Author Topic: spam email from satan ninja 198x  (Read 6404 times)

666threesixes666

  • Ninja Initiate
  • *
  • Posts: 14
    • View Profile
spam email from satan ninja 198x
« on: May 10, 2014, 12:07:51 AM »
http://mxtoolbox.com/SuperTool.aspx?action=smtp%3asatanninja.com&run=toolpage

dns reverse record mismatch.  email servers are very painful to setup.  exim is good about not being too absurd to wrap your head around.  my technique to test email servers involves re-sending conformation emails to my self & looking @ /var/log/messages or /var/log/exim/faillog  id not touch the server configuration, and work on the dns records.

spf & dkim are good.

Received: from satanninja.com (satanninja.com. [129.121.189.45])
        by mx.google.com with ESMTPS id n6si1800970ige.22.2014.05.09.20.44.42
        for my@email.com
        (version=TLSv1 cipher=RC4-SHA bits=128/128);
        Fri, 09 May 2014 20:44:43 -0700 (PDT)
Received-SPF: pass (google.com: domain of noreply@satanninja.com designates 129.121.189.45 as permitted sender) client-ip=129.121.189.45;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of noreply@satanninja.com designates 129.121.189.45 as permitted sender) smtp.mail=noreply@satanninja.com;
       dkim=pass header.i=@satanninja.com
Message-Id: <536da0ab.8614320a.7241.ffffb09fSMTPIN_ADDED_MISSING@mx.google.com>
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=satanninja.com; s=default;
   h=Content-Transfer-Encoding:Content-Type:Mime-Version:Date:From:To:Subject; bh=rJQ3i9eVMdtpT7kxegl+fRUnGowflV0f+pIZHsONv4A=;
   b=ynxSEdwvLeOZueF3B8XEJ4xSTmCgaky+OLGxwI7WS3LqLrZLAD5Y8FsyNBRmICQ7hteMQbGQByILj6HpScxYL9oNgu6/RX1nTFJl2V0m5NCOoUMcxA5TTh4anQl76mQsoJgmWa2a+7zOZ9lLuwz+fbDXyXb86BPPJVRVN+J23KI=;
Received: from satanninja.com ([129.121.189.45]:59368 helo=ssl://satanninja.com)
   by host.calebd.net with esmtpsa (TLSv1:DHE-RSA-AES256-SHA:256)
   (Exim 4.82)
   (envelope-from <noreply@satanninja.com>)
   id 1WiyDK-0000br-A9

Ghoul

  • Weblord
  • Administrator
  • *****
  • Posts: 24
    • View Profile
    • Satan Ninja 198X
Re: spam email from satan ninja 198x
« Reply #1 on: May 10, 2014, 08:59:53 AM »
Yo, reverse DNS is definitely setup correctly.

[ghoul@server ~]$ host satanninja.com
satanninja.com has address 129.121.189.45
satanninja.com mail is handled by 0 satanninja.com.
[ghoul@server ~]$ host 129.121.189.45
45.189.121.129.in-addr.arpa domain name pointer satanninja.com.
[ghoul@server ~]$


Even so, Google seems to be throwing messages into spam anyway. Part of the problem is that we're a new domain and a new sender.

I'm still doing research on other things I can do to appease Google.

MXToolbox shows that we aren't black listed by anyone: http://mxtoolbox.com/SuperTool.aspx?action=blacklist%3asatanninja.com&run=toolpage

666threesixes666

  • Ninja Initiate
  • *
  • Posts: 14
    • View Profile
Re: spam email from satan ninja 198x
« Reply #2 on: May 10, 2014, 11:00:58 PM »
i just did spf & it appeased google once the dns stuff was setup right.  it might be your timeout values?

thecpamatrix.com.   1800   IN   MX   10 thecpamatrix.com.

known working for thecpamatrix & gmail

satanninja.com.      14400   IN   MX   0 satanninja.com.

???  i know i was seeing "out of preferred timeout range" messages about the entry & seeing messages that spammers like servers with high time out or very low time out.  unfortunately cpamatrix is gone, dude that conscripted me to build it flaked on paying the bills.

edit: i wish you guys luck on the email, i know from experience how annoying it is to get out of spam.  it took me 3 months or better to get cpamatrix out of spam and requesting unblocking from several sites.

edit some moar:  maybe doesn't like being forwarded through calebd.net? "220-host.calebd.net ESMTP Exim 4.82 #2 Sun, 11 May 2014 03:08:34 +0000 220-We do not authorize the use of this system to transport unsolicited, 220 and/or bulk e-mail."

i found a post saying multi domain name machines to look at this link
http://www.exim.org/exim-html-current/doc/html/spec_html/ch-main_configuration.html
& filter for this variable "smtp_active_hostname"

good luck on thy quest web lord.
« Last Edit: May 10, 2014, 11:17:57 PM by 666threesixes666 »