spf=pass but mail sent to spam! - Webmaster General forum at WebmasterWorld - WebmasterWorld

Forum Moderators: phranque

Message Too Old, No Replies

spf=pass but mail sent to spam!

'permitted sender' -> spam?

marciano

10:16 pm on Jul 8, 2009 (gmt 0)

10+ Year Member

Hello,
Can some kind people explain me why and how to solve this issue.
'example.com' is a new domain installed in a dedicated server.
IP is not blacklisted, neutral ranking at senderscore, senderbase and trustedsource.
My first mail from example@ example.com to a testing gmail account I have was delivered to spam folder.

Delivered-To: example @ gmail.com
Received: by 10.231.16.194 with SMTP id p2cs194736iba;
Wed, 8 Jul 2009 14:56:46 -0700 (PDT)
Received: by 11.111.11.111 with SMTP id u18mr7705qad.147.1247090205959;
Wed, 08 Jul 2009 14:56:45 -0700 (PDT)
Return-Path: <example @ example.com>
Received: from example.com (ip-100-100-100-100.static.privatedns.com [100.100.100.100])
by mx.google.com with ESMTP id 33si8361411qyk.76.2009.07.08.14.56.45;
Wed, 08 Jul 2009 14:56:45 -0700 (PDT)
Received-SPF: pass (google.com: domain of example @example.com designates 100.100.100.100 as permitted sender) client-ip=100.100.100.100;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of example@ example.com designates 100.100.100.100 as permitted sender) smtp.mail=example@ example.com
Received: from [111.111.1.11] (r111-11-11-111.dialup.adsl.example.net.uy [111.11.11.111])
by example.com (Postfix) with ESMTP id 366983BD00F9
for <example @gmail.com>; Wed, 8 Jul 2009 18:56:43 -0300 (UYT)
Message-ID: <4A551618.1020603@ example.com>
Date: Wed, 08 Jul 2009 18:56:40 -0300
From: name here <example@ example.com>
User-Agent: Thunderbird 2.0.0.21 (X11/20090318)

[edited by: engine at 8:58 am (utc) on July 9, 2009]
[edit reason] examplified and IP obfuscated [/edit]

marciano

10:31 pm on Jul 8, 2009 (gmt 0)

10+ Year Member

The rest of the mail
MIME-Version: 1.0
To: example @gmail.com
Subject: 1856
Content-Type: multipart/alternative;
boundary="------------040708060104030102060801"

This is a multi-part message in MIME format.
--------------040708060104030102060801
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

test

--------------040708060104030102060801
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000099">
<font face="Arial">test</font>
</body>
</html>

--------------040708060104030102060801--

[edited by: engine at 8:59 am (utc) on July 9, 2009]
[edit reason] examplified [/edit]

bill

8:54 am on Jul 9, 2009 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

Top Contributors Of The Month

SPF pass doesn't mean it's not spam to Google. That just means you're not sending spoofed mail. Most good spammers have their SPF set correctly.

Perhaps this domain has a history of which you are unaware?

marciano

1:19 pm on Jul 9, 2009 (gmt 0)

10+ Year Member

Hello Bill,
This domain name was born two weeks ago.
I don't know the IP history. At this time it is not blacklisted nor bad ranked either.
Thank you

piatkow

2:08 pm on Jul 9, 2009 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

Top Contributors Of The Month

If it was an SPF problem it probably wouldn't have got as far as the spam folder.
There are so many different factors that are added up to trigger a spam filter. I have found that things that are obviously test messages often get caught.

Retry with a block of text pasted into the content rather than just the word "test".

marciano

3:23 pm on Jul 9, 2009 (gmt 0)

10+ Year Member

This is another try sent also to Spam folder...

Delivered-To: example@gmail.com
Received: by 10.231.**.*** with SMTP id p2cs227402iba;
Thu, 9 Jul 2009 08:14:59 -0700 (PDT)
Received: by 10.224.**.** with SMTP id q10mr511042qai.209.1247152496572;
Thu, 09 Jul 2009 08:14:56 -0700 (PDT)
Return-Path: <example@example.com>
Received: from example.com (ip-174-142-**-**.static.example1.com [174.142.**.**])
by mx.google.com with ESMTP id 3si16492747qyk.4.2009.07.09.08.14.56;
Thu, 09 Jul 2009 08:14:56 -0700 (PDT)
Received-SPF: pass (google.com: domain of example@ example.com designates 174.142.**.** as permitted sender) client-ip=174.142.**.**;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of example@ example.com designates 174.142.**.** as permitted sender) smtp.mail= example @ example.com
Received: from [192.168.**.**] (r190-64-**-**.dialup.adsl.example.com [190.64.**.***])
by example.com (Postfix) with ESMTP id AA4F73BD0091;
Thu, 9 Jul 2009 12:14:54 -0300 (UYT)
Message-ID: <4A56096C.7090508@example.com>
Date: Thu, 09 Jul 2009 12:14:52 -0300
From: Daniel Example <danielexample@example.com>
User-Agent: Thunderbird 2.0.0.21 (X11/20090318)
MIME-Version: 1.0
To: example@gmail.com, example@hotmail.com
Subject: I couldn't be there tonight
Content-Type: multipart/alternative;
boundary="------------090707040805090506050908"

This is a multi-part message in MIME format.
--------------090707040805090506050908
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. < note, I replaced the actual text >

--------------090707040805090506050908
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
</head>
<body bgcolor="#ffffff" text="#000099">
<font face="Arial">Lorem ipsum dolor sit amet, consectetur adipisicing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud exercitation ullamco laboris nisi ut aliquip ex ea commodo consequat. < note, I replaced the actual text >
</font>
</body>
</html>

--------------090707040805090506050908--

[edited by: tedster at 10:02 pm (utc) on July 19, 2009]

[edited by: phranque at 2:49 am (utc) on July 20, 2009]
[edit reason] I made the specifics anonymous [/edit]

bill

7:05 am on Jul 10, 2009 (gmt 0)

WebmasterWorld Senior Member

10+ Year Member

Top Contributors Of The Month

You need to remove those specifics (IP addresses domains and e-mail addresses) from your examples.

That block of text has a bunch of keywords that might be considered spam. Maybe some text from a news article would be better?

This domain name was born two weeks ago.

Do you know for sure that nobody had that same name previously? It is possible that it was used for spam briefly and then dropped. Have you checked the e-mail blacklists for the domain?