PTR OK, SPF, DKIM passed but email messages are marked as Spam by Google

# host 1.2.3.4
4.3.2.1.in-addr.arpa domain name pointer mail.domain.vn.

# dig +short txt domain.vn
"v=spf1 a mx ptr -all"

# dig +short txt mail.domain.vn
"v=spf1 a -all"

Here's an email header that is marked as Spam:

Received-SPF: pass (google.com: domain of anonymous@domain.vn designates 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
Message-ID: <4FB87E2C.2030909@domain.vn>
Date: Sun, 20 May 2012 12:16:28 +0700
From: Anonymous <anonymous@domain.vn>
User-Agent: Mozilla/5.0 (X11; Linux i686; rv:10.0.1) Gecko/20120308 Thunderbird/10.0.1
MIME-Version: 1.0
To: x@gmail.com
Subject: inbox or spam
Content-Type: multipart/alternative;
 boundary="------------000702010609020201020909"

My IP address is not listed in Spamhaus's SBL, PBL, XBL.
I can send mail to Yahoo Inbox normally.
Anything else should I check?

UPDATE: Fri May 25 14:35:15 ICT 2012

My IP address used to be listed in the Spamhaus PBL. It sounds like Google update the PBL slower than Yahoo. I have to wait 24-48 hours to see my email going to Gmail Inbox.

Now is another problem: My developer need to rewrite the sender to different domain, ex: noreply@anotherdomain.vn. I've created the SPF record for this one:

$ dig +short txt anotherdomain.vn
"v=spf1 ip4:mail.server.ip.address ~all"

and edited the main.cf to something like this:

/etc/postfix/main.cf:
    smtpd_sender_restrictions = 
        permit_sasl_authenticated
        permit_mynetworks
        check_sender_access hash:/etc/postfix/sender_access

/etc/postfix/sender_access:
    anotherdomain.vn     OK

Creating the hash db file, reloading the Postfix and sending a testing mail to Google but it go to Spam:

Received-SPF: pass (google.com: domain of noreply@anotherdomain.vn designates 1.2.3.4 as permitted sender) client-ip=1.2.3.4;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of noreply@anotherdomain.vn designates 1.2.3.4 as permitted sender) smtp.mail=noreply@anotherdomain.vn; dkim=pass header.i=@mail.domain.vn

Beneath the subject line, I see this:

mailed-by:   anotherdomain.vn
signed-by:   mail.domain.vn

Do I must to configure anything else for anotherdomain.vn?

Reply to @John Gardeniers:

I've generated another key pair for anotherdomain.vn. Edited /etc/opendkim/KeyTable and /etc/opendkim/SigningTable, add the public key to DNS, … and here's the new header:

Delivered-To: x@gmail.com
Received: by 10.223.30.6 with SMTP id s6csp472554fac;
        Fri, 25 May 2012 08:33:55 -0700 (PDT)
Received: by 10.68.203.40 with SMTP id kn8mr33031655pbc.162.1337960033592;
        Fri, 25 May 2012 08:33:53 -0700 (PDT)
Return-Path: <noreply@anotherdomain.vn>
Received: from mail.domain.vn (mail.domain.vn. [x.x.x.x])
        by mx.google.com with ESMTPS id ir6si6494603pbc.292.2012.05.25.08.33.51
        (version=TLSv1/SSLv3 cipher=OTHER);
        Fri, 25 May 2012 08:33:52 -0700 (PDT)
Received-SPF: pass (google.com: domain of noreply@anotherdomain.vn designates x.x.x.x as permitted sender) client-ip=x.x.x.x;
Authentication-Results: mx.google.com; spf=pass (google.com: domain of noreply@anotherdomain.vn  designates x.x.x.x as permitted sender) smtp.mail=noreply@anotherdomain.vn; dkim=pass header.i=@anotherdomain.vn
Received: from mail.domain.vn (mail.domain.vn [127.0.0.1])
    by mail.domain.vn (Exchange Server) with ESMTP id 978FFBFB019D
    for <x@gmail.com>; Fri, 25 May 2012 22:33:49 +0700 (ICT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=anotherdomain.vn;
    s=xxx; t=1337960029;
    bh=qfxlWfMGs8sEsiA6P/+nz3wGHymeJRPwzSRAcM0IwrM=;
    h=Date:From:To:Subject:Reply-To:Message-ID:Mime-Version:
     Content-Type;
    b=UyV+F3c6cBLs8RPcf+vfeXLfX5sVERRP2Nv4Oya3Ca7Nt29YBN3wBM7cixPFg4jNw
     ++G/ueOGvQWWs+NdF0pB6zesf6WHVvixRvqZsLbmgyGBPbPgLv02Pn1wrW8t8gsZUg
     snB5xvVdcYzrhym/ALxdwc2qYkapo4YwZRMsH/og=
Received: from webserver.hostname.vn (hostname [y.y.y.y])
    by mail.domain.vn (Exchange Server) with ESMTP id 7A09EBFB0181
    for <x@gmail.com>; Fri, 25 May 2012 22:33:49 +0700 (ICT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=anotherdomain.vn;
    s=selector; t=1337960029;
    bh=FWgVv5TXS9iT+yQB2k4/8O/fCcyX2ZhMJstt6RnzW38=;
    h=Date:From:To:Subject:Reply-To:Message-ID:Mime-Version:
     Content-Type;
    b=lcq2y13ZRNIfHzEU/vsfWpb9uo86rJnEtKtY2I3mUQOsV9lmejJamxxaYspCHWSCI
     hcxbqFitvFn0rD3X3uMsLTrmb+fPX24Bk0s/20DYmKuTb3/C6RC7ya7t0ZzgXOKTBV
     jYZ8gKpG1gwG38Mc+8oMmfhWi5TqQqtk6Ole4KW4=
User-Agent: CodeIgniter
Date: Fri, 25 May 2012 22:33:49 +0700
From: "No-Reply" <noreply@anotherdomain.vn>
To: x@gmail.com
Subject: =?utf-8?Q?=c4=90=c4=83ng_k=c3=bd_th=c3=a0nh_vi=c3=aan?=
Reply-To: "noreply@anotherdomain.vn" <noreply@anotherdomain.vn>
X-Sender: noreply@anotherdomain.vn
X-Mailer: CodeIgniter
X-Priority: 3 (Normal)
Message-ID: <4fbfa65d6734f@domain.vn>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="B_ALT_4fbfa65d682f1"
X-Virus-Scanned: ClamAV using ClamSMTP

