Is "unknown (HELO localhost)" Causing Email to be Treated as SPAM?

MrChip2
MrChip2 used Ask the Experts™
on
I would like to send 100 customized emails using a template I created with my GoDaddy web mail account.  I want to send these emails while logged into web mail.   created the template then sent out a test email.  The email was automatically forwarded to my SPAM folder.  Below is the header information from the email with email addresses replaced by ***********

Delivered-To: ***********
Received: by 10.220.115.135 with SMTP id i7csp158075vcq;
       Tue, 17 Apr 2012 09:01:18 -0700 (PDT)
Received: by 10.60.22.10 with SMTP id z10mr23260746oee.16.1334678477805;
       Tue, 17 Apr 2012 09:01:17 -0700 (PDT)
Return-Path: <***********>
Received: from p3plwbeout13-02.prod.phx3.secureserver.net (p3plsmtp13-02-2.prod.phx3.secureserver.net. [173.201.192.164])
       by mx.google.com with SMTP id qx5si3018918obb.159.2012.04.17.09.01.17;
       Tue, 17 Apr 2012 09:01:17 -0700 (PDT)
Received-SPF: pass (google.com: domain of *********** designates 173.201.192.164 as permitted sender) client-ip=173.201.192.164;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of *********** designates 173.201.192.164 as permitted sender) smtp.mail=***********
Received: (qmail 13694 invoked from network); 17 Apr 2012 16:01:16 -0000
Received: from unknown (HELO localhost) (10.6.247.3)
 by p3plwbeout13-02.prod.phx3.secureserver.net with SMTP; 17 Apr 2012 16:01:15 -0000
Received: (qmail 20427 invoked by uid 99); 17 Apr 2012 16:01:15 -0000
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset="utf-8"
X-Originating-IP: ##.##.###.234
User-Agent: Workspace Webmail 5.6.16
Message-Id: <20120417090114.169f62b66dc6ec934cd68924aa9d1e68.1413311904.wbe@email13.secureserver.net>
From: <***********>
To: ***********
Subject: XXXXXXXXXXXXXXXXXXXXXX
Date: Tue, 17 Apr 2012 09:01:14 -0700
Mime-Version: 1.0


I am trying to figure out why the email was treated as SPAM.   When I test the HTML of the email at http://www.emailspamtest.com, I get a SPAM score of 0 out of 5 and am told the email is SPAM safe (which it is).

In reviewing the above code the only thing I see is the line that says:

Received: from unknown (HELO localhost) (10.6.247.3)


Could this be the reason the email is viewed as SPAM?  How do I correct this so that the HELO localhost is not unknown?

Thanks so much!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Software Engineer
Distinguished Expert 2018
Commented:
It might be one of the contributing factors.
esp. as localhost is known to be 127.0.0.1 and not 10.6.247.3

Also does emailspamtest follow the same rules as gmail? [ probably not ]
Other contributing factors may be a constant stream of messages coming from the same address where some receipients marked it as spam... Which makes it possibly spam...

It is hard to tell why a message is considered spam if you don't get the actual logging along with the message WHY it considers it spam.
f.e. spamassassin can mark  messages with several tags about what the contributing factors are to the spamscore.
Sudeep SharmaTechnical Designer
Commented:
>>>Received: from unknown (HELO localhost) (10.6.247.3)

I think this is absolutely fine. It's just the hostname could not be verified by the other mail host where the email has been delivered. Since the IP address of this host is Class A which means that it is used for internal purpose there is no need for the hostname for it as well. The hostname would only matters when any server or IP address is listing to the internet publicly.

Further if you think that "Received: from unknown (HELO localhost) (10.6.247.3)" could be the issue then all the email sent from the same web mail would be considered as spam and one of the email would reach the final recipient.

In most of the cases the content of the email is evaluated before marking it as spam, so you would need to look into the content rather than the headers of the email.

Secondly when you sent more than 50-60 emails from the same email account then also some anti-spam engines considered that as a spam no matter how genuine the content is.

I hope that would help.

Sudeep
nociSoftware Engineer
Distinguished Expert 2018

Commented:
@SSharma: This is part of what spamassassin adds to the Headers of mail.


X-Envelope-From: <****@****.****>
X-Envelope-To: <****@*****.****>
X-Envelope-To-Blocked: <****@****.****>
X-Quarantine-ID: <ztBq0QzH4KrR>
X-Spam-Flag: YES
X-Spam-Score: 14.498
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.498 tag=2 tag2=6.2 kill=6.9 tests=[BAYES_99=3.5,
        BOTNET=5, FH_HELO_EQ_D_D_D_D=3.177, HELO_DYNAMIC_IPADDR=1.951,
        RDNS_NONE=0.793, TW_JZ=0.077] autolearn=no

The Quarantine-ID is from Amavis.  From the X-Spam-Status it can be learned why it is considdered spam.
Also Spamassassin takes previous headers into account.
Optionaly spamassassin might also mark the message content as spam or ad a flag to the subject.
MrChip2President

Author

Commented:
Thank you both for all of your help with this.  Since my last post I had the chance to talk to the developer of Gammadyne over the phone. Based on this input, today I purchased a hosting plan and fixed IP from GoDaddy.  I will in the next day or two have a site online.  I imagine this will change things so this question is no longer valid.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial