Issues with emails being treated as SPAM (spf, dk checked)

[jottoman]

Hi
I'm going nuts. I'm far from an expert on this, so help me out!

I running a homepage on a server (ip: 1.1.1.1) not hosted by me, using cpanel 11.26.9. The server is registered to my base domain (domainA.com), but my homepage is running as an addon (domainB.com). I'm using email on both and all of them are treated as spam in GMAIL. They do come through in Hotmail and Yahoo though (more below).

I've activated domainkeys Enabled & Active (DNS Check Passed) and SPF Enabled & Active (DNS Check Passed). I've checked my server IP against various open blacklists and all appears green. SPF is pass on both Yahoo and Gmail, but emails are treated as spam in Gmail, but not so in Yahoo.

What is the issue? I'd love to have X-AUTH-Result Pass in Hotmail, although the emails gets to the Inbox fine as of now.

Google

Delivered-To: [email protected]
Received: by 10.216.176.213 with SMTP id b63cs171258wem;
Fri, 11 Mar 2011 06:27:15 -0800 (PST)
Received: by 10.151.95.16 with SMTP id x16mr212015ybl.46.1299853634495;
Fri, 11 Mar 2011 06:27:14 -0800 (PST)
Return-Path: <[email protected]>
Received: from server1.host.com (server1.host.com [1.1.1.1])
by mx.google.com with ESMTPS id b11si10681913ana.129.2011.03.11.06.27.12
(version=TLSv1/SSLv3 cipher=OTHER);
Fri, 11 Mar 2011 06:27:13 -0800 (PST)
Received-SPF: pass (google.com: domain of [email protected] designates 1.1.1.1 as permitted sender) client-ip=1.1.1.1;
DomainKey-Status: good
Authentication-Results: mx.google.com; spf=pass (google.com: domain of [email protected] designates 1.1.1.1 as permitted sender) smtp.mai[email protected]; domainkeys=pass [email protected]
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=domainB.com;
h=Received:MIME-Version:Date:From:To:Subject:Message-ID:X-Sender:User-Agent:Content-Transfer-Encoding:Content-Type:X-Source:X-Source-Args:X-Source-Dir;
b=j6MHuFsM7YzNwvOyGPRVmFqAs1jehINx8Xb1YDfxeoVoppi430GG61SW79O49vntKp9K1tuRi9QXbRTKmfbCMpl6P/Heri5VYp1Ssz0laGDEurNWSBcPzOoaoe9Fh9Tc;
Received: from localhost ([127.0.0.1]:58922 helo=domainB.com)
by server1.host.com with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Py3J7-0000Z0-32
for [email protected]; Fri, 11 Mar 2011 15:27:09 +0100
MIME-Version: 1.0
Date: Fri, 11 Mar 2011 15:27:08 +0100
From: <[email protected]>
To: <[email protected]>
Subject: Testar ren spf
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: RoundCube Webmail/0.3.1
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.host.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - domainB.com
X-Source:
X-Source-Args:
X-Source-Dir:

Testar

Hotmail

X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtTQ0w9NA==
X-Message-Status: n
X-SID-PRA: [email protected]
X-AUTH-Result: NONE
X-Message-Info: 6sSXyD95QpUkca6uLnx25IUoS6vm/MvxfW7HKVyB73Dv6DoTLyhfTAJaHUnxYV7DEiaQNydUIc25LUp0BMpQ/ZWFf4sDZneZ+8tTrwZz+ig=
Received: from server1.host.com ([1.1.1.1]) by snt0-mc2-f8.Snt0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Fri, 11 Mar 2011 06:28:08 -0800
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=domainB.com;
h=Received:MIME-Version:Date:From:To:Subject:Message-ID:X-Sender:User-Agent:Content-Transfer-Encoding:Content-Type:X-Source:X-Source-Args:X-Source-Dir;
b=H6kLF6U5kbsuCg1bMnA9NJMizxgSemQCwexe2D5+7KOLJUNHvWgX8ntQAf55BMF06qSBUlIl5ygSgHdV+JYlZSOpOq0eNbS659Pm7m8LBqq1M3Afh0rZOI6BpZq2Bphq;
Received: from localhost ([127.0.0.1]:59002 helo=domainB.com)
by server1.host.com with esmtpsa (TLSv1:AES256-SHA:256)
(Exim 4.69)
(envelope-from <[email protected]>)
id 1Py3K0-0000dX-Ps
for [email protected]; Fri, 11 Mar 2011 15:28:04 +0100
MIME-Version: 1.0
Date: Fri, 11 Mar 2011 15:28:04 +0100
From: <[email protected]>
To: <[email protected]>
Subject: Testar ren spf
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: RoundCube Webmail/0.3.1
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.host.com
X-AntiAbuse: Original Domain - hotmail.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - domainB.com
X-Source:
X-Source-Args:
X-Source-Dir:
Return-Path: [email protected]
X-OriginalArrivalTime: 11 Mar 2011 14:28:08.0362 (UTC) FILETIME=[8ACAC8A0:01CBDFF8]

Testrar

Yahoo

From [email protected] Fri Mar 11 14:34:20 2011X-Apparently-To: [email protected] via 76.13.12.192; Fri, 11 Mar 2011 06:34:27 -0800
Return-Path: <[email protected]>
Received-SPF: pass (mta1174.mail.sk1.yahoo.com: domain of [email protected] designates 1.1.1.1 as permitted sender)
X-YMailISG: nzWWvHYcZAqtc8SSU4pHFXl4Fg_oaTEOamSHmm9nmA7fWT0W XzAJEAUYJyP4bwnFzjhSCxkr4wD1eipOPhBTxI3W2wZx_sh4_2w7nAyg385I 9kEeMcUU85zoizOPnThm2rQjxTka0I5BWvUFzbeCeX.uHsNKUzWRbneYtjcp gaI3YV3c5OP_tJL9Bc3SrA89vyLQXXuq.raOCVwaK5Yy.AO0Oltfr8BK2lMP QMhhNERACuZptZBBixG4RwdrMDySzKPsaXhJxZx.4NcNbVjYeZ.ADVdnFDZ_ a8eaQJLArT8bVRu8OZKTIufMHdUV.Tm0byA68Q8w8_87DWFlZwC74GccwDMY jankJF6QqhWduMENUzB7y6l9PqysBncdqwHMg.kJniQYY7lMT1.Aqe00LWGw cjvW3OrmgC5iEbiVruetMetbh3mhDB4MhvNNsOPAcYCJCfzb7B3eV0rWMRi4 MjqkUgZeFDYVc2MyMqkdubuD2d_dUwQ7Kr0_yErF4MHWdb_tILJ5P47CDecD 6jbJL7tnGjtPWl8_2b7vlrX6Ctm.DnSZWT59BAMirRviDuXwNF26uvZ9H.8x 7dECnvlAO0oufVfiFDRXjvFpiMt2e.enXM.HXwUqZqbNRFCBkmcwCI4l4jpY v7DhR2dRMJNyuLaVKqfyWr0VvKHus4PbknAjthEK2iC3gIrSNJ63JZcFcYCl IxdFOmLaJaCTbAT.iaCNQ9FOhDzsQmAps3YuyZLPJUV9DDjW6G5OyAcBBTPv AtCYwrRyjAOjTEobOT6a9DbhOBci2FuYI2M4YkSbrhT4mwIq9oTXdsr3FJ.v X.1dLS.lxK4fLc7B1Dvue01DzmbZkwsZJSbg3P6x9cBhOA9EW8I6P.SCbGML B6RNC2zqofL5eSfrQiA6SIYtIJF8cOqMWJ7pb_QOZtfuRSWhaSmKyvMabLJx lTCBaHJl4stIgEKCMDszPW2ncPgGpYehqiWy0DJ9DSiVMDsJdfZovKYj7XUO R6BAZAj90zG2gYJgii1h6k2RX66Xg4YdXfyyIjzszg9AUq_nzmaI3dckNmLD PeWUNwPNyALfZZApPFcoZzIP1FJm
X-Originating-IP: [1.1.1.1]
Authentication-Results: mta1174.mail.sk1.yahoo.com from=domainB.com; domainkeys=pass (ok); from=domainB.com; dkim=neutral (no sig)
Received: from 127.0.0.1 (EHLO server1.host.com) (1.1.1.1) by mta1174.mail.sk1.yahoo.com with SMTP; Fri, 11 Mar 2011 06:34:27 -0800
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=default; d=domainB.com; h=Received:MIME-Version:Date:From:To:Subject:Message-ID:X-Sender:User-Agent:Content-Transfer-Encoding:Content-Type:X-Source:X-Source-Args:X-Source-Dir; b=nJFKO01b1q7sTpMwOk4H96+WB+wGr4xbYickeWE9J0td19FNpMgQDRpnoGBQOdAD8l8ezRvbSENHTYzvXYDzIScyZewlXXEatqF/7Fnjc+gKWql53xUBjurgoZq5WOHs;
Received: from localhost ([127.0.0.1]:34396 helo=domainB.com) by server1.host.com with esmtpsa (TLSv1:AES256-SHA:256) (Exim 4.69) (envelope-from <[email protected]>) id 1Py3Q5-000192-44 for [email protected]; Fri, 11 Mar 2011 15:34:21 +0100
MIME-Version: 1.0
Date: Fri, 11 Mar 2011 15:34:20 +0100
From: This sender is DomainKeys verified
<[email protected]>
Add sender to Contacts
To: <[email protected]>
Subject: Testar
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: RoundCube Webmail/0.3.1
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - server1.host.com
X-AntiAbuse: Original Domain - yahoo.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - domainB.com
X-Source:
X-Source-Args:
X-Source-Dir:
Content-Length: 20

 

[cPanelTristan]

There is nothing in the provided header for gmail to indicate why they are putting the emails into the spam folder for the domain. You will need to follow the following instructions on gmail's site to see if you can determine why this is happening and how to correct it:

https://mail.google.com/support/bin/answer.py?answer=17205

Gmail is the only party who can explain why they are filtering the emails into spam, especially when it has SPF and domainkeys both passed for it.

Of note, simply because an email has SPF and domainkeys does not mean that the email sender isn't sending out bulk emails or someone else is sending out bulk emails from the server. SPF and domainkeys only represent that a legitimate sender is sending from a known, non-spoofed source.

 

[jottoman]

There is nothing in the provided header for gmail to indicate why they are putting the emails into the spam folder for the domain. You will need to follow the following instructions on gmail's site to see if you can determine why this is happening and how to correct it:

https://mail.google.com/support/bin/answer.py?answer=17205

Gmail is the only party who can explain why they are filtering the emails into spam, especially when it has SPF and domainkeys both passed for it.

Of note, simply because an email has SPF and domainkeys does not mean that the email sender isn't sending out bulk emails or someone else is sending out bulk emails from the server. SPF and domainkeys only represent that a legitimate sender is sending from a known, non-spoofed source.

Thank you, most of all for reviewing the header and giving a thumbs up! I'll have a look at the support link as well. I quit sending bulk emails a year ago when my list grew too large as many b/cc's seem to put things off. When testing it now they all seem to get through though, perhaps the issue resolved itself. I removed a couple of forwarders yesterday and fiddled a bit with the SPF, perhaps that helped.

Anyhow, thanks again!