From: "Dan Napier" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 12871136 for ecs-isp@2rosenthals.com; Tue, 22 Apr 2025 17:32:57 -0400 Received: from secmgr-va.randr ([192.168.200.201]:56429 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1u7LEc-000000008WF-0K7G for ecs-isp@2rosenthals.com; Tue, 22 Apr 2025 17:32:54 -0400 Received: from kaliss.dnacih.com ([47.180.217.131]:53110) by mail2.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1u7LEZ-000000003VL-0Hio for ecs-isp@2rosenthals.com; Tue, 22 Apr 2025 17:32:51 -0400 X-SASI-Hits: BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000, CT_TEXT_PLAIN_UTF8_CAPS 0.000000, DATE_TZ_NA 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, ECARD_KNOWN_DOMAINS 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MSGID 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUPERLONG_LINE 0.050000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __COURIER_PHRASE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CTYPE_CHARSET_QUOTED 0.000000, __CT_TEXT_PLAIN 0.000000, __DC_PHRASE 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000, __HELO_LOCALHOST2 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __OUTLOOK_MSGID_1 0.000000, __OUTLOOK_MUA 0.000000, __OUTLOOK_MUA_1 0.000000, __PASSWORD_IN_BODY 0.000000, __PHISH_PHRASE1_A 0.000000, __PHISH_SPEAR_SUBJ_SUBJECT 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SHIPPING_BAD_ADDRESS 0.000000, __STOCK_CRUFT 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_IN_SUBJECT2 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __USER_AGENT_MS_GENERIC 0.000000, __X_VIRUS_SCANNED 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.4.22.204228 X-SASI-Hits: BODY_SIZE_3000_3999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000, CT_TEXT_PLAIN_UTF8_CAPS 0.000000, DATE_TZ_NA 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, ECARD_KNOWN_DOMAINS 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MSGID 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUPERLONG_LINE 0.050000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __COURIER_PHRASE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CTYPE_CHARSET_QUOTED 0.000000, __CT_TEXT_PLAIN 0.000000, __DC_PHRASE 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000, __HELO_LOCALHOST2 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __OUTLOOK_MSGID_1 0.000000, __OUTLOOK_MUA 0.000000, __OUTLOOK_MUA_1 0.000000, __PASSWORD_IN_BODY 0.000000, __PHISH_PHRASE1_A 0.000000, __PHISH_SPEAR_SUBJ_SUBJECT 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SHIPPING_BAD_ADDRESS 0.000000, __STOCK_CRUFT 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_IN_SUBJECT2 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __USER_AGENT_MS_GENERIC 0.000000, __X_VIRUS_SCANNED 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.4.22.204228 X-ASG-Debug-ID: 1745356339-101376704f55bf30001-4YkuuC Received: from scotty.dnacih.com (scotty.dnacih.com [64.60.60.125]) by kaliss.dnacih.com with ESMTP id U2GXfi2uid0IhnWw for ; Tue, 22 Apr 2025 14:12:20 -0700 (PDT) X-Barracuda-Envelope-From: dan@cihcsp.com X-Barracuda-Effective-Source-IP: scotty.dnacih.com[64.60.60.125] X-Barracuda-Apparent-Source-IP: 64.60.60.125 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPA id 6A6C86C0200 for ; Tue, 22 Apr 2025 14:12:16 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cihcsp.com; s=dkim; t=1745356338; h=from:subject:date:message-id:to:mime-version:content-type: content-transfer-encoding:content-language:in-reply-to:references; bh=wFDIfVPu94NQD09bYg5mwF1VDtxgd0fzJdR4Fq4ITDY=; b=YGKsuPA55p1xFFdVUdwIXxHw8IVFqh9cslPbQ1xhT3vUFLi0i/Gev5d/R+To6GTBurILI3 mjuKs2mx4R/QrnhmvFtwqXRk2fZlQB9Vu0AgS6nAiyn55jOyL1+tncWsBxZf3flSGOH+D8 UsK36AbGJ3DxQhCT3pUWV/AyOw1XvzkDYQIEt2nVF8IeJ2Ye87r4uv0lQEj+K1Mpk8PD4C cCR0MeuWv/P3iE+KTle8vVon+L8MiqC7XndkZgCOAA0LtrKidAPz8B/1/3VjiaUSp/jkyc wbB1fHJAl7IVTOhDvzsjODzgdfk+tcVJhtQsimgQ3AQddeKs6PGxg7zaM4/I0A== To: "'eCS ISP Mailing List'" References: In-Reply-To: Subject: RE: [eCS-ISP] Trouble getting mail delivered to Office365 (outlook.com), ProofPoint, and Barracuda protected domains Date: Tue, 22 Apr 2025 14:12:16 -0700 X-ASG-Orig-Subj: RE: [eCS-ISP] Trouble getting mail delivered to Office365 (outlook.com), ProofPoint, and Barracuda protected domains Message-ID: <001a01dbb3cb$39dd2990$ad977cb0$@cihcsp.