The mailed-by and signed-by are already point to the same domain:

mailed-by:   anotherdomain.vn
signed-by:   anotherdomain.vn

but it is still flagged as spam by Google.

UPDATE: Sat May 26 13:38:58 ICT 2012

I've 'borrowed' a mail server from different department which is working fine. Belows is the header when sending an email (goes to Inbox):

Delivered-To: x@gmail.com
Received: by 10.182.7.136 with SMTP id j8csp194826oba;
        Fri, 25 May 2012 21:23:14 -0700 (PDT)
Received: by 10.68.231.36 with SMTP id td4mr3649336pbc.141.1338006193731;
        Fri, 25 May 2012 21:23:13 -0700 (PDT)
Return-Path: <noreply@anotherdomain.vn>
Received: from example.vn ([public.ip])
        by mx.google.com with ESMTPS id hc10si8220019pbc.121.2012.05.25.21.23.13
        (version=TLSv1/SSLv3 cipher=OTHER);
        Fri, 25 May 2012 21:23:13 -0700 (PDT)
Received-SPF: softfail (google.com: domain of transitioning noreply@anotherdomain.vn does not designate public.ip as permitted sender) client-ip=public.ip;
Authentication-Results: mx.google.com; spf=softfail (google.com: domain of transitioning noreply@anotherdomain.vn does not designate public.ip as permitted sender) smtp.mail=noreply@anotherdomain.vn
Received: from anotherdomain.vn (unknown [private.ip])
    (Authenticated sender: noreply@anotherdomain.vn)
    by example.vn (Postfix) with ESMTP id 2A55B680292
    for <x@gmail.com>; Sat, 26 May 2012 11:23:11 +0700 (ICT)
X-DomainKeys: Sendmail DomainKeys Filter v1.0.2 x.vn 2A55B680292
X-DKIM: Sendmail DKIM Filter v2.8.3 x.vn 2A55B680292
User-Agent: CodeIgniter
Date: Sat, 26 May 2012 11:23:10 +0700
From: "x" <noreply@anotherdomain.vn>
To: x@gmail.com
Subject: =?utf-8?Q?=c4=90=c4=83ng_k=c3=bd_th=c3=a0nh_vi=c3=aan?=
Reply-To: "noreply@anotherdomain.vn" <noreply@anotherdomain.vn>
X-Sender: noreply@anotherdomain.vn
X-Mailer: CodeIgniter
X-Priority: 3 (Normal)
Message-ID: <4fc05aae7a7b7@anotherdomain.vn>
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="B_ALT_4fc05aae7aba0"

What surprised me is spf=softfail.

UPDATE: Mon May 28 10:36:06 ICT 2012

I've been trying with another domain which has neither SPF nor OpenDKIM's SigningTable. In the /var/log/maillog I see something like this:

opendkim[22200]: (unknown-jobid): no signing table match for 'noreply@sub.anotherdomain.vn'

There are no signed-by and mailed-by in the 'Show details' section but that email goes to Inbox (both of Google and Yahoo).

I really have no ideas how does the Google spam filter mechanism work.

PTR OK, SPF, DKIM passed but email messages are marked as Spam by Google

Best Answer

Related Topic

Best Answer

Related Solutions

Yahoo flagging mail as spam when using relay server

SPF hardfail and DKIM failure when recipient has e-mail forwarding

Related Topic