[mailop] Sorry, SiteGROUND not SiteGuard Re: Siteguard Contact

2025-07-11 Thread Kevin A. McGrail via mailop
Resending with the correct company name of SiteGround.  Any contact there appreciated. TGIF, KAM On 7/10/2025 8:15 PM, Kevin A. McGrail wrote: Hello All, We found that Siteguard actively blocked the use of a third party filter with their email and web hosting.  We're trying to reach someone

[mailop] Siteguard Contact

2025-07-10 Thread Kevin A. McGrail via mailop
Hello All, We found that Siteguard actively blocked the use of a third party filter with their email and web hosting.  We're trying to reach someone senior to discuss and wondering if anyone is on the list or has a good contact? Regards, KAM ___ m

[mailop] Anyone from netflix available? Trying to see if there is a bug in the code re: emailable on your end

2025-05-28 Thread Kevin A. McGrail via mailop
Hello, anyone from Netflix here?  We see probes from emailable but unable to verify email.  Have been trying to raise the issue through customer support and emailable for about a month but without much success.  We think you might have a code issue on your end. Regards, KAM _

[mailop] Anyone from Uber Here?

2025-03-13 Thread Kevin A. McGrail via mailop
We've got people who can get things like Uber verification codes via email instantly but they are missing receipts and resending receipts isn't seeming to work.  We can replicate the issue and looking for someone at Uber who might be able to help. __

Re: [mailop] [External] Re: PayPal Phishing from Paypal servers.. Now coming through o365 as well

2024-12-11 Thread Kevin A. McGrail via mailop
On 12/11/2024 4:33 AM, Alessandro Vesely via mailop wrote: However, they could put an advice telling so, and were to report abuse. We've seen where they appear to be adding invoice fraud reporting.  However, the fraudsters are switching to pay requests and other techniques.  It's just sad tha

Re: [mailop] [External] Understanding why a spammer is doing this

2024-08-29 Thread Kevin A. McGrail via mailop
Mark, I don't think I've seen this behavior but I'll have to watch out for it. Overall, I would oposit that they are sending legitimate traffic to mask other bad emails at the same time  in an attempt to change the signal to noise ratios and/or to raise their domain/IP/system reputation. And

Re: [mailop] [External] Re: Uptick in Google Groups spam?

2024-08-27 Thread Kevin A. McGrail via mailop
On 8/27/2024 3:59 PM, Michael Rathbun via mailop wrote: The latest Goog.spamflood here has been from the "appsheet" system. Users of this have enough "sudden death" spamtraps in their lists that at any moment at least five of the outgoing IPs are in the penalty bin for at least 24 hours. Agre

Re: [mailop] [External] Uptick in Google Groups spam?

2024-08-27 Thread Kevin A. McGrail via mailop
Robert, Hit me off list for a spample and I'll take a look. Regards, KAM On 8/27/2024 2:37 PM, Robert Giles via mailop wrote: RAPTOR REMARK: Alert! Please be careful! This email is from an EXTERNAL sender. Be aware of impersonation and credential theft. On the topic of free services that Go

Re: [mailop] [External] Does Google not accept bounce emails anymore?

2024-05-27 Thread Kevin A. McGrail via mailop
Good Question. The RFC purist in me says, hell no. But my calmer, gentler, experience mail inner child would say you should work to extend your edge so you decline the message during the SMTP conversation if at all possible.  Backscatter, joe jobs, and bounces with payloads/spam have pretty mu

Re: [mailop] [External] Gmail has a thing about dots

2024-05-03 Thread Kevin A. McGrail via mailop
Whoops.  Missed that part :-) On 5/2/2024 6:44 PM, John Levine wrote: These dots aren't in the Gmail address. They're in the return address in the message.___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Gmail has a thing about dots

2024-05-02 Thread Kevin A. McGrail via mailop
Gmail treats dots as non-existent.  So kevin.mcgr...@gmail.com and kevinmcgr...@gmail.com are the same account. https://support.google.com/mail/answer/7436150?hl=en HTH, KAM On 5/2/2024 3:02 PM, John Levine via mailop wrote: RAPTOR REMARK: Alert! Please be careful! This email is from an EXTER

Re: [mailop] [External] Re: Off-Topic - VMWare ESXI 7.0

2024-04-16 Thread Kevin A. McGrail via mailop
As the original poster, I wanted to say thanks.  Based on the dozen or so replies so far, I clearly struck a nerve.  I'm reading all the replies with great interest. Regards, KAM ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listi

[mailop] Off-Topic - VMWare ESXI 7.0

2024-04-15 Thread Kevin A. McGrail via mailop
Hi All, We have four servers where we can't retrieve our free ESXi VMWare license after Broadcom shut things down and they are in evaluation mode for about 30 more days. Does any one have any advice?  Is there a product we can buy?  Is there an alternative you've been switching over to using

