Spam filtering - Bruce vs. Mail's Best Friend?
Question asked by Emmet McGovern - January 23 at 12:43 PM
Answered
Has anyone compared Bruce's spam results with Mail's Best Friends spam results?  They are quite a bit different on weights.  The last copy of Bruces document does not seem to be very effective recently.  I'm finding a large mix of spam and ham that are weighted 10 equally.  MBF's weighs seem a little bit more granular.  I haven't tried theres yet, thats why I'm asking.
 
 

98 Replies

Reply to Thread
2
Von-Austin See Replied
Employee Post Marked As Answer
Emmet,
 
I would suggest Mail's best friends recommendations for RBL's over Bruce's simply due to the fact that Bruce's guide hasn't been updated in quite some while and contain some outdated RBL's. 
 
Von See
Technical Support Supervisor
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
Emmet McGovern Replied
I'll give them a try and report back. One thing i just noticed is there are no spam probability weight thresholds on their setup. Maybe Linda can chime in here with suggestions on those.
2
Linda Pagillo Replied
Hi Emmet. I will be happy to help you with this. Please allow me just a bit of time to review our paper and make the necessary adjustments. I will also add the spam weight thresholds to the paper. Working on it now. I will chime back in once I have it updated. Thanks for your patience.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Emmet McGovern Replied
Thanks Linda.
1
Linda Pagillo Replied
Emmet, the paper has been updated with the most current configuration that we find to work the most effectively. Check it out here: http://know.mailsbestfriend.com/papers/SmarterMail-Antispam-Settings.shtml and please let me know if you have any questions. Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Emmet McGovern Replied
Awesome. I'll convert our settings over later this evening and report back.
2
Emmet McGovern Replied
Is %SENDERHOST% a variable that works in v15?  I didn't even know you could use vars in SM for anything other than events.
0
Linda Pagillo Replied
I believe it does work. Please let me know if you see otherwise. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Linda Pagillo Replied
Sounds great!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
echoDreamz Replied
We had previously asked SM if there was any variables like this and we were told there was not.

Christopher

0
Linda Pagillo Replied
Stand by and I will give it a quick test over here on SM 15x.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Linda Pagillo Replied
It's working. Here is an entry from my SM delivery log:

[2018.01.24] 16:49:23 [85049] Spam check results: [SEM-TEST2: passed]
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
echoDreamz Replied
Just received confirmation from SmarterTools, SmarterMail DOES NOT support any sort of variables for RBLs / URIBLs lookups.

And the above item where it simply says "passed". I mean, I did a hostname of blahblahblahblahblahblah.com and SM said "Passed", so that doesnt mean anything. All it means is that the result of the lookup did not match the required lookup value, thus it passes.

[2018.01.24] 15:32:42 [61493] Spam check results: [BLAH: passed]

I set a URIBL lookup called blah, with a hostname of blahblahblahblahblahblah.com with a required value of 127.0.0.2, clearly this is not a valid URIBL, but the lookup passes because it doesnt return a matching lookup value.

Christopher

0
echoDreamz Replied
%SENDERHOST% though is a variable that declude knows - http://mailsbestfriend.com/downloads/docs/Declude_JunkMail_Manual.pdf so I assume this is what the above URL is referencing.

Christopher

0
Linda Pagillo Replied
Yes, Declude knows variables such as %SENDERHOST%. I apologize, but I was told at one time that SM supported those as well. Since you have verified with them that this is not the case, I have removed those 3 tests from the paper that I edited today. Thanks for the info Echo!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
echoDreamz Replied
SM needs these though. Like %SENDERHOST% and %FROMDOMAIN% etc. etc.

Christopher

0
Gabriele Maoret Replied
Many Many Thanks to Linda and her work!
0
Linda Pagillo Replied
My pleasure Gabriele!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
3
Robert Emmett Replied
Employee Post
I am adding the variables use into our feature request list for further consideration by the dev team.
Robert Emmett
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
kevind Replied
Robert, if you want to improve spam filtering, then here's a simple change that would probably be easier to implement and more effective:
https://portal.smartertools.com/community/a88965/reverse-dns-check-improvements.aspx

With 18 votes, it's on the top 10 list! Not sure why SmarterMail isn't jumping all over this. It would be easy for customers to use and would be highly effective at stopping spam. Thanks for the consideration.
5
Robert Emmett Replied
Employee Post
Kevin, that is at the top of the list for spam filter additions we'll be implementing.  Thank you for all of your suggestions.
Robert Emmett
Software Developer
SmarterTools Inc.
(877) 357-6278
www.smartertools.com
0
kevind Replied
Awesome! Seems like we've missed you. Did you take some time off or something? Anyway, it's great having you engaged in the portal and responding to customers!
0
echoDreamz Replied
Thanks kevind - I quit pushing it lol. I am really hoping it makes it into SmarterMail 17 or atleast before I retire...

Christopher

0
kevind Replied
Yeah, and it's not even my idea. :) But it's a great idea, long overdue, and hope to see it soon!
0
Hemen Shah Replied
Linda, thank you for sharing the info, just wanted to check i dont see Spamhaus (zen) in your effective list, is there any specific reason to that.

Thanks
0
Linda Pagillo Replied
Hi Hemen. Zen is on the list. I have it listed as Zen, not Spamhaus.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
Yes got that, if i see your page 2, point 3 where it says to enable
"Incoming SMTP Blocking with following weights"
then its mentioned barracuda weight 10 but in first page barracuda is given 15 , similarly others and i dont think we can set RBL with 2 different weights for filtering and incoming smtp blocking so how is that !!
0
Gabriele Maoret Replied
That guide seems to be made for v. 15 and older AntiSpam Settings.
Do you have plan to make a guide even for v. 16 ?
0
Linda Pagillo Replied
Hemen, if you are using Zen for filtering, the weight should be 15. If you are using for Incoming SMTP Blocking, you should use weight 10. If you are using it for both, I see what you mean about only being allowed to have one weight for it. You are correct. In this case, we suggest weight 10 for filtering and SMTP blocking.

Gabriele, you can use this guide for both 15x and 16x. What made you think it was only for 15x or below? I would like to know because if you are feeling this way, there are others who are feeling this way and I want to adjust the paper accordingly so it is less confusing to all.

Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
Linda thanks for quick response, my concern here is about "outgoing smtp blocking" i am on 15.7.6572 and since then getting frequent complaints about mails landing in recipient's junk folder , this happens mails sent from one to another on same SM server and even though sending via webmail/outlook (imap)
So as per your document, do you recomment enabling outgoing smtp blocking for rbls
0
Linda Pagillo Replied
We currently do not and have never used the Outgoing smtp blocking feature in SmarterMail. We haven't had the need for it. We find that Declude Hijack, SM's Internal Spammer Notification and SM's throttling feature are a great combo to use to stop a compromised account from sending spam out from a SM server.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
David Fisher Replied
Hi Linda,
 
  Thank you so much for updating this list of yours.. I have a few points :
 
1) Are IP4R = "Add RBL" & RHSBL = "Add URIBL"
2) If you are, Adding URIBL what is the maximum weight this is a required field
3) Like addressed above already, I do see the weights have different values for Incoming SMTP blocking vs just filtering, most of us use one entry for both.
4) Can you please put a Revision Date on site?
5) Can you export the antispam settings as SM v15+ supports that, I have not seen anyone so far upload a XML file of their settings so people can easily import them.
 
Thank You,
-dave
 
 
0
Hemen Shah Replied
I am trying to validate specific case where, email sent to domain on google apps is landing in junk/spam folder, i have disabled all Outgoing SMTP blocking, as per declude log it says "01/30/2018 10:09:21.963 261111352 SKIPPING Junk Mail scanning for outgoing E-mail"

So is it that incoming checks at google apps is happening on ISP IP rather than SM IP and due to which it is landing in junk folder ? any solution to this !!!
0
Gabriele Maoret Replied
Hi linda, in the next days I will try to write the reasons because I feel that your guide is not well worthy for v16...
I'm sorry if I ask you to be patient, but these days I'm very busy ...
 
0
Linda Pagillo Replied
Hemen, there are several reasons why your user's mail could be landing in someone's spam folder when they send to a Google hosted email address. It could be the IP, but if your sending IP is clean, I doubt that is the problem. It could be caused by the content of the email or the person with the Google hosted address could have their spam settings too strong etc... Can you post a header here from a message that your user sent to a Google hosted account, but it went to the spam folder? Perhaps I can help you to determine the cause. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Linda Pagillo Replied
No worries Gabriele. I'm going to take another look at the paper today and verify that it can be used for version 16x. If not, I will adjust it accordingly. Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Linda Pagillo Replied
Hi Dave. To answer your questions...

1) Are IP4R = "Add RBL" & RHSBL = "Add URIBL"

I'm not understanding what you are asking. Can you please be more specific?

2) If you are, Adding URIBL what is the maximum weight this is a required field

Again, please explain number 1 a bit more in-depth and that will allow me to answer #2.

3) Like addressed above already, I do see the weights have different values for Incoming SMTP blocking vs just filtering, most of us use one entry for both.

That's fine. If you use a test for both, use a weight of 10.

4) Can you please put a Revision Date on site?

Done.

5) Can you export the antispam settings as SM v15+ supports that, I have not seen anyone so far upload a XML file of their settings so people can easily import them.

Please allow me some time to look into this and get it done. Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
David Fisher Replied
Hi Linda,

Sorry that I wasn't very clear, on your website you have a column called IP4R and RHBL, what does that mean?

I heard of RBL and URIBL, in SmarterMail we are given two options, we can Add a RBL or URIBL, the URIBL has one additional field called Max Weight (Along with Min Weight), so it is kind of hard to understand what to type in each field.

I appreciate your HARD work on making this handy website, but I would think it would be clearer for SmarterMail, telling people what to type in each field, and if they are to Add a RBL or Add a URIBL.

Thank again for all the hard work you put into maintaining this for the SmarterMail community.

Thanks,
-dave
0
Linda Pagillo Replied
My pleasure! Thanks for the additional info and for your suggestions. I appreciate it very much. I will be looking at the paper later today and I'm planning on making some adjustments to make it more user-friendly. I'm also going to make it more user-friendly for SM 16x.

As for RHSBL, they should be URIBL in my document. I will change that today too. Thanks again!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Linda Pagillo Replied
David, I have updated the paper accordingly. Please let me know if my changes are easier to understand: http://know.mailsbestfriend.com/papers/SmarterMail-Antispam-Settings.shtml Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
Below is the original header of email received at google hosted account and landed in junk, message content was simple of test message

