Forum Mails not delivered to iCloud inboxes

Hi there,

email notifications cannot be delivered to iCloud inboxes. The error message from iCloud refers to this link with tips for bulk mail senders.

Any chance this will be fixed?

Cheers

554 5.7.1 [CS01] Message rejected due to local policy. 
Please visit https://support.apple.com/en-us/HT204137
1 Like

It’s likely misconfigured skim/dmarc/spf. Perhaps @Alexey can send test email from a forum to some cheker tool like https://www.mail-tester.com/, and get verbose diagnostic.

2 Likes

https://www.mail-tester.com/test-d4hi3dkmm

10/10

You can copy source of that email as received by the mail-tester from that test page and paste it (in its entirety, otherwise dkim signature will break) to analyzers, like www.appmaildev.com or mxtoolbox.com to see more details.

The problem is that DKIM signature domain is not aligned, (it’s actually yellow on mail-tester; but mailtester is quite relaxed, 10/10 does not mean much, it sometimes ignores tests that it can’t check. you need to read actual results)

See:

mail-tester.com; dmarc=none header.from=literatehosting.com
mail-tester.com; dkim=pass (1024-bit key; unprotected) header.d=forum.storj.io header.i=@forum.storj.io header.b=N/d/FCUy; dkim-atps=neutral
From Domain: literatehosting.com
DKIM Domain: forum.storj.io

d domain is forum.storj.io, but the envelope from is literatehosting. I.e. DKIM passes, but for the wrong domain, and DMARC will fail, most properly configured mail recipients will drop it, as this is precisely what spammers do.

And adding the sender address to the white list of your email provider doesn’t help too?

No, that would only matter if the message would be getting to junk folder due to high spam score. Here it seems the mailserver rejects it outright, even before routing it to recipients box. I don’t know where did @Bivvo get that logs from, there there could be more information there, or perhaps storj shall open the case with Apple, but I’m sure they’ll just point out the misaligned DKIM and close the case as “behaves correctly”

I’m also using iCloud mail, albeit with my custom domain. i.e. arrogantrabbit.com’s MX is iCloud, and I have not once received an email from storj forum, since 2022, but at that time emails were not routed via literal hosting, and from and dkim domain were aligned (forum.storj.io)

If this could help, my E-Mail server often rejects Storj-Mails too. (Only the Forum mails, but not Node Online/Offline Mails).
Here is the Rspamd Result:

1 Like

This may provide some guidance (it’s written from the perspective of the provider, literatehosting in your case)

1 Like

Asked for help. I do not have permissions to change anything on DNS side.

CS01 from iCloud stands for “Content Scanner”, that means there is something in your message that’s hitting their internal filters, it can be wording it can also be an outgoing link. It has nothing to do with authentication or configuration of your mail server. You can email Apple postmaster and sometimes they will give you clues as to what triggering it or even straight out tell you. They are actually pretty nice, compare to most mailbox providers. Sometime they will adjust their filters and it won’t trigger again.

This is the only eMail Tester that really analysis the content. But it’s worth contacting Apple’s postmaster they usually respond within 24 hours. I never ever got a negative response from them, don’t be afraid to email them.

7.5 / 10

Any news from the experts?

1 Like

Nothing to share. I will update if some updates would be available.

1 Like

I changed the notification email and now it looks like DKIM is aligned properly. Could you give it another try?

3 Likes

It works, @pfaffman, thank you. :white_check_mark:

2 Likes

Hooray! Thanks for letting me know. Sorry that I didn’t notice this problem the first time you told me.

4 Likes