Plesk mail, spam outlook/hotmail & co

[Pecnet]

Hello,
I'm busy in recent days setting mails on my Plesk server (Centos 7.2 - OVH)

Everything works fine, I also made the mails settings on my domain (DomainKey and install spamassassin, and SPF)

I use the roundcube webmail to send emails.

I can send emails and everything works fine unless I send in outlook.com, hotmail.com & co ....

When I send to outlook.com, hotmail.com the mails go directly to spam

I do not understand why.

I use email-test and it tells me a 10/10 rating, dnsinspect and gives me a score of 100%

Mail Tester -> HERE
DNS Inspect -> HERE


Here in the entete hotmail.com/outlook.com

Received: from AM4PR0401MB1794.eurprd04.prod.outlook.com (10.165.244.152) by
VI1PR0401MB1807.eurprd04.prod.outlook.com (10.165.234.157) with Microsoft
SMTP Server (TLS) id 15.1.447.15 via Mailbox Transport; Thu, 31 Mar 2016
18:59:00 +0000
Received: from AM3PR04CA0043.eurprd04.prod.outlook.com (10.242.16.43) by
AM4PR0401MB1794.eurprd04.prod.outlook.com (10.165.244.152) with Microsoft
SMTP Server (TLS) id 15.1.447.15; Thu, 31 Mar 2016 18:58:59 +0000
Received: from HE1EUR01FT044.eop-EUR01.prod.protection.outlook.com
(2a01:111:f400:7e1f::204) by AM3PR04CA0043.outlook.office365.com
(2a01:111:e400:8814::43) with Microsoft SMTP Server (TLS) id 15.1.447.15 via
Frontend Transport; Thu, 31 Mar 2016 18:58:59 +0000
Received: from SNT004-MC3F19.hotmail.com (10.152.0.59) by
HE1EUR01FT044.mail.protection.outlook.com (10.152.0.107) with Microsoft SMTP
Server (TLS) id 15.1.453.6 via Frontend Transport; Thu, 31 Mar 2016 18:58:58
+0000
Received: from ns_IP_SERVEUR ([IP_SERVEUR_XX]) by SNT004-MC3F19.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
Thu, 31 Mar 2016 11:58:56 -0700
Received: from webmail.mydomain.eu (ns_IP_SERVEUR [127.0.0.1])
by ns_IP_SERVEUR (Postfix) with ESMTPSA id 651876180043
for <[email protected]>; Thu, 31 Mar 2016 20:58:55 +0200 (CEST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=default; d=mydomain.eu;
b=Fvgxagz0xWy+keVd5/bUhKKhukjBlI0K85Ok8IpM4uYBIlySB1yxyDdwnqewTD6/LdJUDVRlhBXQOPv9JdyiejfZtOUYYjdKsqRqxm/e+YDegBF1DcGf1gY8r0aNCUWHJcDiwzV3Wys3u0Gv8yjmWT0LG/aQWxaFBpreyA5VlPg=;
h=MIME-Version:Content-Type:Content-Transfer-Encodingate:From:To:Subject:Message-ID:X-Sender:User-Agent;
Content-Type: text/plain; charset="UTF-8"; format=flowed
Content-Transfer-Encoding: 8bit
Date: Thu, 31 Mar 2016 20:58:55 +0200
From: <[email protected]>
To: <[email protected]>
Subject: Rendez vous Projet
Message-ID: <[email protected]>
X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.1.4
Return-Path: [email protected]
X-OriginalArrivalTime: 31 Mar 2016 18:58:56.0985 (UTC) FILETIME=[60B22490:01D18B7F]
X-MS-Exchange-Organization-Network-Message-Id: 8dc9ffb7-dfe4-49fa-65e7-08d3599684e5
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: IP_SERVEUR_XX
CMM-sending-ip: IP_SERVEUR_XX
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is IP_SERVEUR_XX)
[email protected]; dkim=none header.d=mydomain.eu; x-hmca=pass
[email protected]
CMM-X-SID-PRA: [email protected]
CMM-X-AUTH-Result: PASS
CMM-X-SID-Result: PASS
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
CMM-X-Message-Info: 11chDOWqoTmF3gZaQpAHJ0swAvNwHXek054F9xiozdvy9rvtOg1ICAz/YurUwnZrQNVo+L1rguKfQaH/ruhY0eVD0CVfgQdRSmPyiDo8tf5C6ZolN1XwYX2zVA1vfurV+mU3m/uvXWmcsTB472BXtXb09diyHRMbjDj7vZ+VgUn4yfcTVl8z2EOjqFnpgQ4hLpFmlWtECxrCM+Rw1JDmET5XyW7Mbm8XWsYjyXmAIfZH5ETJiwPkOA==
X-MS-Exchange-Organization-SCL: 6
X-MS-Exchange-Organization-PCL: 2
X-Forefront-Antispam-Report: EFV:NLI;SFV:SKS;SFS:;DIR:INB;SFP:;SCL:6;SRVR:AM4PR0401MB1794;H:SNT004-MC3F19.hotmail.com;FPR:;SPF:None;LANG:fr;
X-MS-Office365-Filtering-Correlation-Id: 8dc9ffb7-dfe4-49fa-65e7-08d3599684e5
X-Microsoft-Exchange-Diagnostics: 1;AM4PR0401MB1794;2:u3lcobHhXw+/h4yIqHGhgU2M8XGhL8EclnO61iIcwbwcIBpU/lM8fI2L4pfLJ0cIzxRC/qRwwpgAc3IbfRwdrzRdOdI2ekd11xVIfFR6WgP/vCBoKnUiemTm4wnsEHWSgKW4nw3TgzHEYLZIAp65U9dJKSfgKpQLM/C9i2eQ4YvF6NbwX/krHfZ2PloG8Y1HNKA4zuCdJkJzZ161cc9uCg==;3:8MVLJa7CnuPd0RcRQuoLsf3wcAYYHMQ7X4u0LGvg+fX1b8xkSuwOYEvR6Wx1cbEBhkG+6pc59hf82P+9wRQ2c4FPFA6+xHBT6D0hDPR6o7cOxyXHvMfO7s4rbjtJHnyxJQhsIut444bnEuzlIhSHlmRCPqt7f4ylsFizw0GMqYU=;25:QAp3rFjTu3xD/4RWm7cQMYKw4lDQT4myDvrx7s6ZGm9h/dbuFNpVck2PthP7HlRWJX0SXSwcvAcaoyILyByE8rIHzczvodcqkuMqo/sdgYHdPYhGdwLcL/d0ONQKn7muIT/0rduWkaCKhzzeCK4aepsDPe5e/VXZIHLqOtHarDoTzJGs7E6IgMyxcsOW/6+td0uAXbl84m31dOfXTvD9yYsBfKizmZT5tsVFCoVPSDz6mtAnBpq7BDU1t6x3vMbp86JcqTr8SVJd6eq2usPbuRl97wgdT7zxrmCbQsFaTlcS5Rq4u7vLcST/EAKTJbZu
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID8291501002);SRVR:AM4PR0401MB1794;
X-MS-Exchange-Organization-AVStamp-Service: 1.0
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID82015046);SRVR:AM4PR0401MB1794;BCL:0;PCL:0;RULEID:;SRVR:AM4PR0401MB1794;
X-Microsoft-Exchange-Diagnostics: 1;AM4PR0401MB1794;4:famYgbkYS/JiPwGBkw4jGMpQox9UXM5Vs1Z90QBI7uZtb+8+MOOTqjXjQk3rx2vnUbvH+inYmMV8+Xug6QsOP2WGOC3KpZMcgA/mcxpqA4CvnFISsiBprjMq+ozBkIf7rCoCaYjoqNlKTo2m5JlArGc0jOKIyUKtTB6ECUYDiV+kWI5GCr3Bz0RYmIzty6dg/5vVdzdKgw8Svwl3+ISCwADbcnrvcVTKQ30jWc6MxrSjg1gwRHQ6e705pxXybXHuVIUBLJzWNIfwNKOVDTJ6Og==;23:xzvOXXfci0VrifHiOhxvwjQtV2Cacox0USbLrrp/Kcdz0ZTeenDFW8zKil+xva7aQ3OHB1iCAJO+ZboLwfyplt4CxPzhQMv4kkrychubsb/qOAjlciq3gr3DkQG9Q3e5fOeO0XFZx2HO2Je0zWBd1yuyYAlz8oIa9RCSDhgVr+t1KlP6kSrx+eLNSVIbUYlg;5:QxMZVsU3gNtczRMXl2PT9xzekJqtqOrGKcC+Lk9rlMXGhyBgHteYNhESPWOGaAi6ZPNURGQqyi7NBK8W9FdJDudO4hAU8bDk0MNkciLpKBE3lGrGwqOZuT3MTbvN9yMDTp/GRD8F5nzCVKreaGe9jA==;24bcmXfDFOBI3WH1X5ja38BplKgcHLMhGLl/aKH0jkuYlOgrpxJnMy9EguoIrDZ7ltFOG/5tPeSzynG4MYFUfhw==
SpamDiagnosticOutput: 1:23
SpamDiagnosticMetadata: SKS
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 31 Mar 2016 18:58:58.8026
(UTC)
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM4PR0401MB1794
X-MS-Exchange-Organization-AuthSource: HE1EUR01FT044.eop-EUR01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.2507255
MIME-Version: 1.0

