Google thinks GNHLUG is spam now

Wed Jul 29 12:54:56 EDT 2015

Sorry for the brevity of my earlier "Is there an SPF record?" response...
(I hate using a phone to type messages.)

Anyway, I'm using GMail here and received your "Google thinks GNHLUG is
spam now" msg in my regular inbox.

Here is the original of what I received earlier...  I notice that there is
a DKIM signature failure in the middle.  I don't know much about DKIM, but
maybe that is the source of the issue.

(eforward3e.registrar-servers.com. [38.101.213.201])
        by mx.google.com with ESMTP id hv6si775133igb.11.2015.07.29.07.28.15
        for <greg.rundlett at gmail.com>;
        Wed, 29 Jul 2015 07:28:16 -0700 (PDT)
Received-SPF: pass (google.com: domain of
SRS0+WTTz=IF=mail.gnhlug.org=gnhlug-sysadmin-bounces at eforward3e.registrar-servers.com
designates 38.101.213.201 as permitted sender)
client-ip=38.101.213.201;
Authentication-Results: mx.google.com;
       spf=pass (google.com: domain of
SRS0+WTTz=IF=mail.gnhlug.org=gnhlug-sysadmin-bounces at eforward3e.registrar-servers.com
designates 38.101.213.201 as permitted sender)
smtp.mail=SRS0+WTTz=IF=mail.gnhlug.org=gnhlug-sysadmin-bounces at eforward3e.registrar-servers.com;
       dkim=pass header.i=@registrar-servers.com;
       dkim=neutral (body hash did not verify) header.i=@gmail.com;
       dmarc=fail (p=NONE dis=NONE) header.from=gmail.com
Received: from eforward3d0.registrar-servers.com
(eforward3d0.registrar-servers.com [199.229.254.203])
	by eforward3e.registrar-servers.com (Postfix) with ESMTP id 81E4228071E
	for <greg at freephile.com>; Wed, 29 Jul 2015 10:28:15 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.9.2 eforward3e.registrar-servers.com 81E4228071E
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
	d=registrar-servers.com; s=default; t=1438180095;
	bh=nFjk8ZDJk5/Mc2bVCwXpLiK689yhCilgAgpkxdd6M94=;
	h=From:Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:
	 List-Post:List-Help:List-Subscribe;
	b=avjuU7xnNrzJs9qobfuIYfgZzc0Q8bVmi59rlZg8GUAutMBogWBUCsSLyUEh2YybA
	 +CrFdvzWyH7WP4znxOkPgR2QXhfA7aVItM7MLOtvgH+EBe9ixtyXM/xkDRAvpIEv+S
	 f96JOrX0z0wkZ1TLLxPgsgWNSAbkSthYa65EVJFM=
X-DKIM-Failure: signature_incorrect
Received: from justice.gnhlug.org ([104.131.202.47])
	by eforward3d.registrar-servers.com with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
	(Exim 4.85)
	(envelope-from <gnhlug-sysadmin-bounces at mail.gnhlug.org>)
	id 1ZKSL4-0005WF-JU
	for greg at freephile.com; Wed, 29 Jul 2015 10:28:15 -0400
Received: from justice.gnhlug.org (localhost.localdomain [127.0.0.1])
	by justice.gnhlug.org (8.13.8/8.13.8) with ESMTP id t6TERZ4m012364;
	Wed, 29 Jul 2015 10:27:36 -0400
Received: from mail-io0-f170.google.com (mail-io0-f170.google.com
	[209.85.223.170])
	by justice.gnhlug.org (8.13.8/8.13.8) with ESMTP id t6TERYIs012360
	for <gnhlug-sysadmin at mail.gnhlug.org>; Wed, 29 Jul 2015 10:27:34 -0400
Received: by ioii16 with SMTP id i16so23067861ioi.0
	for <gnhlug-sysadmin at mail.gnhlug.org>;
	Wed, 29 Jul 2015 07:27:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
	h=mime-version:from:date:message-id:subject:to:content-type;
	bh=vBAt4yz+6mlGjA2YCAYL0ezCbXa7dHeoZbIhWj36kwg=;
	b=j17U1H+S1T8SEs6xyiRv+rxSsFYOxIuLJa3Aa2FnQ099r+fSqOobzjiqNX3zBxae61
	oVqtPH+fxFS/XjqUVpzf8isEIg3ZFTv4+r/4PieebopFpl2DjFtfTVbcsStWOhdX6W6T
	4+WIX9jgwQlLzEwPs3BK1Gwcep7w8Lwbv/YzureW/EqI71qGDszc8XlFswG1u/c7YKaj
