<div dir="ltr">Sorry for the brevity of my earlier "Is there an SPF record?" response... (I hate using a phone to type messages.)<div><br></div><div>Anyway, I'm using GMail here and received your "Google thinks GNHLUG is spam now" msg in my regular inbox.</div><div><br></div><div>Here is the original of what I received earlier... I notice that there is a DKIM signature failure in the middle. I don't know much about DKIM, but maybe that is the source of the issue.</div><div><br></div><div><pre style="color:rgb(0,0,0);word-wrap:break-word;white-space:pre-wrap">Delivered-To: <a href="mailto:greg.rundlett@gmail.com">greg.rundlett@gmail.com</a>
Received: by 10.36.78.134 with SMTP id r128csp37496ita;
Wed, 29 Jul 2015 07:28:16 -0700 (PDT)
X-Received: by 10.107.132.19 with SMTP id g19mr1438420iod.3.1438180096053;
Wed, 29 Jul 2015 07:28:16 -0700 (PDT)
Return-Path: <SRS0+WTTz=IF=<a href="http://mail.gnhlug.org">mail.gnhlug.org</a>=<a href="mailto:gnhlug-sysadmin-bounces@eforward3e.registrar-servers.com">gnhlug-sysadmin-bounces@eforward3e.registrar-servers.com</a>>
Received: from <a href="http://eforward3e.registrar-servers.com">eforward3e.registrar-servers.com</a> (<a href="http://eforward3e.registrar-servers.com">eforward3e.registrar-servers.com</a>. [38.101.213.201])
by <a href="http://mx.google.com">mx.google.com</a> with ESMTP id hv6si775133igb.11.2015.07.29.07.28.15
for <<a href="mailto:greg.rundlett@gmail.com">greg.rundlett@gmail.com</a>>;
Wed, 29 Jul 2015 07:28:16 -0700 (PDT)
Received-SPF: pass (<a href="http://google.com">google.com</a>: domain of SRS0+WTTz=IF=<a href="http://mail.gnhlug.org">mail.gnhlug.org</a>=<a href="mailto:gnhlug-sysadmin-bounces@eforward3e.registrar-servers.com">gnhlug-sysadmin-bounces@eforward3e.registrar-servers.com</a> designates 38.101.213.201 as permitted sender) client-ip=38.101.213.201;
Authentication-Results: <a href="http://mx.google.com">mx.google.com</a>;
spf=pass (<a href="http://google.com">google.com</a>: domain of SRS0+WTTz=IF=<a href="http://mail.gnhlug.org">mail.gnhlug.org</a>=<a href="mailto:gnhlug-sysadmin-bounces@eforward3e.registrar-servers.com">gnhlug-sysadmin-bounces@eforward3e.registrar-servers.com</a> designates 38.101.213.201 as permitted sender) smtp.mail=SRS0+WTTz=IF=<a href="http://mail.gnhlug.org">mail.gnhlug.org</a>=<a href="mailto:gnhlug-sysadmin-bounces@eforward3e.registrar-servers.com">gnhlug-sysadmin-bounces@eforward3e.registrar-servers.com</a>;
dkim=pass header.i=@<a href="http://registrar-servers.com">registrar-servers.com</a>;
dkim=neutral (body hash did not verify) header.i=@<a href="http://gmail.com">gmail.com</a>;
dmarc=fail (p=NONE dis=NONE) header.from=<a href="http://gmail.com">gmail.com</a>
Received: from <a href="http://eforward3d0.registrar-servers.com">eforward3d0.registrar-servers.com</a> (<a href="http://eforward3d0.registrar-servers.com">eforward3d0.registrar-servers.com</a> [199.229.254.203])
by <a href="http://eforward3e.registrar-servers.com">eforward3e.registrar-servers.com</a> (Postfix) with ESMTP id 81E4228071E
for <<a href="mailto:greg@freephile.com">greg@freephile.com</a>>; Wed, 29 Jul 2015 10:28:15 -0400 (EDT)
DKIM-Filter: OpenDKIM Filter v2.9.2 <a href="http://eforward3e.registrar-servers.com">eforward3e.registrar-servers.com</a> 81E4228071E
