-Declude-Spoolname: 261133179.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:49:40 on 01 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC
X-Identity: 45.112.144.2 |
| mpuh.org

------=_NextPart_000_001D_01D39BAA.C9DC9B20
Content-Type: multipart/alternative; boundary="----=_NextPart_001_001E_01D39BAA.C9DC9B20"

------=_NextPart_001_001E_01D39BAA.C9DC9B20
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,

Test mail Feb 2018

Linda Pagillo Replied

2/1/2018 at 10:52 AM

Hemen, I apologize, I gave you the wrong info about the X-Identity. Please open your global.cfg and comment out this line instead...
XOUTHEADER X-Identity: %REMOTEIP% | %REVDNS% | %REMOTEHOST%
Once you do that, please run another test and let me know where the messages lands and post the header here. Thanks.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

2/1/2018 at 11:08 AM

Thats fine, did the same and still in junk, header below

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1541838lfh;
Thu, 1 Feb 2018 10:00:11 -0800 (PST)
X-Google-Smtp-Source: AH8x224aw4VZXm0u+FQkMSiPw0H1MrQIkkkEAmIyfq3xpeypIhOHxvkEv5GgLWTgRY8pN+JSUnei
X-Received: by 10.37.246.31 with SMTP id t31mr27279434ybd.330.1517508010948;
Thu, 01 Feb 2018 10:00:10 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517508010; cv=none;
d=google.com; s=arc-20160816;
b=qY91kY4co847MqI30SpxhqDJS5VRoaia3nYGSGJ70wV3olJwBq3qnc8wxt1YQXPvGo
iFbKOPKN2cPXhH9Nukm1glwMlqP6POHEI2r3glbsyuLVAlqBLimqxOXU11OP8PzU0Cmt
Y5azrbQ8dmkRaHqJEW8LYA68TiS2ZV4rTAEc6ubXOcn3nrCsdq4zbJbuemOCBozOWvoY
tZ09fZ6tyB8+obilvlqQaWdQIgJ8Pbuwb/2o0Kbt4xTkURu5wwdxsC0qze+iXXRr5m/M
G/5Rc+E26uMipqEk7vwbAB2X2d4V0hsUxsMS+EWBmHq7g1pmR0Yi9UlAeDUapEUaHBrk
cYAQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=UkNN6SSJ08Omn+TQbJTQ0CgWgQJbQ+5mw9dCFjhfV/Y=;
b=I0lFCSbVRjaYvfs3rCupTV9zAusXr6mtY8XUqQcAbkSw3oeojZvYsieWBdoVZnR1tH
I5vAubjvI5uwXw9EB2vkQEDywpOwTrp4tY/rXaFuWL51ijyw+dvRxSIzKBjD/B3rPMw5
2dhjClgYmn3Qv8MJdvav+QVPY+Y6I27/jM3zZUv2asha9mseEJziVJvZ4jgn3sJpqYQV
hqFQ5BCCkYv3B4WwpVTTsxp+cAu5eT5jkMh9EOZW5dgLaBU9vXYIpIHMVgraBXPxr+sK
+c2F5yDrRF4CFSqcjU1zaCDvZH652sSX+YEtLfoYllHNIrxXzKMwHE9+C4n4FKflXT0c
gimg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=iPw0sjVH;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id 67si24953ybp.293.2018.02.01.10.00.09
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 01 Feb 2018 10:00:10 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=iPw0sjVH;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:content-language:thread-index:x-mailer
:content-type:mime-version:message-id:organization:date:subject
:to:from:reply-to;
bh=6ix7Mtti5umxnNA7DMLCkXWDyzAIHs6ci1EcrxzIs+Y=;
b=iPw0sjVHujnSrUDL4nOXbvZUsy0d0RuDVk6lLxhmpK2YeC4OdXOkGD05rtp30+1y4
f4enOVzOJeuAAd9cmy8q4SgCEjjX1knqaq29Mj9fIdLQ7QdbtidZKUTQSPiqvpbCf
642Cm2ara9qiWLf0eimFo1lpxbqvFZcGUSLxfT7vc=
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net with SMTP (version=TLS\Tls12 cipher=Aes256 bits=256);
Thu, 1 Feb 2018 12:59:47 -0500
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Re: Test mail again
Date: Thu, 1 Feb 2018 23:29:55 +0530
Organization: Route Hosting
Message-ID: <006801d39b86$7c97ea50$75c7bef0$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_0069_01D39BB4.96529750"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdObhnKijDUJd9luSEeyDLufrA6g7g==
Content-Language: en-us
X-Declude-Spoolname: 261133404.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 12:59:49 on 01 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC

------=_NextPart_000_0069_01D39BB4.96529750
Content-Type: multipart/alternative; boundary="----=_NextPart_001_006A_01D39BB4.96529750"

------=_NextPart_001_006A_01D39BB4.96529750
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Test mail again

Linda Pagillo Replied

2/1/2018 at 2:52 PM

Hemen, I reached out to SM support to ask them a question about this line:
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net. Once they respond, I will get back to you with a few more things to try. Thanks for your patience.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Linda Pagillo Replied

2/1/2018 at 2:54 PM

Btw, which version of SM are you using Hemen?

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

2/1/2018 at 9:44 PM

Thanks for all efforts, i am on SM 15.7.6572

Linda Pagillo Replied

2/2/2018 at 9:11 AM

Thanks. Please leave the same things in place from yesterday and do the following... Log into your SM admin interface, go to Settings, Protocol Settings, SMTPIn tab, in the Append Received Line box, pop it down and choose None then save. After you do that, send the same test, let me know where it lands and post the header here. Also, switch the Append Receive Line settings back to the way you had them after you send and receive the test message. Thanks.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

2/2/2018 at 9:45 AM

You mean, i should keep # in both lines as asked yesterday or should i remove it and keep it was originally.

