Mail in SPAM - iRedMail - Postfix

[Rev.]

Buongiorno a tutti,
ho un piccolo problema di recapito delle mail del mio mail server casalingo. Premetto che le mail le ricevo in maniera immediate e senza particolari problemi da qualsiasi indirizzo di posta.

Il problema che si presenta è quando devo mandare una mail. Molte volte (in hotmail ed in alcuni indirizzi di posta aziendali) viene salvata nello spam.

Ho letto alcune guide in internet al momento della realizzazione del mail server e ho di conseguenza configurato SPF e DKIM senza particolari problemi.
Inoltre ho fatto un check del mio dominio se era in qualche sorta di blacklist.

Ecco il report di port 25

This message is an automatic response from Port25's authentication verifier
service at verifier.port25.com.  The service allows email senders to perform
a simple check of various sender authentication mechanisms.  It is provided
free of charge, in the hope that it is useful to the email community.  While
it is not officially supported, we welcome any feedback you may have at
<[email protected]>.

Thank you for using the verifier,

The Port25 Solutions, Inc. team

==========================================================
Summary of Results
==========================================================
SPF check:          pass
DomainKeys check:   neutral
DKIM check:         pass
Sender-ID check:    pass
SpamAssassin check: ham

==========================================================
Details:
==========================================================

HELO hostname:  posta.frankservice.net
Source IP:      176.65.85.99
mail-from:      [email protected]

----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result:         pass 
ID(s) verified: [email protected]
DNS record(s):
    frankservice.net. SPF (no records)
    frankservice.net. 3600 IN TXT "v=spf1 a mx ptr mx:posta.frankservice.net -all"
    frankservice.net. 3600 IN TXT "1|www.frankservice.net"
    frankservice.net. 3600 IN A 176.65.85.99

----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------
Result:         neutral (message not signed)
ID(s) verified: [email protected]
DNS record(s):

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result:         pass (matches From: [email protected])
ID(s) verified: header.d=frankservice.net
Canonicalized Headers:
    content-transfer-encoding:quoted-printable'0D''0A'
    content-type:text/plain;'20'charset=iso-8859-15;'20'format=flowed'0D''0A'
    mime-version:1.0'0D''0A'
    user-agent:Mozilla/5.0'20'(Windows'20'NT'20'6.2;'20'WOW64;'20'rv:38.0)'20'Gecko/20100101'20'Thunderbird/38.3.0'0D''0A'
    date:Sat,'20'7'20'Nov'20'2015'20'09:38:48'20'+0100'0D''0A'
    message-id:<[email protected]>'0D''0A'
    subject:test'0D''0A'
    from:"FrankService.net"'20'<[email protected]>'0D''0A'
    to:[email protected]'0D''0A'
    dkim-signature:v=1;'20'a=rsa-sha256;'20'c=relaxed/simple;'20'd=frankservice.net;'20'h=content-transfer-encoding:content-type:content-type'20':mime-version:user-agent:date:date:message-id:subject:subject'20':from:from:to;'20's=dkim;'20't=1446885578;'20'x=1447749579;'20'bh=o8YWvnCnQU'20'dgKwuj5+WpdIkgqaFx/MhYm3zWDWBih1Q=;'20'b=

Canonicalized Body:
    '0D''0A'
    '0D''0A'
    ---'0D''0A'
    Questa'20'e-mail'20'=E8'20'stata'20'controllata'20'per'20'individuare'20'virus'20'con'20'Avast'20'antivir='0D''0A'
    us.'0D''0A'
    https://www.avast.com/antivirus'0D''0A'
    

DNS record(s):
    dkim._domainkey.frankservice.net. 3600 IN TXT "k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lr2LbCcYO3wR+G4y0uJXJ1nz1IZqFEDWSDanKbYQ7sjHKzkcAqZV9De4kyCYCmHM7E9/zEBUb4S3s6M3hG+n2egR9myaP4j0DqmYjov+W32s214bnzaw0DI+0TWLeTXvb42hmtfdWDSN9DX/nXQL26Ovi9hoHBt5X9WN9Ono+nCbpvh6mpQNmwuHvQcejzqw1AnzsSbvbih0k3hemxbvVMKNiLISGMeEpbSvf/bBO6QiVDXQ3aXmQ06ML2sT55cxXA1U9aiOwNcRdwnghsh7eoKLUt/DNEhu/qWTdrinSuEacViFyzbmPAp828wZr/EGx+ddK49CXNQtwrIOfnPFQIDAQAB"

Public key used for verification: dkim._domainkey.frankservice.net (2048 bits)

NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions.  If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.

