Emails are moving to Spam

Problem reported by Pedro Javier - 10/21/2019 at 11:09 AM

Submitted

Hello Everyone,

The emails are moving to spam folder. The SPF and Dmarc Records are fine but still moving to Spam Folder in Gmail:

SPF: https://mxtoolbox.com/SuperTool.aspx?action=spf%3aharptec.com&run=toolpage

DMARC: https://mxtoolbox.com/SuperTool.aspx?action=dmarc%3aharptec.com&run=toolpage

Header of Received Email on Gmail:

Received-SPF: softfail (google.com: domain of transitioning pratik.jajal@harptec.com does not designate 173.248.133.203 as permitted sender) client-ip=173.248.133.203;
From: Pratik Jajal <pratik.jajal@harptec.com>
To: "'Pratik Jajal'" <rpjajal@gmail.com>
Subject: Test Email at 11:32 PM
Date: Mon, 21 Oct 2019 23:32:49 +0530
Message-ID: <005301d58839$c21d4830$4657d890$@harptec.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_0054_01D58867.DBD758F0"
Thread-Index: AdWIOb+KLTPWQ4dwSYWfEq/VimG4UQ==
Content-Language: en-us

------=_NextPart_000_0054_01D58867.DBD758F0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Test Email at 11:32 PM

Regards,
Pratik Jajal

------=_NextPart_000_0054_01D58867.DBD758F0
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"; xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV=3D"Content-Type" CONTENT=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:"Cambria Math";
=09panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:11.0pt;
=09font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
=09{mso-style-priority:99;
=09color:#0563C1;
=09text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
=09{mso-style-priority:99;
=09color:#954F72;
=09text-decoration:underline;}
span.EmailStyle17
=09{mso-style-type:personal-compose;
=09font-family:"Calibri","sans-serif";
=09color:windowtext;}
.MsoChpDefault
=09{mso-style-type:export-only;
=09font-family:"Calibri","sans-serif";}
@page WordSection1
=09{size:8.5in 11.0in;
=09margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
=09{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3D"#0563C1=
" vlink=3D"#954F72"><div class=3DWordSection1><p class=3DMsoNormal>Test Ema=
il at 11:32 PM<o:p></o:p></p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><p c=
lass=3DMsoNormal>Regards,<o:p></o:p></p><p class=3DMsoNormal>Pratik Jajal<o=
:p></o:p></p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div></body></html>
------=_NextPart_000_0054_01D58867.DBD758F0--

Upon checking, logs everything is normal but don't know why this is happening. Unable to find the cause behind this.

Please check and do the needful asap.

Pratik Jajal
Younited Host - The best Web Hosting Provider
Email: pedro@younitedhost.com

15 Replies

Reply to Thread

Employee Replied

10/21/2019 at 11:11 AM

Employee Post

Pratik,

It looks like your email failed DMARC:

ARC-Authentication-Results: i=1; mx.google.com;
       spf=softfail (google.com: domain of transitioning pratik.jajal@harptec.com does not designate 173.248.133.203 as permitted sender) smtp.mailfrom=pratik.jajal@harptec.com;
       dmarc=fail (p=NONE sp=QUARANTINE dis=NONE) header.from=harptec.com

Pedro Javier Replied

10/21/2019 at 7:01 PM

Hello Ben,

Why SPF is getting softfail?

However, you can see DMarc is properly configured. You can verify with th shared link. In case, if it is incorrect, please guide me to correct it.

Share me steps to fix this out. Do we need to make any change at SmarterMail configuration level?

Pratik Jajal Younited Host - The best Web Hosting Provider Email: pedro@younitedhost.com

Sébastien Riccio Replied

10/21/2019 at 10:29 PM

Received-SPF: softfail (google.com: domain of transitioning pratik.jajal@harptec.com does not designate 173.248.133.203 as permitted sender) client-ip=173.248.133.203;

# host -t TXT harptec.com

harptec.com descriptive text "v=spf1 ip4:88.208.200.241 +a +mx +include:_spf.google.com ~all"

Your spf record for the domain doesn't contain any entry that covers the IP address you're sending mail from (173.248.133.203)

You might want to add ip4:173.248.133.203 to your spf record.

