From: "Dan Napier" Received: from [192.168.100.201] (HELO mail.2rosenthals.com) by 2rosenthals.com (CommuniGate Pro SMTP 5.4.10) with ESMTP id 12871187 for ecs-isp@2rosenthals.com; Tue, 22 Apr 2025 18:36:30 -0400 Received: from [192.168.200.201] (port=57354 helo=mail2.2rosenthals.com) by mail.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1u7ME0-000000005ke-1nQU for ecs-isp@2rosenthals.com; Tue, 22 Apr 2025 18:36:21 -0400 Received: from kaliss.dnacih.com ([47.180.217.131]:42710) by mail2.2rosenthals.com with esmtp (Exim 4.97.1) (envelope-from ) id 1u7MDx-000000004it-14aC for ecs-isp@2rosenthals.com; Tue, 22 Apr 2025 18:36:17 -0400 X-SASI-Hits: BODY_SIZE_4000_4999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000, CT_TEXT_PLAIN_UTF8_CAPS 0.000000, DATE_TZ_NA 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, ECARD_KNOWN_DOMAINS 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MSGID 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUPERLONG_LINE 0.050000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __BANNER_TRUSTED_SENDER 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __COURIER_BODY_USPS 0.000000, __COURIER_PHRASE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CTYPE_CHARSET_QUOTED 0.000000, __CT_TEXT_PLAIN 0.000000, __DC_PHRASE 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000, __HELO_LOCALHOST2 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __OUTLOOK_MSGID_1 0.000000, __OUTLOOK_MUA 0.000000, __OUTLOOK_MUA_1 0.000000, __PASSWORD_IN_BODY 0.000000, __PHISH_PHRASE1_A 0.000000, __PHISH_SPEAR_SUBJ_SUBJECT 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SHIPPING_BAD_ADDRESS 0.000000, __STOCK_CRUFT 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_IN_SUBJECT2 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __USER_AGENT_MS_GENERIC 0.000000, __X_VIRUS_SCANNED 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.4.22.215728 X-SASI-Hits: BODY_SIZE_4000_4999 0.000000, BODY_SIZE_5000_LESS 0.000000, BODY_SIZE_7000_LESS 0.000000, CTE_QUOTED_PRINTABLE 0.000000, CT_TEXT_PLAIN_UTF8_CAPS 0.000000, DATE_TZ_NA 0.000000, DKIM_ALIGNS 0.000000, DKIM_SIGNATURE 0.000000, ECARD_KNOWN_DOMAINS 0.000000, HTML_00_01 0.050000, HTML_00_10 0.050000, IN_REP_TO 0.000000, KNOWN_MSGID 0.000000, LEGITIMATE_SIGNS 0.000000, MSG_THREAD 0.000000, NO_URI_HTTPS 0.000000, REFERENCES 0.000000, SENDER_NO_AUTH 0.000000, SUPERLONG_LINE 0.050000, SUSP_DH_NEG 0.000000, TO_IN_SUBJECT 0.500000, __ANY_URI 0.000000, __BANNER_TRUSTED_SENDER 0.000000, __BOUNCE_CHALLENGE_SUBJ 0.000000, __BOUNCE_NDR_SUBJ_EXEMPT 0.000000, __COURIER_BODY_USPS 0.000000, __COURIER_PHRASE 0.000000, __CP_URI_IN_BODY 0.000000, __CT 0.000000, __CTE 0.000000, __CTYPE_CHARSET_QUOTED 0.000000, __CT_TEXT_PLAIN 0.000000, __DC_PHRASE 0.000000, __DKIM_ALIGNS_1 0.000000, __DKIM_ALIGNS_2 0.000000, __DQ_NEG_DOMAIN 0.000000, __DQ_NEG_HEUR 0.000000, __DQ_NEG_IP 0.000000, __FORWARDED_MSG 0.000000, __FUR_HEADER 0.000000, __HAS_FROM 0.000000, __HAS_MSGID 0.000000, __HAS_REFERENCES 0.000000, __HAS_X_MAILER 0.000000, __HELO_LOCALHOST 0.000000, __HELO_LOCALHOST2 0.000000, __INVOICE_MULTILINGUAL 0.000000, __IN_REP_TO 0.000000, __MAIL_CHAIN 0.000000, __MIME_BOUND_CHARSET 0.000000, __MIME_TEXT_ONLY 0.000000, __MIME_TEXT_P 0.000000, __MIME_TEXT_P1 0.000000, __MIME_VERSION 0.000000, __MULTIPLE_URI_TEXT 0.000000, __NO_HTML_TAG_RAW 0.000000, __OUTLOOK_MSGID_1 0.000000, __OUTLOOK_MUA 0.000000, __OUTLOOK_MUA_1 0.000000, __PASSWORD_IN_BODY 0.000000, __PHISH_PHRASE1_A 0.000000, __PHISH_SPEAR_SUBJ_SUBJECT 0.000000, __REFERENCES 0.000000, __SANE_MSGID 0.000000, __SCAN_D_NEG 