Spam filtering - Bruce vs. Mail's Best Friend?

Question asked by Emmet McGovern - 1/23/2018 at 12:43 PM

Answered

Has anyone compared Bruce's spam results with Mail's Best Friends spam results? They are quite a bit different on weights. The last copy of Bruces document does not seem to be very effective recently. I'm finding a large mix of spam and ham that are weighted 10 equally. MBF's weighs seem a little bit more granular. I haven't tried theres yet, thats why I'm asking.

http://know.mailsbestfriend.com/papers/SmarterMail-Antispam-Settings.shtml

98 Replies

Reply to Thread

Employee Replied

1/23/2018 at 4:06 PM

Employee Post Marked As Answer

Emmet,

I would suggest Mail's best friends recommendations for RBL's over Bruce's simply due to the fact that Bruce's guide hasn't been updated in quite some while and contain some outdated RBL's.

Emmet McGovern Replied

1/23/2018 at 5:41 PM

I'll give them a try and report back. One thing i just noticed is there are no spam probability weight thresholds on their setup. Maybe Linda can chime in here with suggestions on those.

Linda Pagillo Replied

1/24/2018 at 10:38 AM

Hi Emmet. I will be happy to help you with this. Please allow me just a bit of time to review our paper and make the necessary adjustments. I will also add the spam weight thresholds to the paper. Working on it now. I will chime back in once I have it updated. Thanks for your patience.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Emmet McGovern Replied

1/24/2018 at 10:57 AM

Thanks Linda.

Linda Pagillo Replied

1/24/2018 at 11:14 AM

Emmet, the paper has been updated with the most current configuration that we find to work the most effectively. Check it out here: http://know.mailsbestfriend.com/papers/SmarterMail-Antispam-Settings.shtml and please let me know if you have any questions. Thanks!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Emmet McGovern Replied

1/24/2018 at 11:22 AM

Awesome. I'll convert our settings over later this evening and report back.

Emmet McGovern Replied

1/24/2018 at 11:52 AM

Is %SENDERHOST% a variable that works in v15? I didn't even know you could use vars in SM for anything other than events.

Linda Pagillo Replied

1/24/2018 at 12:14 PM

I believe it does work. Please let me know if you see otherwise. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/24/2018 at 12:14 PM

Sounds great!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

echoDreamz Replied

1/24/2018 at 2:26 PM

We had previously asked SM if there was any variables like this and we were told there was not.

Linda Pagillo Replied

1/24/2018 at 2:42 PM

Stand by and I will give it a quick test over here on SM 15x.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/24/2018 at 2:50 PM

It's working. Here is an entry from my SM delivery log:

[2018.01.24] 16:49:23 [85049] Spam check results: [SEM-TEST2: passed]

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

echoDreamz Replied

1/24/2018 at 3:34 PM

Just received confirmation from SmarterTools, SmarterMail DOES NOT support any sort of variables for RBLs / URIBLs lookups.

And the above item where it simply says "passed". I mean, I did a hostname of blahblahblahblahblahblah.com and SM said "Passed", so that doesnt mean anything. All it means is that the result of the lookup did not match the required lookup value, thus it passes.

[2018.01.24] 15:32:42 [61493] Spam check results: [BLAH: passed]

I set a URIBL lookup called blah, with a hostname of blahblahblahblahblahblah.com with a required value of 127.0.0.2, clearly this is not a valid URIBL, but the lookup passes because it doesnt return a matching lookup value.

echoDreamz Replied

1/24/2018 at 3:35 PM

%SENDERHOST% though is a variable that declude knows - http://mailsbestfriend.com/downloads/docs/Declude_JunkMail_Manual.pdf so I assume this is what the above URL is referencing.

Linda Pagillo Replied

1/24/2018 at 4:14 PM

Yes, Declude knows variables such as %SENDERHOST%. I apologize, but I was told at one time that SM supported those as well. Since you have verified with them that this is not the case, I have removed those 3 tests from the paper that I edited today. Thanks for the info Echo!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

echoDreamz Replied

1/24/2018 at 4:47 PM

SM needs these though. Like %SENDERHOST% and %FROMDOMAIN% etc. etc.

Gabriele Maoret Replied

1/25/2018 at 4:19 AM

Many Many Thanks to Linda and her work!

Linda Pagillo Replied

1/25/2018 at 6:33 AM

My pleasure Gabriele!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Employee Replied

1/25/2018 at 1:24 PM

Employee Post

I am adding the variables use into our feature request list for further consideration by the dev team.

kevind Replied

1/25/2018 at 6:39 PM

Robert, if you want to improve spam filtering, then here's a simple change that would probably be easier to implement and more effective:
https://portal.smartertools.com/community/a88965/reverse-dns-check-improvements.aspx

With 18 votes, it's on the top 10 list! Not sure why SmarterMail isn't jumping all over this. It would be easy for customers to use and would be highly effective at stopping spam. Thanks for the consideration.

Employee Replied

1/25/2018 at 6:54 PM

Employee Post

Kevin, that is at the top of the list for spam filter additions we'll be implementing. Thank you for all of your suggestions.

kevind Replied

1/25/2018 at 7:01 PM

Awesome! Seems like we've missed you. Did you take some time off or something? Anyway, it's great having you engaged in the portal and responding to customers!

echoDreamz Replied

1/25/2018 at 10:36 PM

Thanks kevind - I quit pushing it lol. I am really hoping it makes it into SmarterMail 17 or atleast before I retire...

kevind Replied

1/26/2018 at 12:04 PM

Yeah, and it's not even my idea. :) But it's a great idea, long overdue, and hope to see it soon!

Hemen Shah Replied

1/30/2018 at 5:08 AM

Linda, thank you for sharing the info, just wanted to check i dont see Spamhaus (zen) in your effective list, is there any specific reason to that.

Thanks

Linda Pagillo Replied

1/30/2018 at 6:30 AM

Hi Hemen. Zen is on the list. I have it listed as Zen, not Spamhaus.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

1/30/2018 at 8:07 AM

Yes got that, if i see your page 2, point 3 where it says to enable
"Incoming SMTP Blocking with following weights"
then its mentioned barracuda weight 10 but in first page barracuda is given 15 , similarly others and i dont think we can set RBL with 2 different weights for filtering and incoming smtp blocking so how is that !!

Gabriele Maoret Replied

1/30/2018 at 8:24 AM

That guide seems to be made for v. 15 and older AntiSpam Settings.
Do you have plan to make a guide even for v. 16 ?

Linda Pagillo Replied

1/30/2018 at 9:16 AM

Hemen, if you are using Zen for filtering, the weight should be 15. If you are using for Incoming SMTP Blocking, you should use weight 10. If you are using it for both, I see what you mean about only being allowed to have one weight for it. You are correct. In this case, we suggest weight 10 for filtering and SMTP blocking.