You can use this online tool to check a sender ip against your spf record:

https://mxtoolbox.com/SuperTool.aspx?action=spf%3aharptec.com%3a173.248.133.203&run=toolpage

Sébastien Riccio System & Network Admin https://swisscenter.com

Pedro Javier Replied

10/22/2019 at 7:54 AM

Hi,

Once I have correct SPF as per below record, it is getting bounced with error:

Corrected Record: v=spf1 ip4:173.248.133.203 +a +mx +include:_spf.google.com ~all

https://mxtoolbox.com/SuperTool.aspx?action=spf%3aharptec.com%3a173.248.133.203&run=toolpage#

Delivery has failed to these recipients: rpjajal@gmail.com Subject: Test Email at Harptec Remote Server returned: '550 5.7.1 [173.248.133.203 12] Our system has detected that this message is 5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail, 5.7.1 this message has been blocked. Please visit 5.7.1 https://support.google.com/mail/?p=UnsolicitedMessageError 5.7.1 for more information. f184si12350958ilh.97 - gsmtp'

There is no spam or junk emails are sending from domain still it is getting bounced.

Is there any solution for this?

Pratik Jajal Younited Host - The best Web Hosting Provider Email: pedro@younitedhost.com

Pedro Javier Replied

10/22/2019 at 8:09 AM

Hi,

Once I have set "v=spf1 include:_spf.google.com ~all " as SPF record, the emails are delivering to Mail Account but moving to spam folder, please refer the header for your reference:

Delivered-To: rpjajal@gmail.com
Received: by 2002:a50:9ea8:0:0:0:0:0 with SMTP id a37csp5830551edf;
        Tue, 22 Oct 2019 08:01:45 -0700 (PDT)
X-Google-Smtp-Source: APXvYqzVQp6xVZPR4xduj/3FjhqJluQZKKlefGDOTf7nkwjuh6VPDAyR3zwihC7ngv6C7HLm/7WG
X-Received: by 2002:a02:3e8d:: with SMTP id s135mr4141910jas.134.1571756505172;
        Tue, 22 Oct 2019 08:01:45 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1571756505; cv=none;
        d=google.com; s=arc-20160816;
        b=J9LPM0LGV+Gv29u0iRNdeiqk2ZM7wA54O0DVxn3LctN3GGb4YqYY/LURIe5QBf0DBl
         YfvCpeSSvX/Wr7kjykAe+eZUJfY+jA63eZGMg9kcavCyMTR87ydTZAB4tTPhAHBg54j/
         Pfeiy9dEfsxQ0InS1F2iERdNcgw2JRB4Og7nmbbneYtD2JpE3dkEXkptIdOxkOdPAwOs
         eohr05p2+ZhXMNWpeSLZVaOizkapSzclnvn4WiWa/fke0yw4C9K36WmRbcQTTqQLNfUQ
         p9CR/R8RTXM7vhN8VXrcv7xjUJR/25lUUl6g6Veg+b++DKKTRoOdbN473kP1aV95F8FM
         zYEA==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=content-language:thread-index:mime-version:message-id:date:subject
         :to:from:dkim-signature;
        bh=Q8HAMyEYUtmFqoyHEQp8K3iA9UXaZrOL6WSasaHuOGc=;
        b=0q9g7pkbKvA6QM+Oog9QeB+pll9/mUvwgwE7Qh4NHkIHKsZcQeTkbp/Z4BFyc9DQXG
         rJ4k7VbFL3DUTCy9/gymHJjzav0aFlbx0LeZONizfL4D8nu7HEzOCIRPR2y8zbJ9a5kl
         0axIP6DEpmNTo71oWTqpyewfBKqqP5lsDnGUibHo/yj1b6D7DrteyMTPrHWl3jqZ46yP
         ZWqxkQMn1WrjrMgiV5NrUvlFwjTxgA1/YBBRcXbpmNnonKgoSX5yyezsIpK+6qxJrNTj
         rxuaKtgAl0Pqqmw88IInQmoT+Mc9R0P/F1DRUzfC910WQ3q0wrJ6+iAB+X3LbEvc1ard
         7YOQ==
ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@harptec.com header.s=8d7053ed9fc301b header.b=KMWWwP8k;
       spf=softfail (google.com: domain of transitioning pratik.jajal@harptec.com does not designate 173.248.133.203 as permitted sender) smtp.mailfrom=pratik.jajal@harptec.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=harptec.com
Return-Path: <pratik.jajal@harptec.com>
Received: from SSD42.Shane2016FUL.COM (server.harptec.com. [173.248.133.203])
        by mx.google.com with ESMTPS id c4si18192100ilj.32.2019.10.22.08.01.44
        for <rpjajal@gmail.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 22 Oct 2019 08:01:44 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning pratik.jajal@harptec.com does not designate 173.248.133.203 as permitted sender) client-ip=173.248.133.203;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@harptec.com header.s=8d7053ed9fc301b header.b=KMWWwP8k;
       spf=softfail (google.com: domain of transitioning pratik.jajal@harptec.com does not designate 173.248.133.203 as permitted sender) smtp.mailfrom=pratik.jajal@harptec.com;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=harptec.com
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=harptec.com; s=8d7053ed9fc301b;
        h=content-language:thread-index:x-mailer:content-type:mime-version
          :message-id:date:subject:to:from;
        bh=Q8HAMyEYUtmFqoyHEQp8K3iA9UXaZrOL6WSasaHuOGc=;
        b=KMWWwP8kuZVnPKLQML4QwgJbaqdxtVZp29arQ1OIJ3gNQ0vRXlfVjT6RMxJd9xXkY
          CWM1rd5yPqT04TAw4HzYz0/zsWJcqd4eP25wzHd1kTJi5AT40y+SBsFnEg2APbEFd
          kXBLHuO02VqxmIqIpVxRz/7NO35+d2rOI94JI0RK8=
Received: from Pratik (42-106-31-171.live.vodafone.in [42.106.31.171]) by SSD42.Shane2016FUL.COM with SMTP (version=Tls12 cipher=Aes256 bits=256);
   Tue, 22 Oct 2019 20:31:36 +0530
From: Pratik Jajal <pratik.jajal@harptec.com>
To: "'Pratik Jajal'" <rpjajal@gmail.com>
Subject: Test Email for the domain
Date: Tue, 22 Oct 2019 20:31:32 +0530
Message-ID: <003d01d588e9$9946d010$cbd47030$@harptec.com>
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_NextPart_000_003E_01D58917.B2FFCF60"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdWI6ZZhg/X81e8DR0i6sk8obLr+SA==
Content-Language: en-us
X-Exim-Id: 003d01d588e9$9946d010$cbd47030$

