ElkArte Community

Project Support => Support => Topic started by: MartinTS on October 24, 2021, 05:12:47 pm

Title: All notifications are treated as spam/virus
Post by: MartinTS on October 24, 2021, 05:12:47 pm
I've set up various test users for my site:
Admin is on protonmail
user 1 gmail
user 2 hospital email
user 3 University email

All the emails from the site are being caught by gmail's or the institutions' filters.

It looks like they are being rejected because there is more than one sender in "From". Is it possible the email sending system of Elkarte is misconfigured?

Looking the error message:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  XXXXXXX@aucklanduni.ac.nz
    host aspmx.l.google.com [142.250.4.27]
    SMTP error from remote mail server after end of data:
    550-5.7.1 [103.250.232.72      13] Messages with multiple addresses in From:
    550 5.7.1 header are not accepted. 10si1647852pli.367 - gsmtp

message/delivery-status

Reporting-MTA: dns; aoraki.webslice.co.nz

Action: failed
Final-Recipient: rfc822;XXXXX@aucklanduni.ac.nz
Status: 5.0.0
Remote-MTA: dns; aspmx.l.google.com
Diagnostic-Code: smtp; 550-5.7.1 [103.250.232.72      13] Messages with multiple addresses in From:
 550 5.7.1 header are not accepted. 10si1647852pli.367 - gsmtp

message/rfc822

Return-path: <XXXXXXX@protonmail.com>
Received: from networkz by aoraki.webslice.co.nz with local (Exim 4.94.2)
   (envelope-from <XXXXXXX@protonmail.com>)
   id 1mekSt-0002by-5o
   for XXXXXX@aucklanduni.ac.nz; Mon, 25 Oct 2021 09:51:35 +1300
To: XXXXXXX@aucklanduni.ac.nz
Subject: Welcome to NetworkZ Connect
X-PHP-Script: connect2.networkz.nz/index.php for 202.56.55.214
 X-PHP-Originating-Script: 1283:Mail.subs.php
From: "NetworkZ Connect" <XXXXXX@protonmail.com>
 Return-Path: XXXXXXX@protonmail.com
 Date: Sun, 24 Oct 2021 20:51:35 -0000
 X-Mailer: ELK
 Mime-Version: 1.0
 Content-Type: multipart/alternative; boundary="ELK-37fc860d87cda539b3bf4c70d4fa4c8d"
 Content-Transfer-Encoding: 7bit
 Message-ID: <3207736470b3086c3ebd28bf51decc32-@protonmail.com>
Message-Id: <E1mekSt-0002by-5o@aoraki.webslice.co.nz>
Date: Mon, 25 Oct 2021 09:51:35 +1300

Thank you for registering at NetworkZ Connect. Your username is
XXXXX@aucklanduni.ac.nz. If you forget your password, you may change it
at
[Link]( https://connect2[dot]networkz[dot]nz/index.php?action=reminder )



Regards,

The NetworkZ Connect Team.

--ELK-37fc860d87cda539b3bf4c70d4fa4c8d
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64

VGhhbmsgeW91IGZvciByZWdpc3RlcmluZyBhdCBOZXR3b3JrWiBDb25uZWN0LiBZb3VyIHVzZXJu
YW1lIGlzCm10dXIwNzJAYXVja2xhbmR1bmkuYWMubnouIElmIHlvdSBmb3JnZXQgeW91ciBwYXNz
d29yZCwgeW91IG1heSBjaGFuZ2UgaXQKYXQgCltMaW5rXSggaHR0cHM6Ly9jb25uZWN0Mi5uZXR3
b3Jrei5uei9pbmRleC5waHA/YWN0aW9uPXJlbWluZGVyICkgIAoKCgpSZWdhcmRzLCAgCgpUaGUg
TmV0d29ya1ogQ29ubmVjdCBUZWFtLgo=