Re: [mailop] [External] Re: random.onmicrosoft.com SPAM

2024-03-21 Thread Kevin A. McGrail via mailop
On 3/21/2024 5:48 AM, Gellner, Oliver via mailop wrote: The topic about onmicrosoft.com has already been brought up multiple times on this list, the last time in January:https://list.mailop.org/private/mailop/2024-January/026871.html ff To sum it up: .onmicrosoft.com is the default domain fo

[mailop] OT re Munging was Re: Extortion spam from OVH-hosted *.sbs domains

2024-01-31 Thread Kevin A. McGrail via mailop
Hi MailOp, I thought I would send a note that emails about this topic with OVH and SBS domains have sometimes been going into spam because some emails mention URIs that are on blocklists. At the Apache SpamAssassin project we typical discuss things with [] brackets or the word munge to avoid

Re: [mailop] [External] seeking a spamtrap milter

2024-01-23 Thread Kevin A. McGrail via mailop
Hi folks, I suspect this exists, but can't come up with the right search. I have domains that should never receive mail. I'd like a milter that looks for mail to those domains and feeds the IP of the sender to an outside program. Surely someone wrote this spamtrap software? Or does everyone jus

Re: [mailop] [External] Re: Microsoft CERT Report Response Marked As Spam

2023-11-09 Thread Kevin A. McGrail via mailop
I wouldn't agree with that.  Microsoft sending emails with invalid dates alone would put this under the threshold. -KAM On 11/9/2023 1:41 PM, Jarland Donnell via mailop wrote: A score of 5.8 on SpamAssassin rules is fairly low. It would be more advisable for you to consider adjusting your setti

[mailop] gmail deliverability issue was mailop Digest, Vol 39, Issue 48

2023-10-26 Thread Kevin A. McGrail via mailop
Hi Mark, I saw this and your test from the loopback. Everything looked good from ARC/DKIM/SPF/DMARC.  We've been seeing Google requiring DKIM authentication lately so we wanted to confirm that wasn't the issue. Are you sending bulk emails? I noticed it's the BBB and they send a lot of messag

Re: [mailop] [External] Need Help with Google Deliverability Issue

2023-10-26 Thread Kevin A. McGrail via mailop
Mark, was there a bounce message with any information? Send a message to raptorloopb...@raptoremailsecurity.com and that will tell you what that spam scanner sees to check your SPF, DKIM, DMARC, etc. Regards, KAM On 10/26/2023 3:13 PM, Mark Stanley via mailop wrote: I have recently migrated

Re: [mailop] [External] Re: United Airlines / mileageplus DNS/rDNS mismatch issue

2023-05-09 Thread Kevin A. McGrail via mailop
On 5/9/2023 4:17 PM, Gellner, Oliver via mailop wrote: I’d be surprised if there are many members on this list whose systems do not penalize connections from IP addresses without a fully confirmed reverse DNS entry one way or the other. Maybe I‘m wrong, but then I‘d like to hear from them. T

[mailop] [Off-Topic] Blog from KAM on Cybersecurity and Looking for Hecklers for my workshop at InboxExpo

2023-02-14 Thread Kevin A. McGrail via mailop
Hi Mailopers, Thanks to Inbox Expo for publishing my 2 Secrets to Streamline Cybersecurity Projects. You can read it at https://inboxexpo.com/2-secrets-from-from-kam/ and no registration or silliness required! I will also be presenting the keynote and a workshop for InboxExpo.com on Februar

Re: [mailop] [External] Re: Question of SPF record

2023-02-05 Thread Kevin A. McGrail via mailop
To add onto this, rarely will you want to divine the IP addresses of your service providers.  Contact them for their include record.  From searching the interweb, it seems these are likely what you want: *//*include:_spf.perfora.net include:_spf.kundenserver.de include:spf.mailjet.com If you

Re: [mailop] [External] Anyone from Spamhaus?

2023-01-23 Thread Kevin A. McGrail via mailop
Quick note from SH: "Sorry for the delay, we have too many people out sick right now! This was caused by a rule that we determined was not working as desired. It's been pulled. Please accept our apologies for the aggravation." Regards, KAM On 1/19/2023 11:20 PM, Mark Fletcher via mailop wro

Re: [mailop] [External] Re: verizon email-to-text gateway mail deferred evening and night

2023-01-07 Thread Kevin A. McGrail via mailop
On 1/6/2023 9:34 PM, John Levine via mailop wrote: WHen you use someone else's free e-mail gateway, it shouldn't be surprising that sometimes you only get what you paid for. I would just point out that the gateway I use is part of my cell service so I don't consider it free but part of the servi

Re: [mailop] [External] I received a scam letter from Paypal

2022-12-28 Thread Kevin A. McGrail via mailop
We've seen quite a few of these.  They are abusing paypal's system, sending invoices, etc.  Agreed, it's a very good scam and leverages PayPal's real comms. -KAM On 12/28/2022 1:14 PM, Cyril - ImprovMX via mailop wrote: What I'm saying here, is what the hell? How a scam can come from Paypal li

