Emails going to spam or marked as scam. Yahoo is holding messages. SPF issues & more

Help with Setup/Upgrade
1

MAIL TESTER RESULTS

Bounce address : gio@fwla.comReceived 15 hours ago
-0.9 SpamAssassin thinks you can improve
The famous spam filter SpamAssassin. Score: -0.9.

A score below -5 is considered spam.

-0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
This negative score will become positive if the signature is validated. See immediately below.

0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
Great! Your signature is valid

0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author’s domain
Great! Your signature is valid and it’s coming from your domain name

-1 DX_TEXT_03 XXX Media Group

-0.001 HTML_MESSAGE HTML included in message
No worry, that’s expected if you send HTML emails

0.01 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain

-0.01 T_SPF_HELO_PERMERROR SPF: test of HELO record failed (permerror)

-0.01 T_SPF_PERMERROR SPF: test of record failed (permerror) -6
You are not allowed to use one of your sender email addresses
We check if the server you are sending from is authenticated -3
[SPF] fwla.com does not allow your server 45.76.71.0 to use gio@fwla.com
Sender Policy Framework (SPF) is an email validation system designed to prevent email spam by detecting email spoofing, a common vulnerability, by verifying sender IP addresses.
What we retained as your current SPF record is:

v=spf1 include:amazonses.com include:box.fwla.com -all
More information about this error:

fwla.com … box.fwla.com: Maximum DNS-interactive terms limit (10) exceeded
-3
[Sender ID] fwla.com does not allow your server 45.76.71.0 to use gio@fwla.com
Sender ID is like SPF, but it checks the FROM address, not the bounce address.
What we retained as your current SPF record is:

v=spf1 include:amazonses.com include:box.fwla.com -all
More information about this error:

fwla.com … box.fwla.com: Maximum DNS-interactive terms limit (10) exceeded
Need guidance? View guides for each host.

Your DKIM signature is valid
Your message passed the DMARC test
Your server 45.76.71.0 is successfully associated with box.fwla.com
Your domain name fwla.com is assigned to a mail server.
Your hostname box.fwla.com is assigned to a server.
Your message could be improved
Checks whether your message is well formatted or not.
Weight of the HTML version of your message: 40KB.

Your message contains 25% of text.

You have no images in your message
Your content is safe
We didn’t find short URLs
Your message does not contain a List-Unsubscribe header
You’re not blacklisted
No broken links
Your lovely total: 3.1/10

ses.fwla.com CNAME ec2-52-4-200-199.compute-1.amazonaws.com. [delete]

zbdkx****ubvmzylhiigrpi6bj._domainkey.fwla.com CNAME

zbdkx****lhiigrpi6bj.dkim.amazonses.com. [delete]

q7fbes****bmluxakpikr4r3srpe._domainkey.fwla.com CNAME

q7fbe****akpikr4r3srpe.dkim.amazonses.com. [delete]

j7egj4i6m7****qcf4t5mvnqvr._domainkey.fwla.com CNAME

j7egj4i6m****wjudqcf4t5mvnqvr.dkim.amazonses.com. [delete]

www.fwla.com CNAME fwla.us-west-1.elasticbeanstalk.com [delete]

_amazonses.fwla.com TXT N4ITWEkJTkj*****tq57cuiOqz3vhM= [delete]

_amazonses.fwla.com TXT v=spf1 include:amazonses.com include:box.fwla.com -all [delete]

fwla.com TXT v=spf1 include:amazonses.com include:box.fwla.com -all [delete]

fwla.com CNAME fwla.us-west-1.elasticbeanstalk.com [delete]

box.fwla.com TXT v=spf1 include:amazonses.com include:box.fwla.com -all [delete]

_box.fwla.com TXT v=spf1 include:amazonses.com include:box.fwla.com -all

I’m not sure if it was safe to past records exactly so I put an wildcard in some of the CNAME entries.