Delivered-To: abc@xyz.com (google hosted)
Received: by 10.25.232.28 with SMTP id f28csp5430671lfh;
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
X-Google-Smtp-Source: AH8x224Nq9690JIf9NC6aJOYx8OxI2SldgRClyeR8RwKDkdhlbc2IBZBABKQcGeCLCtwGDu5U5fa
X-Received: by 10.129.45.135 with SMTP id t129mr19385800ywt.64.1517328764637;
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517328764; cv=none;
d=google.com; s=arc-20160816;
b=khKlAtzKKDHtDmBpNgq/yU2KGHrMmnP1QDVQLGb30meRxVrAJPaL2HfGnaEnfUHB4v
arWqd+T+3RT5zh7pjhN05PlVNkjFD0hDSIE/h2evjKqb/id+S0BP0kq8TQMCAWTPdLRa
/WFtBCn+xu7UkPvU8TKWmyWa4mEqiUb3STdp0qsMRAGU/4gwWJEHNdertAZIl+vz/FAv
IUnS7T5J+DoUNL5gEopvKYMGf73J7FCoKV3hT/zzMcn1WO41sdNI7vc4KBKMfK97JVX0
3+faDhmUhwGaGyiiqsApW4dJRojLYVFXOzUSVKcvJhmilJ65XjRnoUA8bC+nMWVzL5p0
gmfg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=disposition-notification-to:mime-version:message-id:reply-to:date
:subject:to:from:dkim-signature:arc-authentication-results;
bh=ovPrdncvFR9qbCdZyvmeItHWW0YlaAvI74MmFdcGENk=;
b=m7xAhcgrP1Mh6BxRxJqNyiYmzLd77sAJIHMsEun/7VvnPW2OuLKPjnIOaD6Jf3+r7F
ZH6W3SB8fMfbFMWOORPtbFhSj288DSFG3Wrc7NnPU8NEfJaLcYwQOVCGFR7C3ktzISCl
+OPU5bd3IgUGzVgbiq94T6JCT1H+7VsrdDbpVKo9+HvYM7kScyakrVodcSORZn3ZDd42
H9FVLCFOfWHcWaHl17B8BnM8vRlSwSP8w5bZjwRED/vjkro6j3uq5kGejtZV34Br1G1H
tPHM+lr1PY7PsseHoE4p4QJtRnnz+wXCrClU6qkdRpAtq3iOw/JXc0hV4p9HkAjgRTfF
L2YA==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=f8Hry+NC;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id x6si2656696ywb.259.2018.01.30.08.12.43
for <abc@xyz.com (google hosted)>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=f8Hry+NC;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:x-declude-sender:disposition-notification-to
:x-originating-ip:x-exim-id:content-type:mime-version:message-id
:reply-to:date:subject:to:from;
bh=EgJits735l4+6gD1TGTpafUF1TwxZW5AMtmY2mcPiFI=;
b=f8Hry+NC7TFedILPzxb0tO7lROyV2E1Krv6q+vO0EovLxwhR4cPaaYXy57cSPfsHP
7jej/GK2KdNU+JI32UKVJRj5HyHp4YWKpspQNeD9VumAa7NcP3fG+9/RmHnb4HDbH
SJPDy1nlOBdL/Awm1PEy3DKxJK6bXdGfbR26ROS+g=
Received: by mail.virtualnethosting.net via HTTP; Tue, 30 Jan 2018 11:12:25 -0500
From: Route Hosting <admin@routehosting.com>
To: <abc@xyz.com (google hosted)>
Subject: Re: Test again
Date: Tue, 30 Jan 2018 11:12:25 -0500
Reply-To: admin@routehosting.com
Message-ID: <02bd916941664cc2a50baf2b348128ad@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=fa9239da80a1463286e34104fb60f022
X-Exim-Id: 02bd916941664cc2a50baf2b348128ad
X-Originating-IP: [45.112.144.13]
Disposition-Notification-To: "Route Hosting" <admin@routehosting.com>
X-Declude-Sender: admin@routehosting.com [45.112.144.13]
X-Declude-Spoolname: 261111591.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:12:27 on 30 Jan 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO:
X-Identity: 45.112.144.13 |
| mpuh.org

--fa9239da80a1463286e34104fb60f022
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Test Mail again


Thanks
Hemen S

--fa9239da80a1463286e34104fb60f022
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<span style=3D"font-family: Arial, Helvetica, Sans-Serif; font-size: 12px">=
<div>Test Mail again</div>

<div>&nbsp;</div>

<div>&nbsp;</div>

<div>Thanks</div>

<div>Hemen S</div></span>

--fa9239da80a1463286e34104fb60f022--
0
Gabriele Maoret Replied
Thx Linda. Very good work as always!
0
Linda Pagillo Replied
My pleasure, Gabriele!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Linda Pagillo Replied
Thanks Hemen. I ran the sending IP (45.112.144.13) through a blacklist check of over 300 blacklists and the IP is listed on 14 blacklists some of which are the most widely used RBLs across the world. In other words, the sending IP is dirty so that is my educated guess as to why mail from that user is landing in Google hosted email junk mailboxes. The IP needs to be removed from those RBLs. The ones to worry about are as follows...

Barracuda Reputation Block List
CBL
SORBS Aggregate zone
SORBS Spamhost (any time)
SORBS Spamhost (last year)
Spamhaus SBL-XBL Combined Block List
Spamhaus XBL Exploits Block List
Spamhaus ZEN Combined Block List
UCEPROTECT Level 2
UCEPROTECT Level 3