Re: [mailop] [External] Re: RackSpace Security Issue

2022-12-05 Thread Kevin A. McGrail via mailop
Here, here! On 12/5/2022 5:11 PM, William Kern via mailop wrote: best wishes to the poor sysadmins at Rackspace who are not having a good weekend/week. ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Re: Try to understand *.onmicrosoft.com

2022-11-09 Thread Kevin A. McGrail via mailop
Just a note that it is not necessarily a free trial.  It's the onboarding domain for M365. I would NOT agree that it reflects legitimate traffic and have rules in the KAM ruleset for the onmicrosoft domains.  They are being abused. Regards, KAM On 11/8/2022 7:01 PM, Suresh Ramasubramanian v

Re: [mailop] [External] Google Workspace support? Off-list...

2022-08-17 Thread Kevin A. McGrail via mailop
This is a common question over at the Google Workspace community: https://www.googlecloudcommunity.com/ Two recommendations: See https://support.google.com/a/answer/33561?hl=en&fl=1 And if it's enabled, and you are on the domain you might figure out the account from the directory: https://con

Re: [mailop] [External] Google Workspace Account Deliverability Issues

2022-07-25 Thread Kevin A. McGrail via mailop
On 7/25/2022 1:46 PM, Jenny Nespola via mailop wrote: I was approached today by a potential client asking why one account in their Workspace is bulking, while none of the others are. Granted that one user could be generating complaints, but (from what was shared with me) it doesn't seem to be t

Re: [mailop] [External] Re: Did Google become stricter about RFC 5322?

2022-07-13 Thread Kevin A. McGrail via mailop
On 7/13/2022 11:18 AM, Miles Fidelman via mailop wrote: It's been over a month now, since Google became hostile to email lists.  I'm still dealing with the aftermath. Do you mean their stricter requirements around SPF and DKIM? ___ mailop mailing list

Re: [mailop] [EXTERNAL] Re: Moving email server to new IP

2022-07-08 Thread Kevin A. McGrail via mailop
On 7/8/2022 11:23 AM, Russell Clemings via mailop wrote: We use spamhaus zen, spamcop, and barracuda , along with spamassassin, but some still gets through. Russell and others, re: Spam getting through.  We've been publishing the KAM ruleset now for Apache SpamAssassin for going on 18 years a

Re: [mailop] [External] Re: dmarcian Probe

2022-06-25 Thread Kevin A. McGrail via mailop
NOTE: I got one of these probes as well about 2  weeks and flagged it to watch. Thanks for posting about it. -KAM On 6/25/2022 11:54 AM, L. Mark Stone via mailop wrote: RAPTOR REMARK: Alert! Please be careful! This email is from an EXTERNAL sender. Be aware of impersonation and credential thef

Re: [mailop] [External] Re: FYI - Google/Gmail hard enforcing SPF presence

2022-04-23 Thread Kevin A. McGrail via mailop
Faisal, For the cases we had, they were not bounced but rather put in spam and marked as unverifiable.  This is one screenshot that was texted to me for a domain of mine so I can share it.  However, we had quite a flurry of them in that week where we pretty abruptly had to setup SPF/DKIM/DMAR

Re: [mailop] [External] Re: FYI - Google/Gmail hard enforcing SPF presence

2022-04-19 Thread Kevin A. McGrail via mailop
While you are likely right about RFCs, general mail administrator hygiene like having rptr's, etc. is something we've all had to work on since the days of AOL being the 1000lb gorilla and enforcing postmaster guidelines.  RFCs typically codify real-world practices not drive them. My argument i

Re: [mailop] [External] Re: FYI - Google/Gmail hard enforcing SPF presence

2022-04-19 Thread Kevin A. McGrail via mailop
I don't think this is accurate. It seemed to trigger right around the start of Russia's invasion of the Ukraine.  I don't think it's consistent or has the rhyme/reason you are trying to apply to it in your tests.  I would simply say if you have issues with delivery to Google, look at your SPF/D

Re: [mailop] [External] FYI - Google/Gmail hard enforcing SPF presence

2022-04-19 Thread Kevin A. McGrail via mailop
Interesting note that we also saw this a few weeks ago too and had to add DKIM to get mail to work to domains that only had SPF. On 4/19/2022 3:20 AM, Andre van Eyssen via mailop wrote: A little testing shows that gmail appears to be rejecting all mail from domains with no SPF record. Having th

Re: [mailop] [External] Re: IP Reputation Services

2022-04-04 Thread Kevin A. McGrail via mailop
On 4/4/2022 11:59 AM, micah via mailop wrote: More general information about the IADB is here: https://www.isipp.com/for-isps/ FWIW - spamassassin checks the ISIPP by default since 3.10 and reduces the score if your address is found there. And I can vouch for Anne Mitchell and the ISIPP.  -KAM

