Topic: Forward group e-mail ends up in spam
============ Required information ====
- iRedMail version (check /etc/iredmail-release): 0.9.6
- Linux/BSD distribution name and version: Ubuntu 16.04 LTS
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx): Nginx
- Related log if you're reporting an issue: see below
====
When I create a group with e-mail forwards, all e-mail arrives normally...except Outlook puts all of it in the spam folder. It seems to pass SPF, DKIM, DMARC checks but still ends up in spam. PTR and records are checked, not listed at any blocklist and MXtoolbox mailserver check gives all green at every check. Does anyone have a clue why Outlook put those e-mails in spam?
Here is the header of a test mail:
Received: from DB5EUR03HT124.eop-EUR03.prod.protection.outlook.com
(10.165.230.41) by VI1PR08MB1182.eurprd08.prod.outlook.com with HTTPS via
VI1PR10CA0031.EURPRD10.PROD.OUTLOOK.COM; Mon, 24 Apr 2017 11:22:05 +0000
Received: from DB5EUR03FT022.eop-EUR03.prod.protection.outlook.com
(10.152.20.57) by DB5EUR03HT124.eop-EUR03.prod.protection.outlook.com
(10.152.20.252) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.1019.14; Mon, 24
Apr 2017 11:22:04 +0000
Authentication-Results: spf=pass (sender IP is 180.180.100.100)
smtp.mailfrom=mymaildomain.com; outlook.com; dkim=pass (signature was verified)
header.d=senderdomain-com.20150623.gappssmtp.com;outlook.com; dmarc=none
action=none header.from=senderdomain.com;
Received-SPF: Pass (protection.outlook.com: domain of mymaildomain.com designates
180.180.100.100as permitted sender) receiver=protection.outlook.com;
client-ip=180.180.100.100; helo= mx.mymaildomain.com;
Received: from COL004-MC1F24.hotmail.com (10.152.20.60) by
DB5EUR03FT022.mail.protection.outlook.com (10.152.20.171) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
15.1.1047.9 via Frontend Transport; Mon, 24 Apr 2017 11:22:03 +0000
X-IncomingTopHeaderMarker: OriginalChecksum:7826DBB6BC560E77E351B29685EBBBE44B1E4392C9AE045E5B3267040B6498A8;UpperCasedChecksum:BA51A2BE64C8DED04835A279D276F337BE62AA1FC77F45DE883CB39484E55FF5;SizeAsReceived:3456;Count:23
Received: from mx.mymaildomain.com ([180.180.100.100]) by COL004-MC1F24.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
Mon, 24 Apr 2017 04:22:02 -0700
Received: from mx.mymaildomain.com (localhost [127.0.0.1])
by mx.mymaildomain.com (Postfix) with ESMTP id 5B0906056E
for <mikester01@outlook.com>; Mon, 24 Apr 2017 13:22:00 +0200 (CEST)
X-Virus-Scanned: Debian amavisd-new at mymaildomain.com
Authentication-Results: mx.mymaildomain.com (amavisd-new); dkim=pass (2048-bit key)
header.d=senderdomain-com.20150623.gappssmtp.com
Received: from mx.mymaildomain.com ([127.0.0.1])
by mx.mymaildomain.com (mx.mymaildomain.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id k4Ng1TElHc6w for <mikester01@outlook.com>;
Mon, 24 Apr 2017 13:22:00 +0200 (CEST)
