Forum notification emails marked as spam by Google

Status
Not open for further replies.

Slovak

Explorer
Joined
Sep 10, 2013
Messages
62
Email post notifications are being marked as spam by Google, specifically because the message "has a from address in freenas.org but has failed freenas.org's required tests for authentication"

Looking at email headers it appears DKIM is misconfigured.
Code:
Authentication-Results: mx.google.com; dkim=temperror (no key for signature) header.i=@freenas.org; spf=pass (google.com: domain of srs0+tkfd=yw=freenas.org=webmaster@ixsystems.com designates 64.71.187.9 as permitted sender) smtp.mailfrom=SRS0+TKFd=YW=freenas.org=webmaster@ixsystems.com; dmarc=fail (p=QUARANTINE dis=QUARANTINE) header.from=freenas.org
 

Spearfoot

He of the long foot
Moderator
Joined
May 13, 2015
Messages
2,478
Email post notifications are being marked as spam by Google, specifically because the message "has a from address in freenas.org but has failed freenas.org's required tests for authentication"

Looking at email headers it appears DKIM is misconfigured.
Code:
Authentication-Results: mx.google.com; dkim=temperror (no key for signature) header.i=@freenas.org; spf=pass (google.com: domain of srs0+tkfd=yw=freenas.org=webmaster@ixsystems.com designates 64.71.187.9 as permitted sender) smtp.mailfrom=SRS0+TKFd=YW=freenas.org=webmaster@ixsystems.com; dmarc=fail (p=QUARANTINE dis=QUARANTINE) header.from=freenas.org
Hmmm... the mail doesn't pass the DMARC policy test either. I'll notify our folks.
 

Slovak

Explorer
Joined
Sep 10, 2013
Messages
62
Yesterday's email newsletter "Issue #41" passes DKIM and SPF, but fails DMARC. Ended up in spam too (Google Apps).

Code:
Authentication-Results: mx.google.com; dkim=pass header.i=@infusionmail.com; spf=pass (google.com: domain of mailer@infusionmail.com designates 208.76.24.51 as permitted sender) smtp.mailfrom=mailer@infusionmail.com; dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=ixsystems.com
 
G

Gary Graham

Guest
@Slovak thanks for the heads up! I've made the appropriate changes to fix this on the notifications side, for the newsletter we're changing re-mailing services real soon so I'll be sure that we've got our sender validation stuff set up properly.
 

Slovak

Explorer
Joined
Sep 10, 2013
Messages
62
Found another message marked as spam, fails DMARC