----------------------------------------------------------
Sender-ID check details:
----------------------------------------------------------
Result:         pass 
ID(s) verified: [email protected]
DNS record(s):
    frankservice.net. SPF (no records)
    frankservice.net. 3600 IN TXT "v=spf1 a mx ptr mx:posta.frankservice.net -all"
    frankservice.net. 3600 IN TXT "1|www.frankservice.net"
    frankservice.net. 3600 IN A 176.65.85.99

----------------------------------------------------------
SpamAssassin check details:
----------------------------------------------------------
SpamAssassin v3.4.0 (2014-02-07)

Result:         ham  (-2.0 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was blocked.
                            See
                            http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                             for more information.
                            [URIs: avast.com]
-0.0 T_RP_MATCHES_RCVD      Envelope sender domain matches handover relay
                            domain
-0.0 SPF_PASS               SPF: sender matches SPF record
-1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                            [score: 0.0000]
-0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                            domain
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
 0.0 T_FROM_12LTRDOM        From a 12-letter domain

==========================================================
Explanation of the possible results (from RFC 5451)
==========================================================

SPF and Sender-ID Results
=========================

"none"
      No policy records were published at the sender's DNS domain.

"neutral"
      The sender's ADMD has asserted that it cannot or does not
      want to assert whether or not the sending IP address is authorized
      to send mail using the sender's DNS domain.

"pass"
      The client is authorized by the sender's ADMD to inject or
      relay mail on behalf of the sender's DNS domain.

"policy"
     The client is authorized to inject or relay mail on behalf
      of the sender's DNS domain according to the authentication
      method's algorithm, but local policy dictates that the result is
      unacceptable.

"fail"
      This client is explicitly not authorized to inject or
      relay mail using the sender's DNS domain.

"softfail"
      The sender's ADMD believes the client was not authorized
      to inject or relay mail using the sender's DNS domain, but is
      unwilling to make a strong assertion to that effect.

"temperror"
      The message could not be verified due to some error that
      is likely transient in nature, such as a temporary inability to
      retrieve a policy record from DNS.  A later attempt may produce a
      final result.

"permerror"
      The message could not be verified due to some error that
      is unrecoverable, such as a required header field being absent or
      a syntax error in a retrieved DNS TXT record.  A later attempt is
      unlikely to produce a final result.


DKIM and DomainKeys Results
===========================

"none"
      The message was not signed.

"pass"
      The message was signed, the signature or signatures were
      acceptable to the verifier, and the signature(s) passed
      verification tests.

"fail"
      The message was signed and the signature or signatures were
      acceptable to the verifier, but they failed the verification
      test(s).

"policy"
      The message was signed but the signature or signatures were
      not acceptable to the verifier.

"neutral"
      The message was signed but the signature or signatures
      contained syntax errors or were not otherwise able to be
      processed.  This result SHOULD also be used for other
      failures not covered elsewhere in this list.

"temperror"
      The message could not be verified due to some error that
      is likely transient in nature, such as a temporary inability
      to retrieve a public key.  A later attempt may produce a
      final result.

"permerror"
      The message could not be verified due to some error that
      is unrecoverable, such as a required header field being
      absent. A later attempt is unlikely to produce a final result.


==========================================================
Original Email
==========================================================