Received: from mail-wm0-x243.google.com (mail-wm0-x243.google.com [IPv6:2a00:1450:400c:c09::243])
by mx.mymaildomain.com (Postfix) with ESMTPS id 6CBB7604DD
for <team@groupemail.com>; Mon, 24 Apr 2017 13:21:59 +0200 (CEST)
Received: by mail-wm0-x243.google.com with SMTP id z129so16488600wmb.1
for <team@groupemail.com>; Mon, 24 Apr 2017 04:21:59 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=senderdomain-com.20150623.gappssmtp.com; s=20150623;
h=from:content-transfer-encoding:mime-version:date:subject:message-id
:to;
bh=6ErXpecY77wokjls71KhkZoevapcLku94hWioklkaVk=;
b=czVKSzXAletSl1bs3XtZ7gc2kCGlf3o9YwDl8BHGt0nWu4uonyHKsgaaAec0xXZbjH
gEqDV7Cuz9rONv81dE+NOGLn1j7wdag5D4cYh5bWPev6vl1Zkb91tp9Nb4aH5lrzv6GU
rcT57kfFcz7sG5xOCAd0Yy1mwC3soOmGYEks7Dj/OX1BzeCjrf9PnpufLlIjo4CV2Xex
lCqRzHA/mg/5t4HYxTDZKfv4TOxqu3ETF7SSVG0aGobQr4YXjTpjhIW5pQr9DjB/TZBV
eIsdlMxpN9GM+34xPzJ0MozAQA8WC9UmMjdbkBcnIMwrJpzgki5IQXDuiHSKxJyKrpLF
7M5w==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:from:content-transfer-encoding:mime-version:date
:subject:message-id:to;
bh=6ErXpecY77wokjls71KhkZoevapcLku94hWioklkaVk=;
b=Mzzkz8mlcyVr/gYge0HHbVeHkHtQ+6+6Ww7XWY1PhvjoMcVPR4h5Cluyz1ntNTTFen
Denze2VcSOPL4FdWN0g7HCKhLHmmbJnv0jfVHRPNZV1cJxRr2wqWbC3YUwGKrVCxlXL8
mLuY2vHbPlIIGUVCk1gZgcy0zIzfsXFMyYHZLtT1lX4F6McOpqPuTp9ZlbUf7qj/x958
ZLPRpoGRByUoqGzz2g7GzWBM1z1eE0zzTiv1yobZPrv2zQhUR8b2y2tpeFe+4oGjJrTs
zhgiLuXi5d6ZuXskEsqC74ZF8y0g4HAdmsaJnuSRhQLDmLzPLlnf2xXxv+VltQmmsFzQ
aBFA==
X-Gm-Message-State: AN3rC/7HJCOjH+wxBg1oal5zpG6vS6BNjE+ZDNOorW2Xt4NyrawqeOeT
1D7FCpND++8EweWlWVI=
X-Received: by 10.80.184.2 with SMTP id j2mr664960ede.176.1493032912532;
Mon, 24 Apr 2017 04:21:52 -0700 (PDT)
Received: from [10.0.7.165] ([213.206.222.106])
by smtp.gmail.com with ESMTPSA id a56sm3693398edd.48.2017.04.24.04.21.51
for <team@groupemail.com>
(version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128);
Mon, 24 Apr 2017 04:21:51 -0700 (PDT)
From: John <info@senderdomain.com>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Date: Mon, 24 Apr 2017 13:21:51 +0200
Subject: Test monday
Message-Id: <6680CC8E-095B-42DF-8CC5-046E8936FE48@senderdomain.com>
To: team@groupemail.com
X-Mailer: iPhone Mail (14E304)
Return-Path: srs0=r95q=4a=senderdomain.com=info@mymaildomain.com
X-OriginalArrivalTime: 24 Apr 2017 11:22:02.0365 (UTC) FILETIME=[FEFFDAD0:01D2BCEC]
X-IncomingHeaderCount: 23
X-MS-Exchange-Organization-Network-Message-Id: b8fe84fa-e36e-49bc-6aed-08d48b0422a0
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 180.180.100.100
CMM-sending-ip: 180.180.100.100
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is
180.180.100.100) smtp.mailfrom=srs0=r95q=4a=senderdomain.com=info@mymaildomain.com;
dkim=none header.d=senderdomain.com; x-hmca=none header.id=info@senderdomain.com
CMM-X-SID-PRA: info@senderdomain.com
CMM-X-AUTH-Result: NONE
CMM-X-SID-Result: NONE
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD00
