cancel
Showing results for 
Search instead for 
Did you mean: 

Lost eBay activation email - would IronPort have eaten it?

m063
Grafter
Posts: 166
Registered: 11-08-2007

Lost eBay activation email - would IronPort have eaten it?

I signed up one of my referrals to eBay yesterday. eBay said it would send an activation email, which never arrived. We asked it to resend and that never arrived either. Have checked spam folders both on his PC and on Plusnet Webmail and not found it. I'm investigating with eBay to see if there are problems, but I wondered if it is possible that IronPort has nevertheless classified it as spam and removed it? Is it possible to check?
12 REPLIES
Community Veteran
Posts: 19,090
Thanks: 428
Fixes: 21
Registered: 31-08-2007

Re: Lost eBay activation email - would IronPort have eaten it?

The safe solution so all mail is "delivered" (in theory) is to turn off edge filtering in MMM. The downside -You may also get an increase in SPAM received. HTH.
ChrisL
Grafter
Posts: 733
Thanks: 2
Registered: 13-12-2007

Re: Lost eBay activation email - would IronPort have eaten it?

FWIW the 'safe' solution is to turn off spam filtering altogether and make your own arrangements.  Even with 'edge filtering' turned off, the Ironport reputation filter can bounce messages it regards as obvious spam. (I think Bob Pullen is right that the whole concept of 'edge filtering' is now redundant and confusing. Please get rid of it.)
Chris
Community Veteran
Posts: 26,339
Thanks: 595
Fixes: 8
Registered: 10-04-2007

Re: Lost eBay activation email - would IronPort have eaten it?

I assume by that you mean it should be on with no option to turn it off.
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£13/month)
Mobile: iD mobile (£4/month)
Ben_Brown
Grafter
Posts: 2,839
Registered: 13-06-2007

Re: Lost eBay activation email - would IronPort have eaten it?

Edge filtering shouldn't block stuff from ebay, unless Ironport has seen a lot of spam from ebay's IP range, which is unlikely. The edge filtering happens at the TCP stage of the connection, so before the SMTP transaction has taken place. This means that all it cares about is the IP address of the remote server, it doesn't  know who they are saying they are or who the message is for.
The Ironport device looks the IP address up for it's SenderBase Reputation Score, and deals with it accordingly. We only block if the reputation is pretty bad, you can look up the reputation yourself at http://senderbase.org.
Personally I'd recommend using edge protection as the vast majority of spam is blocked at this point.
HTH
ChrisL
Grafter
Posts: 733
Thanks: 2
Registered: 13-12-2007

Re: Lost eBay activation email - would IronPort have eaten it?

Now I'm confused!
I thought so-called 'edge filtering' was different from, and additional to, the SenderBase reputation scoring. Surely the only way to turn off SBRS is to refuse Ironport spam protection altogether?  Why is there a difference in MMM between turning off spam protection and turning off 'edge protection'?
@jelv
No, I thought I meant relying on SBRS and the ordinary spam scoring, without any additional 'edge protection'. But hey -- I'm obviously up the spout somewhere!
Chris
Community Veteran
Posts: 26,339
Thanks: 595
Fixes: 8
Registered: 10-04-2007

Re: Lost eBay activation email - would IronPort have eaten it?

"Edge protection" actually controls blatant spam blocking which happens after the reputation based initial refusal of messages from IP's in the SenderBase database. Having that on seems to work well for me. I think they are going to give it a better name.
jelv (a.k.a Spoon Whittler)
   Why I have left Plusnet (warning: long post!)   
Broadband: Andrews & Arnold Home::1 (FTTC 80/20)
Line rental: Pulse 8 Home Line Rental (£13/month)
Mobile: iD mobile (£4/month)
ChrisL
Grafter
Posts: 733
Thanks: 2
Registered: 13-12-2007

Re: Lost eBay activation email - would IronPort have eaten it?

Thanks, jelv, that is what I thought!
I have left 'edge protection' on too, but I think I'll turn it off. As I understand it, there is a problem in that messages rejected by SBRS get a bounce, and messages scored as spam and dealt with properly can be checked, but messages falling foul of 'edge protection', including just-conceivable false-positives, simply disappear into the ether.
See, for instance: http://community.plus.net/forum/index.php/topic,71606.msg568754.html#msg568754 and after.
Chris
Superuser
Superuser
Posts: 8,874
Thanks: 407
Fixes: 36
Registered: 06-04-2007

Re: Lost eBay activation email - would IronPort have eaten it?

