Google appears to have blacklisted our domain. From the edge MTA, I sent three messages, differing only in the From header:
1. valid email @klssys.com
2. valid email @caneris.com
3. abc123@caneris.com
1 not spam; 2 & 3 spam
Return-Path of all three was still another address @caneris.com and the two SPF passed headers were still there. The body & subject of all messages was simply "testing5". The recipient even clicked on "not spam" on #2 prior to #3 being sent.
At least it explains why all the other standard stuff we all looked at didn't explain the issue.
The next (and last) question is: does anyone have a clueful Google mail ops contact?
Thanks again for all the help and sorry for the OT noise.
Erik
Ignoring the irony, you could signup with Microsoft's spam filtering service
(formerly frontbridge) or postini (now google) and use them as outbound
relays.
They will do outbound relay, with attendant spam filtering and increases in
deliverability. That means a lot more people will accept your mail when it
is being relayed by postini/front bridge.
I believe postini will do this for any account, even one that has only, say,
one e-mail address being filtered by them and the rest silently passed.
Heck, you may not even need to point your mx records to their servers- they
just need a reinjection method for outbound filtering if I recall
correctly.
Again, I acknowledge the irony involved in such a solution.
--D
Google appears to have blacklisted our domain. From the edge MTA, I
sent three messages, differing only in the From header: 1. valid
email @klssys.com 2. valid email @caneris.com 3. abc123@caneris.com
1 not spam; 2 & 3 spam
Ok, so its the domain not the IP.
You're a DSL provider, right? IP's assigned to customers have PTR's in
caneris.com, right?
[..snip..]
To: "William Pitcock" <nenolod@systeminplace.net> Cc:
nanog@nanog.org Sent: Tuesday, September 28, 2010 7:17:45 PM Subject:
Re: What must one do to avoid Gmail's retarded non-spam filtering?
Hi William,
I do so for our entire IP space on a regular basis. The edge MTA I
mentioned in the reply to Bill shows up as "Neutral" there.
Ok, but there are a couple customer IP's that show up as "Poor" there,
with rDNS in caneris.com not in klssys.com.
One of those is on CBL (and XBL) and PSBL, and is spamming using your
domain:
http://psbl.surriel.com/evidence?ip=199.19.168.33&action=Check+evidence
Its not PBL listed even though its a dynamic IP it seems:
http://www.spamhaus.org/query/bl?ip=199.19.168.33
That would be an SPF pass as well, because of:
caneris.com. 3600 IN TXT "v=spf1 a mx ptr -all"
So, from the receiving end it could easily look like its one of
caneris.com's outbound servers.. But not one of klssys.com's servers.
Maybe this has something to do with the problem.
HTH,
Joe