CMM-X-Message-Info: 11chDOWqoTlZdH4WCntP4ccRkujknwUs0TXNr4EGkA5lHUfDewx0jApNKaECP+Ht8gI+nI0mBB0cvbLQz3itZWriCMTbtCrVpBVaphvJiELLFJl6aDUcg/MjsgIBVH94AOwWqoIl2NcwJfDUCyfLa23XAhgqXFu24OLVHYdxSanZy0/d5JLT9kPMZK+FCa0RwvwUNkE6j+0eAU09BqlPzz2jpA8gR9k4ssfw/P4NGvvzWRnnjMS2G99zGhw33uky
X-MS-Exchange-Organization-SCL: 5
X-MS-Exchange-Organization-PCL: 2
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03FT022;1:Yz1xEz8w3/Wllg43By0T/VaZnUAyXRVuCpOMmdGk6UUrPg70wdk+ILEAsx6jkYZKbjq/sozZRbL49kdTMXgf5XHXFVS4a/aQqrF8JuS3wuT9L/LJmGzqbndapPFvGveuJ4vk4Y4D4CKrpsGoMDlDXalTtl+Lt92NAQFevr/yd7/tqEcHRvbDHoatc5W1UrRO
X-Forefront-Antispam-Report: EFV:NLI;SFV:SPM;SFS:(28900001);DIR:INB;SFP:;SCL:5;SRVR:DB5EUR03HT124;H:COL004-MC1F24.hotmail.com;FPR:;SPF:None;LANG:en;
X-MS-Exchange-Organization-AuthSource: DB5EUR03FT022.eop-EUR03.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: b8fe84fa-e36e-49bc-6aed-08d48b0422a0
X-Microsoft-Antispam: BCL:0;PCL:0;RULEID:(22001)(8291500097)(8291501071);SRVR:DB5EUR03HT124;
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT124;3:QbGFFZrN3A/wYCH7x3WtYdQf93v3zuGVW/TWUoHEf0lw1dkKpw2VuyKUOno79BdlILHjbO2rza5+NPROc/+8YVDOv0gmTDQ4qBqzMETHlTh+QQFi5Va2JrY0CXGTTWTicSRSU2Ql87bp1lr2i0pancw5WPPTh0waG2wsDJYShk6Ys7HTCNbQX0BUJTjBekEUI8sI2vfStTp1X/PMGcasjv2dDnH1BaAngElFgKYtbfiV/fcnbzxZ5zAvdBISuMogUJDxcd1AChrWtpUGUkNNgf/uSfES2dRaQanxTrR8LBV+BB2UCY4OKi7gd9YIchWLDeZNF8JvpwOkjL2qW0dDV0iRCS5dYSwK7px1nrTR50v/kT4LbLoJPsBX0ZXwUI7/7d5UTlbVBiSG0sXacOMj+g==;25:jd1V247xaNkwRKy2Lm2SWmyaCsHzbJIFJXh+oA5uCfCMcX6443GfgzLBT1o0b7DPCBjfXuPVUH2Nawyw/pLYCBQF2OaMJnoDqMEDCcP/uDUpeZQDkNFPwQyZ9nCZs7lo+g/g5wo0wBJFSj3HwbU2k4Z18Nh3j9Ol29IGlAgr9qbndSavqr17TldG9vzy/yzJQZ7/YRy4XHm4BJzpRLSPktsNiLdPPjfV/W+lz9Dp3M/n1qaYjMycQTm9+4Rd8q99pMb3iOwX7xaZ3XZcXIQWQGHtjrjO1kexFVtL0+VdA3WjAnmyHLcZhUczDYkuT++Ba7ka+7Kr+hGXtNmHu7+IjK6aopolW6aeuwFXSEgwd6lVfHAkhFjS4ATv6tP8D7ztOJjOgWY3mz0y9aZHDmLYZTWlOZP9R9T5D4vzBGS4jxB2bMBCWIJMcvEBP2JDwltJzPNAro8x4gW2sCnMP+BHrkwbHKt2I0qK/UiE1lu0bt9wzxC61091sr5/a+KXEqd2
X-MS-Exchange-Organization-AVStamp-Service: 1.0
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT124;31:UNilWihaE50SF2I3zOJe3QcdEuYV82AyVNegaHnPsezienMyoBUNbleCmX6rc5Q4qMARI8b16Us2sQp7toCNplwbh1MiNa+MFgX2BrAxtzbuBwb40TLFLc4wuIBYlSnKqj8Qss/NFK/X8ixPbM1XG7yt6qXD+DVwPQmxucoboVXEREyl0qf4X+HD+jhNu/hb6Wu+E7oAglYI3I8hdiupKQCsCJhElo14ZGcdZ+sjF4rATqTgbtGkLDZxogTvn61nfxbaa0n/h1pq+IFK/pLMlovELEdw1oTCHGl/SpQy0RPqpB2A2hls/IPSdTUSq2ro;4:UkRhUTE2HhpV2j4ZUqqMTiZE/e9ZgY/C9lwChi4JBOdtGk5s+FCLY4QeaE1gEEeTBi6EL6w31z+3mEIV53izG8OJzmmBnlnzXpwmeEKC1J5OlRzetAmbadcAmR5hBiO0O9UpbW5dTEQRUVm7QigvJAE7V2XUe8yqtHlIkoGVpStVj86DBbQHdT2liCiFzP9FFxnt0hLKmyz4j0lw9Iiw7uwHtZXEjIBruJ1ltqNzK+dTRE/0M223No3kdPU7Gf0+k9OpqYP2RHq+s0JY/axo1zEagbfOZ91XdA5uXZMol94=;23:fFQZvrjVH4EcWaV5wRjcB7cI8ggCLtDvF6D6B5GyV/mpPrxLtCtnhIgdD9I+St9FSGNs4eY3vPA3H4/pwtqhqypLLiaUcbz+lClsbgPuO7R+DXssB/SiTZ6dA/R77FyiuH8gcsj2EC/4ePRsH0qseAgP5DeUqltZ2wkdo1vgfNllk69XCUSmrgWKH13ggR8ixabUJPnh5kBFXL7tVRarMg==
