Problems with emails keep getting rejected

xmasex

Hello,

I’ve mailcow for a few months now and everything was working fine, but now sometimes a couple of emails keep getting rejected and quarantined and I’m not really sure what is the problem.

I tried to pin it to a single domain, but it is not from a single domain, multiple domains and multiple emails.

I have all my domains in the server, and setup an alias for all the admin@domainname.com to be sent into one email address.

And keep getting rejected emails from time to time.

I appreciate the time and work done with mailcow, and thank you so much for your amazing software.

SPOOFED_UNAUTH (50) R_SPF_FAIL (8) [-all] IP_REPUTATION_SPAM (5.639134) [asn: 197540(0.40), country: DE(0.01), ip: 45.136.xx.xxx(1.00)] FORGED_W_BAD_POLICY (3) BAYES_SPAM (2.5) [100.00%] SUBJ_EXCESS_QP (1.2) MID_RHS_WWW (0.5) MIME_GOOD (-0.1) [text/plain] MX_GOOD (-0.01) [] MIME_TRACE (0) [0:+] RCVD_COUNT_TWO (0) [2] ARC_NA (0) RCPT_MAILCOW_DOMAIN (0) [1domain.com] ARC_SIGNED (0) [1domain.com:s=dkim:i=1] FROM_HAS_DN (0) DMARC_NA (0) [2domain.com] ASN (0) [asn:197540, ipnet:45.136.xx.xx/22, country:DE] HAS_X_POS (0) TO_MATCH_ENVRCPT_ALL (0) FROM_NEQ_ENVFROM (0) [wordpress@2domain.com,admin@2domain.com] RCVD_TLS_LAST (0) TO_DN_NONE (0) HAS_WP_URI (0) FORGED_SENDER (0) [wordpress@2domain.com,admin@2domain.com] MID_RHS_MATCH_FROMTLD (0) HAS_PHPMAILER_SIG (0) R_DKIM_NA (0) RCPT_COUNT_ONE (0) [1]

SPOOFED_UNAUTH (50) R_SPF_FAIL (8) [-all] IP_REPUTATION_SPAM (5.639121) [asn: 197540(0.40), country: DE(0.01), ip: 45.136.xx.xxx(1.00)] FORGED_W_BAD_POLICY (3) BAYES_SPAM (2.5) [99.99%] MID_RHS_WWW (0.5) MIME_GOOD (-0.1) [text/plain] MX_GOOD (-0.01) [] MIME_TRACE (0) [0:+] RCVD_COUNT_TWO (0) [2] ARC_NA (0) RCPT_MAILCOW_DOMAIN (0) [1domain.com] ARC_SIGNED (0) [1domain.com:s=dkim:i=1] TO_DN_NONE (0) FROM_HAS_DN (0) DMARC_NA (0) [1domain.com] ASN (0) [asn:197540, ipnet:45.136.xx/22, country:DE] HAS_X_POS (0) TO_MATCH_ENVRCPT_ALL (0) FROM_NEQ_ENVFROM (0) [wordpress@1domain.com,admin@1domain.com] RCVD_TLS_LAST (0) TO_DOM_EQ_FROM_DOM (0) HAS_WP_URI (0) FORGED_SENDER (0) [wordpress@1domain.com,admin@1domain.com] MID_RHS_MATCH_FROMTLD (0) HAS_PHPMAILER_SIG (0) R_DKIM_NA (0) RCPT_COUNT_ONE (0) [1]

I’m using cloudflare and all the DNS stuff inside mailcow are green.

heavygale

SPOOFED_UNAUTH
!MAILCOW_AUTH & !MAILCOW_WHITE & !RSPAMD_HOST & !SIEVE_HOST & MAILCOW_DOMAIN_HEADER_FROM & !WHITELISTED_FWD_HOST & -g+:policies

Die E-Mails erhalten also 50 Punkte für den Spam-Score weil sie als Absender eine von der Mailcow verwaltete Domain angeben, aber nicht von der Mailcow gesendet wurden. Wenn du meinst, dass es dem sendenden Server erlaubt sein sollte E-Mails mit diesen Domains als Absender zu senden, kannst du ihn als Weiterleitungs-Hosts hinterlegen (Konfiguration -> Weiterleitungs-Hosts). Oder der Absender dieser Mails muss auf SMTP umstellen und die E-Mails über eine Mailbox der Mailcow versenden (vermutlich die bessere Lösung, da ja vermutlich auch nur so die korrekte DKIM-Signatur angefügt wird). Wenn das z.B. dein Webserver ist, deaktiviere die mail()-Funktion in PHP, für Wordpress gibt es ein SMTP-Plugin.

heavygale

Sorry, I didn’t realize the question was in english 😃 here’s an automatic translation:
So the emails will get 50 points for spam score because they specify as sender a domain managed by Mailcow, but not sent by Mailcow. If you think that the sending server should be allowed to send mails with these domains as senders, you can set it as forwarding hosts (Configuration -> Forwarding hosts). Or the sender of these mails has to switch to SMTP and send the mails via a mailbox of Mailcow (probably the better solution, as this is the only way to add the correct DKIM signature). If this is e.g. your webserver, disable the mail() function in PHP, for Wordpress there is a SMTP plugin.

xmasex

I’ll try it out, thanks 🙂

PIXELFREAKS

Hi Mailcow community,
First of all thank you for the awsome software.

I have setup a root VPS with Netcup for our mailcow. Unfortunately many mails get rejected by hotmail, outlook, msn, live. Strangely gmail doesn’t even categorise the emails as spam, and they go directly to the inbox.

I use Cloudflare, but it shouldn’t play a roll since the DNS records regarding mailing don’t get proxied.

SPF, DMARC, DKIM and PTR records exist. rDNS (mail.pixelfreaks.ch) is applied from Netcup side.

I have tested my setup with www.mail-tester.com and get 10/10 , also used some other tools like www.mxtoolbox.com and don’t get any errors.

I would really appreciate if someone could help and double check my domain.

www.pixelfreaks.ch
fqdn: mail.pixelfreaks.ch

Thank you in advance. 😀

heavygale

PIXELFREAKS Your domain is most likely ok, it’s a problem on microsoft’s side as the are massively overblocking. If there’s spam from a single IP address, they are blocking the whole network.
See mailcow/mailcow-dockerized2851

tbrummell

You will need to work with Hotmail Sender Support to get your IP mitigated. I just went through this when moving from Vultr to RackNerd. You will need to prove your purchase of the VPS with the assigned IP to them. They are quite responsive and pleasant to deal with.

PIXELFREAKS

Thank you guys for the infos.
Is there any list of different email providers with the right support Email Address? Would be nice to write to all of them just for peace of mind.