Malik Hourani
asked on
Exchange server send mail as spam
Hello,
i don't know why my mail server is marked as spam , i create a dmarc record , spf record and DKIM record
when i try to send to outlook it's going to spam
this is the original message.
i don't know why my mail server is marked as spam , i create a dmarc record , spf record and DKIM record
when i try to send to outlook it's going to spam
this is the original message.
Received: from AM5EUR03HT008.eop-EUR03.prod.protection.outlook.com
(2603:10a6:209:14::19) by AM6PR03MB3960.eurprd03.prod.outlook.com with HTTPS
via AM6PR0102CA0006.EURPRD01.PROD.EXCHANGELABS.COM; Mon, 16 Sep 2019 18:03:53
+0000
Received: from AM5EUR03FT056.eop-EUR03.prod.protection.outlook.com
(10.152.16.53) by AM5EUR03HT008.eop-EUR03.prod.protection.outlook.com
(10.152.16.102) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.2263.14; Mon, 16 Sep
2019 18:03:53 +0000
Authentication-Results: spf=pass (sender IP is 5.9.186.138)
smtp.mailfrom=del-kfu.com; outlook.com; dkim=pass (signature was verified)
header.d=del-kfu.com;outlook.com; dmarc=pass action=none
header.from=del-kfu.com;
Received-SPF: Pass (protection.outlook.com: domain of del-kfu.com designates
5.9.186.138 as permitted sender) receiver=protection.outlook.com;
client-ip=5.9.186.138; helo=mail.del-kfu.com;
Received: from mail.del-kfu.com (5.9.186.138) by
AM5EUR03FT056.mail.protection.outlook.com (10.152.17.224) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256) id
15.20.2263.14 via Frontend Transport; Mon, 16 Sep 2019 18:03:53 +0000
X-IncomingTopHeaderMarker:
OriginalChecksum:2DE3E93961B70109DD16E834ACF566A6249500DADC4D50058B2A4D8583F29628;UpperCasedChecksum:76A430ED53EC357DF610C25671EE45DA04F597DA942585D6C13D8E0E0E338933;SizeAsReceived:1300;Count:17
Content-Language: en-US
Content-Type: multipart/alternative;
boundary="_000_42f1845e669e4e66b5dd2c8f6945701bdelkfucom_"
DKIM-Signature: v=1; a=rsa-sha256; d=del-kfu.com; s=mail; c=relaxed/relaxed;
t=1568656913; h=from:subject:to:date:message-id;
bh=UX/dh7KMepCw0YhHcu+nZpqwN3jxIQbVA5sbHqjZ8sY=;
b=IY6tMRAN9lRAMn5w+Pls2D/19OlX/sfLod1zj1H8bylLieIe8U0dmoIoDDINLJnYdyA3laT1ZYm
7ykHnH6wwVo2hthjl9s/nkRlmxsPOkZkqpKlW44rFh9qQABf+svL6Iolezv+c2yCJ+8KrIcqTjLe4
8HeK3gib9g6ZIYVApj0=
Received: from mail.del-kfu.com (5.9.186.138) by mail.del-kfu.com
(5.9.186.138) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id 15.1.1779.2; Mon, 16
Sep 2019 11:01:52 -0700
Received: from mail.del-kfu.com ([::1]) by mail.del-kfu.com ([5.9.186.138])
with mapi id 15.01.1779.002; Mon, 16 Sep 2019 11:01:52 -0700
From: Administrator <Administrator@del-kfu.com>
To: "malik.hourani@outlook.com" <malik.hourani@outlook.com>
Subject: Hello MAlik Hourani
Thread-Topic: Hello MAlik Hourani
Thread-Index: AQHVbLjRh4jaaBPBkU2S8HFR0P5ivQ==
Date: Mon, 16 Sep 2019 18:01:52 +0000
Message-ID: <42f1845e669e4e66b5dd2c8f6945701b@del-kfu.com>
Accept-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [51.253.41.225]
X-IncomingHeaderCount: 17
Return-Path: Administrator@del-kfu.com
X-MS-Exchange-Organization-ExpirationStartTime: 16 Sep 2019 18:03:53.4816
(UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
dda9e2d8-9c97-4a87-b074-08d73ad03c42
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-Forefront-Antispam-Report: EFV:NLI;
X-MS-Exchange-Organization-AuthSource:
AM5EUR03FT056.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-PublicTrafficType: Email
X-MS-UserLastLogonTime: 9/16/2019 6:01:55 PM
X-MS-Office365-Filtering-Correlation-Id: dda9e2d8-9c97-4a87-b074-08d73ad03c42
X-Microsoft-Antispam:
BCL:0;PCL:0;RULEID:(2390118)(5000188)(711020)(4605104)(610169)(650170)(651021)(8291501072);SRVR:AM5EUR03HT008;
X-MS-TrafficTypeDiagnostic: AM5EUR03HT008:
X-MS-Exchange-EOPDirect: true
X-Sender-IP: 5.9.186.138
X-SID-PRA: ADMINISTRATOR@DEL-KFU.COM
X-SID-Result: PASS
X-MS-Exchange-Organization-PCL: 2
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Sep 2019 18:03:53.4636
(UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: dda9e2d8-9c97-4a87-b074-08d73ad03c42
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg:
00000000-0000-0000-0000-000000000000
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM5EUR03HT008
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.5026980
X-MS-Exchange-Processed-By-BccFoldering: 15.20.2263.022
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;auth:1;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(4900115)(8390120)(8383139)(4920090)(6350004)(4950130)(4990090)(9140004);RF:JunkEmail;
X-Message-Info:
qoGN4b5S4yodo8WJ+OxSxqAAM97UhR8Chi/NTl6rmihgzK9s/VjItUIEUW8Ag7IJ+fa+kEWLy9bRpJuCqaFFWt451EBqOwz4PEQXMN4TSKwgn6w7UUgJDgshoEw0dTGhZeWveJJcXz92sjgEiALeAmKU9W/0q4eJPtLGqczVT47zd5qbcs33UKmyPHIFzL4mPz4DRAgUn6LGm19MwtOEPg==
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
X-Microsoft-Antispam-Message-Info:
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
MIME-Version: 1.0
--_000_42f1845e669e4e66b5dd2c8f6945701bdelkfucom_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
Hello MAlik Hourani
--_000_42f1845e669e4e66b5dd2c8f6945701bdelkfucom_
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html><head>
<meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Diso-8859-=
1">
<style type=3D"text/css" style=3D"display:none;"><!-- P {margin-top:0;margi=
n-bottom:0;} --></style>
</head>
<body dir=3D"ltr">
<div id=3D"divtagdefaultwrapper" style=3D"font-size:12pt;color:#000000;font=
-family:Calibri,Helvetica,sans-serif;" dir=3D"ltr">
<p><span>Hello MAlik Hourani</span><br>
</p>
</div>
</body>
</html>
--_000_42f1845e669e4e66b5dd2c8f6945701bdelkfucom_--
When i checked your domain del-kfu.com on mxtoolbox. It says: SPF Alignment Failed
That is the reason, going to spam.
That is the reason, going to spam.
Is the above header is from a mail sent from your server (mail.del-kfu.com)?
It seems your SPF is wrong and DKIM is not aligned.
It seems your SPF is wrong and DKIM is not aligned.
ASKER
how can we handle this issue please ?!
ASKER
yes it's from my mail server mail.del-kfu.com
You need to set your SPF as below
v=spf1 mx:mail.del-kfu.com ip4:5.9.186.138 ~all
Hi Malik,
Please find attached error with your dns
For more detail, refer to:
https://mxtoolbox.com/domain/del-kfu.com/
Thank you
Capture.JPG
Please find attached error with your dns
For more detail, refer to:
https://mxtoolbox.com/domain/del-kfu.com/
Thank you
Capture.JPG
Hi Malik,
try this
v=spf1 mx ip4:5.9.186.138 ~all
If when you send email, your are using another IP address different to 5.9.186.138, please use "include" to add that other IP
try this
v=spf1 mx ip4:5.9.186.138 ~all
If when you send email, your are using another IP address different to 5.9.186.138, please use "include" to add that other IP
Guys why are you all recommending "~" Soft fail.
Please let's make the world a safer place, please use "-" instead (which it's strict).
So you defined the SPF records for a reason to be strict and not to be "soft fail" where a hacker can take advantage of your email infrastructure and send emails as you.
Please let's make the world a safer place, please use "-" instead (which it's strict).
So you defined the SPF records for a reason to be strict and not to be "soft fail" where a hacker can take advantage of your email infrastructure and send emails as you.
ASKER
hi , my case is when i send to gmail it's going to inbox , when send to hotmail, outlook , live it's going to spam folder
ASKER
hello,
this is the header from Gmail :
Delivered-To: hourani8@gmail.com
Received: by 2002:a17:90a:8805:0:0:0:0 with SMTP id s5csp6974019pjn;
Tue, 17 Sep 2019 21:55:39 -0700 (PDT)
X-Google-Smtp-Source: APXvYqx0D3ltbOjsc2rnPOndVC
X-Received: by 2002:a1c:7919:: with SMTP id l25mr960303wme.23.15687825
Tue, 17 Sep 2019 21:55:39 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1568782539; cv=none;
d=google.com; s=arc-20160816;
b=muVyrFMnWKXdeZnWCf2oXoix
os0rsOritoqt6GSdbhAYwL/1Oe
W/0Z5qh/dk6dDJZ/KE/N0A+eKW
hxIO9GX4pzbKBMbGRZdzMFMIlV
Ww6z5syf2TnSWuh617lD9t9UZb
9Q0A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:accept-lang
:thread-topic:subject:to:f
bh=BFMYoGIlxKuTl99TtCD32nJ
b=MxwTTYw8k4rihunut+TG/clt
gM/lAuNVY3pEyBusBbD04zqhyU
7Jsqcl/6r+6XZxpKHwMwNNZl4S
11TpkAiK4ItAGWoEHP9Q6/sq85
BJ885nir+ZvBJb7GKe4Dkl8gtr
3p7A==
ARC-Authentication-Results
dkim=pass header.i=@del-kfu.com header.s=mail header.b=q6eO+y5k;
spf=fail (google.com: domain of mhourani@del-kfu.com does not designate 2002:509:ba8a::509:ba8a as permitted sender) smtp.mailfrom=mhourani@del
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=del-kfu.com
Return-Path: <mhourani@del-kfu.com>
Received: from mail.del-kfu.com ([2002:509:ba8a::509:ba8a]
by mx.google.com with ESMTPS id 91si3352817wre.435.2019.09
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SH
Tue, 17 Sep 2019 21:55:39 -0700 (PDT)
Received-SPF: fail (google.com: domain of mhourani@del-kfu.com does not designate 2002:509:ba8a::509:ba8a as permitted sender) client-ip=2002:509:ba8a::5
Authentication-Results: mx.google.com;
dkim=pass header.i=@del-kfu.com header.s=mail header.b=q6eO+y5k;
spf=fail (google.com: domain of mhourani@del-kfu.com does not designate 2002:509:ba8a::509:ba8a as permitted sender) smtp.mailfrom=mhourani@del
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=del-kfu.com
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_a0340024267
DKIM-Signature: v=1; a=rsa-sha256; d=del-kfu.com; s=mail; c=relaxed/relaxed; t=1568782538; h=from:subject:to:date:mes
Received: from mail.del-kfu.com (5.9.186.138) by mail.del-kfu.com (5.9.186.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_
Received: from mail.del-kfu.com ([::1]) by mail.del-kfu.com ([5.9.186.138]) with mapi id 15.01.1779.002; Tue, 17 Sep 2019 21:55:36 -0700
From: Malik Mohammad Hourani <mhourani@del-kfu.com>
To: "malik.hourani@outlook.com
Subject: Hello All Mails
Thread-Topic: Hello All Mails
Thread-Index: AQHVbd1D/3eziTq1Qk6DUQWCdp
Date: Wed, 18 Sep 2019 04:55:34 +0000
Message-ID: <a034002426754e3791e8be7eb
Accept-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [51.253.41.225]
MIME-Version: 1.0
--_000_a034002426754e3791e
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding:
Hello All Mails
--_000_a034002426754e3791e
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding:
<html>
<head>
<meta http-equiv=3D"Content-Type
1">
<style type=3D"text/css" style=3D"display:none;"><!