------=_NextPart_000_003E_01D58917.B2FFCF60
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit

Test Email for the domain

 

Regards,

Pratik Jajal

 


------=_NextPart_000_003E_01D58917.B2FFCF60
Content-Type: text/html; charset="us-ascii"
Content-Transfer-Encoding: quoted-printable

<html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr=
osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" =
xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml"; xmlns=3D"http:=
//www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV=3D"Content-Type" CONTENT=
=3D"text/html; charset=3Dus-ascii"><meta name=3DGenerator content=3D"Micros=
oft Word 15 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
=09{font-family:"Cambria Math";
=09panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
=09{font-family:Calibri;
=09panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
=09{margin:0in;
=09margin-bottom:.0001pt;
=09font-size:11.0pt;
=09font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
=09{mso-style-priority:99;
=09color:#0563C1;
=09text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
=09{mso-style-priority:99;
=09color:#954F72;
=09text-decoration:underline;}
span.EmailStyle17
=09{mso-style-type:personal-compose;
=09font-family:"Calibri","sans-serif";
=09color:windowtext;}
.MsoChpDefault
=09{mso-style-type:export-only;
=09font-family:"Calibri","sans-serif";}
@page WordSection1
=09{size:8.5in 11.0in;
=09margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
=09{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext=3D"edit">
<o:idmap v:ext=3D"edit" data=3D"1" />
</o:shapelayout></xml><![endif]--></head><body lang=3DEN-US link=3D"#0563C1=
" vlink=3D"#954F72"><div class=3DWordSection1><p class=3DMsoNormal>Test Ema=
il for the domain<o:p></o:p></p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p><=
p class=3DMsoNormal>Regards,<o:p></o:p></p><p class=3DMsoNormal>Pratik Jaja=
l<o:p></o:p></p><p class=3DMsoNormal><o:p>&nbsp;</o:p></p></div></body></ht=
ml>
------=_NextPart_000_003E_01D58917.B2FFCF60--

Pratik Jajal Younited Host - The best Web Hosting Provider Email: pedro@younitedhost.com

Tony Scholz Replied

10/22/2019 at 10:47 AM

Employee Post

Hello,

In the header provided you are still failing the SPF check.

ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@harptec.com header.s=8d7053ed9fc301b header.b=KMWWwP8k;
       spf=softfail (google.com: domain of transitioning pratik.jajal@harptec.com does not designate 173.248.133.203 as permitted sender)

Your SPF record still does not include the sending IP/Server

harptec.com. 598 IN TXT "v=spf1 include:_spf.google.com ~all"

Using MxToolBox you can check the SPF record and verify IPs against it.

https://mxtoolbox.com/SuperTool.aspx?action=spf%3aharptec.com%3a173.248.133.203&run=toolpage

This results in a failure

If you add the MX record and the IP to the SPF record you should no longer fail the SPF check. Here is an example of what the record can look like.

harptec.com.  IN TXT "v=spf1 mx a ip4:173.248.135.18 include:_spf.google.com ~all"

Thank you

Tony Scholz System/Network Administrator SmarterTools Inc. www.smartertools.com

Pedro Javier Replied

10/22/2019 at 11:06 AM

Hello Tony,

I have added server IP as per the SPF syntax but emails are getting bounced, you can refer the below error:

Please assist further on this.