0.000000, __SCAN_D_NEG2 0.000000, __SCAN_D_NEG_HEUR 0.000000, __SCAN_D_NEG_HEUR2 0.000000, __SHIPPING_BAD_ADDRESS 0.000000, __STOCK_CRUFT 0.000000, __SUBJ_ALPHA_END 0.000000, __SUBJ_ALPHA_NEGATE 0.000000, __SUBJ_REPLY 0.000000, __TO_IN_SUBJECT 0.000000, __TO_IN_SUBJECT2 0.000000, __TO_MALFORMED_2 0.000000, __TO_NAME 0.000000, __TO_NAME_DIFF_FROM_ACC 0.000000, __TO_REAL_NAMES 0.000000, __URI_IN_BODY 0.000000, __URI_MAILTO 0.000000, __URI_NOT_IMG 0.000000, __URI_NS 0.000000, __URI_WITHOUT_PATH 0.000000, __URI_WITH_PATH 0.000000, __USER_AGENT_MS_GENERIC 0.000000, __X_VIRUS_SCANNED 0.000000 X-SASI-Probability: 10% X-SASI-RCODE: 200 X-SASI-Version: Antispam-Engine: 5.1.4, AntispamData: 2025.4.22.215728 X-ASG-Debug-ID: 1745361371-101376704f55c2f0001-4YkuuC Received: from scotty.dnacih.com (scotty.dnacih.com [64.60.60.125]) by kaliss.dnacih.com with ESMTP id bF9gqLFkOu3FUG3p for ; Tue, 22 Apr 2025 15:36:11 -0700 (PDT) X-Barracuda-Envelope-From: dan@cihcsp.com X-Barracuda-Effective-Source-IP: scotty.dnacih.com[64.60.60.125] X-Barracuda-Apparent-Source-IP: 64.60.60.125 Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPA id 06A876C0210 for ; Tue, 22 Apr 2025 15:36:09 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=cihcsp.com; s=dkim; t=1745361370; h=from:subject:date:message-id:to:mime-version:content-type: content-transfer-encoding:content-language:in-reply-to:references; bh=7v7bYRY6vU8XvrpjAVz8o9U5OF6E0NpxymberuKrXJk=; b=oMK6skVXJx8/2ojgP5plmctzgFDXLcm8p8u53+WOKqObW66Y8QlVuvGWLyhrTU9TabPwOZ wnHBmn3FpqJP4QtYFkt9HMnwv4qzD0hvftLFEN1kzIV0xygobVvqDcOyLosk2O3F9xuNQC G4biC6OwP2Hd6TjsK3cctFUUjn2LrbglgJK8/ug6IVX9OgWJTAx9WQzLyhWSBY6Ch05gJg O2bFYdDGL9p0RgKesK6F94akMGvfOUX87ku33pFIlPnVfnhN7gYz1uwgXn2OwWZNaJ7Lf3 hUq92g1tXoz35OFdJxo737BXnYYoQavq6gN8nV2XzevOR0vLv85IL88YMR2R/A== To: "'eCS ISP Mailing List'" References: In-Reply-To: Subject: RE: [eCS-ISP] Trouble getting mail delivered to Office365 (outlook.com), ProofPoint, and Barracuda protected domains Date: Tue, 22 Apr 2025 15:36:08 -0700 X-ASG-Orig-Subj: RE: [eCS-ISP] Trouble getting mail delivered to Office365 (outlook.com), ProofPoint, and Barracuda protected domains Message-ID: <010b01dbb3d6$f1525680$d3f70380$@cihcsp.com> MIME-Version: 1.0 Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable X-Mailer: Microsoft Outlook 15.0 Thread-Index: AQHwRoazY5rhD58yNflgpwXiEl+sdAJPZsKvAflGEkmzZNps0A== Content-Language: en-us X-Last-TLS-Session-Version: None X-Barracuda-Connect: scotty.dnacih.com[64.60.60.125] X-Barracuda-Start-Time: 1745361371 X-Barracuda-URL: https://47.180.217.131:443/cgi-mod/mark.cgi X-Barracuda-BRTS-Status: 1 X-Virus-Scanned: by bsmtpd at dnacih.com X-Barracuda-Scan-Msg-Size: 4470 X-Barracuda-Spam-Score: 0.00 X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of TAG_LEVEL=1000.0 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=7.0 tests= X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.140351 Rule breakdown below pts rule name description ---- ---------------------- -------------------------------------------------- Lewis, I am not aware that anything is going south. People sometimes tell me = that they get a bounce, most of the time I get an angry call that I did = not respond to their email!!! I ain't getting stuff. The Logs on the Barracuda do not show that they = had anything to do with the missing mail. Users from gmail are the = usual suspects. It seem google is not sending the mail. Perhaps they = are learning from the USPS. Dan -----Original Message----- From: eCS ISP Mailing List [mailto:ecs-isp@2rosenthals.com]=20 Sent: Tuesday, April 