Yes, I believe our interpretation of "edge protection" is the correct one. I have "edge protection" off which should mean messages are either refused (bounced) or delivered (to spam folder or inbox in my case). I didn't notice any change to the spam-folder receipt rate when I turned "edge protection" off which implies blatant spam didn't make it past the Reputation filter.
David
David
Ben_Brown
Grafter
Posts: 2,839
Registered: 13-06-2007

Re: Lost eBay activation email - would IronPort have eaten it?

Apologies, my interpretation of Edge Filtering was a bit out of whack with reality. It's not SRBS, it's how the spam filtering deals with mail it thinks is spam. I was thinking from a purely IronPort perspective rather than our implementation of IronPort.  Embarrassed
m063
Grafter
Posts: 166
Registered: 11-08-2007

Re: Lost eBay activation email - would IronPort have eaten it?

Thanks for all the comments; clearly Plusnet's spam handling shouldn't eat this email, but I'm not convinced it didn't.
We do want to get registered with eBay.
I'll try whitelisting eBay and see what happens.
Community Gaffer
Community Gaffer
Posts: 12,799
Thanks: 630
Fixes: 62
Registered: 04-04-2007

Re: Lost eBay activation email - would IronPort have eaten it?

FWIW I've just tried registering an account using a Plusnet address with spam settings as follows:

  • Spam On
  • Edge Protection Off
  • Add [-SPAM-] to Subject Line
  • Move to Spam Folder
  • Aggressiveness 5
  • Virus Filtering On

I received the following email almost immediately:
Return-path: <registration@ebay.co.uk>
Envelope-to: ebayreg@bobpullen.force9.co.uk
Delivery-date: Tue, 06 Jan 2009 16:15:24 +0000
Received: from [212.159.7.103] (helo=mx.pcl-ipin04.plus.net)
  by fhw-sunmxcore02.plus.net with esmtp (PlusNet MXCore v2.00) id 1LKEaR-0005Zq-Tg
  for ebayreg@bobpullen.force9.co.uk; Tue, 06 Jan 2009 16:15:23 +0000
Authentication-Results: mx.pcl-ipin04.plus.net; dkim=neutral (message not signed) header.i=none
Received-SPF: Pass identity=pra; client-ip=66.135.197.19;
  receiver=mx.pcl-ipin04.plus.net;
  envelope-from="registration@ebay.co.uk";
  x-sender="registration@ebay.co.uk";
  x-conformance=sidf_compatible
Received-SPF: Pass identity=mailfrom; client-ip=66.135.197.19;
  receiver=mx.pcl-ipin04.plus.net;
  envelope-from="registration@ebay.co.uk";
  x-sender="registration@ebay.co.uk";
  x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=66.135.197.19;
  receiver=mx.pcl-ipin04.plus.net;
  envelope-from="registration@ebay.co.uk";
  x-sender="postmaster@mxpool01.ebay.com";
  x-conformance=sidf_compatible
X-SBRS: 4.8
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AiICAFcSY0lCh8UTlGdsb2JhbACCQyyPaYEtAQEBAQkLCAkRBad2KoFgd4QhEggnhnsFhHwFhDoICg
X-IronPort-AV: E=McAfee;i="5100,188,5486"; a="15731192"
X-IronPort-AV: E=Sophos;i="4.36,339,1228089600";
  d="scan'208,217";a="15731192"
Received: from mxpool13.ebay.com (HELO mxpool01.ebay.com) ([66.135.197.19])
  by mx.pcl-ipin04.plus.net with ESMTP; 06 Jan 2009 16:15:22 +0000
Received: from sj-wscgi006 (sj-wscgi006.sjc.ebay.com [10.11.64.106])
by mxpool01.ebay.com (8.13.8/8.13.8) with ESMTP id n06GB5aB008919
for <ebayreg@bobpullen.force9.co.uk>; Tue, 6 Jan 2009 09:15:21 -0700 (GMT)
DomainKey-Signature: a=rsa-sha1; s=dksm28; d=ebay.co.uk; c=nofws; q=dns;
h=message-id:from:reply-to:to:subject:mime-version:
content-type:x-ebay-mailtracker:x-ebay-mailversiontracker;
b=gFvgWbZ0mJG11/HZSW8rRrK7bwzUucuq1Bqd3CVMCAD7/0Gngy1BBN0u4y1WDWgYa
u+7to1s5PLuPr5XDiraKQ==
Date: Tue, 6 Jan 2009 09:15:21 -0700 (GMT)
Message-ID: <195824556.1231258520842.JavaMail.SYSTEM@sj-wscgi006>
From: eBay <registration@ebay.co.uk>
Reply-To: registration@ebay.co.uk
To: ebayreg@bobpullen.force9.co.uk
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=446175896.1231258520842.JavaMail.SYSTEM.sj-wscgi006
X-eBay-MailTracker: 13000.595.3.0
X-eBay-MailVersionTracker: 595.7685801
Subject: Please complete your eBay registration

The reputation of the server this email came from is fine. I suppose the Edge Protection *note to self to get this renamed* could have eaten it based of other factors but I wouldn't know without conducting further tests.