This message came straight from thunderbird to mail-tester. I also have SENDY which sends newsletter using amazon SES. When I send to mail-tester using SENDY, this is the result:

Bounce address : 010001572ab9e048-0aed0e9b-4c4f-4abb-bb8f-31550dd73abc-000000@amazonses.comReceived 0 minutes ago
Click here to view your message
-1.7
SpamAssassin thinks you can improve
The famous spam filter SpamAssassin. Score: -1.7.
A score below -5 is considered spam.
-0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
This negative score will become positive if the signature is validated. See immediately below.
0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
Great! Your signature is valid
0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author’s domain
Great! Your signature is valid and it’s coming from your domain name
-0.001 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail domains are different
-0.001 HTML_MESSAGE HTML included in message
No worry, that’s expected if you send HTML emails
-1.985 PYZOR_CHECK Similar message reported on Pyzor (http://pyzor.org)
Please test a real content, test Newsletters will always be flagged by Pyzor
Adjust your message or request whitelisting (http://public.pyzor.org/whitelist/)
0.0001 RCVD_IN_DNSWL_NONE Sender listed at http://www.dnswl.org, low trust
Dnswl.org is a whitelist, being listed on this service is good
0.211 RCVD_IN_MSPIKE_H2 Average reputation (+2)
54.240.8.88 listed in wl.mailspike.net
0.001 SPF_PASS SPF: sender matches SPF record
Great! Your SPF is valid
0.01 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay domain
You’re properly authenticated
Your message could be improved
Checks whether your message is well formatted or not.
Weight of the HTML version of your message: 86B.

Your message contains 29% of text.

You have no images in your message
Your content is safe
We didn’t find short URLs
Your message does not contain a List-Unsubscribe header
The List-Unsubscribe header is required if you send mass emails, it enables the user to easily unsubscribe from your mailing list.
Your message does not contain a List-Unsubscribe header
-1
You’re listed in 1 blacklist CASA (china anti-spam alliance), which is weird because we don’t send anything to china

**** My emails are not getting through to so many places. I checked my IP’s at MXtoolbox before I ever used the server, they are clean. I check again today, they are still clean. I am often marked as spam (even some messages come up as potential scams in Thunderbird) - I DO NOT SPAM. I rarely (~4 times per year) send to my "newsletter:, and they all fill out a 30 question registration form, asking for info.

PLEASE HELP - I’D LOVE TO JUST PAY SOMEONE TO SKYPE WITH ME AND FIX EVERYTHING QUICKLY!!! HOW ABOUT $100 USD I am located in Los Angeles

2

How have you set your SPF record?

3

I think (my opinion only, I don’t consider myself an expert!) your main issue is the current SPF record. I know you’ve been given different guidance on this forum, but putting include:box.fwla.com in your SPF is causing a recursion error. I have used the SPF tool at:
SPF Query Tool

Simply inputting your domain, fwla.com, into the first text box and clicking Get SPF record reveals a problem:

evaluating…
Results - PermError SPF Permanent Error: include has trivial recursion: include:box.fwla.com

When I try this record (slightly further down, also using the IP of your MIAB and the email address you’re trying to use gio at fwla dot com):
v=spf1 include:amazonses.com mx -all

the result is:

Results - PASS sender SPF authorized

So that’s why I said above that having include:box.fwla.com in the SPF is causing an issue. I just replaced it with mx. I do not know if this is the “best” record for you, but it seems to pass SPF tests with that tool, which seems better than your current setup?

So maybe try
v=spf1 include:amazonses.com mx -all
and see how you get on?

Also…

You might like to take a look at some of the Amazon SES information:

It seems like you have done some of this based on some of the records above.

Looking at the Amazon guides above, it seems like the Name value for your TXT record is fwla.com but in the guidance, it’s using bounce as a subdomain, and you’re lacking a subdomain. You’d want to specifically avoid “box” … I think they suggest bounce for a reason.

4

@v60fan would you want to Skype (screenshare) or something and run through my setup with me to figure out deliverability issues, etc.? I’m more than willing to pay… Let’s say $150 per hour (with a $150 minimum because I figure we can dial everything in within 20 minutes). I’ll PayPal, CC, Venmo, mail cash (lol), etc.

I’m just in the midst of a major event and emails are critical.

5

This topic was automatically closed 7 days after the last reply. New replies are no longer allowed.