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQHwRoazY5rhD58yNflgpwXiEl+sdLOHB+FQ Content-Language: en-us X-Last-TLS-Session-Version: None X-Barracuda-Connect: scotty.dnacih.com[64.60.60.125] X-Barracuda-Start-Time: 1745356339 X-Barracuda-URL: https://47.180.217.131:443/cgi-mod/mark.cgi X-Barracuda-BRTS-Status: 1 X-Virus-Scanned: by bsmtpd at dnacih.com X-Barracuda-Scan-Msg-Size: 3100 X-Barracuda-Spam-Score: 1.50 X-Barracuda-Spam-Status: No, SCORE=1.50 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=7.0 tests=BSF_SC3_MV0437 X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.140349 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- 1.50 BSF_SC3_MV0437 Custom rule MV0437 Lewis, Yes I am seeing weird messages from user screens saying dan@cihcsp.com = is not a valid email! I am using barracuda as a mail scanner. Both the cloud and a hardware = device in my own server room. I am baffled because I do not see any = blacklisting or other information. I am using DNS running the latest = bind from our friend from down under a arcanoae the mail server in = question is running on linux. =20 YOS Dan Napier -----Original Message----- From: eCS ISP Mailing List [mailto:ecs-isp@2rosenthals.com]=20 Sent: Tuesday, April 22, 2025 1:50 PM To: eCS ISP Mailing List Subject: [eCS-ISP] Trouble getting mail delivered to Office365 = (outlook.com), ProofPoint, and Barracuda protected domains Hi, all... For the past few days, I've been dealing with an issue of mail from=20 2rosenthals.com apparenly getting blackholed by certain providers. We do = not=20 receive any kind of DSN. From all accounts, the email is going out for=20 delivery and that's that. However, on the other end, recipients aren't=20 seeing the messages, nor are they getting any kind of spam notification = or=20 other warning that a message could not be delivered. Affected domains seem to be hosted with a handful of providers, = Office365=20 among them, which uses outlook.com. Naturally, I've checked both the=20 outlook.com and live.com internal lists, and both show that neither of = our=20 IPs is listed. Other MXs which seem to be behaving similarly are: gpphosted.com (ProofPoint) barracudanetworks.com Multiple multiple-RBL checks come up clean for both IPs and our domain. = SPF,=20 DKIM, and DMARC configurations all look fine (read: pass specific checks = by=20 various third parties, including mxtoolbox.com). Mail flows without incident to gmail.com and yahoo.com. Is anyone else seeing anything like this? TIA --=20 Lewis ------------------------------------------------------------- Lewis G Rosenthal, CNA, CLP, CLE, CWTS, EA Rosenthal & Rosenthal, LLC www.2rosenthals.com visit my IT blog www.2rosenthals.net/wordpress ------------------------------------------------------------- =3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D= -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to To subscribe (new addresses), E-mail to: = and reply to the confirmation email. Web archives are publicly available at: http://lists.2rosenthals.com This list is hosted by Rosenthal & Rosenthal, LLC P.O. Box 281, Deer Park, NY 11729-0281. Non- electronic communications related to content contained in these messages should be directed to the above address. (CAN-SPAM Act of 2003) =3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D= -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D