Code:
Delivered-To: valid@email.com
Received: by 10.12.173.122 with SMTP id v55csp2235273qvc;
        Tue, 7 Feb 2017 11:32:16 -0800 (PST)
X-Received: by 10.84.132.1 with SMTP id 1mr28229570ple.44.1486495936202;
        Tue, 07 Feb 2017 11:32:16 -0800 (PST)
Return-Path: <mailer@infusionmail.com>
Received: from mta-c-24-50.infusionmail.com (mta-c-24-50.infusionmail.com. [208.76.24.50])
        by mx.google.com with ESMTPS id z21si4956527pge.85.2017.02.07.11.32.15
        for <valid@email.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Tue, 07 Feb 2017 11:32:16 -0800 (PST)
Received-SPF: pass (google.com: domain of mailer@infusionmail.com designates 208.76.24.50 as permitted sender) client-ip=208.76.24.50;
Authentication-Results: mx.google.com;
       dkim=fail (test mode) header.i=@ixsystems.com;
       dkim=pass header.i=@infusionmail.com;
       spf=pass (google.com: domain of mailer@infusionmail.com designates 208.76.24.50 as permitted sender) smtp.mailfrom=mailer@infusionmail.com;
       dmarc=fail (p=QUARANTINE sp=QUARANTINE dis=QUARANTINE) header.from=ixsystems.com
Return-Path: <mailer@infusionmail.com>
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=ixsystems.com; s=8b317a15-7f46-4fa1-bda1-d6198ef9a5b7; t=1486495935; i=@ixsystems.com; bh=crWRb9huWTFSyNICOjATTBMY3M4=; h=Date:From:Sender:To:Subject:MIME-Version:Content-Type; b=nN6eX7z3MwI99BOOLgajdPMw70szCJNv05GqE6NcYlcILrV+lELWaVULzDKgfL42p
     m8BCADBi8JqeJlYZM+1iUMS3K7JmklOFQf78GoqiSXCuQ55rVMnXDESQPyBi/v/k/x
     tCPpr2GehHZKM0qvpWwPly2XycFKZtchd0qnn+qw=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=infusionmail.com; s=dkim1024; t=1486495935; bh=crWRb9huWTFSyNICOjATTBMY3M4=; h=Date:From:Sender:To:Subject:MIME-Version:Content-Type; b=mAgxHgQMoere91TMJ3HBkX0rvYYLTnPG3fNYE/884tcph4TXp3EQBQH3yWyaj7/Qv
     M94jGLpdSu6mPnKJQu8RVESvbg0srOdajrmIuarWgKGG7oUSe8z7L7OXhFDsRyooud
     4Cemtt5SKc8uemnA96t0SbS0R3ewpMMTksbnKeHg=
Received: from [10.0.2.51] ([10.0.2.51:56902] helo=phxcw5) by phxme4 (envelope-from <mailer@infusionmail.com>) (ecelerity 3.6.12.50134 r(Core:3.6.12.0)) with ESMTP id F1/79-63670-FB02A985; Tue, 07 Feb 2017 14:32:15 -0500
Date: Tue, 7 Feb 2017 14:32:14 -0500 (EST)
From: Matt Finney <websales@ixsystems.com>
Sender: mailer@infusionmail.com
To: valid@email.com
Message-ID: <499033889.8229651486495934480.JavaMail.tomcat@phxcw5>
Subject: Whoa, 10TB of all-flash for only $10K, are you Flashy?
Errors-To: mailer@infusionmail.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_822735_1360589557.1486495934479"
X-MailSentId: 1059973
X-campaignid: infusion_zp2251059973
Feedback-ID: zp225:zp225_1059973:value
X-BatchId: 12411
X-InfApp: zp225
X-InfContact: 36619
X-InfSent: 8358549
X-inf-package: value
X-inf-uflags: SO
X-inf-iflags: SO
List-Unsubscribe: <https://zp225.infusionsoft.com/app/optOut/noConfirm/8358549/af94b50e788cbb74>
X-inf-dkimSelector: 8b317a15-7f46-4fa1-bda1-d6198ef9a5b7
Pool-Version: 2
Pool-Name: default_value
Pool-Debug: zp225 value

... snip ...
 
G

Gary Graham

Guest
Arrrgh Infusionsoft! I thought that was retired, we switched to something else that I vetted SFP/DKIM on already.
 

Spearfoot

He of the long foot
Moderator
Joined
May 13, 2015
Messages
2,478
Not only that... the URL is malformed in the notification email I just rec'd about this thread (forums.freenasorg instead of forums.freenas.org):
Code:
<a href="https://forums.freenasorg/index.php?threads/forum-notification-emails-marked-as-spam-by-google.49456/#post-347425" style="color: #176093; text-decoration: none">Forum notification emails marked as spam by Google</a>
 
G

Gary Graham

Guest
Arrrgh Infusionsoft! I thought that was retired, we switched to something else that I vetted SFP/DKIM on already.
Actually this is odd, because I did verify it for Infusionsoft too... just checked the UI to confirm. I've updated the policy for now until I get it fully sorted.

Thanks again for the heads up!
 

Spearfoot

He of the long foot
Moderator
Joined
May 13, 2015
Messages
2,478
Actually this is odd, because I did verify it for Infusionsoft too... just checked the UI to confirm. I've updated the policy for now until I get it fully sorted.

Thanks again for the heads up!
You're very welcome. It's little glitches like these that make life... interesting! :smile:
 

Slovak

Explorer
Joined
Sep 10, 2013
Messages
62
Let me know if you want me to stop these reports. Not trying to be obnoxious/picky, just reporting for everyone's benefit - and I don't want to miss emails/notifications about the project and forums.