If you would like to check for yourself, go to http://multirbl.valli.org/ and have a look. There are links there which will take you to each RBLs website where you can request removal. I hope this helps. Please let me know if you have any questions. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
Thanks Linda and i did noticed that but as said before that is my Internet Provider IP and not my SM IP, usually internet provider ip's will be listed somewhere wont be 100% clean, so is there anyways to counter this.
0
Linda Pagillo Replied
Hemen, can you please do something for me as a test? Open your Declude's global.cfg file. Find the following line: XSENDER ON. Change it to XSENDER OFF or just comment it out with a #. Next find the following line: XINHEADER X-Identity: %REMOTEIP% | %REVDNS% | %REMOTEHOST%. Comment that out with a #. Once those 2 things are done, please send the exact same test message from admin@routehosting.com to the Google hosted address. Please let me know if it lands in the Inbox or the Junk box and either way, paste the header here. Thanks!
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
Linda, as requested # both the lines and sent test mail TO and FROM same id, still landed in junk, header below

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1465505lfh;
Thu, 1 Feb 2018 08:50:02 -0800 (PST)
X-Google-Smtp-Source: AH8x225afooR3imU9iz7ZPkro6snCshb/8CbIpM25XJ5cQKDo3qI/fm+VjMgAkyto6+WaUIsDLUe
X-Received: by 10.13.243.198 with SMTP id c189mr25926492ywf.141.1517503802246;
Thu, 01 Feb 2018 08:50:02 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517503802; cv=none;
d=google.com; s=arc-20160816;
b=XknuCuQHH6B2QODHKeMOoZ/2QFNxAOLGPfzLzKqEG/puRxgktjbj/XUyyOiI6/7b1+
S/gNSJYN50bLyCiOZ5YWHv7c/IGreu5m16tFy1bEJv8XKlcq8SXdBoUuYnz+dZNXdIyX
dCR/0nr7uBqtWS8DDRwVCcYLpAgUebiEnoEBTJTPqibN+6TodNVAKtq2oAmVlMAZ8NR/
+q3znF2j6D9d1Y9Sl6QoLzUZuVTBnyv5BuZ1oQlyglpE2wE2s5d+PgnSrCyRACZ6reF6
gGL5Eohd6OwD0xN0CcnH91RSXoQnUSs6ohiXWVDtnO8KgNxXndwsZ3BugMyjmA9YTkRH
pzWw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=A8dTrUDP6q0SZep2HDs2CivAcosG+g0SYgEWCJChi0A=;
b=vPgSulSZ3EYn5PsjA7HqVtAPo5Yp4v/OiAFxfuSMFlqxe5E3zxtVEZg/xaDQ/2SMD9
2nF8ZfYmnrdFzVM6h/J1DTlaFOeQIrwcDFJLOlcNUfNe8SPS9VOwhClZfHgtVHKEVu4u
pWdXnx876sVIhkMJ8dTp1EteY2+c3GrYv9ab0HjMQajQs8qYSrKvtDuXkc6jXDqvmU+u
r6PAVB1ZoJegjEJBnRQhu0Ogx6vOr9VyRL1xIfLE3JtaVojg7r7aspm2cQKOSGahdg3S
ineTIhqdV6ivY0bjYXTEGm14SvATxRsvcMDQ5ksQjy33UH4NCqPSC/bPFL7KIK9bxiq1
dYmQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=RH3Q18QA;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id q186si917948ywf.582.2018.02.01.08.50.01
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 01 Feb 2018 08:50:02 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=RH3Q18QA;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:content-language:thread-index:x-mailer
:content-type:mime-version:message-id:organization:date:subject
:to:from:reply-to;
bh=asH3LGGP2+KzDmZ4rsKZxZe5WBuoEC8ixkWyPnD5bOc=;
b=RH3Q18QAGA2FGTxEITRV1D8UpsqUrpdWICBUQk4H1qh8IdsM82z6CHDpcCRRUjYZt
i0C1+bacJaqlqH6rPIsSusrX7NFElOId9x4WVQYArLaH3JMc2GLMHbBt/yFYvje3o
Y2UhejJfk+4N7iPeF86NVIrSLsIXIoBXr43sxIX6c=
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net with SMTP (version=TLS\Tls12 cipher=Aes256 bits=256);
Thu, 1 Feb 2018 11:49:38 -0500
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Re: test mail
Date: Thu, 1 Feb 2018 22:19:46 +0530
Organization: Route Hosting
Message-ID: <001c01d39b7c$b0245f20$106d1d60$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_001D_01D39BAA.C9DC9B20"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdObfKSP0oVZYqcKQWmw7s/6g5+fbA==
Content-Language: en-us
X-Declude-Spoolname: 261133179.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:49:40 on 01 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC
X-Identity: 45.112.144.2 |
| mpuh.org