Gabriele, you can use this guide for both 15x and 16x. What made you think it was only for 15x or below? I would like to know because if you are feeling this way, there are others who are feeling this way and I want to adjust the paper accordingly so it is less confusing to all.

Thanks!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

1/30/2018 at 9:37 AM

Linda thanks for quick response, my concern here is about "outgoing smtp blocking" i am on 15.7.6572 and since then getting frequent complaints about mails landing in recipient's junk folder , this happens mails sent from one to another on same SM server and even though sending via webmail/outlook (imap)
So as per your document, do you recomment enabling outgoing smtp blocking for rbls

Linda Pagillo Replied

1/30/2018 at 10:15 AM

We currently do not and have never used the Outgoing smtp blocking feature in SmarterMail. We haven't had the need for it. We find that Declude Hijack, SM's Internal Spammer Notification and SM's throttling feature are a great combo to use to stop a compromised account from sending spam out from a SM server.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

David Fisher Replied

1/30/2018 at 11:58 AM

Hi Linda,

Thank you so much for updating this list of yours.. I have a few points :

1) Are IP4R = "Add RBL" & RHSBL = "Add URIBL"

2) If you are, Adding URIBL what is the maximum weight this is a required field

3) Like addressed above already, I do see the weights have different values for Incoming SMTP blocking vs just filtering, most of us use one entry for both.

4) Can you please put a Revision Date on site?

5) Can you export the antispam settings as SM v15+ supports that, I have not seen anyone so far upload a XML file of their settings so people can easily import them.

Thank You,

-dave

Hemen Shah Replied

1/31/2018 at 12:06 AM

I am trying to validate specific case where, email sent to domain on google apps is landing in junk/spam folder, i have disabled all Outgoing SMTP blocking, as per declude log it says "01/30/2018 10:09:21.963 261111352 SKIPPING Junk Mail scanning for outgoing E-mail"

So is it that incoming checks at google apps is happening on ISP IP rather than SM IP and due to which it is landing in junk folder ? any solution to this !!!

Gabriele Maoret Replied

1/31/2018 at 6:02 AM

Hi linda, in the next days I will try to write the reasons because I feel that your guide is not well worthy for v16...

I'm sorry if I ask you to be patient, but these days I'm very busy ...

Linda Pagillo Replied

1/31/2018 at 6:09 AM

Hemen, there are several reasons why your user's mail could be landing in someone's spam folder when they send to a Google hosted email address. It could be the IP, but if your sending IP is clean, I doubt that is the problem. It could be caused by the content of the email or the person with the Google hosted address could have their spam settings too strong etc... Can you post a header here from a message that your user sent to a Google hosted account, but it went to the spam folder? Perhaps I can help you to determine the cause. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/31/2018 at 6:12 AM

No worries Gabriele. I'm going to take another look at the paper today and verify that it can be used for version 16x. If not, I will adjust it accordingly. Thanks!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/31/2018 at 6:52 AM

Hi Dave. To answer your questions...

1) Are IP4R = "Add RBL" & RHSBL = "Add URIBL"

I'm not understanding what you are asking. Can you please be more specific?

2) If you are, Adding URIBL what is the maximum weight this is a required field

Again, please explain number 1 a bit more in-depth and that will allow me to answer #2.

3) Like addressed above already, I do see the weights have different values for Incoming SMTP blocking vs just filtering, most of us use one entry for both.

That's fine. If you use a test for both, use a weight of 10.

4) Can you please put a Revision Date on site?

Done.

5) Can you export the antispam settings as SM v15+ supports that, I have not seen anyone so far upload a XML file of their settings so people can easily import them.

Please allow me some time to look into this and get it done. Thanks!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

David Fisher Replied

1/31/2018 at 11:11 AM

Hi Linda,

Sorry that I wasn't very clear, on your website you have a column called IP4R and RHBL, what does that mean?

I heard of RBL and URIBL, in SmarterMail we are given two options, we can Add a RBL or URIBL, the URIBL has one additional field called Max Weight (Along with Min Weight), so it is kind of hard to understand what to type in each field.

I appreciate your HARD work on making this handy website, but I would think it would be clearer for SmarterMail, telling people what to type in each field, and if they are to Add a RBL or Add a URIBL.

Thank again for all the hard work you put into maintaining this for the SmarterMail community.

Thanks,
-dave

Linda Pagillo Replied

1/31/2018 at 11:50 AM

My pleasure! Thanks for the additional info and for your suggestions. I appreciate it very much. I will be looking at the paper later today and I'm planning on making some adjustments to make it more user-friendly. I'm also going to make it more user-friendly for SM 16x.

As for RHSBL, they should be URIBL in my document. I will change that today too. Thanks again!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

1/31/2018 at 3:06 PM

David, I have updated the paper accordingly. Please let me know if my changes are easier to understand: http://know.mailsbestfriend.com/papers/SmarterMail-Antispam-Settings.shtml Thanks!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

1/31/2018 at 11:05 PM

Below is the original header of email received at google hosted account and landed in junk, message content was simple of test message