Re: [mailop] [External] Info on deluxe.com

2022-02-27 Thread Kevin A. McGrail via mailop
I just received my first ever spam from |info.deluxe.com|, sent to a tagged address used exclusively for online banking. Does anyone have a contact at deluxe so that inquiries can be sent? Lem: Any chance you use that account with an accounting software that has ToS that allow for the solici

Re: [mailop] [External] Re: Google DNS Quad 8 Outage tonight

2021-11-21 Thread Kevin A. McGrail via mailop
On 11/22/2021 12:25 AM, Luke Thompson via mailop wrote: We tend to run Cloudflare quad-1 rather than Google's quad-8, though have hit instabilities with it, too. This was odd because it was a server or two setup to use Google's servers by a lazy admin.  We have a full DNS infrastructure but th

Re: [mailop] [External] Re: Google DNS Quad 8 Outage tonight

2021-11-21 Thread Kevin A. McGrail via mailop
52 PM Kevin A. McGrail via mailop wrote: Anyone out there see any Quad 8 outages from about 20:25PM Eastern to 21:16PM Eastern? Regards, KAM ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

[mailop] Google DNS Quad 8 Outage tonight

2021-11-19 Thread Kevin A. McGrail via mailop
Anyone out there see any Quad 8 outages from about 20:25PM Eastern to 21:16PM Eastern? Regards, KAM ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Re: Fighting spam

2021-10-15 Thread Kevin A. McGrail via mailop
On 10/15/2021 4:57 AM, Brent Clark via mailop wrote: Are you using KAM rules. I.e. http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf Just a note that the much better way to use the rules is with the KAM Channel, see https://mcgrail.com/template/kam.cf_channel Regards, KAM __

Re: [mailop] [External] Help with listing on Invaluement

2021-10-07 Thread Kevin A. McGrail via mailop
On 10/7/2021 11:54 AM, Lyle Lamb via mailop wrote: Hello there, Is there a rep on the list with Invaluement that can reach out to me off list about some domain listings we are seeing? Lyle, I gave Rob a heads-up on your email. Regards, KAM ___ mai

Re: [mailop] Feasibility of a private DNSBL

2021-10-06 Thread Kevin A. McGrail via mailop
Good idea.  RBLs are brilliant but when Vixie invented the idea and the Apache SpamAssassin team implemented it some 2 decades ago, I wrote something to the effect of what a (brilliant) hack. We need to replace this with something in a year. Now, many many years later and several DDOSes agains

[mailop] [OT] Dell EMC PowerSwitch N3248TE-ON anyone out there using them?

2021-10-05 Thread Kevin A. McGrail via mailop
Hi Mailop, We're evaluating the Dell EMC PowerSwitch N3248TE-ON for a 10G network and having some issues with how you get updates, etc. for the device.  We bought one as an open-box and wondering if anyone out here on MailOp has experience with them. Regards, KAM __

Re: [mailop] [External] Re: Anyone here from SiteGround or .mailspamprotection.com?

2021-09-21 Thread Kevin A. McGrail via mailop
Just to be clear because I'm selfish and trying to fix the issue I'm having, is SiteGround using SMTP EXPN / VRFY commands when they try to deliver mail but failing if they don't work?  I do use the privacy option of goaway for Sendmail. Regards, KAM _

[mailop] Anyone here from SiteGround or .mailspamprotection.com?

2021-09-19 Thread Kevin A. McGrail via mailop
Hello, working on a delivery error that to me looks like there might be DNS issues.  Very unusual. Regards, KAM ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] Xfinity / Comcast / rsys5.com

2021-09-15 Thread Kevin A. McGrail via mailop
On 9/15/2021 2:55 AM, Daniele Nicolodi via mailop wrote: I understand that industry back practice recommends to have "unsubscribe" links in promotional bulk messages. Shouldn't these links direct to some form that effectively allows to remove the recipient address from the distribution list? Xfi

Re: [mailop] [External] Re: Recommendation for inbox provider?

2021-09-08 Thread Kevin A. McGrail via mailop
Agreed.  I thought Yen's statements about it were excellent: https://protonmail.com/blog/climate-activist-arrest/ On 9/8/2021 5:07 AM, Mary via mailop wrote: I think protonmail's business model is about being secure and private within the bounds of Swiss law. The case you mention, is about In

Re: [mailop] Off-topic re: hosting recommendation (contains a response pitching my firm) was Re: Recommendation for inbox provider?