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=<a href="http://registrar-servers.com">registrar-servers.com</a>; s=default; t=1438180095;
bh=nFjk8ZDJk5/Mc2bVCwXpLiK689yhCilgAgpkxdd6M94=;
h=From:Date:Subject:To:List-Id:List-Unsubscribe:List-Archive:
List-Post:List-Help:List-Subscribe;
b=avjuU7xnNrzJs9qobfuIYfgZzc0Q8bVmi59rlZg8GUAutMBogWBUCsSLyUEh2YybA
+CrFdvzWyH7WP4znxOkPgR2QXhfA7aVItM7MLOtvgH+EBe9ixtyXM/xkDRAvpIEv+S
f96JOrX0z0wkZ1TLLxPgsgWNSAbkSthYa65EVJFM=
X-DKIM-Failure: signature_incorrect
Received: from <a href="http://justice.gnhlug.org">justice.gnhlug.org</a> ([104.131.202.47])
by <a href="http://eforward3d.registrar-servers.com">eforward3d.registrar-servers.com</a> with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)
(Exim 4.85)
(envelope-from <<a href="mailto:gnhlug-sysadmin-bounces@mail.gnhlug.org">gnhlug-sysadmin-bounces@mail.gnhlug.org</a>>)
id 1ZKSL4-0005WF-JU
for <a href="mailto:greg@freephile.com">greg@freephile.com</a>; Wed, 29 Jul 2015 10:28:15 -0400
Received: from <a href="http://justice.gnhlug.org">justice.gnhlug.org</a> (localhost.localdomain [127.0.0.1])
by <a href="http://justice.gnhlug.org">justice.gnhlug.org</a> (8.13.8/8.13.8) with ESMTP id t6TERZ4m012364;
Wed, 29 Jul 2015 10:27:36 -0400
Received: from <a href="http://mail-io0-f170.google.com">mail-io0-f170.google.com</a> (<a href="http://mail-io0-f170.google.com">mail-io0-f170.google.com</a>
[209.85.223.170])
by <a href="http://justice.gnhlug.org">justice.gnhlug.org</a> (8.13.8/8.13.8) with ESMTP id t6TERYIs012360
for <<a href="mailto:gnhlug-sysadmin@mail.gnhlug.org">gnhlug-sysadmin@mail.gnhlug.org</a>>; Wed, 29 Jul 2015 10:27:34 -0400
Received: by ioii16 with SMTP id i16so23067861ioi.0
for <<a href="mailto:gnhlug-sysadmin@mail.gnhlug.org">gnhlug-sysadmin@mail.gnhlug.org</a>>;
Wed, 29 Jul 2015 07:27:58 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=<a href="http://gmail.com">gmail.com</a>; s=20120113;
h=mime-version:from:date:message-id:subject:to:content-type;
bh=vBAt4yz+6mlGjA2YCAYL0ezCbXa7dHeoZbIhWj36kwg=;
b=j17U1H+S1T8SEs6xyiRv+rxSsFYOxIuLJa3Aa2FnQ099r+fSqOobzjiqNX3zBxae61
oVqtPH+fxFS/XjqUVpzf8isEIg3ZFTv4+r/4PieebopFpl2DjFtfTVbcsStWOhdX6W6T
4+WIX9jgwQlLzEwPs3BK1Gwcep7w8Lwbv/YzureW/EqI71qGDszc8XlFswG1u/c7YKaj
5BE2tl3S8xSVh3SJsNdFvcUEpzVv6HQzB124RTslvR3GMZgodMTVZoDyPHLYwHDlATnD
31sLwHX2FlBu1XqEwqY4aFiWVBuOLTBURyzFAYVvhP4yNMVAZAaSTijtEOulQvKydIRZ
n/MA==
X-Received: by 10.107.160.196 with SMTP id j187mr2155958ioe.80.1438180078776;
Wed, 29 Jul 2015 07:27:58 -0700 (PDT)
MIME-Version: 1.0
Received: by 10.79.24.196 with HTTP; Wed, 29 Jul 2015 07:27:39 -0700 (PDT)
From: Ben Scott <<a href="mailto:dragonhawk@gmail.com">dragonhawk@gmail.com</a>>
Date: Wed, 29 Jul 2015 10:27:39 -0400
Message-ID: <CAE=<a href="mailto:no6HGhPWOfWoBs16yhyPAFimTMCiK0UbjFG%2BUizqkQGSK-w@mail.gmail.com">no6HGhPWOfWoBs16yhyPAFimTMCiK0UbjFG+UizqkQGSK-w@mail.gmail.com</a>>
Subject: Google thinks GNHLUG is spam now
To: GNHLUG Sys Admin <<a href="mailto:gnhlug-sysadmin@mail.gnhlug.org">gnhlug-sysadmin@mail.gnhlug.org</a>>
X-BeenThere: <a href="mailto:gnhlug-sysadmin@mail.gnhlug.org">gnhlug-sysadmin@mail.gnhlug.org</a>
X-Mailman-Version: 2.1.9
Precedence: list
List-Id: GNHLUG IT System Administration <<a href="http://gnhlug-sysadmin.mail.gnhlug.org">gnhlug-sysadmin.mail.gnhlug.org</a>>