Le Lorem Ipsum est simplement du faux texte employé dans la composition
et la mise en page avant impression. Le Lorem Ipsum est le faux texte
standard de l'imprimerie depuis les années 1500, quand un peintre
anonyme assembla ensemble des morceaux de texte pour réaliser un livre
spécimen de polices de texte. Il n'a pas fait que survivre cinq siècles,
mais s'est aussi adapté à la bureautique informatique, sans que son
contenu n'en soit modifié. Il a été popularisé dans les années 1960
grâce à la vente de feuilles Letraset contenant des passages du Lorem
Ipsum, et, plus récemment, par son inclusion dans des applications de
mise en page de texte, comme Aldus PageMaker.

Can you tell me if you notice a problem?

Thank you

 

[UFHH01]

Hi Pecnet,

Your main issue will be, that the reverse check doesn't meet the DNS lookup.

   Server             IP              PTR (Reverse)    IPs
   mail.jetest.eu.    94.23.18.206    m84.be.          94.23.18.206

Some providers ( as for example hotmail and outlook ), do as well reverse checks and if the result is not matching, they will downgrade a "new" domain within their defined spam rules. The result will be the issue as described. The older a domain gets ( without active spam reports from users to Hotmail/Outlook.com ), the lower will be the downgrade rate to the domain.

Provided solution ( source: http://answers.microsoft.com/ ) :

1. Sign in to your account. Go to inbox.
2. Click Options located at the upper-right side of the page.
3. Select More Options.
4. Under Preventing junk email, click Safe and blocked senders.
5. Click Safe Senders.
6. In the text box, type in the email address or domain you’d like to always receive email from, and then click Add to list​

Please consider to read more to this behalf at "http://answers.microsoft.com/en-us/...il-users/65cf50f8-65a1-4128-81d7-3d2e8f4bbbd6".


My answer may not satisfy you, because there isn't much you can do to prevent the behaviour at Hotmail/Outlook.com, but rest assured that the aging of the Domain will solve this issue ( when there are no active spam reports for the domain from Hotmail/Outlook.com - users ).

 

[Pecnet]

Hello,

my ip reverse and hostname it is "m84-be"

you can see here: http://www.mail-tester.com/web-4RXs8y

After having changed the hostname "mail tester" gives me a 9/10,
he told me this message

ou have no DMARC recording, please add the following to your domain _dmarc.domain.be

is known to add a field "DMARC" in Plesk?
I think not, am I wrong?


We now cover with the domaine jetest and m84, I can send mails to hotmail but some still falls on spam and other not it goes straight into the reception box.

