<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p><font face="Calibri">Another thought I had was whether you were
using the approved email server for your domain.</font></p>
<p><font face="Calibri">I had a case in the past where one client
would be unable to receive some emails from one of their
customers. Emails sent during the day came through fine. Emails
in the evening would be blocked. After some review of the
mailserver logs I saw that the sender was trying to send email
from home using Comcast's mail server, which was not included in
their DNS' SPF record, which specifies which mail servers are
allowed to send email "FROM:" their domain. Comcast wasn't in
the list. My client asked me to fix it. I said their customer
needed to stop using Comcast's mail server, or their IT person
needed to include Comcast in their SPF record. That would fix
the problem.<br>
</font></p>
<p><font face="Calibri">So, I guess one question that can be asked
is... are you using the correct mail server, as specified in the
SPF record of your DNS?</font></p>
<p><font face="Calibri">This is what mine looks like:</font></p>
<pre>@ IN TXT ("v=spf1 ip4:216.144.202.99 ip4:216.144.202.140 ip4:216.144.210.10 -all")</pre>
<p><font face="Calibri">Translated to English, this means "treat all
email that doesn't come from these three email servers as spam
and delete them."<br>
</font></p>
<p><font face="Calibri">Thanks,</font></p>
<font face="Calibri">Mik</font>
<pre class="moz-signature" cols="72">---
Mik Muller, president
Montague WebWorks
239-R Main Street, Greenfield, MA
413-320-5336
<a class="moz-txt-link-freetext" href="http://MontagueWebWorks.com">http://MontagueWebWorks.com</a>
Powered by ROCKETFUSION</pre>
<div class="moz-cite-prefix">On 5/28/2020 1:21 PM, Sam McClellan via
Hidden-discuss wrote:<br>
</div>
<blockquote type="cite"
cite="mid:e1e651a2-e359-02b2-caf6-15c93edc41a8@itabix.com">
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<font face="Helvetica, Arial, sans-serif">Yes, I added a DMARC
record to his dns earlier but it didn't help so far. <br>
<br>
For those who are interested, I created a knowledgebase article
for our site on DMARC, what it is and how to create one here:<br>
</font><br>
<font face="Helvetica, Arial, sans-serif"><a
href="https://itabix.com/client/knowledgebase/10077/Whatandsharp039s-a-DMARC-and-how-can-it-help-keep-my-emails-from-getting-rejected.html"
moz-do-not-send="true">https://itabix.com/client/knowledgebase/10077/Whatandsharp039s-a-DMARC-and-how-can-it-help-keep-my-emails-from-getting-rejected.html</a><br>
</font><font face="Helvetica, Arial, sans-serif"><font
face="Helvetica, Arial, sans-serif"><br>
Here's the relevant part below. If you want to set up a DMARC
on cPanel I give instructions in the article.<br>
<br>
<blockquote type="cite">
<p style="box-sizing: border-box; margin: 0px 0px 10px;
color: rgb(51, 51, 51); font-family: "Open
Sans", Verdana, Tahoma, serif; font-size: 16.8px;
font-style: normal; font-variant-ligatures: normal;
font-variant-caps: normal; font-weight: 200;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space:
normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255); text-decoration-style: initial;
text-decoration-color: initial;"><strong
style="box-sizing: border-box; font-weight: 700;"><span
style="box-sizing: border-box; font-family: Helvetica,
Arial, sans-serif;">About DMARC</span></strong></p>
<p style="box-sizing: border-box; margin: 0px 0px 10px;
color: rgb(51, 51, 51); font-family: "Open
Sans", Verdana, Tahoma, serif; font-size: 16.8px;
font-style: normal; font-variant-ligatures: normal;
font-variant-caps: normal; font-weight: 200;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space:
normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255); text-decoration-style: initial;
text-decoration-color: initial;"><span style="box-sizing:
border-box; font-family: Helvetica, Arial, sans-serif;">DMARC
is pretty confusing to even relatively geeky people.