22, 2025 2:41 PM To: eCS ISP Mailing List Subject: Re: [eCS-ISP] Trouble getting mail delivered to Office365 = (outlook.com), ProofPoint, and Barracuda protected domains Thanks, Dan. To be clear, when *you* are sending to recipients behind Barracuda = scanners,=20 *your* email is not going through? I am *not* behind a Barracuda scanner. If I send to a recipient who *is* = behind a Barracuda scanner, he or she does not receive the email or a=20 warning. I get no bounce-back notification. Checking Barracuda's blacklist and reputation databases, neither of my=20 sending IPs shows in the list, and the 2rosenthals.com domain appears to = be=20 clean (no dings against its reputation). On 04/22/25 05:12 pm, Dan Napier wrote: > Lewis, > > Yes I am seeing weird messages from user screens saying dan@cihcsp.com = is not a valid email! > I am using barracuda as a mail scanner. Both the cloud and a hardware = device in my own server room. I am baffled because I do not see any = blacklisting or other information. I am using DNS running the latest = bind from our friend from down under a arcanoae the mail server in = question is running on linux. > > YOS > Dan Napier > > > -----Original Message----- > From: eCS ISP Mailing List [mailto:ecs-isp@2rosenthals.com] > Sent: Tuesday, April 22, 2025 1:50 PM > To: eCS ISP Mailing List > Subject: [eCS-ISP] Trouble getting mail delivered to Office365 = (outlook.com), ProofPoint, and Barracuda protected domains > > Hi, all... > > For the past few days, I've been dealing with an issue of mail from > 2rosenthals.com apparenly getting blackholed by certain providers. We = do not > receive any kind of DSN. From all accounts, the email is going out for > delivery and that's that. However, on the other end, recipients aren't > seeing the messages, nor are they getting any kind of spam = notification or > other warning that a message could not be delivered. > > Affected domains seem to be hosted with a handful of providers, = Office365 > among them, which uses outlook.com. Naturally, I've checked both the > outlook.com and live.com internal lists, and both show that neither of = our > IPs is listed. > > Other MXs which seem to be behaving similarly are: > > gpphosted.com (ProofPoint) > barracudanetworks.com > > Multiple multiple-RBL checks come up clean for both IPs and our = domain. SPF, > DKIM, and DMARC configurations all look fine (read: pass specific = checks by > various third parties, including mxtoolbox.com). > > Mail flows without incident to gmail.com and yahoo.com. > > Is anyone else seeing anything like this? > > TIA > --=20 Lewis ------------------------------------------------------------- Lewis G Rosenthal, CNA, CLP, CLE, CWTS, EA Rosenthal & Rosenthal, LLC www.2rosenthals.com visit my IT blog www.2rosenthals.net/wordpress ------------------------------------------------------------- =3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D= -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to: To switch to the DIGEST mode, E-mail to To switch to the INDEX mode, E-mail to Send administrative queries to To subscribe (new addresses), E-mail to: = and reply to the confirmation email. Web archives are publicly available at: http://lists.2rosenthals.com This list is hosted by Rosenthal & Rosenthal, LLC P.O. Box 281, Deer Park, NY 11729-0281. Non- electronic communications related to content contained in these messages should be directed to the above address. (CAN-SPAM Act of 2003) =3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D= -=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D