Plusnet IDIOTS

Plusnet_company_representative wrote: »

Thanks.

If it's happening every day then the more examples you can provide the better.

I'll see if we can track this particular message down in the mail logs. In the interim do you think the recipient would mind if I tried sending a test message from your account?

Edit: Oops, almost forgot! What was the subject line of the message with the PDF attachment?

Best regards,


Bob Pullen

Plusnet_company_representative wrote: »

Thanks.

You didn't reply to my question about the test email?

Plusnet_company_representative wrote: »

Right, looks like we've gotten to the bottom of it (so don't worry about the testing thing)...

It's the externally hosted domain that you're sending your emails from which is flagged in a threat detection database used by our email security vendor (Cloudmark).

This will have come about due to the perception that spam has either been seen originating from the domain, or spam emails have been found to contain references to a URL belonging to the domain. Cloudmark themselves have seen a relatively low volume of reports since the beginning of the year but have seen reports none-the-less.

Must admit, I overlooked this initially due to the fact that I thought your mail was being sent from your Plusnet address.

The fact that it's the sender domain that's been causing the problems would explain the high failure rate that you've been suffering compared to the rest of our customer base too (because it had the potential to affect *all* of your mail).

Our anti-spam vendors have now reset the database entry for your domain so hopefully it's all now sorted?

Out of interest, does your domain hosting provider offer an SMTP mail service? If they do then you may be better off using their servers rather than ours?

Best regards,


Bob Pullen

Plusnet_company_representative wrote: »

That's very odd because I can see references to your domain in our outbound server logs (see the un-edited evidence in my reply to your support ticket). I'm assuming you're aware that you can send email *from* your domain via *our* relay servers?

grep waCU1h00C2rdZ2901aCW8G /local/log/avasout0*/spam-*
/local/log/avasout06/spam-201111130000-0.log:20111113 10:12:32.007 core  Outbound-Spam-Detected|ID waCU1h00C2rdZ2901aCW8G|IP 81.174.147.132  [yourusername.plus.com]|MAIL FROM localpart@yourdomain.co.uk |RCPT  TO xxxxxxxxxxx@live.co.uk|Subject [Re: Live Help Messenger Chat  Transcript] |Score 100.00|Fingerprints v=2.0 cv=BMsxXSsG c=1 sm=1  p=_2xUqeJuAAAA:8 a=gWMW+znmGC7bEAY8egzeug==:17 a=LCoqmOwGwjEA:10  a=35QzQcXPXtUA:10 a=9hRIWoVrAAAA:8 a=KVWNNhFCAAAA:8 a=juk1W8lbAAAA:8  a=zWSFQDO9AAAA:8 a=DFb1E3IaAAAA:8 a=t0g962XsAAAA:8 a=8kfhaXkpAAAA:8  a=vGadAouLAAAA:8 a=Wk-wl9qdAAAA:8 a=fbDjU7WRAAAA:8 a=U1KXc2NoAAAA:8  a=O0dU9bciAAAA:8 a=tFunj5EiAAAA:8 a=9UzOaXdoAAAA:8 a=DhwJqpJ1AAAA:8  a=FrvaFuxqAAAA:8 a=1XWaLZrsAAAA:8 a=2u0DbOGFyTMkKHJcohoA:9  a=7yqYQYKWYFkr3lyNrVEA:7 a=wPNLvfGTeEIA:10 a=f0m1P_hzn80A:10  a=_jF4ULu2lg8A:10 a=e3jDulaqfuYA:10 a=LBb3DH6-isgA:10 a=XIL2Kp5rIhEA:10  a=IPoeWdV-kX8A:10 a=TdU1HHOixgMA:10 a=LatK-gjCARIA:10 a=OSgQELXPRmYA:10  a=3rD8sqgSu_8A:10 a=-wjkuXlJum8A:10 a=Y7Q7Z-y25dwA:10 a=GbAS5gY4k-EA:10  a=84tsCWNHjc4A:10 a=siiRPq9F1GwA:10 a=KJ4a6K4r84QA:10 a=uowBdsaMhwMA:10  a=WHT-aIRYBHgA:10 a=klEWFFXtrcj2zttB:21 a=FBA_VD-x-mvSM32V:21  a=65VzMvMCAAAA:8 a=ZObuHGhnyw8oM0ZwIeUA:9 a=jOYxuK1eHGIUDaXmwAEA:7  a=tXsnliwV7b4A:10 a=l4dGUOrlQjwA:10 a=xFswetfwreIA:10 a=BzvAVdQAZHoA:10  a=FMTo2Zu0BR_vwRj3:21 a=d-5j8s7b-w5pICpj:21  a=gWMW+znmGC7bEAY8egzeug==:117_2xUqeJuAAAA: Message contains spam URL  reported by Cloudmark Global Threat Network

I've replaced your domain name with [EMAIL="localpart@yourdomain.co.uk"]localpart@yourdomain.co.uk[/EMAIL] to protect your privacy but I can guarantee you it's in our server logs. It also seems to relate to the live chat transcript you referred to earlier in this thread but I suppose that could be a coincidence?

I've tried to help you the best I can but I'm beginning to think that my efforts are wasted, especially if you're not willing to accept the information I'm providing you with.

Best regards,


Bob Pullen