On Mon, 6 Jul 2015, Alex wrote:
Hi,
We have a system with a few hundred users, many of which forward their
mail off the server to their gmail or yahoo account. Lately I've
started to notice quite a few messages are being tagged by gmail and
delayed being received as unsolicited. I know the KAM rules contain a
marketing rule, and razor helps too, but too many of these marketing
messages are not being tagged.
I'm referring to warnings such as this:
Jul 6 22:54:20 bwipropemail postfix/smtp[25057]: C09F4885EA2BC:
to=<44...@gmail.com>, orig_to=<44...@example.com>,
relay=alt1.gmail-smtp-in.l.google.com[173.194.208.26]:25, delay=38223,
delays=38220/1.3/1/0.22, dsn=4.7.0, status=deferred (host
alt1.gmail-smtp-in.l.google.com[173.194.208.26] said: 421-4.7.0
[66.XXX.XXX.100 15] Our system has detected an unusual rate of
421-4.7.0 unsolicited mail originating from your IP address. To
protect our 421-4.7.0 users from spam, mail sent from your IP address
has been temporarily 421-4.7.0 rate limited. Please visit 421-4.7.0
https://support.google.com/mail/answer/81126 to review our Bulk Email
421 4.7.0 Senders Guidelines. 5si23309629qks.82 - gsmtp (in reply to
end of DATA command))
Yes, gmail does that to almost anything they decide is relayed spam.
Here is an example message:
http://pastebin.com/kaD3AQMz
It came from ymlpsv.net, black list them (and their other names such as
ymlpsv.com, ymlpsrv.net, ymlpserver.net, ymlpsrv.com) unless one of your
clients -really- wants crap from them, then selective whitelist.
They are a spammy MSP. I regularly find garbage from them in my spamtraps.
I realize bayes may be a problem on this one, but do you have any
suggestions for blocking these more effectively before they're
forwarded on to gmail?
As others have alluded to, forwarding opens up a while can-of-worms
but forwarding to gmail is the most problematic.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