DMARC (Domain-based Message Authentication, Reporting
and Conformance) is an email authentication protocol you
can add to your DNS zone (your domain's entry in the
web's "phone directory" that translates a domain name
into something a computer can use for getting you to a
website or passing along an email, etc.).<br
style="box-sizing: border-box;">
<br style="box-sizing: border-box;">
It's designed to give email domain owners the ability to
protect their domain from unauthorized use, commonly
known as email spoofing. The purpose and primary outcome
of implementing DMARC is to protect a domain from being
used in email compromise attacks, phishing emails, email
scams and other cyber threat activities.<br
style="box-sizing: border-box;">
<br style="box-sizing: border-box;">
It's also a way of showing other mail servers that your
email is reputable.</span></p>
<p style="box-sizing: border-box; margin: 0px 0px 10px;
color: rgb(51, 51, 51); font-family: "Open
Sans", Verdana, Tahoma, serif; font-size: 16.8px;
font-style: normal; font-variant-ligatures: normal;
font-variant-caps: normal; font-weight: 200;
letter-spacing: normal; orphans: 2; text-align: start;
text-indent: 0px; text-transform: none; white-space:
normal; widows: 2; word-spacing: 0px;
-webkit-text-stroke-width: 0px; background-color: rgb(255,
255, 255); text-decoration-style: initial;
text-decoration-color: initial;"><span style="box-sizing:
border-box; font-family: Helvetica, Arial, sans-serif;"><strong
style="box-sizing: border-box; font-weight: 700;">Creating
a DMARC Record</strong><br style="box-sizing:
border-box;">
<br style="box-sizing: border-box;">
To create a DMARC record, if you have access to your DNS
zone records, create a new TXT record with the name
_dmarc.yourdomain.com<br style="box-sizing: border-box;">
and content that looks something like this<br
style="box-sizing: border-box;">
v=DMARC1;p=reject;sp=none;adkim=r;aspf=r;pct=100;fo=0;rf=afrf;ri=86400;ruf=<a
class="moz-txt-link-freetext"
href="mailto:me@mydomain.com" moz-do-not-send="true">mailto:me@mydomain.com</a><br
style="box-sizing: border-box;">
<br style="box-sizing: border-box;">
Obviously this is not something you can create out of
the blue. cPanel, the world's most widely used control
panel for web hosting that we use at Itabix, now has a
built in DMARC creation tool in the DNS zone editor
(we'll walk you through that below), or you can use a
DMARC generator on the web however most of the DMARC
generators are also difficult to understand. We really
like this one:<br style="box-sizing: border-box;">
<br style="box-sizing: border-box;">
<a href="https://dmarcian.com/dmarc-record-wizard/"
style="box-sizing: border-box; background-color:
transparent; color: rgb(0, 85, 136); text-decoration:
none;" moz-do-not-send="true">https://dmarcian.com/dmarc-record-wizard/</a><br>
</span></p>
</blockquote>
</font></font><font face="Helvetica, Arial, sans-serif">Remember
to set the policy to Quarantine (set aside for additional
processing) or Reject (get rid of it) because, as Larry said,
setting it to do nothing won't cut it with a lot of mail servers
and you'll still be rejected.<br>
<br>
Sam<br>
</font>
<div class="moz-signature"><br>
<hr size="1"> Sam McClellan<br>
<strong>Itabix, Inc</strong><br>
<i>One place for all things Web</i><br>
<a class="moz-txt-link-abbreviated" href="mailto:sam@itabix.com"
moz-do-not-send="true">sam@itabix.com</a><br>
<a class="moz-txt-link-freetext" href="https://itabix.com"
moz-do-not-send="true">https://itabix.com</a><br>
Main - 413.587.4600<br>
Toll-free - 877-7ITABIX (877.748.2249) <br>
<br>
</div>
<div class="moz-cite-prefix">On 5/28/2020 10:37 AM, Larry Kuttner
via Hidden-discuss wrote:<br>
</div>
<blockquote type="cite"
cite="mid:CACqgBpaB8hbgE-777_fE9LCC4nduLt3pY5Kd87cY=4CfXGGL+g@mail.gmail.com">
<meta http-equiv="content-type" content="text/html;
charset=UTF-8">
<div dir="ltr">It is probably the lack of a DMARC record that is
causing it. In that past year, I have seen several providers
start blocking email from domains that do not have a DMARC
policy.