Latest email delivered today has
SPF: Pass
DKIM: Neutral
DMARC: FAIL

Code:
Delivered-To: valid@email.com
Received: by 10.12.173.122 with SMTP id v55csp198125qvc;
        Thu, 9 Feb 2017 13:39:25 -0800 (PST)
X-Received: by 10.84.241.140 with SMTP id b12mr6743253pll.65.1486676364944;
        Thu, 09 Feb 2017 13:39:24 -0800 (PST)
Return-Path: <mailer@infusionmail.com>
Received: from mta-c-24-43.infusionmail.com (mta-c-24-43.infusionmail.com. [208.76.24.43])
        by mx.google.com with ESMTPS id k184si11181887pgd.257.2017.02.09.13.39.24
        for <valid@email.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Thu, 09 Feb 2017 13:39:24 -0800 (PST)
Received-SPF: pass (google.com: domain of mailer@infusionmail.com designates 208.76.24.43 as permitted sender) client-ip=208.76.24.43;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@infusionmail.com;
       dkim=neutral (bad version) header.i=@ixsystems.com;
       spf=pass (google.com: domain of mailer@infusionmail.com designates 208.76.24.43 as permitted sender) smtp.mailfrom=mailer@infusionmail.com;
       dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=ixsystems.com
Return-Path: <mailer@infusionmail.com>
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=infusionmail.com; s=dkim1024; t=1486676364; bh=6bqnNWEmqLrjSBlLsIuqbt08ZGY=; h=Date:From:Sender:To:Subject:MIME-Version:Content-Type; b=nNNFu0mq/0Y843aWb7fU4x9dnRLwlkeN1gi2Ng7jLmfqqpdzFCjVW/hsZotFOFQAx
    06yVbBfE6IRu4qB+Nw0l9bpEAEuMGCFWJJ/OqKuwPOW0uJ4iaFy5yMTcvya1aOUBHf
    aMkwq8lKMH0ziR5x54xHUMtYQOXjA2RJFd/OcPaE=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=ixsystems.com; s=8b317a15-7f46-4fa1-bda1-d6198ef9a5b7; t=1486676364; i=@ixsystems.com; bh=6bqnNWEmqLrjSBlLsIuqbt08ZGY=; h=Date:From:Sender:To:Subject:MIME-Version:Content-Type; b=w10L0YAg/kfC9gJzaV5bzealIqvuVMn3LRRhXqKE4NaaGVgcc9QZAhZQvk3AYTmIp
    gc0B2TyP482oYqxmaOPjrBWH5ioKeygg6bPrU25edjkeshhD1Kkp8hb6A9TsL7O/6X
    KL6zUfAnY9Ea0atDc7k14PBQg/Ys22fzPHSG6gHg=
Received: from [10.0.2.51] ([10.0.2.51:59940] helo=phxcw5) by phxme2 (envelope-from <mailer@infusionmail.com>) (ecelerity 3.6.12.50134 r(Core:3.6.12.0)) with ESMTP id 52/11-44939-C81EC985; Thu, 09 Feb 2017 16:39:24 -0500
Date: Thu, 9 Feb 2017 16:39:23 -0500 (EST)
From: The FreeNAS Team <freenas-news@ixsystems.com>
Sender: mailer@infusionmail.com
To: valid@email.com
Message-ID: <2134855442.12378051486676363066.JavaMail.tomcat@phxcw5>
Subject: $1/GB for Flash Storage? | Why We Still Love ZFS Webinar | User Builds and More... | Issue #42
Errors-To: mailer@infusionmail.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_1237433_1283812726.1486676363065"
X-MailSentId: 1065897
X-campaignid: infusion_zp2251065897
Feedback-ID: zp225:zp225_1065897:value
X-BatchId: 12445
X-InfApp: zp225
X-InfContact: 36619
X-InfSent: 8696629
X-inf-package: value
X-inf-uflags: SO
X-inf-iflags: SO
List-Unsubscribe: <https://zp225.infusionsoft.com/app/optOut/noConfirm/8696629/2dac1aca6531909b>
X-inf-dkimSelector: 8b317a15-7f46-4fa1-bda1-d6198ef9a5b7
Pool-Version: 2
Pool-Name: default_value
Pool-Debug: zp225 value

<snip>
 

Ericloewe

Server Wrangler
Moderator
Joined
Feb 15, 2014
Messages
20,194
Let me know if you want me to stop these reports. Not trying to be obnoxious/picky, just reporting for everyone's benefit - and I don't want to miss emails/notifications about the project and forums.