Delivered-To: abc@xyz.com (google hosted)
Received: by 10.25.232.28 with SMTP id f28csp5430671lfh;
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
X-Google-Smtp-Source: AH8x224Nq9690JIf9NC6aJOYx8OxI2SldgRClyeR8RwKDkdhlbc2IBZBABKQcGeCLCtwGDu5U5fa
X-Received: by 10.129.45.135 with SMTP id t129mr19385800ywt.64.1517328764637;
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517328764; cv=none;
d=google.com; s=arc-20160816;
b=khKlAtzKKDHtDmBpNgq/yU2KGHrMmnP1QDVQLGb30meRxVrAJPaL2HfGnaEnfUHB4v
arWqd+T+3RT5zh7pjhN05PlVNkjFD0hDSIE/h2evjKqb/id+S0BP0kq8TQMCAWTPdLRa
/WFtBCn+xu7UkPvU8TKWmyWa4mEqiUb3STdp0qsMRAGU/4gwWJEHNdertAZIl+vz/FAv
IUnS7T5J+DoUNL5gEopvKYMGf73J7FCoKV3hT/zzMcn1WO41sdNI7vc4KBKMfK97JVX0
3+faDhmUhwGaGyiiqsApW4dJRojLYVFXOzUSVKcvJhmilJ65XjRnoUA8bC+nMWVzL5p0
gmfg==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=disposition-notification-to:mime-version:message-id:reply-to:date
:subject:to:from:dkim-signature:arc-authentication-results;
bh=ovPrdncvFR9qbCdZyvmeItHWW0YlaAvI74MmFdcGENk=;
b=m7xAhcgrP1Mh6BxRxJqNyiYmzLd77sAJIHMsEun/7VvnPW2OuLKPjnIOaD6Jf3+r7F
ZH6W3SB8fMfbFMWOORPtbFhSj288DSFG3Wrc7NnPU8NEfJaLcYwQOVCGFR7C3ktzISCl
+OPU5bd3IgUGzVgbiq94T6JCT1H+7VsrdDbpVKo9+HvYM7kScyakrVodcSORZn3ZDd42
H9FVLCFOfWHcWaHl17B8BnM8vRlSwSP8w5bZjwRED/vjkro6j3uq5kGejtZV34Br1G1H
tPHM+lr1PY7PsseHoE4p4QJtRnnz+wXCrClU6qkdRpAtq3iOw/JXc0hV4p9HkAjgRTfF
L2YA==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=f8Hry+NC;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id x6si2656696ywb.259.2018.01.30.08.12.43
for <abc@xyz.com (google hosted)>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Tue, 30 Jan 2018 08:12:44 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=f8Hry+NC;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:x-declude-sender:disposition-notification-to
:x-originating-ip:x-exim-id:content-type:mime-version:message-id
:reply-to:date:subject:to:from;
bh=EgJits735l4+6gD1TGTpafUF1TwxZW5AMtmY2mcPiFI=;
b=f8Hry+NC7TFedILPzxb0tO7lROyV2E1Krv6q+vO0EovLxwhR4cPaaYXy57cSPfsHP
7jej/GK2KdNU+JI32UKVJRj5HyHp4YWKpspQNeD9VumAa7NcP3fG+9/RmHnb4HDbH
SJPDy1nlOBdL/Awm1PEy3DKxJK6bXdGfbR26ROS+g=
Received: by mail.virtualnethosting.net via HTTP; Tue, 30 Jan 2018 11:12:25 -0500
From: Route Hosting <admin@routehosting.com>
To: <abc@xyz.com (google hosted)>
Subject: Re: Test again
Date: Tue, 30 Jan 2018 11:12:25 -0500
Reply-To: admin@routehosting.com
Message-ID: <02bd916941664cc2a50baf2b348128ad@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=fa9239da80a1463286e34104fb60f022
X-Exim-Id: 02bd916941664cc2a50baf2b348128ad
X-Originating-IP: [45.112.144.13]
Disposition-Notification-To: "Route Hosting" <admin@routehosting.com>
X-Declude-Sender: admin@routehosting.com [45.112.144.13]
X-Declude-Spoolname: 261111591.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:12:27 on 30 Jan 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO:
X-Identity: 45.112.144.13 |
| mpuh.org

--fa9239da80a1463286e34104fb60f022
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Test Mail again

Thanks
Hemen S

--fa9239da80a1463286e34104fb60f022
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<span style=3D"font-family: Arial, Helvetica, Sans-Serif; font-size: 12px">=
<div>Test Mail again</div>

<div> </div>

<div> </div>

<div>Thanks</div>

<div>Hemen S</div></span>

--fa9239da80a1463286e34104fb60f022--

Gabriele Maoret Replied

2/1/2018 at 12:29 AM

Thx Linda. Very good work as always!

Linda Pagillo Replied

2/1/2018 at 7:07 AM

My pleasure, Gabriele!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

2/1/2018 at 7:17 AM

Thanks Hemen. I ran the sending IP (45.112.144.13) through a blacklist check of over 300 blacklists and the IP is listed on 14 blacklists some of which are the most widely used RBLs across the world. In other words, the sending IP is dirty so that is my educated guess as to why mail from that user is landing in Google hosted email junk mailboxes. The IP needs to be removed from those RBLs. The ones to worry about are as follows...

Barracuda Reputation Block List
CBL
SORBS Aggregate zone
SORBS Spamhost (any time)
SORBS Spamhost (last year)
Spamhaus SBL-XBL Combined Block List
Spamhaus XBL Exploits Block List
Spamhaus ZEN Combined Block List
UCEPROTECT Level 2
UCEPROTECT Level 3

If you would like to check for yourself, go to http://multirbl.valli.org/ and have a look. There are links there which will take you to each RBLs website where you can request removal. I hope this helps. Please let me know if you have any questions. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/1/2018 at 7:28 AM

Thanks Linda and i did noticed that but as said before that is my Internet Provider IP and not my SM IP, usually internet provider ip's will be listed somewhere wont be 100% clean, so is there anyways to counter this.

Linda Pagillo Replied

2/1/2018 at 9:20 AM

Hemen, can you please do something for me as a test? Open your Declude's global.cfg file. Find the following line: XSENDER ON. Change it to XSENDER OFF or just comment it out with a #. Next find the following line: XINHEADER X-Identity: %REMOTEIP% | %REVDNS% | %REMOTEHOST%. Comment that out with a #. Once those 2 things are done, please send the exact same test message from admin@routehosting.com to the Google hosted address. Please let me know if it lands in the Inbox or the Junk box and either way, paste the header here. Thanks!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/1/2018 at 10:36 AM

Linda, as requested # both the lines and sent test mail TO and FROM same id, still landed in junk, header below

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1465505lfh;
Thu, 1 Feb 2018 08:50:02 -0800 (PST)
X-Google-Smtp-Source: AH8x225afooR3imU9iz7ZPkro6snCshb/8CbIpM25XJ5cQKDo3qI/fm+VjMgAkyto6+WaUIsDLUe
X-Received: by 10.13.243.198 with SMTP id c189mr25926492ywf.141.1517503802246;
Thu, 01 Feb 2018 08:50:02 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517503802; cv=none;
d=google.com; s=arc-20160816;
b=XknuCuQHH6B2QODHKeMOoZ/2QFNxAOLGPfzLzKqEG/puRxgktjbj/XUyyOiI6/7b1+
S/gNSJYN50bLyCiOZ5YWHv7c/IGreu5m16tFy1bEJv8XKlcq8SXdBoUuYnz+dZNXdIyX
dCR/0nr7uBqtWS8DDRwVCcYLpAgUebiEnoEBTJTPqibN+6TodNVAKtq2oAmVlMAZ8NR/
+q3znF2j6D9d1Y9Sl6QoLzUZuVTBnyv5BuZ1oQlyglpE2wE2s5d+PgnSrCyRACZ6reF6
gGL5Eohd6OwD0xN0CcnH91RSXoQnUSs6ohiXWVDtnO8KgNxXndwsZ3BugMyjmA9YTkRH
pzWw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=A8dTrUDP6q0SZep2HDs2CivAcosG+g0SYgEWCJChi0A=;
b=vPgSulSZ3EYn5PsjA7HqVtAPo5Yp4v/OiAFxfuSMFlqxe5E3zxtVEZg/xaDQ/2SMD9
2nF8ZfYmnrdFzVM6h/J1DTlaFOeQIrwcDFJLOlcNUfNe8SPS9VOwhClZfHgtVHKEVu4u
pWdXnx876sVIhkMJ8dTp1EteY2+c3GrYv9ab0HjMQajQs8qYSrKvtDuXkc6jXDqvmU+u
r6PAVB1ZoJegjEJBnRQhu0Ogx6vOr9VyRL1xIfLE3JtaVojg7r7aspm2cQKOSGahdg3S
ineTIhqdV6ivY0bjYXTEGm14SvATxRsvcMDQ5ksQjy33UH4NCqPSC/bPFL7KIK9bxiq1
dYmQ==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=RH3Q18QA;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id q186si917948ywf.582.2018.02.01.08.50.01
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 01 Feb 2018 08:50:02 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=RH3Q18QA;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:content-language:thread-index:x-mailer
:content-type:mime-version:message-id:organization:date:subject
:to:from:reply-to;
bh=asH3LGGP2+KzDmZ4rsKZxZe5WBuoEC8ixkWyPnD5bOc=;
b=RH3Q18QAGA2FGTxEITRV1D8UpsqUrpdWICBUQk4H1qh8IdsM82z6CHDpcCRRUjYZt
i0C1+bacJaqlqH6rPIsSusrX7NFElOId9x4WVQYArLaH3JMc2GLMHbBt/yFYvje3o
Y2UhejJfk+4N7iPeF86NVIrSLsIXIoBXr43sxIX6c=
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net with SMTP (version=TLS\Tls12 cipher=Aes256 bits=256);
Thu, 1 Feb 2018 11:49:38 -0500
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Re: test mail
Date: Thu, 1 Feb 2018 22:19:46 +0530
Organization: Route Hosting
Message-ID: <001c01d39b7c$b0245f20$106d1d60$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_001D_01D39BAA.C9DC9B20"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdObfKSP0oVZYqcKQWmw7s/6g5+fbA==
Content-Language: en-us
X-Declude-Spoolname: 261133179.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:49:40 on 01 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC
X-Identity: 45.112.144.2 |
| mpuh.org

