OVH Community, votre nouvel espace communautaire.

Mails sent to sister company tagged as spam


fritz2cat
12/12/2012, 17h09
In your case I have no idea. The filtering rules will probably not be disclosed by ovh. AFAIK ovh uses techno from another French ISP.

Frédéric

wandfluhag
12/12/2012, 13h13
Thank you for the hint.
That's what the header says:

------
Received: from b0.ovh.net (HELO queue) (213.186.33.50)
by b0.ovh.net with SMTP; 11 Dec 2012 10:40:00 +0200
Received: from px2.ewmail.everyware.ch (HELO mail.scalera.ch) (212.71.120.182)
by mx1.ovh.net with SMTP; 11 Dec 2012 10:38:17 +0200
Received: from ....[edited: our internal mailservers]...

Subject: [SPAM] Migration Environement Citrix
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="=__PartF4C56FFA.0__="
X-Ovh-Tracer-Id: [.....]
X-Ovh-Remote: 212.71.120.182 (px2.ewmail.everyware.ch)
X-Ovh-Local: 213.186.33.29 (mx1.ovh.net)
X-OVH-SPAMSTATE: SPAM
X-OVH-SPAMSCORE: 100
X-OVH-SPAMCAUSE: gggruggvucftvghtrhhoucdtuddrfeehiedrtdejucetufdote ggodetrfcurfhrohhfihhlvgemucfqggfjnecuuegrihhlohhu themuceftddtnecuufhorhhtvgguuchrvggtihhpshculdeltd dmnegopfhokfffucdluddtmdenucfhrhhomhepfdffrghnihgv lhcuvehorhgsvghllhhinhhifdcuoeffrghnihgvlhdrvehorh gsvghllhhinhhiseifrghnughflhhuhhdrtghomheqnecuffho mhgrihhnpeifrghnughflhhuhhdrtghomhenucfjughrpefoff fhvffugggtsehmtddtreertdej
X-Spam-Tag: YES (ovhvrmailscanner[100])
-----

It seems to me, ovh.net servers clearly recognize the senders IP and name (our provider's smarthost).
Not all mails are tagged, this one was sent to 5 people @our sister company with a PDF attached. Pure text to a single recipient seems to be less of a problem.

fritz2cat
11/12/2012, 17h21
One should better have a sample of the e-mails tagged as spam in order to make a better diagnostic.

Usually this happens because the sending e-mail server (the one that talks SMTP with OVH e-mail server) lacks a correct DNS definition.

The sending host e.g. 123.45.67.89 should have a corresponding name. That is called a PTR record. The resulting name would be something like: mail-out01.example.com . Then if you look the IP address (A record) for the host with the name mail-out01.example.com, the correct answer is 123.45.67.89

IMO this criterion is not sufficient and leads to many many false positives and also many many false negatives.

Frédéric

wandfluhag
11/12/2012, 13h53
In random intervals mails sent from the motherhouse (***.com) to our french sister company (***.fr) are tagged as spam (X-Spam-Tag: YES (ovhvrmailscanner[100]).

On your side we use a internal mailserver and an external smarthost (px2.ewmail.everyware.ch and mail.scalera.ch). And our mail client is GroupWise 8.02. It happens with normal UTF-8 text mails or with attachements.

Can somenoe explain the OVH filter rules or criteria?

Thank you
Daniel