Return-Path: <[email protected]>
Received: from posta.frankservice.net (176.65.85.99) by verifier.port25.com id h7ms9o20i3ge for <[email protected]>; Sat, 7 Nov 2015 03:38:52 -0500 (envelope-from <[email protected]>)
Authentication-Results: verifier.port25.com; spf=pass [email protected]
Authentication-Results: verifier.port25.com; domainkeys=neutral (message not signed) [email protected]
Authentication-Results: verifier.port25.com; dkim=pass (matches From: [email protected]) header.d=frankservice.net
Authentication-Results: verifier.port25.com; sender-id=pass [email protected]
Received: from posta.frankservice.net (posta.frankservice.net [127.0.0.1])
	by posta.frankservice.net (Postfix) with ESMTP id CE4D16045A
	for <[email protected]>; Sat,  7 Nov 2015 09:39:39 +0100 (CET)
Authentication-Results: posta.frankservice.net (amavisd-new); dkim=pass
	reason="pass (just generated, assumed good)" header.d=frankservice.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=frankservice.net;
	 h=content-transfer-encoding:content-type:content-type
	:mime-version:user-agent:date:date:message-id:subject:subject
	:from:from:to; s=dkim; t=1446885578; x=1447749579; bh=o8YWvnCnQU
	dgKwuj5+WpdIkgqaFx/MhYm3zWDWBih1Q=; b=Yov4zRLoTiHqehBDVTHFXSyGKY
	xcFcarUORFwljjWEDKDEd6Xtf8WKzQ2FKDjD2j9UpO1U0nJcMNN20VssaJMLQKPn
	nMOjyXt7CMo45rlIjAde3No5m0p5+j9GtH0I9yVAFuNrVAjzvGiYTMzhTA6zAGn/
	lMoHu3E1JuAAJsxMcsmYFdtY6flpgJsB3OK1ALfVGhH5LcEpS4ATrIvCEqQ/mAFv
	NJ7fg9CKy0ksZ4WYl7ugijaQzdDAEBwvuzrfZdidLX3BWWwPteL9DxtrRMZ/+SK6
	gGzmSPq25PEHRah1smde2BLI3miW2bmpPVbffK9mu3C2eBIt7ZlqHIiQCKaw==
X-Virus-Scanned: Debian amavisd-new at vectormail
Received: from posta.frankservice.net ([127.0.0.1])
	by posta.frankservice.net (posta.frankservice.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id jZmftS6sLvuK for <[email protected]>;
	Sat,  7 Nov 2015 09:39:38 +0100 (CET)
Received: from [127.0.0.1] (unknown [192.168.0.107])
	by posta.frankservice.net (Postfix) with ESMTPSA id A20D86020C
	for <[email protected]>; Sat,  7 Nov 2015 09:39:38 +0100 (CET)
To: [email protected]
From: "FrankService.net" <[email protected]>
Subject: test
Message-ID: <[email protected]>
Date: Sat, 7 Nov 2015 09:38:48 +0100
User-Agent: Mozilla/5.0 (Windows NT 6.2; WOW64; rv:38.0) Gecko/20100101
 Thunderbird/38.3.0
MIME-Version: 1.0
Content-Type: text/plain; charset=iso-8859-15; format=flowed
Content-Transfer-Encoding: quoted-printable
X-Antivirus: avast! (VPS 151106-4, 06/11/2015), Outbound message
X-Antivirus-Status: Clean



---
Questa e-mail =E8 stata controllata per individuare virus con Avast antivir=
us.
https://www.avast.com/antivirus

e qui ho un report di DKIMcore

DKIM Record for dkim._domainkey.frankservice.net

k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Lr2LbCcYO3wR+G4y0uJX
J1nz1IZqFEDWSDanKbYQ7sjHKzkcAqZV9De4kyCYCmHM7E9/zEBUb4S3s6M3hG+n2egR9myaP4
j0DqmYjov+W32s214bnzaw0DI+0TWLeTXvb42hmtfdWDSN9DX/nXQL26Ovi9hoHBt5X9WN9Ono
+nCbpvh6mpQNmwuHvQcejzqw1AnzsSbvbih0k3hemxbvVMKNiLISGMeEpbSvf/bBO6QiVDXQ3a
XmQ06ML2sT55cxXA1U9aiOwNcRdwnghsh7eoKLUt/DNEhu/qWTdrinSuEacViFyzbmPAp828wZ
r/EGx+ddK49CXNQtwrIOfnPFQIDAQAB

This is a valid DKIM key record

Qui sembra passare tutti i test tranquillamente.

Secondo voi ci sono altre configurazioni o altre cose da sistemare perchè questo non finisca nello spam?

Grazie in anticipo

[conzi]

sul tuo ip pubblico manca il reverse dns...
il resto mi pare tutto a posto...
l'helo con cui ti presenti fallo coincidere con l'host che dichiari per il reverse dns e magari pure con l'mx primario.

[Kaya]

Magari posta anche gli header di una delle mail che finisce nello spam, così vediamo quale è il motivo.

[Rev.]