	5BE2tl3S8xSVh3SJsNdFvcUEpzVv6HQzB124RTslvR3GMZgodMTVZoDyPHLYwHDlATnD
	31sLwHX2FlBu1XqEwqY4aFiWVBuOLTBURyzFAYVvhP4yNMVAZAaSTijtEOulQvKydIRZ
	n/MA==
X-Received: by 10.107.160.196 with SMTP id j187mr2155958ioe.80.1438180078776;
	Wed, 29 Jul 2015 07:27:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.24.196 with HTTP; Wed, 29 Jul 2015 07:27:39 -0700 (PDT)
From: Ben Scott <dragonhawk at gmail.com>
Date: Wed, 29 Jul 2015 10:27:39 -0400
Message-ID: <CAE=no6HGhPWOfWoBs16yhyPAFimTMCiK0UbjFG+UizqkQGSK-w at mail.gmail.com>
Subject: Google thinks GNHLUG is spam now
To: GNHLUG Sys Admin <gnhlug-sysadmin at mail.gnhlug.org>
X-BeenThere: gnhlug-sysadmin at mail.gnhlug.org
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: GNHLUG IT System Administration <gnhlug-sysadmin.mail.gnhlug.org>
List-Unsubscribe: <http://mail.gnhlug.org/mailman/listinfo/gnhlug-sysadmin>,
	<mailto:gnhlug-sysadmin-request at mail.gnhlug.org?subject=unsubscribe>
List-Archive: <http://mail.gnhlug.org/mailman/private/gnhlug-sysadmin>
List-Post: <mailto:gnhlug-sysadmin at mail.gnhlug.org>
List-Help: <mailto:gnhlug-sysadmin-request at mail.gnhlug.org?subject=help>
List-Subscribe: <http://mail.gnhlug.org/mailman/listinfo/gnhlug-sysadmin>,
	<mailto:gnhlug-sysadmin-request at mail.gnhlug.org?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: gnhlug-sysadmin-bounces at mail.gnhlug.org
Errors-To: gnhlug-sysadmin-bounces at mail.gnhlug.org
Authentication-Results: eforward3d.registrar-servers.com; dmarc=none
header.from=gmail.com
X-Filter-ID: s0sct1PQhAABKnZB5plbIZywyTpxCjTTa9Ssedqr1xG4LHAhzHmmtdlP7jYR6CoXLEwag2dB+g7a
 nu73o2WlJ13sAbuU7oYya4B93shQcu6Yz8tihhbHjEtSUYK5hmSxUS0vzp/u+BJmSaRT6YiDM1dy
 R+CtuKI9vgp5B4zrkgNxka1hqC1Al063C8Up0bcNdDgZNSpuFHhf0g0+Px+MhvT2ZVO/gQPd97hw
 tQBro4yPhezfIrBK5ZuOULNkorhEJHEwpnDCEke0TOgIEk2RkCG7X+t1TW39Ja77LGPpOwBOn1Zb
 1REfn0V2boOYgxsesY2luHDvp8dYzj+6wQIPH94PqMPLDlgJ5UqLvIm55RxFgwmpUOXPcPeresbP
 jCmpNHShThNwX2RE8NuebgaaWP4aQipw4sTNIQuoPbfSFlcUUv5bjl8xylukNWNHSryP3jR5NeVa
 JQBh0uawl0Cg8t4zxYGFqxiFodXK9F5ejOlsgTgg8ES4YHJ6XDsKxitm9YuRL2rBMc8Q141rRkEH
 tffIDrvcNja/aArbvf+uKYgnYp6NWXXfJDbx2qkws1JJNNjXQONvvHYpIYaF+D+HWeidX4Ts4xdG
 +C13IyWeZaJwkwdbwU51jZ8hPiebt0YF4C61QFyh+k7sOvpNxs+0DA==
X-Report-Abuse-To: spam at se3.registrar-servers.com
X-Filter-Fingerprint:
IFrWXGses7OKB5S5G8/dJadYYpXnpfwvyXSKTb7PnGVA3cTUQ1R++keuE7RDJ8Kg3RbMLUalw1oC
 mj99/u+Poh38tEMU4IgC4sNz49qn3HGok1JBYnOLzfRIhlEHQynLUpndEJ0YoaLytXXo8BMTaX2p
 Mk7LBarWD9Fj4R3eIu5hAWKYG7EAwlwyvxZGnG2tvVrgfUymQPHucVTHEILABVmBUl5IMqAervEo
 l4j9uLcAQyGGE7K4eDcaCZzImtW70r4hmKlR2uzt1bPGACfXzA==
Authentication-Results: registrar-servers.com; dkim=fail
(signature_incorrect) header.i=gmail.com
X-SpamExperts-Class: ham
X-SpamExperts-Evidence: Combined (0.19)
X-Recommended-Action: accept

Everything passing through justice.gnhlug.org is ending up marked
"Spam" for me, in Gmail.  I've gotten one report of the same from
another user.

I'm investigating, but if anyone knows of a way to find out why this
is happening, and/or how to fix it, please speak up.

Not knowing more, I'd speculate that Digital Ocean's IP blocks have a
reputation for originating a lot of spam (given their low cost and
easy startup), but that's just a guess.

-- Ben
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.gnhlug.org/pipermail/gnhlug-discuss/attachments/20150729/2cee087f/attachment-0001.html 