------=_NextPart_000_001D_01D39BAA.C9DC9B20
Content-Type: multipart/alternative; boundary="----=_NextPart_001_001E_01D39BAA.C9DC9B20"

------=_NextPart_001_001E_01D39BAA.C9DC9B20
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,



Test mail Feb 2018
0
Linda Pagillo Replied
Hemen, I apologize, I gave you the wrong info about the X-Identity. Please open your global.cfg and comment out this line instead...
XOUTHEADER X-Identity: %REMOTEIP% | %REVDNS% | %REMOTEHOST%
Once you do that, please run another test and let me know where the messages lands and post the header here. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
Thats fine, did the same and still in junk, header below

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1541838lfh;
Thu, 1 Feb 2018 10:00:11 -0800 (PST)
X-Google-Smtp-Source: AH8x224aw4VZXm0u+FQkMSiPw0H1MrQIkkkEAmIyfq3xpeypIhOHxvkEv5GgLWTgRY8pN+JSUnei
X-Received: by 10.37.246.31 with SMTP id t31mr27279434ybd.330.1517508010948;
Thu, 01 Feb 2018 10:00:10 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517508010; cv=none;
d=google.com; s=arc-20160816;
b=qY91kY4co847MqI30SpxhqDJS5VRoaia3nYGSGJ70wV3olJwBq3qnc8wxt1YQXPvGo
iFbKOPKN2cPXhH9Nukm1glwMlqP6POHEI2r3glbsyuLVAlqBLimqxOXU11OP8PzU0Cmt
Y5azrbQ8dmkRaHqJEW8LYA68TiS2ZV4rTAEc6ubXOcn3nrCsdq4zbJbuemOCBozOWvoY
tZ09fZ6tyB8+obilvlqQaWdQIgJ8Pbuwb/2o0Kbt4xTkURu5wwdxsC0qze+iXXRr5m/M
G/5Rc+E26uMipqEk7vwbAB2X2d4V0hsUxsMS+EWBmHq7g1pmR0Yi9UlAeDUapEUaHBrk
cYAQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=UkNN6SSJ08Omn+TQbJTQ0CgWgQJbQ+5mw9dCFjhfV/Y=;
b=I0lFCSbVRjaYvfs3rCupTV9zAusXr6mtY8XUqQcAbkSw3oeojZvYsieWBdoVZnR1tH
I5vAubjvI5uwXw9EB2vkQEDywpOwTrp4tY/rXaFuWL51ijyw+dvRxSIzKBjD/B3rPMw5
2dhjClgYmn3Qv8MJdvav+QVPY+Y6I27/jM3zZUv2asha9mseEJziVJvZ4jgn3sJpqYQV
hqFQ5BCCkYv3B4WwpVTTsxp+cAu5eT5jkMh9EOZW5dgLaBU9vXYIpIHMVgraBXPxr+sK
+c2F5yDrRF4CFSqcjU1zaCDvZH652sSX+YEtLfoYllHNIrxXzKMwHE9+C4n4FKflXT0c
gimg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=iPw0sjVH;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id 67si24953ybp.293.2018.02.01.10.00.09
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 01 Feb 2018 10:00:10 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=iPw0sjVH;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:content-language:thread-index:x-mailer
:content-type:mime-version:message-id:organization:date:subject
:to:from:reply-to;
bh=6ix7Mtti5umxnNA7DMLCkXWDyzAIHs6ci1EcrxzIs+Y=;
b=iPw0sjVHujnSrUDL4nOXbvZUsy0d0RuDVk6lLxhmpK2YeC4OdXOkGD05rtp30+1y4
f4enOVzOJeuAAd9cmy8q4SgCEjjX1knqaq29Mj9fIdLQ7QdbtidZKUTQSPiqvpbCf
642Cm2ara9qiWLf0eimFo1lpxbqvFZcGUSLxfT7vc=
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net with SMTP (version=TLS\Tls12 cipher=Aes256 bits=256);
Thu, 1 Feb 2018 12:59:47 -0500
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Re: Test mail again
Date: Thu, 1 Feb 2018 23:29:55 +0530
Organization: Route Hosting
Message-ID: <006801d39b86$7c97ea50$75c7bef0$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_0069_01D39BB4.96529750"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdObhnKijDUJd9luSEeyDLufrA6g7g==
Content-Language: en-us
X-Declude-Spoolname: 261133404.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 12:59:49 on 01 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC

------=_NextPart_000_0069_01D39BB4.96529750
Content-Type: multipart/alternative; boundary="----=_NextPart_001_006A_01D39BB4.96529750"

------=_NextPart_001_006A_01D39BB4.96529750
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Test mail again
0
Linda Pagillo Replied
Hemen, I reached out to SM support to ask them a question about this line:
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net. Once they respond, I will get back to you with a few more things to try. Thanks for your patience.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Linda Pagillo Replied
Btw, which version of SM are you using Hemen?
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
Thanks for all efforts, i am on SM 15.7.6572
0
Linda Pagillo Replied
Thanks. Please leave the same things in place from yesterday and do the following... Log into your SM admin interface, go to Settings, Protocol Settings, SMTPIn tab, in the Append Received Line box, pop it down and choose None then save. After you do that, send the same test, let me know where it lands and post the header here. Also, switch the Append Receive Line settings back to the way you had them after you send and receive the test message. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
You mean, i should keep # in both lines as asked yesterday or should i remove it and keep it was originally.
0
Hemen Shah Replied
Have kept ON, both XSENDER and XOUTH and below is the header with Append - NONE

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1051846lfh;
Fri, 2 Feb 2018 08:44:37 -0800 (PST)
X-Google-Smtp-Source: AH8x224PLlQ22HkxVP0ZhFsAEAWOlPe1h7RAc+XxRBet38+HeW8C5sgFX91Oa35+U14TCtglji01
X-Received: by 10.129.193.13 with SMTP id f13mr2770063ywi.305.1517589877542;
Fri, 02 Feb 2018 08:44:37 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517589877; cv=none;
d=google.com; s=arc-20160816;
b=rb2Wpn8Aw+5X/T44lH6k/6edhfVD9LPreh1jvu5nwHwSDesmpsimb8KTPx1Y/9Gd4C
9EHaZigLuTPt4E+p27K0Yo890UfVkepY+zCDmBCpYsX/yZRlG+sJyOI8ZO5tuY8clT34
igA4D8/Artd/qmK7zQX9DNK3OQLbqOgzMTjn8rcxW3knENV+p39DvrfNFuqyrW4QB34d
5WW1Un5c8fR01tZQrSrsi8v0ZKPMurFzztJROKaEZQ1J043oFpE+zmBsKmRgA6PXPD6p
NJM3lZQhHPAzVofC1dVgx05L3dycAI3pWcTjWrc2FfZx9M1rFgwkTA2r32dMU3vTZ/F5
9fKw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=HFZfMFVQaWNDTqr6gLQnA2eotcnlhA6YF0VuNeNTTbw=;
b=b73h9hTZz7FtfJC34aVE1IsmAUyAREW2FxLEV3tUtU6SE5UR9B5EXXjxaNWYVF7Utc
TgteYcWTI6qN1WqORQjzUYCkIZYXyRvboZn4ThjhOqHpsfj8J5aju6Nk37WdxxBNqV+B
jYIVYVhY/kqFpz3A+olFj582ErcAXEZF36REZIoMGCjA6Q681sjnVd5Rcw/zBK9wmJLP
bmd3WY/6wWzX4c+v7b4ZfNMVIAgFLtq9aLUDJ+F2jSagHEiI/r+9USykPFHpa3Rf1i/l
inV/qVgF1CTxIvT3Uuc/gbIPVf+BkvUyVx5g5N8XESeCbkp7NIzGa3SNT7+I71a+v5Jq
qkGw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=bdVC3sEo;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id b188si467269ywf.377.2018.02.02.08.44.36
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 02 Feb 2018 08:44:37 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=bdVC3sEo;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:x-declude-sender:content-language
:thread-index:x-mailer:content-type:mime-version:message-id
:organization:date:subject:to:from:reply-to;
bh=hJMLdDA6DOQpXPlTS0G2pY1sVFC4n+X43GEthhVW8aA=;
b=bdVC3sEo8vJVbJ4N49VIwO2Q+/wAglGMy5EOg/XvQDzbbRDPxR4tmX/fM0NT8lxcA
4MEmbW14MyAgdIdw793EACyUFz7vrSx1lBwpSyCzuTR/ec79CucsXBHuf+W3aoO3J
F7v/JHzLOpM9Z+i4OG+g8MLbmTY4zIUVJRRq7Kjhw=
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Test friday
Date: Fri, 2 Feb 2018 22:14:19 +0530
Organization: Route Hosting
Message-ID: <000001d39c45$1770c7e0$465257a0$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_0001_01D39C73.312B74E0"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdOcRQt+EH70M3zTQCWDycQESrpOpQ==
Content-Language: en-us
X-Declude-Sender: admin@routehosting.com [127.0.0.1]
X-Declude-Spoolname: 261139505.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:44:13 on 02 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC
X-Identity: 127.0.0.1 |
| mpuh.org

