On Thursday, July 18, 2013, 3:54:51 PM, Nick Llewellin wrote:

Hi Kam

Thanks for your prompt reply.

MailMarshal support's stance was that I should contact SURBL as the policy that is marking the email as spam is controlled by SURBL.

I was thinking maybe the message might be routing through a marked server at some point but looking at the headers it's going straight from Google to our Marshal spam server.

I believe I have stumbled onto something. In the signature of user who is sending from fly1above.com is the domain www.pentawards.com which comes up as listed on Barracuba and INPS_DE (based on MXToolBox blacklist)

Still strange that in MailMarshal it is showing as SURBL that is the reason for it begin marked as spam ?

Thanks Nick

Neither domain has been blacklisted on SURBLs any time recently, however the IP 217.21.179.92 of pentawards.com is on Spamhaus SBL:

http://www.spamhaus.org/sbl/query/SBL173542

"Ref: SBL173542 217.21.179.92/32 is listed on the Spamhaus Block List - SBL 2013-01-22 08:06:53 GMT | combell.com open relay emitting spam" [...]

Perhaps MailMarshall confused SBL with SURBL?

-----Original Message----- From: Kevin A. McGrail [mailto:KMcGrail@PCCC.com] Sent: Friday, 19 July 2013 9:36 a.m. To: SURBL Discussion list Subject: Re: [SURBL-Discuss] fly1above.com / 216.185.152.155 blocked

Since I use SURBL and you mentioned the URL in the email, looking at my email should show if the issue is SURBL. However, it wasn't flagged:

X-Spam-Status: No, score=-1.7 required=6.6 tests=KAM_RPTR_PASSED, RCVD_IN_DNSWL_LOW,T_HEADER_FROM_DIFFERENT_DOMAINS autolearn=disabled version=3.4.0-rc1-r1493990

And this is only affecting that domain so I'm guessing this is nothing to do with SURBL or DNS, etc.

Does MailMarshal not give you any feedback at all as to why the mail was marked as spam? Otherwise you need to post on a MailMarshall forum to get any good feedback likely.

Regards, KAM

On 7/18/2013 5:06 PM, Nick Llewellin wrote:

...

Hi Guys

We are using the URL Sensor policy in MailMarshal which I understand uses the SURBL list.

I have used the SURBL Analysis tool on the website which shows fly1above.com and 216.185.152.155 as not blacklisted but whenever the user from this domain attempts to send an email to our customer URL Sensor marks the email as spam.

Is anyone able to advise ? If more information is required please let me know.

Thanks !

Nick Llewellin Helpdesk Support Representative Microsoft Certified Professional Optimus Systems Ltd

DDI: +64 9 3599337 Email: nick@optimus.co.nzmailto:nick@optimus.co.nz

---

Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

---

Discuss mailing list Discuss@lists.surbl.org http://lists.surbl.org/mailman/listinfo/discuss

Jeff C.