------=_NextPart_000_001D_01D39BAA.C9DC9B20
Content-Type: multipart/alternative; boundary="----=_NextPart_001_001E_01D39BAA.C9DC9B20"

------=_NextPart_001_001E_01D39BAA.C9DC9B20
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi,

Test mail Feb 2018

Linda Pagillo Replied

2/1/2018 at 10:52 AM

Hemen, I apologize, I gave you the wrong info about the X-Identity. Please open your global.cfg and comment out this line instead...
XOUTHEADER X-Identity: %REMOTEIP% | %REVDNS% | %REMOTEHOST%
Once you do that, please run another test and let me know where the messages lands and post the header here. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/1/2018 at 11:08 AM

Thats fine, did the same and still in junk, header below

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1541838lfh;
Thu, 1 Feb 2018 10:00:11 -0800 (PST)
X-Google-Smtp-Source: AH8x224aw4VZXm0u+FQkMSiPw0H1MrQIkkkEAmIyfq3xpeypIhOHxvkEv5GgLWTgRY8pN+JSUnei
X-Received: by 10.37.246.31 with SMTP id t31mr27279434ybd.330.1517508010948;
Thu, 01 Feb 2018 10:00:10 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517508010; cv=none;
d=google.com; s=arc-20160816;
b=qY91kY4co847MqI30SpxhqDJS5VRoaia3nYGSGJ70wV3olJwBq3qnc8wxt1YQXPvGo
iFbKOPKN2cPXhH9Nukm1glwMlqP6POHEI2r3glbsyuLVAlqBLimqxOXU11OP8PzU0Cmt
Y5azrbQ8dmkRaHqJEW8LYA68TiS2ZV4rTAEc6ubXOcn3nrCsdq4zbJbuemOCBozOWvoY
tZ09fZ6tyB8+obilvlqQaWdQIgJ8Pbuwb/2o0Kbt4xTkURu5wwdxsC0qze+iXXRr5m/M
G/5Rc+E26uMipqEk7vwbAB2X2d4V0hsUxsMS+EWBmHq7g1pmR0Yi9UlAeDUapEUaHBrk
cYAQ==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=UkNN6SSJ08Omn+TQbJTQ0CgWgQJbQ+5mw9dCFjhfV/Y=;
b=I0lFCSbVRjaYvfs3rCupTV9zAusXr6mtY8XUqQcAbkSw3oeojZvYsieWBdoVZnR1tH
I5vAubjvI5uwXw9EB2vkQEDywpOwTrp4tY/rXaFuWL51ijyw+dvRxSIzKBjD/B3rPMw5
2dhjClgYmn3Qv8MJdvav+QVPY+Y6I27/jM3zZUv2asha9mseEJziVJvZ4jgn3sJpqYQV
hqFQ5BCCkYv3B4WwpVTTsxp+cAu5eT5jkMh9EOZW5dgLaBU9vXYIpIHMVgraBXPxr+sK
+c2F5yDrRF4CFSqcjU1zaCDvZH652sSX+YEtLfoYllHNIrxXzKMwHE9+C4n4FKflXT0c
gimg==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=iPw0sjVH;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id 67si24953ybp.293.2018.02.01.10.00.09
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Thu, 01 Feb 2018 10:00:10 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=iPw0sjVH;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:content-language:thread-index:x-mailer
:content-type:mime-version:message-id:organization:date:subject
:to:from:reply-to;
bh=6ix7Mtti5umxnNA7DMLCkXWDyzAIHs6ci1EcrxzIs+Y=;
b=iPw0sjVHujnSrUDL4nOXbvZUsy0d0RuDVk6lLxhmpK2YeC4OdXOkGD05rtp30+1y4
f4enOVzOJeuAAd9cmy8q4SgCEjjX1knqaq29Mj9fIdLQ7QdbtidZKUTQSPiqvpbCf
642Cm2ara9qiWLf0eimFo1lpxbqvFZcGUSLxfT7vc=
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net with SMTP (version=TLS\Tls12 cipher=Aes256 bits=256);
Thu, 1 Feb 2018 12:59:47 -0500
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Re: Test mail again
Date: Thu, 1 Feb 2018 23:29:55 +0530
Organization: Route Hosting
Message-ID: <006801d39b86$7c97ea50$75c7bef0$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_0069_01D39BB4.96529750"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdObhnKijDUJd9luSEeyDLufrA6g7g==
Content-Language: en-us
X-Declude-Spoolname: 261133404.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 12:59:49 on 01 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC

------=_NextPart_000_0069_01D39BB4.96529750
Content-Type: multipart/alternative; boundary="----=_NextPart_001_006A_01D39BB4.96529750"

------=_NextPart_001_006A_01D39BB4.96529750
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Test mail again

Linda Pagillo Replied

2/1/2018 at 2:52 PM

Hemen, I reached out to SM support to ask them a question about this line:
Received: from APPLEPC (UnknownHost [45.112.144.2]) by mail2.virtualnethosting.net. Once they respond, I will get back to you with a few more things to try. Thanks for your patience.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

2/1/2018 at 2:54 PM

Btw, which version of SM are you using Hemen?

