Thanks, this is a possibility. However, that customer IP has been dealt with and hasn't been spamming for more than 60 hours at most (it's actually part of a dynamic DSL pool where port 25 outbound was supposed to have been blocked). Our problem appears to have started before the 27th. Earlier today I noticed that the SPF record had "a" and "ptr" in it and changed it to "mx" only, as it should be in our case. What I find most peculiar is none of these having problems: 1. Competitors over 10 times our size (similar % of gmail users), with invalid SPF records, no DKIM, who don't do *ANY* of what anyone here or off-list has suggested, who have PTRs for their DSL customers similar to ours (and didn't have a port 25 block), who've been blasting maintenance notices for years 2. Amazon, eBay, PayPal, Dell, etc. 3. Facebook with their ***user-generated content, in HTML*** ----- Original Message ----- From: "Joe Sniderman" <joseph.sniderman@thoroquel.org> To: nanog@nanog.org Sent: Wednesday, September 29, 2010 3:29:10 PM Subject: Re: What must one do to avoid Gmail's retarded non-spam filtering? On 09/29/2010 12:05 AM, Erik L wrote:

Google appears to have blacklisted our domain. From the edge MTA, I sent three messages, differing only in the From header: 1. valid email @klssys.com 2. valid email @caneris.com 3. abc123@caneris.com

1 not spam; 2 & 3 spam

Ok, so its the domain not the IP. You're a DSL provider, right? IP's assigned to customers have PTR's in caneris.com, right? [..snip..]

----- Original Message ----- From: "Erik L" <erik_list@caneris.com> To: "William Pitcock" <nenolod@systeminplace.net> Cc: nanog@nanog.org Sent: Tuesday, September 28, 2010 7:17:45 PM Subject: Re: What must one do to avoid Gmail's retarded non-spam filtering?

Hi William,

I do so for our entire IP space on a regular basis. The edge MTA I mentioned in the reply to Bill shows up as "Neutral" there.

Ok, but there are a couple customer IP's that show up as "Poor" there, with rDNS in caneris.com not in klssys.com. One of those is on CBL (and XBL) and PSBL, and is spamming using your domain: http://psbl.surriel.com/evidence?ip=199.19.168.33&action=Check+evidence Its not PBL listed even though its a dynamic IP it seems: http://www.spamhaus.org/query/bl?ip=199.19.168.33 That would be an SPF pass as well, because of: caneris.com. 3600 IN TXT "v=spf1 a mx ptr -all" So, from the receiving end it could easily look like its one of caneris.com's outbound servers.. But not one of klssys.com's servers. Maybe this has something to do with the problem. HTH, Joe -- Joe Sniderman