--ELK-37fc860d87cda539b3bf4c70d4fa4c8d--
Title: Re: All notifications are treated as spam/virus
Post by: MartinTS on October 24, 2021, 05:13:54 pm
The XXXXX  and [dot]  have been added by me to obscure the real addresses
Title: Re: All notifications are treated as spam/virus
Post by: MartinTS on October 24, 2021, 06:36:50 pm
I created a new email address and this one got through. You can see that the return path has been added to the From header. Maybe it's this which is causing the problem?
Begin forwarded message:

Code: [Select]
From: "NetworkZ Connect" <XXXXX@protonmail.com> Return-Path: XXXXX@protonmail.com Date: Sun
Date: 25 October 2021 at 11:21:43 AM NZDT
To: XXXX@networkz.nz
Subject: New Personal Message: personal message from admin

You have just been sent a personal message by Admin on NetworkZ Connect

IMPORTANT: Remember, this is just a notification. Please do not reply to this email.

The message they sent you was:

n sghnshn


Reply to this Personal Message here: https://connect2[dot]networkz[dot]nz/index.php?action=pm;sa=send;f=inbox;pmsg=13;quote;u=1
--ELK-493144969b336141843edf9c59197b97
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: base64

WW91IGhhdmUganVzdCBiZWVuIHNlbnQgYSBwZXJzb25hbCBtZXNzYWdlIGJ5IEFkbWluIG9uIE5l
dHdvcmtaIENvbm5lY3QKCklNUE9SVEFOVDogUmVtZW1iZXIsIHRoaXMgaXMganVzdCBhIG5vdGlm
aWNhdGlvbi4gUGxlYXNlIGRvIG5vdCByZXBseSB0byB0aGlzIGVtYWlsLgoKVGhlIG1lc3NhZ2Ug
dGhleSBzZW50IHlvdSB3YXM6CgpuIHNnaG5zaG4KCgpSZXBseSB0byB0aGlzIFBlcnNvbmFsIE1l
c3NhZ2UgaGVyZTogaHR0cHM6Ly9jb25uZWN0Mi5uZXR3b3Jrei5uei9pbmRleC5waHA/YWN0aW9u
PXBtO3NhPXNlbmQ7Zj1pbmJveDtwbXNnPTEzO3F1b3RlO3U9MQ==

--ELK-493144969b336141843edf9c59197b97--
Title: Re: All notifications are treated as spam/virus
Post by: Spuds on October 25, 2021, 10:01:54 am
Just as a quick look, I don't see multiple address in the from field, what is there looks correct to me.   Are you using prontmail as your smtp server?
Title: Re: All notifications are treated as spam/virus
Post by: MartinTS on October 26, 2021, 01:34:24 am
Spuds, thanks for your reply.

Yes I agree there is no actual second address in the From: part of the header, but the return path has been appended, which itself contains an email address. It seems that this is interpreted by the receiving server as a malformed "From:"

Is there a way of stopping the software from appending the return path?

You asked if I'm using ProtonMail as my SMTP server. I don't know, I'm just filling in the "webmaster address" field in the admin settings. I've tried several different addresses in this field, with no success sending to gmail, .govt and .ac addresses. The only test emails that have been received successfully are ones sent to my native cPanel email.

I really appreciate your help, I'm trying to set up a National covid forum for intensive care doctors.
Title: Re: All notifications are treated as spam/virus
Post by: radu81 on October 26, 2021, 02:41:39 am
In Admin CP > Configuration > Server settings > General, what did you insert as webmaster email? 
I suggest you to use a @yourdomain.com email address.

You can make some spam tests here https://www.mail-tester.com/ by sending a mail from your forum
Title: Re: All notifications are treated as spam/virus
Post by: Spuds on October 26, 2021, 10:07:49 am
You "can" remove the return-path, but you should not nor is that the problem.

I'd start by setting the webmaster email to one from your site, like admin@networkz.nz  or is it admin@connect2.networkz.nz ?  Anyway it should be an address that is authorized to send from YOUR domain.

I did a test register at your site with the mail-tester email (see @radu81 link above) and the results were pretty ugly https://www.mail-tester.com/test-7dfba4vl3