Emails going to spam even after SPF, DKIM, rDNS, & DMARC

Alex Woellhaf

Member
Jun 10, 2016
9
2
3
Michigan, USA
cPanel Access Level
DataCenter Provider
I have successfully setup SPF, DKIM, rDNS, and DMARC yet my emails to gmail and yahoo all go to spam! The headers in the emails all say PASS and none say fail. I have verified with mail-tester.com and I get a 10/10 on all the domains affected.

I have submitted a ticket and the fix should be posted here as well since I have gone through so many of these forum posts to no avail. The ticket is much more detailed but it also contains confidential information.

Ticket id:
7572987

Also no, there is no blacklisting going on and all emails are manually typed in outlook or roundcube sent and off. Bulk mail or PHP automated (through smtp and imap) might be a thing in the future but right now I just need my company's sales people to be able to email quotes back to people and my account managers to be able to bill people (WITHOUT LANDING IN THE SPAM CAN) I dont think thats too much to ask......

We do not send spam.
We do not email people if they dont want to be emailed.
We follow all best practices.
We follow all RFCs in place for this kind of issue to be prevented.
Yet we still go to the spam can.

Also to prove im not crazy I have modified the super sensitive information out of my headers.

The servers ip range is x.x.x.218 - x.x.x.222
My office actually has a similar ip we will refer to it as: O.O.O.222
Code:
Delivered-To: [email protected]
Received: by 10.237.xx.xxx with SMTP id f32csp316322qtb;
        Fri, 10 Jun 2016 11:57:55 -0700 (PDT)
X-Received: by 10.140.xx.xxx with SMTP id t185mr3487886qht.95.1465585075803;
        Fri, 10 Jun 2016 11:57:55 -0700 (PDT)
Return-Path: <[email protected]>
Received: from adomain.org (adomain.org. [x.x.1x.222])
        by mx.google.com with ESMTPS id m185si7062511qhb.59.2016.06.10.11.57.55
        for <[email protected]>
        (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
        Fri, 10 Jun 2016 11:57:55 -0700 (PDT)
Received-SPF: pass (google.com: domain of [email protected] designates x.x.x.222 as permitted sender) client-ip=x.x.x.222;
Authentication-Results: mx.google.com;
       dkim=pass [email protected];
       spf=pass (google.com: domain of [email protected] designates x.x.x.222 as permitted sender) [email protected];
       dmarc=pass (p=QUARANTINE dis=NONE) header.from=adomain.org
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=adomain.org
    ; s=default; h=Content-Type:MIME-Version:Message-ID:Date:Subject:To:From:
    Sender:Reply-To:Cc:Content-Transfer-Encoding:Content-ID:Content-Description:
    Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:
    In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:List-Subscribe:
    List-Post:List-Owner:List-Archive;
    bh=3o8acckfNXTTHWE1NDf+qznvbAyosZfYrZsQa7972Ag=; b=SkMdmIxmX2+ICg8lgznaWQz3If
    fbvx0vkGF4EkKWcg2vUrieUcoTU5W8/7GD4qySaaQtAY14PYn2juG4bs82cRpQuqoefU/QkGkoWo7
    ERlW3DQvW1X9xMmBpP4teE8R52Cir1kdzMR1CtILIv0eqIn5CLoa06KgckPhQyB2MsdbxsvDeMCZ3
    boajXM8HmD9Y98uZH/0pCffLu/00tfqY8PrKw6fr6/ZL0F7TSQ5/rtb6VhMTS6NEG+ZzTkB9ApCBH
    BN9mWwScFXM92L5RruwdK1YHJ94SHjQnZH5Opxi+2ziBVPbY1Pjyauawu2nHkXm94JYsKggheDZuZ
    XJ6Z3A/g==;
Received: from O-O-O-222.static.aldl.mi.charter.com ([O.O.O.222]:32858 helo=PCNAME)
    by myhostname.somethingthatendswithelements.com with esmtpa (Exim 4.87)
    (envelope-from <[email protected]>)
    id 1bBRcs-004CIj-D2
    for [email protected]; Fri, 10 Jun 2016 14:57:53 -0400
From: "Alex ********" <[email protected]>
To: <[email protected]>
Subject: Hello again
Date: Fri, 10 Jun 2016 14:57:51 -0400
Message-ID: <[email protected]>
MIME-Version: 1.0
Content-Type: multipart/alternative;
    boundary="----=_NextPart_000_006C_01D1C328.7618CCE0"
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AdHDSe92wJlUm7uKQ5GBmRe5I+stow==
Content-Language: en-us
X-OutGoing-Spam-Status: No, score=-1.0
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - myhostname.somethingthatendswithelements.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - adomain.org
X-Get-Message-Sender-Via: myhostname.somethingthatendswithelements.com: authenticated_id: [email protected]
X-Authenticated-Sender: myhostname.somethingthatendswithelements.com: [email protected]
 
Last edited by a moderator:

Infopro

Well-Known Member
May 20, 2003
17,090
518
613
Pennsylvania
cPanel Access Level
Root Administrator
Twitter
When you check your domain using a site like intodns.com, do you see any issues with it?
When you check your current IP address, the one you're on visiting these forums, here, do you see any issues with it?
spamhaus.org/lookup/

I do. You should read the Info on the spamhaus site for assistance with this issue, IMO.
 

Alex Woellhaf

Member
Jun 10, 2016
9
2
3
Michigan, USA
cPanel Access Level
DataCenter Provider
It was my understanding that my office IP wont send me to the spam folder. I did actually fix that issue about a week ago though. It should be ELLOing r1.corp.example.com now. But I guess my question is, is that even relevant? The servers IP is not blacklisted and even when I send from roundcube it goes to spam. Roundcube is php based and I checked the headers when sent from there and as I thought it is sending as the server IP.
 
Last edited by a moderator:

Alex Woellhaf

Member
Jun 10, 2016
9
2
3
Michigan, USA
cPanel Access Level
DataCenter Provider
Well cpanel support claims im on yahoo and gmails private blacklist and it could take a week to get off, if that is the actual issue. So that being said, im going to have to go to a 3rd party mail provider because nobody in a business critical environment would go a week without emails. I will post back if there is anything noteworthy enough to share with everyone. Thanks to @Infopro again!
 
  • Like
Reactions: Infopro

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,908
2,216
463
Hello,

It's also possible the IP address was used with a previous server and has a bad reputation on specific SPAM blacklists. You can send email from another IP address to see if that helps if the issue persists by following the instructions in the following:

How to configure Exim's outgoing IP address

Thank you.