------=_NextPart_000_0001_01D39C73.312B74E0
Content-Type: multipart/alternative; boundary="----=_NextPart_001_0002_01D39C73.312B74E0"

------=_NextPart_001_0002_01D39C73.312B74E0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi



Testing today - Friday
0
Linda Pagillo Replied
Did this land in the Inbox or in Junk?
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Hemen Shah Replied
sorry missed on that, it landed in junk
0
Linda Pagillo Replied
Thanks Hemen. The reason I had you do all of this is because I wanted to determine if 45.112.144.2 simply being in the headers was causing Google hosted email to kick the message to spam. Since we have eliminated all instances of 45.112.144.2 from the headers, my educated guess is that it's not that dirty IP causing the issue. I even ran your sending domain name through a checker and it is clean. Lastly, I ran your mail server IP through the checker at Senderbase.org and it has a good reputation. This tells me that more than likely none of those things are causing the issue. Can you please send me a test email to lpadnet@gmail.com? I want to see where it lands. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
ram Replied
If I have enabled Cyren Premium Antispam for SmarterMail 16.3, Do I need deploy Mail's Best Friend spam filtering?
0
Hemen Shah Replied
So now i am too on same page, i did all basic tests which we generally do about sending domain and mail server ip which is clean, moreover such complaint i am hearing from many users and thats when i started testing it and i want to recollect this has started post last 1 or 2 SM 15.x minor releases but not sure in specific, everytime any customer complains me i usually get the header and check the IP which is 45.x.x.x. in my case but then this was not happening before.
i am sending test mail to your given email id.
0
Linda Pagillo Replied
It landed in my junk folder. Can you try something else for me? Please send me another test, but remove your signature before you send it. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
Linda Pagillo Replied
It landed in my junk folder again. I noticed that there is 45.112.144.2 in the header again. Please leave all settings in place that we spoke about earlier and send me another message without the signature. I will let you know where it lands. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller
 
0
echoDreamz Replied
They are 2 vastly different systems. There is no real need to have both. Though... I do recommend using Declude for their hijack feature. This works GREAT for monitoring accounts for any possibilities of being hijacked.

Christopher

0
Hemen Shah Replied
Hi Linda, hope you have received my mails on ipadnet id
0
Linda Pagillo Replied
Hi Hemen. I'm sorry that I didn't respond yesterday. I got caught up in my workday. Yes, I received it and it went to my junk folder in gmail. Can you try this for me? Leave everything in place that we discussed. Send me a message that says "test" in the body and subject. Also, don't sign your name at the bottom. Thanks.
Linda Pagillo
Mail's Best Friend
Email: linda.pagillo@mailsbestfriend.com
Web: www.mailsbestfriend.com
Authorized SmarterTools Reseller
Authorized Message Sniffer Reseller