Emails sent by dashboard might get marked as spam #16

Closed
opened 2022-07-02 08:05:24 +00:00 by realaravinth · 4 comments

adjust that template, as this will likely be marked as spam by mail providers. Single sentence and a link to something isn't the most credible thing to send

@gusted on Matrix

> adjust that template, as this will likely be marked as spam by mail providers. Single sentence and a link to something isn't the most credible thing to send [@gusted on Matrix](https://matrix.to/#/!QdcnJXkpkBVpecQGtk:matrix.batsense.net/$f_MhDDe9TncAlR2jz6cMra5CwA53bskk97o_R5cPDsc?via=matrix.org&via=autonomic.zone&via=matrix.batsense.net)

https://www.mail-tester.com/ is handy for manual verification on a production system.

https://www.mail-tester.com/ is handy for manual verification on a production system.

My recommendation is to make the email something along the lines of:

Hello there/<username>,

Please click on the link below to verify your email.
<link>

If you don't recognise this activity, please delete this mail.

Cheers,
Hostea team

Don't make it overcomplicated, but still all the useful information.

Btw, you might want to consider adding a DMARC policy and MTA-STS policy to the mail server to be more "trusted".

Also running my quick checks noticed that the AS that hostea is using is listed at some blacklist provider, https://www.uceprotect.net/en/rblcheck.php. It's not a known blacklister so I don't think it will cause any problems but just a FYI.

image

My recommendation is to make the email something along the lines of: ``` Hello there/<username>, Please click on the link below to verify your email. <link> If you don't recognise this activity, please delete this mail. Cheers, Hostea team ``` Don't make it overcomplicated, but still all the useful information. Btw, you might want to consider adding a [DMARC policy](https://dmarc.org/) and [MTA-STS policy](https://datatracker.ietf.org/doc/html/rfc8461) to the mail server to be more "trusted". Also running my quick checks noticed that the AS that hostea is using is listed at some blacklist provider, https://www.uceprotect.net/en/rblcheck.php. It's not a known blacklister so I don't think it will cause any problems but just a FYI. ![image](/attachments/dd4cf90c-9ee8-4cc3-ac5e-b03e98a5d820)

The IP from which mails are sent did not have a good reputation and was blacklisted in https://check.spamhaus.org/not_listed/?searchterm=51.91.145.50 because it belongs to an IP range that's globally problematic. But I sent a request that was granted to make it better a few months back.

image

Improvements to how the SMTP server is configured belongs to Enough and I copied your suggestion there so it is not forgotten. Should sending mail prove problematic, that will be very useful.

The IP from which mails are sent did not have a good reputation and was blacklisted in https://check.spamhaus.org/not_listed/?searchterm=51.91.145.50 because it belongs to an IP range that's globally problematic. But I sent a request that was granted to make it better a few months back. ![image](/attachments/a177c1df-c7e9-49ee-9fb7-6aa1cb92ac3b) Improvements to how the SMTP server is configured belongs to Enough and [I copied your suggestion there](https://lab.enough.community/main/infrastructure/-/issues/360) so it is not forgotten. Should sending mail prove problematic, that will be very useful.
realaravinth self-assigned this 2022-07-03 20:42:06 +00:00
realaravinth added spent time 2022-07-04 13:19:29 +00:00
1h

#33 improves email content and fixes this issue.

#33 improves email content and fixes this issue.
Sign in to join this conversation.
No Label
No Milestone
No project
No Assignees
3 Participants
Notifications
Total Time Spent: 1 hour
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Hostea/dashboard#16
There is no content yet.