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/1/2018 at 9:44 PM

Thanks for all efforts, i am on SM 15.7.6572

Linda Pagillo Replied

2/2/2018 at 9:11 AM

Thanks. Please leave the same things in place from yesterday and do the following... Log into your SM admin interface, go to Settings, Protocol Settings, SMTPIn tab, in the Append Received Line box, pop it down and choose None then save. After you do that, send the same test, let me know where it lands and post the header here. Also, switch the Append Receive Line settings back to the way you had them after you send and receive the test message. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/2/2018 at 9:45 AM

You mean, i should keep # in both lines as asked yesterday or should i remove it and keep it was originally.

Hemen Shah Replied

2/2/2018 at 9:51 AM

Have kept ON, both XSENDER and XOUTH and below is the header with Append - NONE

Delivered-To: mansi@mpuh.org
Received: by 10.25.232.28 with SMTP id f28csp1051846lfh;
Fri, 2 Feb 2018 08:44:37 -0800 (PST)
X-Google-Smtp-Source: AH8x224PLlQ22HkxVP0ZhFsAEAWOlPe1h7RAc+XxRBet38+HeW8C5sgFX91Oa35+U14TCtglji01
X-Received: by 10.129.193.13 with SMTP id f13mr2770063ywi.305.1517589877542;
Fri, 02 Feb 2018 08:44:37 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517589877; cv=none;
d=google.com; s=arc-20160816;
b=rb2Wpn8Aw+5X/T44lH6k/6edhfVD9LPreh1jvu5nwHwSDesmpsimb8KTPx1Y/9Gd4C
9EHaZigLuTPt4E+p27K0Yo890UfVkepY+zCDmBCpYsX/yZRlG+sJyOI8ZO5tuY8clT34
igA4D8/Artd/qmK7zQX9DNK3OQLbqOgzMTjn8rcxW3knENV+p39DvrfNFuqyrW4QB34d
5WW1Un5c8fR01tZQrSrsi8v0ZKPMurFzztJROKaEZQ1J043oFpE+zmBsKmRgA6PXPD6p
NJM3lZQhHPAzVofC1dVgx05L3dycAI3pWcTjWrc2FfZx9M1rFgwkTA2r32dMU3vTZ/F5
9fKw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:organization
:date:subject:to:from:reply-to:dkim-signature
:arc-authentication-results;
bh=HFZfMFVQaWNDTqr6gLQnA2eotcnlhA6YF0VuNeNTTbw=;
b=b73h9hTZz7FtfJC34aVE1IsmAUyAREW2FxLEV3tUtU6SE5UR9B5EXXjxaNWYVF7Utc
TgteYcWTI6qN1WqORQjzUYCkIZYXyRvboZn4ThjhOqHpsfj8J5aju6Nk37WdxxBNqV+B
jYIVYVhY/kqFpz3A+olFj582ErcAXEZF36REZIoMGCjA6Q681sjnVd5Rcw/zBK9wmJLP
bmd3WY/6wWzX4c+v7b4ZfNMVIAgFLtq9aLUDJ+F2jSagHEiI/r+9USykPFHpa3Rf1i/l
inV/qVgF1CTxIvT3Uuc/gbIPVf+BkvUyVx5g5N8XESeCbkp7NIzGa3SNT7+I71a+v5Jq
qkGw==
ARC-Authentication-Results: i=1; mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=bdVC3sEo;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
Return-Path: <admin@routehosting.com>
Received: from mail2.virtualnethosting.net (mail2.virtualnethosting.net. [198.178.125.133])
by mx.google.com with ESMTPS id b188si467269ywf.377.2018.02.02.08.44.36
for <mansi@mpuh.org>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128);
Fri, 02 Feb 2018 08:44:37 -0800 (PST)
Received-SPF: pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) client-ip=198.178.125.133;
Authentication-Results: mx.google.com;
dkim=pass header.i=@routehosting.com header.s=rify header.b=bdVC3sEo;
spf=pass (google.com: domain of admin@routehosting.com designates 198.178.125.133 as permitted sender) smtp.mailfrom=admin@routehosting.com;
dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=routehosting.com
X-SmarterMail-Authenticated-As: admin@routehosting.com
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple;
d=routehosting.com; s=rify;
h=x-identity:x-helo:x-declude-code:x-country-chain:x-declude-tests
:x-declude-scan:x-declude-note:x-declude-refid
:x-declude-spoolname:x-declude-sender:content-language
:thread-index:x-mailer:content-type:mime-version:message-id
:organization:date:subject:to:from:reply-to;
bh=hJMLdDA6DOQpXPlTS0G2pY1sVFC4n+X43GEthhVW8aA=;
b=bdVC3sEo8vJVbJ4N49VIwO2Q+/wAglGMy5EOg/XvQDzbbRDPxR4tmX/fM0NT8lxcA
4MEmbW14MyAgdIdw793EACyUFz7vrSx1lBwpSyCzuTR/ec79CucsXBHuf+W3aoO3J
F7v/JHzLOpM9Z+i4OG+g8MLbmTY4zIUVJRRq7Kjhw=
Reply-To: <admin@routehosting.com>
From: Hemen Shah <admin@routehosting.com>
To: <mansi@mpuh.org>
Subject: Test friday
Date: Fri, 2 Feb 2018 22:14:19 +0530
Organization: Route Hosting
Message-ID: <000001d39c45$1770c7e0$465257a0$@routehosting.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_0001_01D39C73.312B74E0"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdOcRQt+EH70M3zTQCWDycQESrpOpQ==
Content-Language: en-us
X-Declude-Sender: admin@routehosting.com [127.0.0.1]
X-Declude-Spoolname: 261139505.eml
X-Declude-RefID:
X-Declude-Note: Scanned by Declude 4.12.11
X-Declude-Scan: Outgoing Score [0] at 11:44:13 on 02 Feb 2018
X-Declude-Tests: None
X-Country-Chain:
X-Declude-Code: 0
X-HELO: APPLEPC
X-Identity: 127.0.0.1 |
| mpuh.org

------=_NextPart_000_0001_01D39C73.312B74E0
Content-Type: multipart/alternative; boundary="----=_NextPart_001_0002_01D39C73.312B74E0"

------=_NextPart_001_0002_01D39C73.312B74E0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Hi

Testing today - Friday

Linda Pagillo Replied

2/2/2018 at 10:17 AM

Did this land in the Inbox or in Junk?

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/2/2018 at 10:27 AM

sorry missed on that, it landed in junk

Linda Pagillo Replied

2/2/2018 at 10:53 AM

Thanks Hemen. The reason I had you do all of this is because I wanted to determine if 45.112.144.2 simply being in the headers was causing Google hosted email to kick the message to spam. Since we have eliminated all instances of 45.112.144.2 from the headers, my educated guess is that it's not that dirty IP causing the issue. I even ran your sending domain name through a checker and it is clean. Lastly, I ran your mail server IP through the checker at Senderbase.org and it has a good reputation. This tells me that more than likely none of those things are causing the issue. Can you please send me a test email to lpadnet@gmail.com? I want to see where it lands. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

ram Replied

2/2/2018 at 11:11 AM

If I have enabled Cyren Premium Antispam for SmarterMail 16.3, Do I need deploy Mail's Best Friend spam filtering?