Pratik Jajal Younited Host - The best Web Hosting Provider Email: pedro@younitedhost.com

Pedro Javier Replied

10/22/2019 at 7:16 PM

Hello Team,

Is there any way, I can change the IP for SPF as I am having two IPs for Mail Server.

Pratik Jajal Younited Host - The best Web Hosting Provider Email: pedro@younitedhost.com

Randy Armbrecht Replied

10/22/2019 at 7:37 PM

Hi Pratik,

simply place both IPs in your SPF ..... ip4:1.2.3.4 ip4:5.6.7.8 ......

Pedro Javier Replied

10/22/2019 at 8:55 PM

Hi Randy,

I have added SPF record as per below but it is giving bounce back email, you can refer below details for more information:

SPF Record: v=spf1 ip4:173.248.133.203 ip4:173.248.135.18 include:_spf.google.com ~all

Header:

From: "System Administrator" To: pratik.jajal@harptec.com Subject: Failed: Test Email for the Harptec Domain Date: Wed, 23 Oct 2019 09:19:51 +0530 Message-ID: <5e7bf3cdc65f43f8a805babb9eee6672@gmail.com> MIME-Version: 1.0 Content-Type: multipart/report; report-type=delivery-status; boundary=1906d61b8872451299c4b2fc26587b48 X-SmarterMail-MessageType: Bounce X-Exim-Id: 2caddb65771f46f4a9e6ed57762019b5 X-SmarterMail-TotalSpamWeight: 0 (Authenticated)

Body:

Delivery has failed to these recipients: rpjajal@gmail.com Subject: Test Email for the Harptec Domain Remote Server returned: '550 5.7.1 [173.248.133.203 12] Our system has detected that this message is 5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail, 5.7.1 this message has been blocked. Please visit 5.7.1 https://support.google.com/mail/?p=UnsolicitedMessageError 5.7.1 for more information. x17si29768553iol.125 - gsmtp'

Pratik Jajal Younited Host - The best Web Hosting Provider Email: pedro@younitedhost.com

Sébastien Riccio Replied

10/23/2019 at 1:12 AM

According to the SPF check tool, your spf record is still wrong:

v=spf1 include:_spf.google.com ~all

Sébastien Riccio System & Network Admin https://swisscenter.com

Pedro Javier Replied

10/23/2019 at 2:23 AM

Hi,

I have set that spf in order to send an email on gmail account.

I have already tried by defining ip4 twice to resolve but it gives bounce back as per my earlier response.

Pratik Jajal Younited Host - The best Web Hosting Provider Email: pedro@younitedhost.com

Sébastien Riccio Replied

10/23/2019 at 2:35 AM

Why not leaving it to:

v=spf1 a mx ip4:173.248.133.203 ip4:173.248.135.18 include:_spf.google.com ~all


Which allows google to send e-mail on behalf of your domain and also validate your other sending ips?

I'm not really sure you understand totally how SPF works.

For the error : Our system has detected that this message is 5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail, 5.7.1 this message has been blocked.

It's possibly because there was too much failed spf mail that were sent from your IP so gmail automatically flagged your IP as suspicious, but this will never get fixed if you keep on removing your sending IP addresses from your SPF record.

Sébastien Riccio System & Network Admin https://swisscenter.com

Pedro Javier Replied

10/23/2019 at 3:40 AM

Hi Riccio,

If I leave as you said, I am unable to send email to any of the Gmail account. This is production domain therefore I have set default Google SPF record to avoid inconvenience.

I know how SPF works but it gives error without any spamming happening. Also, the IP is not blocked only domain is blocked because rest of the domains are working fine.

There is no spamming occurring still it is blocked. Is there any other solution?

Can a SmarterMail guy log a support ticket for assistance?

Pratik Jajal Younited Host - The best Web Hosting Provider Email: pedro@younitedhost.com

Sébastien Riccio Replied

10/23/2019 at 3:55 AM

I am sorry but, no, you don't understand SPF, and this shows it:

"I am unable to send email to any of the Gmail account. This is production domain therefore I have set default Google SPF record to avoid inconvenience."

I'll stop trying to help here and leave it to the others.

Sébastien Riccio System & Network Admin https://swisscenter.com

Back to Community Threads

Please leave this box unchecked

15 Replies

Reply to Thread

Tags

Related Knowledge Base Articles