A
A
Anton178922016-06-16 15:22:15
linux
Anton17892, 2016-06-16 15:22:15

Why do emails for Outlook end up in spam (regardless of SPF, DKIM, DMARC)?

Hello!
I have a problem with email delivery (Outlook). They always end up in spam. Not in blacklists. SPF, DKIM, PTR, DMARC are all there.
Here is the content of the headers. On other services go without problems.
On the postfix + dovecot server.

Received: from AM2PR06MB0833.eurprd06.prod.outlook.com (10.161.128.27) by
 AM2PR06MB0836.eurprd06.prod.outlook.com (10.161.129.146) with Microsoft SMTP
 Server (TLS) id 15.1.523.4 via Mailbox Transport; Thu, 16 Jun 2016 12:10:03
 +0000
Received: from HE1PR06CA0003.eurprd06.prod.outlook.com (10.162.181.141) by
 AM2PR06MB0833.eurprd06.prod.outlook.com (10.161.128.27) with Microsoft SMTP
 Server (TLS) id 15.1.523.4; Thu, 16 Jun 2016 12:10:02 +0000
Received: from VE1EUR01FT019.eop-EUR01.prod.protection.outlook.com
 (2a01:111:f400:7e01::200) by HE1PR06CA0003.outlook.office365.com
 (2a01:111:e400:51fa::13) with Microsoft SMTP Server (TLS) id 15.1.523.4 via
 Frontend Transport; Thu, 16 Jun 2016 12:10:02 +0000
Received: from BAY004-MC6F32.hotmail.com (10.152.2.52) by
 VE1EUR01FT019.mail.protection.outlook.com (10.152.2.231) with Microsoft SMTP
 Server (TLS) id 15.1.511.7 via Frontend Transport; Thu, 16 Jun 2016 12:10:00
 +0000
Received: from mydomain.com ([88.198.XXX.XXX]) by BAY004-MC6F32.hotmail.com with Microsoft SMTPSVC(7.5.7601.23143);
   Thu, 16 Jun 2016 05:09:58 -0700
Received: by mydomain.com (Postfix, from userid 33)
  id 34E9D4615B8; Thu, 16 Jun 2016 15:09:57 +0300 (EEST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=mydomain.com; s=mail;
  t=1466078997; bh=3IeE5gbLDN2edubGG7NuHtTcADYD1yDvRObmfgf2jIA=;
  h=To:Subject:Date:From:From;
  b=ejXmpOjaFZyL/naDkNV5AqztHnwceg1XBXbI9E41ZY0U9GC7ZGI1jQFHwg2a7cyw/
   Nvm2zlYhNBn2fzzc45gkx5VPVpRKEe0tmuZvrtZH+aOx8jmSWD9PrDw6ryH4hKgA8T
   8j6gegAVUeEaEK4qx1ZQNwPzGNrMQumLx/fspyqA=

X-Sender: [email protected]
User-Agent: Roundcube Webmail/1.1.4
Return-Path: [email protected]


X-MS-Exchange-Organization-MessageDirectionality: Incoming
CMM-sender-ip: 88.198.XXX.XXX
CMM-sending-ip: 88.198.XXX.XXX
CMM-Authentication-Results: hotmail.com; spf=pass (sender IP is
 88.198.XXX.XXX; identity alignment result is pass and alignment mode is
 relaxed) [email protected]; dkim=pass (identity alignment
 result is pass and alignment mode is relaxed) header.d=mydomain.com;
 x-hmca=pass [email protected]
CMM-X-SID-PRA: [email protected]
CMM-X-AUTH-Result: PASS
CMM-X-SID-Result: PASS
CMM-X-Message-Status: n:n
CMM-X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02
CMM-X-Message-Info: 11chDOWqoTnMADlxjNy6sXrBkG2uau+Z1HIWiCemAvlFMOBammPq/nLln67zEOYUREZUmRq2Lq7gH9vDJs8tE2c8jB2R7OR/CN4z9nuwftcVj45Ba5zXdcimlZ22FwQNvjBTgTSsu2gHjOlb5IM0f+EWxjJcjGDnA2UY7Xbq7upXA6w/TTd3XwuEJ44jTrNOhIjh595Z6opPsG5gCFc6JY3V4hQDBTNdWHFnm6oFkKI=
X-MS-Exchange-Organization-SCL: 6
X-MS-Exchange-Organization-PCL: 2
X-Forefront-Antispam-Report: EFV:NLI;SFV:SKS;SFS:;DIR:INB;SFP:;SCL:6;SRVR:AM2PR06MB0833;H:BAY004-MC6F32.hotmail.com;FPR:;SPF:None;CAT:NONE;LANG:ro;CAT:NONE;
X-MS-Office365-Filtering-Correlation-Id: db6819b4-8350-4bd6-5ad5-08d395df24e8

SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: SKS
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 16 Jun 2016 12:10:00.7105
 (UTC)
X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM2PR06MB0833
X-MS-Exchange-Organization-AuthSource: VE1EUR01FT019.eop-EUR01.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:02.3036346

X-Microsoft-Antispam-Mailbox-Delivery:
  abwl:0;wl:0;pcwl:0;kl:0;iwl:0;ijl:0;dwl:0;dkl:0;rwl:0;ex:0;auth:1;dest:J;WIMS-SenderIP:88.198.XXX.XXX;WIMS-SPF:mydomain%2e;WIMS-DKIM:mydomain%2e;WIMS-822:noreply%40mydomain%2emd;WIMS-PRA:noreply%40mydomain%2emd;WIMS-AUTH:PASS;ENG:(102400050)(102420017);RF:JunkEmail;OFR:SpamFilterAuthJ;
MIME-Version: 1.0

Answer the question

In order to leave comments, you need to log in

3 answer(s)
A
akelsey, 2016-06-16
@akelsey

X-MS-Exchange-Organization-SCL: 6 = SCL Label
X-MS-Exchange-Organization-PCL: 2 = Phishing CL Label
6 is a very high value, someone is putting these headers on you. Apparently EOP.

A
Alexey, 2016-06-16
@alsopub

Maybe it's in noreply - blog.cakemail.com/noreply
Try to send from another address for the sake of experiment.
Here's more about noreply - Gmail emails with dkim&spf go to spam, but not to inbox. Letters from [email protected] - inbox, [email protected] - spam. How to fix the problem?

V
Vladimir Dubrovin, 2016-06-16
@z3apa3a

https://technet.microsoft.com/en-us/library/dn2050...
SCL:6 means that the email was recognized as spam
SFV:SKS means that the email was marked as spam without content checking, i.e. most likely by the reputation of the sender's network. Try contacting MS support
https://support.microsoft.com/en-us/getsupport?oas...

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question