Bob Pullen
Plusnet Products Team
If I've been helpful then please give thanks ⤵

Community Gaffer
Community Gaffer
Posts: 12,799
Thanks: 630
Fixes: 62
Registered: 04-04-2007

Re: Lost eBay activation email - would IronPort have eaten it?

This one was with Edge Protection switched on and the other settings as described in my previous post:
Return-path: <registration@ebay.co.uk>
Envelope-to: edgeprotection@bobpullen.force9.co.uk
Delivery-date: Wed, 07 Jan 2009 11:51:46 +0000
Received: from [212.159.7.97] (helo=mx.pcl-ipin01.plus.net)
  by fhw-sunmxcore05.plus.net with esmtp (PlusNet MXCore v2.00) id 1LKWws-0004CO-Ca
  for edgeprotection@bobpullen.force9.co.uk; Wed, 07 Jan 2009 11:51:46 +0000
Authentication-Results: mx.pcl-ipin01.plus.net; dkim=neutral (message not signed) header.i=none
Received-SPF: Pass identity=pra; client-ip=66.135.197.25;
  receiver=mx.pcl-ipin01.plus.net;
  envelope-from="registration@ebay.co.uk";
  x-sender="registration@ebay.co.uk";
  x-conformance=sidf_compatible
Received-SPF: Pass identity=mailfrom; client-ip=66.135.197.25;
  receiver=mx.pcl-ipin01.plus.net;
  envelope-from="registration@ebay.co.uk";
  x-sender="registration@ebay.co.uk";
  x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=66.135.197.25;
  receiver=mx.pcl-ipin01.plus.net;
  envelope-from="registration@ebay.co.uk";
  x-sender="postmaster@mxpool01.ebay.com";
  x-conformance=sidf_compatible
X-SBRS: 4.8
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: ArMBALclZElCh8UZlGdsb2JhbACCbzKPOoEuAQEBAQkLCAkRBagGKoFgd4QhEggnhiEFhQcFhDsICg
X-IronPort-AV: E=McAfee;i="5300,2777,5487"; a="17548814"
X-IronPort-AV: E=Sophos;i="4.37,226,1231113600";
  d="scan'208,217";a="17548814"
Received: from mxpool19.ebay.com (HELO mxpool01.ebay.com) ([66.135.197.25])
  by mx.pcl-ipin01.plus.net with ESMTP; 07 Jan 2009 11:51:16 +0000
Received: from sj-wscgi002 (sj-wscgi002.sjc.ebay.com [10.11.64.102])
by mxpool01.ebay.com (8.13.8/8.13.8) with ESMTP id n07BmtoM013064
for <edgeprotection@bobpullen.force9.co.uk>; Wed, 7 Jan 2009 04:51:15 -0700 (GMT)
DomainKey-Signature: a=rsa-sha1; s=dksm28; d=ebay.co.uk; c=nofws; q=dns;
h=message-id:from:reply-to:to:subject:mime-version:
content-type:x-ebay-mailtracker:x-ebay-mailversiontracker;
b=VA9OhrxMstkt7j5JC0FXfyBgt1w4WCfB7ZTfdnNf/vyK4TDbFJIDkVyxc9aXVPU5M
lI3k7JAEH4lVMteHsBxBw==
Date: Wed, 7 Jan 2009 04:51:15 -0700 (GMT)
Message-ID: <1141523466.1231329075234.JavaMail.SYSTEM@sj-wscgi002>
From: eBay <registration@ebay.co.uk>
Reply-To: registration@ebay.co.uk
To: edgeprotection@bobpullen.force9.co.uk
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary=1806461868.1231329075234.JavaMail.SYSTEM.sj-wscgi002
X-eBay-MailTracker: 13000.595.3.0
X-eBay-MailVersionTracker: 595.7685801
Subject: Please complete your eBay registration

Bob Pullen
Plusnet Products Team
If I've been helpful then please give thanks ⤵