2021-09-07 Thread Kevin A. McGrail via mailop
(Resending without the attachment per the Ops request but just email me if you are interested :-) ) I would love to throw my firm's hat in the rink.  For those who know PCCC, we are experts in open source work, cyber security, anti-spam and anti-phishing and have done so since 1998 including f

Re: [mailop] [External] Re: Microsoft Complaint Rate Increase

2021-09-02 Thread Kevin A. McGrail via mailop
Interesting. We're seeing oddities with M365 with customers with connectors for our IPs getting S77719.  I'm still gathering information about to open a ticket but this is just started today. Regards, KAM On 9/2/2021 5:42 PM, yitzi--- via mailop wrote: We've been seeing much higher levels

Re: [mailop] [External] Hotmail spam (again)

2021-08-16 Thread Kevin A. McGrail via mailop
Good morning, Yes sorry. That's my point. You cannot filter MS junk by its headers (as far as I know) No, but there are techniques in SpamAssassin for things such as transaction reputation and whether it's coming from a freemail provider.  This is not a new phenomenon in the anti-spam world tha

Re: [mailop] [External] Hotmail spam (again)

2021-08-15 Thread Kevin A. McGrail via mailop
On 8/15/2021 8:05 AM, Markus E. via mailop wrote: How do you guys combat Hotmail spam? Markus, I did not see anything in the snippet that you posted that was of help to block the emails.  Perhaps you were just showing the IPs but I think you will find that hotmail/live/msn/outlook use all the

[mailop] U.S. DoJ will elevate rasonware attacks to the same priority as terrorism

2021-06-04 Thread Kevin A. McGrail via mailop
I thought this news was very welcome today: https://twitter.com/RichardEscobedo/status/1400529641065140225 “The U.S. Department of Justice is elevating investigations of ransomware attacks to a similar priority as terrorism in the wake of the Colonial Pipeline hack and mounting damage caused b

Re: [mailop] [External] Huh?

2021-04-30 Thread Kevin A. McGrail via mailop
On 4/30/2021 10:50 AM, Chris Kolbenschlag via mailop wrote: I got an email from a small receiver that they are blocking one of our /24s because of spam.  I looked up the email address they referenced and found the contact signed up on their website 2 years ago, has a 41% open rate, a 17% click

Re: [mailop] [External] Office 365 issues

2021-04-22 Thread Kevin A. McGrail via mailop
Thanks Frank.  We had just opened a ticket about this internally and thought it was something on our end.  Appreciate your heads-up and the mailop list! Regards, KAM On 4/22/2021 11:02 AM, Frank Bulk via mailop wrote: I presume most of you are aware of issues sending to domains hosted with

Re: [mailop] [External] What's w/ .bl.score.senderscore.com?

2021-04-21 Thread Kevin A. McGrail via mailop
Andreas, Senderscore is part of Validity which is now the product Everest.  They worked with us to update some rules on the SpamAssassin project.  I'll bcc some contacts there to see if they can relay/post some information about this! Regards, KAM On 4/21/2021 10:30 AM, Andreas Schamanek v

Re: [mailop] [External] Reg. Virginmedia SMC Policy Violation bounce error

2021-03-17 Thread Kevin A. McGrail via mailop
On 3/17/2021 9:33 PM, Vaibhav via mailop wrote: Hi, We're an ESP sending emails on behalf of clients who are receiving the following bounce error from virgin media domains (blueyonder.co.uk , ntlworld.com , virginmedia.com

[mailop] MailOp Postmaster - reason: 554 5.7.1 [C9] Missing reverse DNS for ...)

2021-03-02 Thread Kevin A. McGrail via mailop
Trying to reach a Qwest/CenturyLink/CenturyNet posthandler. We have been seeing sporadic and inaccurate errors about missing reverse DNS for about a week with them.  I believe they have a problem somewhere on one of their networks/DNS servers. Seeing errors like  (reason: 554 5.7.1 [C9] Missi

Re: [mailop] [External] SURBL.org mirror broken

2021-02-23 Thread Kevin A. McGrail via mailop
Fixed. Lyle Thanks for raising the issue! ___ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop

Re: [mailop] [External] SURBL.org mirror broken

2021-02-23 Thread Kevin A. McGrail via mailop
On 2/22/2021 6:41 PM, Lyle Giese via mailop wrote: 38.124.232.194 is answering correctly. .193 is still malfunctioning and b.surbl.org is showing 34.124.232.193 as one of the A record. Thanks.  I bcc'd the email yesterday and will follow-up. ___ mai

Re: [mailop] [External] SURBL.org mirror broken

2021-02-22 Thread Kevin A. McGrail via mailop
Lyle, that's the mirror my firm runs and we "fixed" a networking issue which likely broke this. Can you query from 38.124.232.194?  I'll ask them to update b.surbl.org to include 38.124.232.194 instead of .193. Thanks for raising the red flag on this. Regards, KAM On 2/22/2021 4:48 PM, Lyle

Re: [mailop] [External] Re: Good Hosting Suggestions?

2021-02-19 Thread Kevin A. McGrail via mailop
On 2/19/2021 10:43 PM, John Levine via mailop wrote: Once again, people sending you an abuse report are doing you a favor. In my experience, If you can't figure out how to deal with attachments, I doubt you can manage your network. I have lost track of which provider we are discussing BUT I wan

Re: [mailop] [External] Re: Any Postmaster from ATT.NET?