<div>I also recently found that the DMARC policy must
specifically have a quarantine or reject policy. When I
added a quarantine policy to our existing DMARC, many email
recipients that were getting rejected are now being
accepted.
<div><br>
</div>
<div>Here's some helpful info: <a
href="https://www.dmarcanalyzer.com/how-to-create-a-dmarc-record/"
moz-do-not-send="true">https://www.dmarcanalyzer.com/how-to-create-a-dmarc-record/</a></div>
<div>
<div><br>
</div>
-- <br>
<div dir="ltr" class="gmail_signature"
data-smartmail="gmail_signature">
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div>
<div dir="ltr">
<div dir="ltr"
style="color:rgb(0,0,0);font-size:12.8px"><b>Larry
Kuttner</b><br>
Information Technology Manager<br>
Northeast Sustainable Energy Association
(NESEA)</div>
<div dir="ltr"><font color="#000000"><span
style="font-size:12.8px">20 Federal
Street, Greenfield, MA 01301</span></font><br>
</div>
<div dir="ltr"><a
href="tel:(413)%20774-6051"
value="+14137746051"
style="color:rgb(17,85,204);font-size:12.8px"
target="_blank" moz-do-not-send="true">413.774.6051</a><font
style="color:rgb(0,0,0);font-size:12.8px" color="#000000"><span
style="font-size:12.8px"> ext. </span>12 </font><font
color="#000000"><b>·</b></font><span
style="color:rgb(0,0,0);font-size:12.8px"> </span><font
style="color:rgb(0,0,0);font-size:12.8px" color="#000000"><a
href="mailto:lkuttner@nesea.org"
style="color:rgb(17,85,204)"
target="_blank"
moz-do-not-send="true">lkuttner@nesea.org</a></font></div>
<div dir="ltr"
style="color:rgb(0,0,0);font-size:12.8px"><font
color="#000000"><a
href="http://www.nesea.org/"
style="color:rgb(17,85,204)"
target="_blank"
moz-do-not-send="true">www.nesea.org</a></font></div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Hidden-discuss mailing list - home page: <a class="moz-txt-link-freetext" href="http://www.hidden-tech.net" moz-do-not-send="true">http://www.hidden-tech.net</a>
<a class="moz-txt-link-abbreviated" href="mailto:Hidden-discuss@lists.hidden-tech.net" moz-do-not-send="true">Hidden-discuss@lists.hidden-tech.net</a>
You are receiving this because you are on the Hidden-Tech Discussion list.
If you would like to change your list preferences, Go to the Members
page on the Hidden Tech Web site.
<a class="moz-txt-link-freetext" href="http://www.hidden-tech.net/members" moz-do-not-send="true">http://www.hidden-tech.net/members</a>
</pre>
</blockquote>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Hidden-discuss mailing list - home page: <a class="moz-txt-link-freetext" href="http://www.hidden-tech.net">http://www.hidden-tech.net</a>
<a class="moz-txt-link-abbreviated" href="mailto:Hidden-discuss@lists.hidden-tech.net">Hidden-discuss@lists.hidden-tech.net</a>
You are receiving this because you are on the Hidden-Tech Discussion list.
If you would like to change your list preferences, Go to the Members
page on the Hidden Tech Web site.
<a class="moz-txt-link-freetext" href="http://www.hidden-tech.net/members">http://www.hidden-tech.net/members</a>
</pre>
</blockquote>
</body>
</html>