Hemen Shah Replied

2/2/2018 at 11:12 AM

So now i am too on same page, i did all basic tests which we generally do about sending domain and mail server ip which is clean, moreover such complaint i am hearing from many users and thats when i started testing it and i want to recollect this has started post last 1 or 2 SM 15.x minor releases but not sure in specific, everytime any customer complains me i usually get the header and check the IP which is 45.x.x.x. in my case but then this was not happening before.
i am sending test mail to your given email id.

Linda Pagillo Replied

2/2/2018 at 11:36 AM

It landed in my junk folder. Can you try something else for me? Please send me another test, but remove your signature before you send it. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

2/2/2018 at 11:51 AM

It landed in my junk folder again. I noticed that there is 45.112.144.2 in the header again. Please leave all settings in place that we spoke about earlier and send me another message without the signature. I will let you know where it lands. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

echoDreamz Replied

2/2/2018 at 2:07 PM

They are 2 vastly different systems. There is no real need to have both. Though... I do recommend using Declude for their hijack feature. This works GREAT for monitoring accounts for any possibilities of being hijacked.

Hemen Shah Replied

2/3/2018 at 5:47 AM

Hi Linda, hope you have received my mails on ipadnet id

Linda Pagillo Replied

2/3/2018 at 9:18 AM

Hi Hemen. I'm sorry that I didn't respond yesterday. I got caught up in my workday. Yes, I received it and it went to my junk folder in gmail. Can you try this for me? Leave everything in place that we discussed. Send me a message that says "test" in the body and subject. Also, don't sign your name at the bottom. Thanks.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Linda Pagillo Replied

2/3/2018 at 11:53 AM

Hemen, I received your message today to my Junk folder again. The reason Gmail gives me is "It contains content that's typically used in spam messages". I'm not sure what content they are talking about since you sent me a one-word email. I'm thinking that there is something in the headers that is causing this. I can't image that this is the case, but the only thing I can think of is that your mail server name is mail2.virtualnethosting.net and your domain name does not match. Again... I can't see this being an issue, but Gmail may think differently. Question... do you have a domain on your mail server called virtualnethosting.net? If yes, can you keep everything in place and send me a test message from an account in that domain?

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

David Fisher Replied

2/3/2018 at 12:57 PM

Hi Linda,

Yes that is much better and easier to understand. I appreciate redoing that KB of yours. I am a long time SmarterMail user, so I mostly understood it, but wanted to clarify it just in case, and make some suggestions so it can be understood by the majority.

Thank You,
-dave

Linda Pagillo Replied

2/3/2018 at 9:42 PM

Thanks Dave! I completely agree with you. Now that it's more clear, I can see why it originally wasn't :) Thanks again for bringing it to my attention. It is very much appreciated!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/5/2018 at 5:14 AM

Have sent u from @virtual domain

Linda Pagillo Replied

2/5/2018 at 6:46 AM

Thanks Hemen. It went to my Spam folder again. I really don't want to give up on helping you, however, I honestly don't know what kind of content they are seeing over at Google that makes them think your messages are spam. You may want to try and reach out to Google support using the following form: https://support.google.com/mail/contact/msgdelivery They may give you further insight as to why your messages are landing in people's Spam folder.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/5/2018 at 9:50 AM

Linda, thanks once again have tried google mail url as given but am sure will not get much satisfactory response, lets see also can i request you to send test mail from your gmail to mansi@mpuh.org and routehosting@gmail.com
thanks

Linda Pagillo Replied

2/5/2018 at 10:05 AM

My pleasure. I just sent a test message from my gmail.com account to both of your gmail accounts. Please forgive me if I don't answer quickly today. I was up all night fighting a ransomware battle for a customer so I will probably be away from my keyboard for a few hours catching some zzzzz's :)

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/5/2018 at 10:10 AM

Thats fine sorry i mean send mails from your mailbestfriend domain id to both gmail ids i had given

Linda Pagillo Replied

2/5/2018 at 3:03 PM

Sent! :)

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/6/2018 at 12:52 AM

Both of your emails got delivered in their own junk folder, so now am not the only one facing this for sure :-) i have attached the log below received at routehosting@gmail.com and if you get any clue out of it