List-Unsubscribe: <<a href="http://mail.gnhlug.org/mailman/listinfo/gnhlug-sysadmin">http://mail.gnhlug.org/mailman/listinfo/gnhlug-sysadmin</a>>,
<mailto:<a href="mailto:gnhlug-sysadmin-request@mail.gnhlug.org">gnhlug-sysadmin-request@mail.gnhlug.org</a>?subject=unsubscribe>
List-Archive: <<a href="http://mail.gnhlug.org/mailman/private/gnhlug-sysadmin">http://mail.gnhlug.org/mailman/private/gnhlug-sysadmin</a>>
List-Post: <mailto:<a href="mailto:gnhlug-sysadmin@mail.gnhlug.org">gnhlug-sysadmin@mail.gnhlug.org</a>>
List-Help: <mailto:<a href="mailto:gnhlug-sysadmin-request@mail.gnhlug.org">gnhlug-sysadmin-request@mail.gnhlug.org</a>?subject=help>
List-Subscribe: <<a href="http://mail.gnhlug.org/mailman/listinfo/gnhlug-sysadmin">http://mail.gnhlug.org/mailman/listinfo/gnhlug-sysadmin</a>>,
<mailto:<a href="mailto:gnhlug-sysadmin-request@mail.gnhlug.org">gnhlug-sysadmin-request@mail.gnhlug.org</a>?subject=subscribe>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Sender: <a href="mailto:gnhlug-sysadmin-bounces@mail.gnhlug.org">gnhlug-sysadmin-bounces@mail.gnhlug.org</a>
Errors-To: <a href="mailto:gnhlug-sysadmin-bounces@mail.gnhlug.org">gnhlug-sysadmin-bounces@mail.gnhlug.org</a>
Authentication-Results: <a href="http://eforward3d.registrar-servers.com">eforward3d.registrar-servers.com</a>; dmarc=none header.from=<a href="http://gmail.com">gmail.com</a>
X-Filter-ID: s0sct1PQhAABKnZB5plbIZywyTpxCjTTa9Ssedqr1xG4LHAhzHmmtdlP7jYR6CoXLEwag2dB+g7a
nu73o2WlJ13sAbuU7oYya4B93shQcu6Yz8tihhbHjEtSUYK5hmSxUS0vzp/u+BJmSaRT6YiDM1dy
R+CtuKI9vgp5B4zrkgNxka1hqC1Al063C8Up0bcNdDgZNSpuFHhf0g0+Px+MhvT2ZVO/gQPd97hw
tQBro4yPhezfIrBK5ZuOULNkorhEJHEwpnDCEke0TOgIEk2RkCG7X+t1TW39Ja77LGPpOwBOn1Zb
1REfn0V2boOYgxsesY2luHDvp8dYzj+6wQIPH94PqMPLDlgJ5UqLvIm55RxFgwmpUOXPcPeresbP
jCmpNHShThNwX2RE8NuebgaaWP4aQipw4sTNIQuoPbfSFlcUUv5bjl8xylukNWNHSryP3jR5NeVa
JQBh0uawl0Cg8t4zxYGFqxiFodXK9F5ejOlsgTgg8ES4YHJ6XDsKxitm9YuRL2rBMc8Q141rRkEH
tffIDrvcNja/aArbvf+uKYgnYp6NWXXfJDbx2qkws1JJNNjXQONvvHYpIYaF+D+HWeidX4Ts4xdG
+C13IyWeZaJwkwdbwU51jZ8hPiebt0YF4C61QFyh+k7sOvpNxs+0DA==
X-Report-Abuse-To: <a href="mailto:spam@se3.registrar-servers.com">spam@se3.registrar-servers.com</a>
X-Filter-Fingerprint: IFrWXGses7OKB5S5G8/dJadYYpXnpfwvyXSKTb7PnGVA3cTUQ1R++keuE7RDJ8Kg3RbMLUalw1oC
mj99/u+Poh38tEMU4IgC4sNz49qn3HGok1JBYnOLzfRIhlEHQynLUpndEJ0YoaLytXXo8BMTaX2p
Mk7LBarWD9Fj4R3eIu5hAWKYG7EAwlwyvxZGnG2tvVrgfUymQPHucVTHEILABVmBUl5IMqAervEo
l4j9uLcAQyGGE7K4eDcaCZzImtW70r4hmKlR2uzt1bPGACfXzA==
Authentication-Results: <a href="http://registrar-servers.com">registrar-servers.com</a>; dkim=fail (signature_incorrect) header.i=<a href="http://gmail.com">gmail.com</a>
X-SpamExperts-Class: ham
X-SpamExperts-Evidence: Combined (0.19)
X-Recommended-Action: accept
Everything passing through <a href="http://justice.gnhlug.org">justice.gnhlug.org</a> is ending up marked
"Spam" for me, in Gmail. I've gotten one report of the same from
another user.
I'm investigating, but if anyone knows of a way to find out why this
is happening, and/or how to fix it, please speak up.
Not knowing more, I'd speculate that Digital Ocean's IP blocks have a
reputation for originating a lot of spam (given their low cost and
easy startup), but that's just a guess.
-- Ben</pre></div></div>