2021-02-03 Thread Kevin A. McGrail via mailop
On 2/3/2021 10:06 AM, Rob McEwen via mailop wrote: On 2/3/2021 8:57 AM, Kevin A. McGrail via mailop wrote: Hello all, if anyone from AT&T is here, the @mms.att.net gateway to email is using an SPF record with ?ALL [ip4:166.216.152.0/24 ?all] and blocked by invaluement RBL. Kevin, It w

[mailop] Any Postmaster from ATT.NET?

2021-02-03 Thread Kevin A. McGrail via mailop
Hello all, if anyone from AT&T is here, the @mms.att.net gateway to email is using an SPF record with ?ALL [ip4:166.216.152.0/24  ?all] and blocked by invaluement RBL. Regards, KAM ___ mailop mailing list mailop@mailop.org https://list.mailop.org/lis

Re: [mailop] [External] Sendgrid again...

2021-01-22 Thread Kevin A. McGrail via mailop
On 1/22/2021 9:08 AM, Hans-Martin Mosner via mailop wrote: Well I'm not complaining about the spam from them - it's a steady flow, nothing new. But it looks like they have filters on their abuse box now to reduce the amount of abuse reports: Of course, that would be my next step in their shoe

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

2021-01-07 Thread Kevin A. McGrail via mailop
On 1/6/2021 10:19 AM, randy via mailop wrote: A little late to the thread here, but I found it because I had the same question. I emailed lashback (bugs at lashback.com ), and this was their reply: "Greetings, the blacklist has been retired for the time being. These plan

Re: [mailop] [External] Anyone from BlueHost on this list?

2020-12-22 Thread Kevin A. McGrail via mailop
On 12/22/2020 2:54 AM, Sidsel Jensen via mailop wrote: Is this still a valid limit? I’d like to hear your thoughts about it. IMO know. It hasn't been valid for years in the real-world.  See https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7182 for more background when the Apache SpamAssassin

Re: [mailop] [External] Anyone from BlueHost on this list?

2020-12-21 Thread Kevin A. McGrail via mailop
On 12/21/2020 1:56 PM, Eric Tykwinski via mailop wrote: Just a heads up: v=spf1 include:spf2.bluehost.com include:_spf.qualtrics.com include:_spf.google.com include:_spf.salesforce.com include:sparkpostmail.com include:spf.mailjet.com -all evaluating... Results - PermError SPF Permanent Err

[mailop] [Off-Topic] Happy Thanksgiving and Announcing the Apache SpamAssassin Channel for the KAM Rule Ser

2020-11-26 Thread Kevin A. McGrail via mailop
Morning all, I wanted to share the news from https://mcgrail.com/newsmanager/news_article.cgi?template=news.template&news_id=11 with you all.  We'll also have a mailing list up soon too. Thanks to the sponsors and to Georgia Smith and Karsten Bräckelmann who worked hard on setting up the infras

Re: [mailop] [External] Fake fax spam from sendgrid

2020-10-20 Thread Kevin A. McGrail via mailop
On 10/19/2020 8:29 PM, John Levine via mailop wrote: > I'm getting a steady stream of spam from Sendgrid purporting to be > Efax messages, with what appears to be an XLS spreadsheet attached. > The return addresses are all over the place but they all come through > Sendgrid, e.g., John, Sendgrid h

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

2020-10-13 Thread Kevin A. McGrail via mailop
They know about the issue and are working on a new server infrastructure.  I've bcc'd them to see if there are new updates to share. Regards, KAM On 10/13/2020 12:21 PM, Mark G Thomas via mailop wrote: > Hi, > > On Thu, Sep 24, 2020 at 02:21:00PM -0400, Kevin A. McGra

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

2020-10-13 Thread Kevin A. McGrail via mailop
They know about the issue and are working on a new server infrastructure.  I've bcc'd them to see if there are new updates to share. Regards, KAM On 10/13/2020 12:21 PM, Mark G Thomas via mailop wrote: > Hi, > > On Thu, Sep 24, 2020 at 02:21:00PM -0400, Kevin A. McGra

Re: [mailop] [External] sendgrid.net

2020-09-25 Thread Kevin A. McGrail via mailop
On 9/25/2020 9:36 AM, Michael via mailop wrote: > What's the consensus on sendgrid.net? I don't know anything about > them, but I had the impression that they were a reputable company. > Lately, I've noticed a lot of phishing emails coming from them. Does > anyone just block them completely? > I've

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

2020-09-24 Thread Kevin A. McGrail via mailop
Just an update from lashback: We're in the midst of a total migration to the cloud. Things should be back to normal soon. Regards, KAM ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] [External] Lashback UBL (unsubscore.com) not working?