Delivered-To: routehosting@gmail.com
Received: by 10.80.181.66 with SMTP id z2csp3145994edd;
Mon, 5 Feb 2018 14:03:34 -0800 (PST)
X-Google-Smtp-Source: AH8x227XD7dwxkMy84j8UgGVi0h3QhWr32pF5JJojneUEo+MSWLDLVssL1boBLGzuX6lcUrFAITc
X-Received: by 10.237.51.70 with SMTP id u64mr471408qtd.179.1517868214671;
Mon, 05 Feb 2018 14:03:34 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1517868214; cv=none;
d=google.com; s=arc-20160816;
b=QY6PJLZ5dnoRXTljP0ayQA7MhbrFHxxkI3dmEbVeoV2iCSH0PvaLac6p903T1dgjxX
rOUkBtWBnDQvJNJiZj/MO1XRIwvF1IupIvCpWr1RrSB65RJjPGv5F8FPIH+88eikuzy0
NahgNlWrev64aXrsdxUgoGIEGgzWjFOjJLxEBTYL7RTevK4PzsgP1eiVbofay7Ut2l0r
2qAz8pnkFeNMe7X5fHwrm7jDpnsHmyyQeNSj/zc1cFNuaaYWeMneuUhRg4SeYH9TDyQQ
X+Li9eM0htM7tIHa7H44uQKtLsqPNIxq2DXzSTc3q9ElIXKOSUjmee4ixVh6lxElUVTT
veFw==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=content-language:thread-index:mime-version:message-id:date:subject
:to:from:arc-authentication-results;
bh=MrNoje7YaCstVaV2zUK95nlrl8VyNR0oLZSfknMSfFk=;
b=Mb1j9FGnHtleWSLhoVuoVMo6m9ZUiNDHcAJBN59MpuLgQBqUwKizOa8IGHaBqCg8Od
AwJHtp1h3wSj9hrOCAHbwTttNOpZhRm36BZCwo0S3UB4XpmiA6tDv+N5oCNq1tWC/ci/
MN+wJbMhjn6G5OMRXLe661V108SL/OSGH64jAImlFKmBsSX+gXLx+PRoZx4DWlPKIX6S
Ny3dNJLpIUIjiKvBRyOPtcCwKGOC5crl0K2I/k9kh+EEITS5zihVRxE1IQbCvZ2wqG9g
FP8uxcA6oa231MrrT4gadonkYbpuo1KKAiAlEHObDu9puPJxelj6xHZbOuzxe3Jk+3tO
CWXg==
ARC-Authentication-Results: i=1; mx.google.com;
spf=pass (google.com: domain of linda.pagillo@mailsbestfriend.com designates 144.217.12.175 as permitted sender) smtp.mailfrom=linda.pagillo@mailsbestfriend.com
Return-Path: <linda.pagillo@mailsbestfriend.com>
Received: from mail.declude.net (mail.declude.net. [144.217.12.175])
by mx.google.com with ESMTPS id q91si1475750qtd.428.2018.02.05.14.03.34
for <routehosting@gmail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 05 Feb 2018 14:03:34 -0800 (PST)
Received-SPF: pass (google.com: domain of linda.pagillo@mailsbestfriend.com designates 144.217.12.175 as permitted sender) client-ip=144.217.12.175;
Authentication-Results: mx.google.com;
spf=pass (google.com: domain of linda.pagillo@mailsbestfriend.com designates 144.217.12.175 as permitted sender) smtp.mailfrom=linda.pagillo@mailsbestfriend.com
Received: from mail.declude.net (localhost [127.0.0.1]) by mail.declude.net (Postfix) with ESMTPS id 15C874D05AB for <routehosting@gmail.com>; Mon,
5 Feb 2018 17:03:34 -0500 (EST)
Received: from localhost (localhost [127.0.0.1]) by mail.declude.net (Postfix) with ESMTP id 033474D05AA for <routehosting@gmail.com>; Mon,
5 Feb 2018 17:03:34 -0500 (EST)
Received: from mail.declude.net ([127.0.0.1]) by localhost (mail.declude.net [127.0.0.1]) (amavisd-new, port 10026) with ESMTP id cnz4MtewyCJz for <routehosting@gmail.com>; Mon,
5 Feb 2018 17:03:33 -0500 (EST)
Received: from velocitygirlPC (unknown [208.98.206.162]) by mail.declude.net (Postfix) with ESMTPSA id B14E04D05A9 for <routehosting@gmail.com>; Mon,
5 Feb 2018 17:03:32 -0500 (EST)
From: Linda Pagillo <linda.pagillo@mailsbestfriend.com>
To: <routehosting@gmail.com>
Subject: Test
Date: Mon, 5 Feb 2018 16:03:32 -0600
Message-ID: <013f01d39ecd$2a6e43b0$7f4acb10$@mailsbestfriend.com>
MIME-Version: 1.0
Content-Type: multipart/related; boundary="----=_NextPart_000_0140_01D39E9A.DFD644B0"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AdOezSXrQwYflQLwSniR8gsy//VZ6g==
Content-Language: en-us

------=_NextPart_000_0140_01D39E9A.DFD644B0
Content-Type: multipart/alternative; boundary="----=_NextPart_001_0141_01D39E9A.DFD644B0"

------=_NextPart_001_0141_01D39E9A.DFD644B0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Testing.

Linda Pagillo
Mail's Best Friend
Email: <mailto:linda.pagillo@mailsbestfriend.com>
linda.pagillo@mailsbestfriend.com
Office: 703.988.3606

Web: <http://www.mailsbestfriend.com/>; www.mailsbestfriend.com

FB: <https://www.facebook.com/mailsbestfriend>;
https://www.facebook.com/mailsbestfriend

Twitter: @MailsBestFriend

Authorized Reseller of SmarterTools Products

Authorized Reseller of Message Sniffer

logo-1

------=_NextPart_001_0141_01D39E9A.DFD644B0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"; xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV=3D"Content-Type" CONTENT=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 14 (filtered medium)"><style></style></head><body lang=3DEN-US link=3Dblue vli=
nk=3Dpurple><div class=3DWordSection1><p class=3DMsoNormal>Testing.<o:p></o=
:p></p><p class=3DMsoNormal><o:p> </o:p></p><p class=3DMsoNormal><span=
style=3D'color:#1F497D'>Linda Pagillo<br>Mail's Best Friend<br>Email: <a h=
ref=3D"mailto:linda.pagillo@mailsbestfriend.com"><span style=3D'color:blue'=
>linda.pagillo@mailsbestfriend.com</span></a><br>Office: 703.988.3606<o:p><=
/o:p></span></p><p class=3DMsoNormal><span style=3D'color:#1F497D'>Web: <a =
href=3D"http://www.mailsbestfriend.com/"><span style=3D'color:blue'>www.mai=
lsbestfriend.com</span></a><o:p></o:p></span></p><p class=3DMsoNormal><span=
style=3D'color:#1F497D'>FB: <a href=3D"https://www.facebook.com/mailsbestf=
riend"><span style=3D'color:blue'>https://www.facebook.com/mailsbestfriend<=
/span></a><o:p></o:p></span></p><p class=3DMsoNormal><span style=3D'color:#=
1F497D'>Twitter: @MailsBestFriend<o:p></o:p></span></p><p class=3DMsoNormal=
><i><span style=3D'color:#1F497D'>Authorized Reseller of SmarterTools Produ=
cts<o:p></o:p></span></i></p><p class=3DMsoNormal><i><span style=3D'color:#=
1F497D'>Authorized Reseller of Message Sniffer<o:p></o:p></span></i></p><p =
class=3DMsoNormal><span style=3D'color:#1F497D'><o:p> </o:p></span></p=
><p class=3DMsoNormal><span style=3D'color:#1F497D'><img border=3D0 width=
=3D325 height=3D59 id=3D"Picture_x0020_1" src=3D"cid:image001.jpg@01D39E9A.=
DE8B4E20" alt=3Dlogo-1></span><o:p></o:p></p><p class=3DMsoNormal><o:p>&nbs=
p;</o:p></p></div></body></html>
------=_NextPart_001_0141_01D39E9A.DFD644B0--
------=_NextPart_000_0140_01D39E9A.DFD644B0
Content-Type: image/jpeg; name="image001.jpg"
Content-Transfer-Encoding: base64
Content-ID: <image001.jpg@01D39E9A.DE8B4E20>

------=_NextPart_000_0140_01D39E9A.DFD644B0--

Linda Pagillo Replied

2/6/2018 at 11:52 AM

That is strange Hemen because I know our mail server is set up correctly. Again, I don't know what criteria Gmail is looking for in terms of what they consider spam. We see this all the time and it is always a challenge since we can't have a look into their internal systems. Gmail may have simply sent my messages to spam because I have never emailed you at your Gmail address before.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/7/2018 at 12:40 AM

So we are stuck here then, not sure if any others are following this thread and if others are facing such issue or throw some light.
Is there way that incoming mail servers will check the sender's SMTP IP/domain for spam check rather than originating IP (which is usually ISP IP and almost blk listed somewhere)
I want when our users send mail then recipient system will get my smtp IP which is clean and might improve delivery of mails in their inbox

Matthew Leyda Replied

2/7/2018 at 5:35 AM

Herman,
Let try a different gmail account and see what happens. Can you send a test email to kendra.support@gmail.com and I'll post the headers here.