Ecco cosa mi compare nella header di una mail

x-store-info:qAUQJzZ73IJCLUJ+0n7ZQ/7zemkEy5SfqG7wwBQ/cGsil0o3rK+cBtE5mBL6FLQwkL9+YFkMGbjyAbJT4+pKbNVGpfbqML7sdot/pf9Pt08W2w1WOVWWNMUkA/6GmywTmuEreXjXMd0=
Authentication-Results: hotmail.com; spf=pass (sender IP is 176.65.85.99) [email protected]; dkim=pass header.d=frankservice.net; x-hmca=pass [email protected]
X-SID-PRA: [email protected]
X-AUTH-Result: PASS
X-SID-Result: PASS
X-Message-Status: n:n
X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MztHRD0zO1NDTD03
X-Message-Info: quWoRize8kBYzyThPB3ZTEyAqfnP7UmxFyTtlaq2aw942SKM+sR7EylhQWYxXfP9/FaZRmzEATBsoQva6ju+ARHREnmq+/I1woXJ4ME9OWke5p9OJhCbS/YwNA3iKE2hkmYPhjRA3xc1Eyg4jwa/QZKQcRHkJRg72GJgO82g7D292tJhhA3Jm5XMhLrZe22+XkgoJA/baLe51R2XNjboJO5puDwxXRNEQoFTrNxjB0g=
Received: from posta.frankservice.net ([176.65.85.99]) by BLU004-MC1F25.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);
	 Fri, 20 Nov 2015 03:06:04 -0800
Received: from posta.frankservice.net (posta.frankservice.net [127.0.0.1])
	by posta.frankservice.net (Postfix) with ESMTP id 6646B604FE
	for <[email protected]>; Fri, 20 Nov 2015 12:06:45 +0100 (CET)
Authentication-Results: posta.frankservice.net (amavisd-new);
	dkim=pass (2048-bit key) reason="pass (just generated, assumed good)"
	header.d=frankservice.net
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=frankservice.net;
	 h=message-id:to:date:date:from:from:subject:subject
	:content-transfer-encoding:content-type:content-type
	:mime-version:user-agent; s=dkim; t=1448017603; x=1448881604;
	 bh=jjNkrlRuTOZLUPmVsGMXEOS4J3wWOPRXd+0Kd1pAkJY=; b=HbL0UEG+65Ga
	TZMLDxyslE32REhdw+5GRx61Pu4iag4TQQ75L99SypUpObPud4+0fxvMmgew1Qkc
	ki/+2izCpiE5LHIziEixJXCy82b3WVfO6UoKhJNyDGX6gIvnFgFJyk2xCtWxBenj
	HQiSsr52O8IEFOFasa5gB3HRscSpx4ne+AGvkvSx4H6jvJuEStdzpF/TBnEypNuG
	EX2I1J+IujUysvZrT844UDHzP3oYY1i505KnEiSBYSP8fsmy7HFLuWQ1YBr3hsVo
	QjnOIq/2oacGqPiKwyvYy9MCxpDGMPuTMZ/p9FxnT7lJkuA6gTJtzghKP6nXsHUo
	oHdYwEzLcA==
X-Virus-Scanned: Debian amavisd-new at vectormail
Received: from posta.frankservice.net ([127.0.0.1])
	by posta.frankservice.net (posta.frankservice.net [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id jcsgxnKqxueF for <[email protected]>;
	Fri, 20 Nov 2015 12:06:43 +0100 (CET)
Received: from [10.56.159.105] (unknown [151.46.35.128])
	by posta.frankservice.net (Postfix) with ESMTPSA id 02B8B604CF
	for <[email protected]>; Fri, 20 Nov 2015 12:06:42 +0100 (CET)
User-Agent: Type for Android
MIME-Version: 1.0
Content-Type: multipart/alternative; boundary="----0FNTPSIDRN2UO7227LHZ55DJQUE7WO"
Content-Transfer-Encoding: 8bit
Subject: Mail di prova
From: [email protected]
Date: Fri, 20 Nov 2015 12:05:55 +0100
To:  <hotmail.it>
Message-ID: <[email protected]>
Return-Path: [email protected]
X-OriginalArrivalTime: 20 Nov 2015 11:06:05.0124 (UTC) FILETIME=[7338B840:01D12383]

------0FNTPSIDRN2UO7227LHZ55DJQUE7WO
Content-Transfer-Encoding: 8bit
Content-Type: text/plain;
 charset=UTF-8