Latest email delivered today has
SPF: Pass
DKIM: Neutral
DMARC: FAIL

Code:
Delivered-To: valid@email.com
Received: by 10.12.173.122 with SMTP id v55csp198125qvc;
        Thu, 9 Feb 2017 13:39:25 -0800 (PST)
X-Received: by 10.84.241.140 with SMTP id b12mr6743253pll.65.1486676364944;
        Thu, 09 Feb 2017 13:39:24 -0800 (PST)
Return-Path: <mailer@infusionmail.com>
Received: from mta-c-24-43.infusionmail.com (mta-c-24-43.infusionmail.com. [208.76.24.43])
        by mx.google.com with ESMTPS id k184si11181887pgd.257.2017.02.09.13.39.24
        for <valid@email.com>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Thu, 09 Feb 2017 13:39:24 -0800 (PST)
Received-SPF: pass (google.com: domain of mailer@infusionmail.com designates 208.76.24.43 as permitted sender) client-ip=208.76.24.43;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@infusionmail.com;
       dkim=neutral (bad version) header.i=@ixsystems.com;
       spf=pass (google.com: domain of mailer@infusionmail.com designates 208.76.24.43 as permitted sender) smtp.mailfrom=mailer@infusionmail.com;
       dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=ixsystems.com
Return-Path: <mailer@infusionmail.com>
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=infusionmail.com; s=dkim1024; t=1486676364; bh=6bqnNWEmqLrjSBlLsIuqbt08ZGY=; h=Date:From:Sender:To:Subject:MIME-Version:Content-Type; b=nNNFu0mq/0Y843aWb7fU4x9dnRLwlkeN1gi2Ng7jLmfqqpdzFCjVW/hsZotFOFQAx
    06yVbBfE6IRu4qB+Nw0l9bpEAEuMGCFWJJ/OqKuwPOW0uJ4iaFy5yMTcvya1aOUBHf
    aMkwq8lKMH0ziR5x54xHUMtYQOXjA2RJFd/OcPaE=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=ixsystems.com; s=8b317a15-7f46-4fa1-bda1-d6198ef9a5b7; t=1486676364; i=@ixsystems.com; bh=6bqnNWEmqLrjSBlLsIuqbt08ZGY=; h=Date:From:Sender:To:Subject:MIME-Version:Content-Type; b=w10L0YAg/kfC9gJzaV5bzealIqvuVMn3LRRhXqKE4NaaGVgcc9QZAhZQvk3AYTmIp
    gc0B2TyP482oYqxmaOPjrBWH5ioKeygg6bPrU25edjkeshhD1Kkp8hb6A9TsL7O/6X
    KL6zUfAnY9Ea0atDc7k14PBQg/Ys22fzPHSG6gHg=
Received: from [10.0.2.51] ([10.0.2.51:59940] helo=phxcw5) by phxme2 (envelope-from <mailer@infusionmail.com>) (ecelerity 3.6.12.50134 r(Core:3.6.12.0)) with ESMTP id 52/11-44939-C81EC985; Thu, 09 Feb 2017 16:39:24 -0500
Date: Thu, 9 Feb 2017 16:39:23 -0500 (EST)
From: The FreeNAS Team <freenas-news@ixsystems.com>
Sender: mailer@infusionmail.com
To: valid@email.com
Message-ID: <2134855442.12378051486676363066.JavaMail.tomcat@phxcw5>
Subject: $1/GB for Flash Storage? | Why We Still Love ZFS Webinar | User Builds and More... | Issue #42
Errors-To: mailer@infusionmail.com
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----=_Part_1237433_1283812726.1486676363065"
X-MailSentId: 1065897
X-campaignid: infusion_zp2251065897
Feedback-ID: zp225:zp225_1065897:value
X-BatchId: 12445
X-InfApp: zp225
X-InfContact: 36619
X-InfSent: 8696629
X-inf-package: value
X-inf-uflags: SO
X-inf-iflags: SO
List-Unsubscribe: <https://zp225.infusionsoft.com/app/optOut/noConfirm/8696629/2dac1aca6531909b>
X-inf-dkimSelector: 8b317a15-7f46-4fa1-bda1-d6198ef9a5b7
Pool-Version: 2
Pool-Name: default_value
Pool-Debug: zp225 value

<snip>
Don't worry, we appreciate reports of broken things. There's little point in letting things stay broken.
 

Spearfoot

He of the long foot
Moderator
Joined
May 13, 2015
Messages
2,478
Actually this is odd, because I did verify it for Infusionsoft too... just checked the UI to confirm. I've updated the policy for now until I get it fully sorted.

Thanks again for the heads up!
@Gary Graham, I'm still seeing these mal-formed URLs in some of the notification emails - missing the '.' between freenas and org:


Key word = 'some', i.e., this is an intermittent problem; our favorite kind! :rolleyes:
 
Status
Not open for further replies.
Top