X-Exchange-Antispam-Report-CFA-Test: BCL:0;PCL:0;RULEID:(444000031);SRVR:DB5EUR03HT124;BCL:0;PCL:0;RULEID:;SRVR:DB5EUR03HT124;
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT124;6:xXoImLTrgtptSTumufHCbWkzG984SDN6o/emx4ERooB9Cg3YSPg852kpMLmIOb3HJDBRTAnEClX0ylJU9Ny8k0IomkX9tN9t0zu9E+vMj3l80+Qp51cd8cwnbVgCfTzCLL3EzP88jdmdSU3l7apgY5NiAHobzWiiNigj9LQa9IGgwKmk1Zwebj0nzf7CddCe7LIzYCJUa86VoiuFhJKluqFthUXj2FTlgrdB6Y8gkH70/yRC2Mpo/8fdCaBHSFR6jqszznb/uXOcEpi34Z1+FNlsaW3NUrrYMDoYWdtLvlI4Wt655CIdx92Xobp3Uz+S7GribEq31WL2y0Q0OhI78E/5Oce7+Q1db0RRDPvFwPgAluMyAK0GP/5+8ejUT3K2dVitUDDoOZ7jRhuJPCDlmQ==;5:AnoccQJr0XRPdQkVBN+n66oBGcW48swhlJFJG5vmT26MGmFOgsv39PiwU0kcCU0trIv47HZ/bEZrthIuMeGsEHh2gVqelydSaItTsfqkyddDwOeS7fC9PAAKshBFtn2eIZ2papTiGEEVMpqjhFDPyg==;24:Una2gzv2QlKK+ckmsBlT10Q6UjjjofOcJZc2wdYixp31M0g+HBmSZcULHtkH3WNg6lttNyRl43yUrJuSFE/xXA==
SpamDiagnosticOutput: 1:22
SpamDiagnosticMetadata: Default
X-Microsoft-Exchange-Diagnostics: 1;DB5EUR03HT124;7:weZ54IiOORIyMeY684WSuN1uCl9nNAyTXxxBZcyHDhmiQslx54JxPqYrsagJHOJq/kc5Q09FRf/v9FPyCXqnVMShE5gYLck+q8Vh/sJDWTeKYYPYf4ajKJk+u/7UwuIEEMoSR3qpF/3Zxj8k2TWvi1RoPL2C6QRbEysvC7RqMxwOMTJVzmy1tQM6qDTrF5sOPedMbv5UDZ7wi72VI3X60fYZ7nr7c4MDsZ5u5cAZGVTN3dedwJzB0mhrm7G0YyXJq+J4er8snAHjWcDhKNFgVUSgReO3hUENvWrkT0t7E0sMQOVrqxlIWre3Ui5g3CDjblWa10XnG3cSdd1fi6zeug==
X-OriginatorOrg: outlook.com
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 24 Apr 2017 11:22:03.5338
(UTC)
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR03HT124
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.9886225
X-Microsoft-Exchange-Diagnostics:
1;VI1PR08MB1182;27:AQWxtxiYav7mCHr384MqNqEkW0lUDzh8enY5YutWPlkdqgN3HJ4n8gyZwtsSJ6IDb5vfdLhf313IQgH2ATrlfL0mcV7KT2vUEqey8//JGYFzzROUPbYs8mY4oN4eYIMtRrhdOvK42PN0fqd1ts5cfg==
X-Microsoft-Antispam-Mailbox-Delivery:
abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;psp:0;auth:0;dest:J;WIMS-SenderIP:180.180.100.100;WIMS-SPF:mymaildomain%2ecom;WIMS-DKIM:senderdomain%2ecom;WIMS-822:info%40senderdomain%2ecom;WIMS-PRA:info%40senderdomain%2ecom;WIMS-AUTH:NONE;ENG:(5061607094)(102400140)(102420017);RF:JunkEmail;OFR:SpamFilterAuthJ;
MIME-Version: 1.0
Monday test mailThis is what the log records:
Apr 24 13:22:00 mx postfix/smtp-amavis/smtp[2860]: 6CBB7604DD: to=<mikester01@outlook.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=1, delays=0.11/0.45/0.07/0.39, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 5B0906056E)
Apr 24 13:22:01 mx postfix/smtp[2867]: Untrusted TLS connection established to mx4.hotmail.com[65.55.37.72]:25: TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)
Apr 24 13:22:02 mx postfix/smtp[2867]: 5B0906056E: to=<mikester01@outlook.com>, relay=mx4.hotmail.com[65.55.37.72]:25, delay=2, delays=0/0.01/1.4/0.67, dsn=2.0.0, status=sent (250 <6680CC8E-095B-42DF-8CC5-046E8936FE48@senderdomain.com> Queued mail for delivery)----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.