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Matthew Leyda Replied

2/7/2018 at 6:18 AM

Hemen,

It landed in my spam box. One thing I noticed id you are still using DMARC and it was depreciated and we stopped using it. Try shutting it off and try the test again.

Original Message

Message ID
<00bf01d3a010$c5a2d460$50e87d20$@routehosting.com>

Created at:
Wed, Feb 7, 2018 at 4:39 AM (Delivered after 18 seconds)

From:
Hemen Shah <admin@routehosting.com>Using Microsoft Outlook 15.0

To:
kendra.support@gmail.com

Subject:
Test

SPF:
PASS with IP 198.178.125.133 Learn more

DKIM:
'PASS' with domain routehosting.com Learn more

DMARC:
'PASS' Learn more

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Linda Pagillo Replied

2/7/2018 at 10:44 AM

Hemen, to answer your question "Is there way that incoming mail servers will check the sender's SMTP IP/domain for spam check rather than originating IP"... some spam-checks will check the domain, however I checked your actual routehosting.com domain against a lot of blacklists and it is clean, so I do not believe that is causing this issue. I'm sorry that there is not a lot more than I can do in terms of testing. Matthew has a good idea about removing DMARC, but I have a feeling it is not going to make a difference. It's surely worth a try. If it works, please send me another test email my gmail account and I will see where it lands. If it is DMARC causing the problem, I will see if I can reach out to Google to see why. Thanks!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/8/2018 at 6:22 AM

I dont see anywhere that DMARC has been deprecated and not sure on this, i have removed _dmarc record from my zone and same is already unchecked in Antispam options,
mail sent to both ids

Matthew Leyda Replied

2/8/2018 at 6:31 AM

Hermen,
That did it. It landed in my inbox. I think you have your answer.

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Hemen Shah Replied

2/8/2018 at 6:49 AM

I had noticed that Dmarc option was unchecked in my Antispam - options but _dmarc txt record was still there in zone file, can this be culprit ? Lets wait for response from Linda

Matthew Leyda Replied

2/8/2018 at 6:53 AM

Hermen,
Check the March 29th 2016 release notes for version 15 of smartermail and you will find your answer.

•Removed: DomainKeys verification is no longer included as part of the spam settings that are automatically created during the getting started wizard.
•Removed: Signing messages with DomainKeys has been removed as that signing method is obsolete. Message signing should be done with DKIM.

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Hemen Shah Replied

2/8/2018 at 7:23 AM

I am still bit confused, it reads about domain keys and we are talking about Dmarc and as per me, domain keys, dmarc and dkim are different things

Matthew Leyda Replied

2/8/2018 at 7:44 AM

DKIM is now the only signing method in V15 and V16. DMARC was taken out when it became obsolete.

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Matthew Leyda Replied

2/8/2018 at 7:45 AM

What version of smartermail are you using?

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Hemen Shah Replied

2/8/2018 at 10:54 PM

i am using SM 15.x latest build and there is still Dmarc option available in Antispam - Options "Enable DMARC policy compliance check"

Linda Pagillo Replied

2/9/2018 at 4:42 PM

Hi Hemen and Matthew. I apologize for the delayed response. I have been down with a severe bout of the flu putting me out for a few days. I'm on the mend and catching up. The test message that you sent to me on the 8th landed in my Junk folder at Gmail.

Also, Matthew, I can't find anywhere where it says that DMARC is depreciated. Can you please point me to where you read that so I can have a look as well? Thanks so much!

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Matthew Leyda Replied

2/9/2018 at 5:08 PM

There was a big discussion end of 2015 that ended with SM removing it from Mail signing in March of 2016. If I have time this weekend I'll look it up.

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Matthew Leyda Replied

2/9/2018 at 5:15 PM

Sorry, I should have said DomainKeys signing has been depreciated and should be replaced with 2048bit DKIM signing. DomainKeys signing was removed in 2016.

Kendra Support http://www.kendra.com support@kendra.com 425-397-7911 Junk Email filtered ISP

Hemen Shah Replied

2/9/2018 at 11:15 PM

True, so we are still stuck at same place and i dont think this has to do anything with dmarc, of lately many customers complaining about mails getting delivered to recipients junk box and precisely this has increased post last 2-3 update builds

Linda Pagillo Replied

2/10/2018 at 4:35 PM

Thanks for clarifying Matthew. I thought I was losing my mind lol :)

Hemen, I have been seeing this more and more lately as well, but I really don't think it has to do with SmarterMail. I think it's Google seriously trying to crack down on spam since spam is getting worse by the minute. The problem with larger ESP's such as Google, Microsoft etc... none of us have any way of knowing how they configure their antispam systems and there is really no way to find out. It's quite frustrating to say the least.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Hemen Shah Replied

2/17/2018 at 5:20 AM

Linda, you had asked to test in between with
# XOUTHEADER X-Identity: %REMOTEIP% | %REVDNS% | %REMOTEHOST%
# XSENDER
above if i OFF, will it make difference in general or ON is fine too.

Also can particular in settings for Greylisting > Filters

Thanks

Linda Pagillo Replied

2/19/2018 at 6:38 AM

Hi Hemen. You can turn those directives back on and it will not negatively affect anything. As for Greylisting > Filters, we don't have any particular settings for this because filters for greylisting are done on a per-server basis according to your needs. For example, if you have a sender that you never want to be greylisted, you would add their IP in the Greylisting > Filters area to bypass greylisting for that sender.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Emmet McGovern Replied

2/22/2018 at 1:23 PM

I ended up getting sidetracked before I could switch over to MBF's spam settings. Has anyone tried them yet? What was your results? We're you previously using some version of Bruces settings? Just curious.

Gabriele Maoret Replied

5/4/2018 at 11:41 PM

Hi Linda! A question for you: in your recent review of the "SmarterMail Suggested Anti-Spam Settings" you say: "IMPORTANT NOTE: DO NOT USE THE SETTINGS IN THIS PAPER IF YOU ARE USING DECLUDE FOR YOUR ANTISPAM NEEDS AS IT WILL CAUSE DOUBLE SCORES!".

There'a recomended settings to use both Declude and SM Antispam?

Or it will be better to disable Declude?

Linda Pagillo Replied

5/5/2018 at 6:20 AM

Hi Gabriele. We suggest using both Declude and SM's antispam. Use Declude for filtering and use a few RBLs in SM at the Incoming SMTP Blocking level. If you look to our paper and search for "We also suggest that you enable the below tests for Incoming SMTP Blocking." it will show you which tests to set up at the Incoming SMTP Blocking level.

Linda Pagillo Mail's Best Friend Email: linda.pagillo@mailsbestfriend.com Web: www.mailsbestfriend.com Authorized SmarterTools Reseller Authorized Message Sniffer Reseller

Back to Community Threads

Please leave this box unchecked