Hemen Shah Replied

2/2/2018 at 9:51 AM

Have kept ON, both XSENDER and XOUTH and below is the header with Append - NONE

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1051846lfh;
Fri, 2 Feb 2018 08:44:37 -0800 (PST)
X-Google-Smtp-Source: AH8x224PLlQ22HkxVP0ZhFsAEAWOlPe1h7RAc+XxRBet38+HeW8C5sgFX91Oa35+U14TCtglji01
X-Received: by 10.129.193.13 with SMTP id f13mr2770063ywi.305.1517589877542;
Fri, 02 Feb 2018 08:44:37 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517589877; cv=none;
d=google.com; s=arc-20160816;
b=rb2Wpn8Aw+5X/T44lH6k/6edhfVD9LPreh1jvu5nwHwSDesmpsimb8KTPx1Y/9Gd4C
9EHaZigLuTPt4E+p27K0Yo890UfVkepY+zCDmBCpYsX/yZRlG+sJyOI8ZO5tuY8clT34
igA4D8/Artd/qmK7zQX9DNK3OQLbqOgzMTjn8rcxW3knENV+p39DvrfNFuqyrW4QB34d
5WW1Un5c8fR01tZQrSrsi8v0ZKPMurFzztJROKaEZQ1J043oFpE+zmBsKmRgA6PXPD6p
NJM3lZQhHPAzVofC1dVgx05L3dycAI3pWcTjWrc2FfZx9M1rFgwkTA2r32dMU3vTZ/F5
9fKw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=HFZfMFVQaWNDTqr6gLQnA2eotcnlhA6YF0VuNeNTTbw=;
b=b73h9hTZz7FtfJC34aVE1IsmAUyAREW2FxLEV3tUtU6SE5UR9B5EXXjxaNWYVF7Utc
TgteYcWTI6qN1WqORQjzUYCkIZYXyRvboZn4ThjhOqHpsfj8J5aju6Nk37WdxxBNqV+B
jYIVYVhY/kqFpz3A+olFj582ErcAXEZF36REZIoMGCjA6Q681sjnVd5Rcw/zBK9wmJLP
bmd3WY/6wWzX4c+v7b4ZfNMVIAgFLtq9aLUDJ+F2jSagHEiI/r+9USykPFHpa3Rf1i/l
inV/qVgF1CTxIvT3Uuc/gbIPVf+BkvUyVx5g5N8XESeCbkp7NIzGa3SNT7+I71a+v5Jq
qkGw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=bdVC3sEo;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id b188si467269ywf.377.2018.02.02.08.44.36
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 02 Feb 2018 08:44:37 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=bdVC3sEo;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:x-declude-sender:content-language
:thread-index:x-mailer:content-type:mime-version:message-id
:organization:date:subject:to:from:reply-to;
bh=hJMLdDA6DOQpXPlTS0G2pY1sVFC4n+X43GEthhVW8aA=;
b=bdVC3sEo8vJVbJ4N49VIwO2Q+/wAglGMy5EOg/XvQDzbbRDPxR4tmX/fM0NT8lxcA
4MEmbW14MyAgdIdw793EACyUFz7vrSx1lBwpSyCzuTR/ec79CucsXBHuf+W3aoO3J
F7v/JHzLOpM9Z+i4OG+g8MLbmTY4zIUVJRRq7Kjhw=
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Test friday
Date: Fri, 2 Feb 2018 22:14:19 +0530
Organization: Route Hosting
Message-ID: <000001d39c45$1770c7e0$465257a0$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_0001_01D39C73.312B74E0"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdOcRQt+EH70M3zTQCWDycQESrpOpQ==
Content-Language: en-us
X-Declude-Sender: admin@routehosting.com [127.0.0.1]
X-Declude-Spoolname: 261139505.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:44:13 on 02 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC
X-Identity: 127.0.0.1 |
| mpuh.org

------=_NextPart_000_0001_01D39C73.312B74E0
Content-Type: multipart/alternative; boundary="----=_NextPart_001_0002_01D39C73.312B74E0"

------=_NextPart_001_0002_01D39C73.312B74E0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi

Testing today - Friday

Linda Pagillo Replied

2/2/2018 at 10:17 AM

Did this land in the Inbox or in Junk?

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

Hemen Shah Replied

2/2/2018 at 10:27 AM

sorry missed on that, it landed in junk

Linda Pagillo Replied

2/2/2018 at 10:53 AM

Thanks Hemen. The reason I had you do all of this is because I wanted to determine if 45.112.144.2 simply being in the headers was causing Google hosted email to kick the message to spam. Since we have eliminated all instances of 45.112.144.2 from the headers, my educated guess is that it's not that dirty IP causing the issue. I even ran your sending domain name through a checker and it is clean. Lastly, I ran your mail server IP through the checker at Senderbase.org and it has a good reputation. This tells me that more than likely none of those things are causing the issue. Can you please send me a test email to lpadnet@gmail.com? I want to see where it lands. Thanks.

Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com

Authorized SmarterTools Reseller

Authorized Message Sniffer Reseller

ram Replied

2/2/2018 at 11:11 AM

If I have enabled Cyren Premium Antispam for SmarterMail 16.3, Do I need deploy Mail's Best Friend spam filtering?