On 2016-05-17 12:03, Markus Meier wrote:
> Hello everybody
> 
> 
> We moved our equipment to a new location and a new IP range. In the
> first few days a lot of outgoing email where blocked from various
> reputation filters. In the meantime we could fix most of the issues.
> Phuh... ;-)
> 
> Since today morning, the bluewin MX blocks our messages again. I already
> requested for a statistic reset at "Cloudmark".
> 
> What's wrong with our "reputation"?

That you do not send enough mail.

Cloudmark apparently works under the premise that when an IP rarely
sends mails and then suddenly sends more mail than the average it was
doing it thus must suddenly be spamming.

Hence, actual mass-volume spammers are great in their eyes, everybody
else they just block.

Little you can do about, except slowly ramp up sending mail through
their filters so that it looks like your normal volume is high...

Indeed, they do not actually care about content.

Note that there are 'feedback' mechanisms in their system and apparently
some domains are able to feedback into their scoring, and if you then
get negative feedback as some person just hits 'it is spam' even though
it was really not a spam message, you end up in the bad score too;
again, that is not a problem if you send massive amounts of mail, it is
a problem (one person hitting the spam button) when you actually send
few mails out...

Otherwise said: your IP is too new, does not have reputation yet, thus
you need to spam more and have nobody hit the 'spam' button in the
meantime; over time reputation builds up and then you can send 1M actual
spams, as long as you send 100M non-spam ones...

Oh, and of course there is a 'paid' option to get your reputation
corrected.... go figure what a nice business model that is.

> Hostname saturn.uptm.ch (mail.uptm.ch)
> IPv4 185.104.16.21
> IPv6 2a00:f740:100::15:1
> PTR should be correct
> SPF set for all customers domains

Is SPF set correctly? :)

Also, do try to get DKIM deployed. reverse->forward->reverse + SPF+DKIM
together are more or less required to send email to Google... especially
for IPv6 where they have apparently different and even more strict rules
than IPv4 (and nope, nobody, even employees apparently are able to tell
what those rules are or resolve issues when hosts of theirs are marked
as 'spam' according to big "do no evil" Google, see also something with
monopoly investigation by the EU...)

> Thank you for any hint.
> 
> It would also be nice, if someone from bluewin could contact me offlist
> and provide some more information, what made our IP evil again.

Like many other ISPs that simply use cloudmark (which thus reads every
email at those ISPs, wow, the insight that must give into the personal
lives of people not even living in your own country: privacy is
completely destroyed), they won't be able to tell, as the ISP is just a
customer of Cloudmark and has no insight into what Cloudmark does
consider or does not consider 'spam'.

Greets,
 Jeroen



_______________________________________________
swinog mailing list
[email protected]
http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog

Antwort per Email an