You also said that I have to put the domain name in "Safe Senders."

there is no other less radical solution?

because imagine all the users hotmails if he should do this ....

Thanks

 

[Pecnet]

up

 

[UFHH01]

there is no other less radical solution?

nope... Hotmail/Outlook.com have their own policies, so you have to stick to this procedure.

 

[Pecnet]

Hi, thanks

Ok I'll take a look at microsoft,

can you tell me if with Plesk, there is a support with DMARC?

 

[IgorG]

can you tell me if with Plesk, there is a support with DMARC?

Will be implemented later.

 

[Pecnet]

Thank you for your reply,

can you tell me the difference between DomainKeys and DKIM,

it's the same thing or not?

Because the microsoft site talking about the
https://mail.live.com/mail/policies.aspx

- SPF
- DKIM

and I wonder if it's the same or not?

Thank you

 

[IgorG]

can you tell me the difference between DomainKeys and DKIM,

it's the same thing or not?

There are many differences. For instance, DKIM has multiple signature algorithms as opposed to just one available with DomainKeys. DKIM much more modern and flexible technology.

 

[Pecnet]

Ah ok,

I thought it was the same thing,

Microsoft talks about DKIM,
we can not with Plesk's added?
or we must continue to work with DomainKey

Thank you

 

[UFHH01]

Hi Pecnet,

unfortunately, Plesk hasn't got a DKIM implementation and so you have to configure this on your very own. There are a lot of tutorials over the internet, which you will find using the search term "Plesk" "DKIM": http://lmgtfy.com/?q="Plesk"+"DKIM"

You could find as well quite a few discussion threads here in the forum,

 

[Pecnet]

Hello,

I already looked but if I have to pass on the command line, and edit any file, I'm not too hot for this method.

I would prefer an assisted solution, very easy to set up, but I have not find

I understand not on my server I have 6 areas

3 domain works very well with hotmail, and the other 3 field falls in spam

I do not understand why this

: s

 

[Pecnet]

Hello,

here is a list of tasks that I made for the settings of mail about plesk.

Can you tell me if I forget to add another information?

Thank you for all


1. Provider / Server

- Secondary DNS on the domain -> OK (ownercheck)
- Reverse IP -> OK


2. Parameter Server

- Activate SpamAssassin
- Change the hostname of the server


3. messaging settings for the entire server

- Spam protection DomainKeys (outgoing / incoming) -> OK


4. messaging settings for domain

- DomainKeys to sign outgoing mails -> OK


5. Domain DNS Settings

- Ownercheck -> ok
- DomainKeys -> ok
- SPF -> ok

Image -> http://img15.hostingpics.net/pics/611138valeurdns.png

6. The email [email protected]

- OK

7. My ip does not blacklist

- See the result -> http://mxtoolbox.com/SuperTool.aspx?action=blacklist:94.23.18.206&run=toolpage

8. Contact Microsoft and ask me to check the points list above.

- Inscription on JMRP and NSDS -> OK

9. Mail test results -> 10/10

- http://www.mail-tester.com/web-rE65KW

10. Inspect DNS

- http://www.dnsinspect.com/jetest.eu/1459925466

 

[hardbrasil]

did you set a reverse on IP ? on ovh panel?
put the same name of fqn of the server.

try dnsstuff.com and run your domain there

 

[Pecnet]

Hi,
Yes of course I have set the "reverse" at ovh (ovh panel -> SYS )
IP -> domain

 

[hardbrasil]

in your case i suggest you to create your own dns names despite of ovh
http://www.dnsstuff.com/tools#dnsReport|type=domain&&value=jetest.eu

probably this solve your issue,

 

[Pecnet]

Ok if I understand you tell me to do that by example

ns1.jetest.eu
ns2.jetest.eu

is that right?

I wrote above looks good?

thanks

 

[hardbrasil]

yes sounds good,

you can use main IP for the ns1 and add a second IP on Plesk for ns2.
configure Plesk dns template to use them, register a dns on your registrar with those ips.

i can send you some prints if necessary.

 

[Pecnet]

prints? Euh?

 

[hardbrasil]

of mine config