n-bottom:0;} --></style>
</head>
<body dir=3D"ltr">
<div id=3D"divtagdefaultwrapper
-family:Calibri,Helvetica,
<p><span>Hello All Mails</span><br>
</p>
</div>
</body>
</html>
--_000_a034002426754e3791e
this is the header from Gmail :
Delivered-To: hourani8@gmail.com
Received: by 2002:a17:90a:8805:0:0:0:0 with SMTP id s5csp6974019pjn;
Tue, 17 Sep 2019 21:55:39 -0700 (PDT)
X-Google-Smtp-Source: APXvYqx0D3ltbOjsc2rnPOndVC
X-Received: by 2002:a1c:7919:: with SMTP id l25mr960303wme.23.15687825
Tue, 17 Sep 2019 21:55:39 -0700 (PDT)
ARC-Seal: i=1; a=rsa-sha256; t=1568782539; cv=none;
d=google.com; s=arc-20160816;
b=muVyrFMnWKXdeZnWCf2oXoix
os0rsOritoqt6GSdbhAYwL/1Oe
W/0Z5qh/dk6dDJZ/KE/N0A+eKW
hxIO9GX4pzbKBMbGRZdzMFMIlV
Ww6z5syf2TnSWuh617lD9t9UZb
9Q0A==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
h=mime-version:accept-lang
:thread-topic:subject:to:f
bh=BFMYoGIlxKuTl99TtCD32nJ
b=MxwTTYw8k4rihunut+TG/clt
gM/lAuNVY3pEyBusBbD04zqhyU
7Jsqcl/6r+6XZxpKHwMwNNZl4S
11TpkAiK4ItAGWoEHP9Q6/sq85
BJ885nir+ZvBJb7GKe4Dkl8gtr
3p7A==
ARC-Authentication-Results
dkim=pass header.i=@del-kfu.com header.s=mail header.b=q6eO+y5k;
spf=fail (google.com: domain of mhourani@del-kfu.com does not designate 2002:509:ba8a::509:ba8a as permitted sender) smtp.mailfrom=mhourani@del
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=del-kfu.com
Return-Path: <mhourani@del-kfu.com>
Received: from mail.del-kfu.com ([2002:509:ba8a::509:ba8a]
by mx.google.com with ESMTPS id 91si3352817wre.435.2019.09
(version=TLS1_2 cipher=ECDHE-RSA-AES128-SH
Tue, 17 Sep 2019 21:55:39 -0700 (PDT)
Received-SPF: fail (google.com: domain of mhourani@del-kfu.com does not designate 2002:509:ba8a::509:ba8a as permitted sender) client-ip=2002:509:ba8a::5
Authentication-Results: mx.google.com;
dkim=pass header.i=@del-kfu.com header.s=mail header.b=q6eO+y5k;
spf=fail (google.com: domain of mhourani@del-kfu.com does not designate 2002:509:ba8a::509:ba8a as permitted sender) smtp.mailfrom=mhourani@del
dmarc=pass (p=REJECT sp=REJECT dis=NONE) header.from=del-kfu.com
Content-Language: en-US
Content-Type: multipart/alternative; boundary="_000_a0340024267
DKIM-Signature: v=1; a=rsa-sha256; d=del-kfu.com; s=mail; c=relaxed/relaxed; t=1568782538; h=from:subject:to:date:mes
Received: from mail.del-kfu.com (5.9.186.138) by mail.del-kfu.com (5.9.186.138) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_
Received: from mail.del-kfu.com ([::1]) by mail.del-kfu.com ([5.9.186.138]) with mapi id 15.01.1779.002; Tue, 17 Sep 2019 21:55:36 -0700
From: Malik Mohammad Hourani <mhourani@del-kfu.com>
To: "malik.hourani@outlook.com
Subject: Hello All Mails
Thread-Topic: Hello All Mails
Thread-Index: AQHVbd1D/3eziTq1Qk6DUQWCdp
Date: Wed, 18 Sep 2019 04:55:34 +0000
Message-ID: <a034002426754e3791e8be7eb
Accept-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
x-originating-ip: [51.253.41.225]
MIME-Version: 1.0
--_000_a034002426754e3791e
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding:
Hello All Mails
--_000_a034002426754e3791e
Content-Type: text/html; charset="iso-8859-1"
Content-Transfer-Encoding:
<html>
<head>
<meta http-equiv=3D"Content-Type
1">
<style type=3D"text/css" style=3D"display:none;"><!
n-bottom:0;} --></style>
</head>
<body dir=3D"ltr">
<div id=3D"divtagdefaultwrapper
-family:Calibri,Helvetica,
<p><span>Hello All Mails</span><br>
</p>
</div>
</body>
</html>
--_000_a034002426754e3791e
spf=fail (google.com: domain of mhourani@del-kfu.com does not designate 2002:509:ba8a::509:ba8a as permitted sender) smtp.m
Well the error is that you're using ipv6 to send the email and is not on the SPF record, correct that.
Well the error is that you're using ipv6 to send the email and is not on the SPF record, correct that.
ASKER
i correct it and it's pass with gmail
ASKER
in the attached file you will see list of address that received may email as spam , and received on inbox
This question needs an answer!
Become an EE member today
7 DAY FREE TRIALMembers can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
ASKER
Please any suggest or any help to me to handle the issue.
SPF : v=spf1 a mx a:mail.del-kfu.com mx:mail.del-kfu.com ip4:5.9.186.138 ~all
v=DMARC1;p=reject;pct=100;