2020-09-24 Thread Kevin A. McGrail via mailop
On 9/24/2020 12:22 PM, Robert L Mathews via mailop wrote: > We use the Lashback UBL described at as > a (small part of) scoring incoming mail. The actual list domain name is > "unsubscore.com". > > About 10 days ago I noticed that the timestamps on their rsyncable

Re: [mailop] [External] Re: How to do Outbound Relay from M365 previously O365

2020-09-18 Thread Kevin A. McGrail via mailop
On 9/18/2020 11:51 AM, Andrew C Aitchison via mailop wrote: > As I say, I am not sure that any of this will directly help with your > issue. As you say, not directly because I'm worried about outbound not inbound.  However, this article [1] seems to back up the fact that they turned off the capab

Re: [mailop] [External] Re: How to do Outbound Relay from M365 previously O365

2020-09-18 Thread Kevin A. McGrail via mailop
On 9/18/2020 10:18 AM, Ken O'Driscoll via mailop wrote: > You need to set up mail flow connectors in Exchange Online. > Authentication is certificate and/or IP based. > > I think this explains it fairly well:  > https://docs.microsoft.com/en-us/exchange/mail-flow-best-practices/use-connectors-to-co

[mailop] How to do Outbound Relay from M365 previously O365

2020-09-18 Thread Kevin A. McGrail via mailop
Hello Mailoppers, I might have asked this before but I've been going round and round with Microsoft tech support on SMTP basics.  Microsoft has, no joke, been working on answer this questions since June 30th.  It's been a very bad shotgun approach of sending random knowledge bases, doing screensha

Re: [mailop] [External] antispamcloud.com (SpamExperts) forensics reports format

2020-09-09 Thread Kevin A. McGrail via mailop
On 9/9/2020 1:12 PM, Sébastien Riccio via mailop wrote: > We are parsing dmarc reports using parsedmarc and the forensics > reports coming from antispamcloud.com seems not to follow the > recommended reporting format (AFRF) and therefore are considered invalid. > > Maybe is there anyone from SpamEx

Re: [mailop] [EXTERNAL] Seeing a 255.255.255.255 ip in received header from Microsoft

2020-09-02 Thread Kevin A. McGrail via mailop
Hi Michael, On 9/2/2020 10:05 PM, Michael Wise via mailop wrote: > That means it was local. Pay it no mind, unless you like blocking all traffic > that was entered via the UX. Well, I noticed today that the stock SpamAssassin rules will mark it as a illegal IP in the Received header.  Can I

[mailop] Seeing a 255.255.255.255 ip in received header from Microsoft

2020-09-02 Thread Kevin A. McGrail via mailop
Howdy Mailopers, Anyone seen a received header like this before with the from on quad 255's from an email from hotmail? Received: from 255.255.255.255 (255.255.255.255) by MN2PR10CA0026.namprd10.prod.outlook.com (2603:10b6:208:120::39) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE

Re: [mailop] [External] Re: This is..Concerning: DatabaseUSA Wins Case Against The Spamhaus Project

2020-08-04 Thread Kevin A. McGrail via mailop
On 8/4/2020 12:24 PM, Rob Nagler via mailop wrote: > It is actually more sinister than anybody realizes. I did some > research into Charles "Charlie" Benn.  > > He is working on new technology  to > get spam into the UK and the EU. He works undercover for a real esta

Re: [mailop] [External] Gmail IMAP xyzzy ?

2020-08-02 Thread Kevin A. McGrail via mailop
On 8/2/2020 6:43 PM, John Levine via mailop wrote: > When I connect to Gmail's IMAP server, one of the capbilities it advertises > is "xyzzy". Anyone know what that is? > > I know the etymology (same place as plugh) but what's it supposed to do? > > Signed, > Wondering John/Wondering, Just an e

[mailop] Microsoft giving Server Busy errors for M365

2020-07-24 Thread Kevin A. McGrail via mailop
Microsoft's anti-spam seems to be misfiring again but for once it is on the m365 paid customer.  Seeing deferred messages like dsn=4.0.0, stat=Deferred: 451 4.7.500 Server busy. Please try again later from [38.124.232.13]. (S77714) [CO1NAM04FT003.eop-NAM04.prod.protection.outlook.com] Anyone know

[mailop] Outbound from M365 to relay off our SMTP with SMTPAUTH

2020-07-18 Thread Kevin A. McGrail via mailop
Hi All, I've got a long outstanding Anyone out there know what I'm missing in trying to have M365 relay all outgoing mail through our on-premise SMTP servers? I've opened support tickets but they went to evolveip.net with no response. Here's what I used to do:   - Admin | Exchange -> Mail Flow

Re: [mailop] [External] Re: Microsoft Block list (S3150)

2020-06-29 Thread Kevin A. McGrail via mailop
The SNDS/JMRP program used to.  Anecdotally, the feedback loop disappeared with the advent of GDRP and/or CCPA early this year. Regards, KAM On 6/29/2020 7:16 AM, Laura Atkins via mailop wrote: > On the advice of their lawyers Microsoft doesn’t share that > information with senders.  > > laura  >

Re: [mailop] [EXTERNAL] Re: Attention Michael Wise - need your assistance

2020-06-18 Thread Kevin A. McGrail via mailop
On 6/18/2020 7:11 AM, Stefano Bagnara via mailop wrote: > On Thu, 18 Jun 2020 at 13:00, Abuse via mailop wrote: >> It is clear, but what must we do when the front door is closed too? >> I used the Support Funnel but didn't get any responses, not even the first >> response from the robot giving m

Re: [mailop] [External] dcc down / dead?

2020-05-23 Thread Kevin A. McGrail via mailop
Vernon has emailed me that everything is renewed.  Can you confirm it looks good now? ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] [External] dcc down / dead?

2020-05-23 Thread Kevin A. McGrail via mailop
> The DNS zone dcc-servers.net expired: > > Registrar Registration Expiration Date: 2020-05-22T17:54:35Z Thanks.  I've email Vernon to let him know! Regards, KAM ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/lis

Re: [mailop] [External] dcc down / dead?

2020-05-23 Thread Kevin A. McGrail via mailop
On 5/23/2020 7:23 AM, Stefan Bauer via mailop wrote: > > Hi, > > > seems like the main DCC servers are down (dcc1-6.dcc-servers.net), > also the website. > > Archive last mails are from end 19. > > > Anybody knows more? Did i miss some announcement? > Stefan, hi, I run a DCC mirror and not aware o

Re: [mailop] [External] SNDS Down?

2020-05-07 Thread Kevin A. McGrail via mailop
On 5/7/2020 8:56 AM, Mike Hammett via mailop wrote: > Is SNDS down? I'm unable to login.  > I just logged into it and it worked.  ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Re: [mailop] [External] Re: SendGrid Abuse unresponsive

2020-05-05 Thread Kevin A. McGrail via mailop
On 5/5/2020 5:50 PM, Carl Byington via mailop wrote: > On Tue, 2020-05-05 at 07:48 -0700, Michael Peddemors via mailop wrote: > > This is a little too obvious, and while historically SendGrid ran a > > tight ship, and got a little lee way from spam auditors.. it's getting > > very bad, and going o

[mailop] Mail.com Contact?

2020-04-30 Thread Kevin A. McGrail via mailop
Hi All, Seeing a blacklist on one of our SMTP IPs with mail.com (which powers email.com and gmx.de from our issues). Can't find our IP on a blacklist and no response from the postmaster contact sent to https://postmaster.mail.com/en/contact Anyone here on list have a good contact or can figure o

Re: [mailop] [External] Re: Google DMARC reports

2020-04-24 Thread Kevin A. McGrail via mailop
Just an update that we got a flurry of Google DMARC reports a few hours ago. On 4/23/2020 12:59 PM, Brandon Long wrote: > Thanks for the note, we're looking into it. > > Brandon > > On Thu, Apr 23, 2020 at 8:19 AM Kevin A. McGrail via mailop > mailto:mailop@mailop.org>&g

Re: [mailop] [External] Re: Google DMARC reports

2020-04-23 Thread Kevin A. McGrail via mailop
+1 here.  I sent an oob note to a Googler who might help. Regards, KAM On 4/23/2020 10:55 AM, Ewald Kessler | Webpower via mailop wrote: > Seeing it too. Received the last one on Tuesday 11:41 AM (CET). Don't > see anything reported after April 21 in GPT either. > > Regards, > Ewald > > On Thu,

Re: [mailop] [External] Re: Barracuda ESS is mass-accessing websites on my server, why?

2020-04-01 Thread Kevin A. McGrail via mailop
020 5:22 PM, Jay Hennigan via mailop wrote: >> On 4/1/20 13:16, Kevin A. McGrail via mailop wrote: >>> Anyone from Barracuda on the list or have a contact? >>> >>> I have a screenshot and logs showing a lot of concurrent accesses >>> from 209.222.82.X which

Re: [mailop] [External] Re: Barracuda ESS is mass-accessing websites on my server, why?

2020-04-01 Thread Kevin A. McGrail via mailop
On 4/1/2020 5:22 PM, Jay Hennigan via mailop wrote: > On 4/1/20 13:16, Kevin A. McGrail via mailop wrote: >> Anyone from Barracuda on the list or have a contact? >> >> I have a screenshot and logs showing a lot of concurrent accesses >> from 209.222.82.X which appears

[mailop] Barracuda ESS is mass-accessing websites on my server, why?

2020-04-01 Thread Kevin A. McGrail via mailop
Anyone from Barracuda on the list or have a contact? I have a screenshot and logs showing a lot of concurrent accesses from 209.222.82.X which appears to be IPs for ess barracuda.  I'd normally call it a DOS attack.  Looks like robots gone bad but they aren't using a proper robot tag or honoring t

Re: [mailop] what is spam was Re: [External] Re: Horrible week for email deliverability - Looking for help with RackSpace/Emailsrvr

2020-03-27 Thread Kevin A. McGrail via mailop
On 3/27/2020 5:21 PM, Grant Taylor via mailop wrote: > I believe that what the consent covers needs to be refined. > > Consent to receive transactional email is not implicit consent to > receive non-transactional emails. For non transaction emails like adverts afterwards, I typically look in detai

  1   2   >