Yet another invoices getting marked as spam thread

[maestroc]

I'm sorry to ask about this as I am aware it has been asked dozens of times before, but after reading many of the posts here and attempting to do what they have suggested I am still getting almost all of my invoices flagged as spam. Many do not even seem to show up in spam and are apparently deleted before they arrive at the recipient.

 

I created a fake client in WHMCS and signed them up for a package so that the system would send out emails to a test site called isnotspam.com. I then visited their report link and received the data pasted below as to why the message was flagged as spam.

 

Please note that I am fully aware of the line regarding spamhaus blacklisting. We are on that one blacklist not because of anything my server has done but because a server on a nearby IP address is apparently a mega-spammer. Spamhaus has blacklisted an entire block of the nearby IP's for some reason and as a result I am currently preparing to move the server. In any case though, the problem of getting blocked invoices has been going on long before that spamhaus issue cropped up a couple of weeks ago.

 

The only other thing I see is the line about the BAYES_99 score which is probably the problem. The thing is that I am using the default WHMCS text for those invoice emails. If the default text that is provided with a new install of WHMCS is triggering this BAYES_99 response in SpamAssassin then surely this is something that needs to be addressed with WHMCS in general?

 

In any case. what do I need to do to fix this? I have been manually forwarding invoices to clients if they don't pay assuming that they are not even getting the invoices that the system is sending. They receive my email just fine.

 

Any help or insight would be greatly appreciated.

 

The text pasted below is the output from the isnotspam.com site's analysis of my WHMCS invoice email.

 

---------------------------
This message is an automatic response from isNOTspam's authentication verifier service. The service allows email senders to perform a simple check of various sender authentication mechanisms. It is provided free of charge, in the hope that it is useful to the email community. While it is not officially supported, we welcome any feedback you may have at .

Thank you for using isNOTspam.

The isNOTspam team

==========================================================
Summary of Results
==========================================================

SPF Check : pass
Sender-ID Check : pass
DomainKeys Check : neutral
DKIM Check : pass
SpamAssassin Check : ham (non-spam)
==========================================================
Details:
==========================================================

HELO hostname: 194.94-71-198.rdns.scalabledns.com
Source IP: 198.71.94.194
mail-from: [email]support@straightarrowhosting.net[/email]
Anonymous To: [email]ins-bleowdfe@isnotspam.com[/email]
---------------------------------------------------------
SPF check details:
----------------------------------------------------------

Result: pass
ID(s) verified: smtp.mail=support@straightarrowhosting.net
DNS record(s):
straightarrowhosting.net. 9892	IN	TXT	"v=spf1 ip4:198.71.94.194 +a +mx +ip4:174.138.171.50 ?all"


----------------------------------------------------------
Sender-ID check details:
----------------------------------------------------------

Result: pass

ID(s) verified: smtp.mail=support@straightarrowhosting.net
DNS record(s):
straightarrowhosting.net. 9892	IN	TXT	"v=spf1 ip4:198.71.94.194 +a +mx +ip4:174.138.171.50 ?all"


----------------------------------------------------------
DomainKeys check details:
----------------------------------------------------------

Result: neutral (message not signed)
ID(s) verified: header.From=support@straightarrowhosting.net
Selector=
domain=
DomainKeys DNS Record=

----------------------------------------------------------
DKIM check details:
----------------------------------------------------------

Result: pass
ID(s) verified: header.From=support@straightarrowhosting.net
Selector=default
domain=straightarrowhosting.net
DomainKeys DNS Record=default._domainkey.straightarrowhosting.net

----------------------------------------------------------
SpamAssassin check details:
----------------------------------------------------------
SpamAssassin 3.4.1 (2015-04-28)

Result: ham (non-spam) (06.4points, 10.0 required)

pts rule name description
---- ---------------------- -------------------------------


* 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 1.0000]
* 0.0 TVD_RCVD_IP Message was received from an IP address
* 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
* See [url]http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block[/url]
* for more information.
* [uRIs: straightarrowhosting.net]
* 0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
* [198.71.94.194 listed in zen.spamhaus.org]
* 1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
* [uRIs: straightarrowhosting.net]
* 0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
* [uRIs: straightarrowhosting.net]
* -0.0 SPF_PASS SPF: sender matches SPF record
* 0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
* [score: 1.0000]
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
* domain
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 1.0 RDNS_DYNAMIC Delivered to internal network by host with
* dynamic-looking rDNS
X-Spam-Status: Yes, hits=6.4 required=-20.0 tests=BAYES_99,BAYES_999,
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,RCVD_IN_SBL,RDNS_DYNAMIC,SPF_PASS,
TVD_RCVD_IP,URIBL_BLOCKED,URIBL_SBL,URIBL_SBL_A autolearn=no
autolearn_force=no version=3.4.1
X-Spam-Score: 6.4

To learn more about the terms used in the SpamAssassin report, please search
here: [url]http://wiki.apache.org/spamassassin/[/url]

==========================================================
Explanation of the possible results (adapted from 
draft-kucherawy-sender-auth-header-04.txt):
==========================================================

"pass"
the message passed the authentication test.

"fail"
the message failed the authentication test.

"softfail"
the message failed the authentication test, and the authentication
method has either an explicit or implicit policy which doesn't require
successful authentication of all messages from that domain.

"neutral"
the authentication method completed without errors, but was unable
to reach either a positive or a negative result about the message.

"temperror"
a temporary (recoverable) error occurred attempting to authenticate
the sender; either the process couldn't be completed locally, or
there was a temporary failure retrieving data required for the
authentication. A later retry may produce a more final result.

"permerror"
a permanent (unrecoverable) error occurred attempting to
authenticate the sender; either the process couldn't be completed
locally, or there was a permanent failure retrieving data required
for the authentication.


==========================================================
Original Email
==========================================================

From [email]support@straightarrowhosting.net[/email] Sun Sep 06 19:43:52 2015
Return-path: <support@straightarrowhosting.net>
X-Spam-Checker-Version: SpamAssassin 3.4.1 (2015-04-28) on
s15387396.onlinehome-server.com
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Report: 
* 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 1.0000]
* 0.0 TVD_RCVD_IP Message was received from an IP address
* 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
* See [url]http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block[/url]
* for more information.
* [uRIs: straightarrowhosting.net]
* 0.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus SBL
* [198.71.94.194 listed in zen.spamhaus.org]
* 1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
* [uRIs: straightarrowhosting.net]
* 0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
* [uRIs: straightarrowhosting.net]
* -0.0 SPF_PASS SPF: sender matches SPF record
* 0.2 BAYES_999 BODY: Bayes spam probability is 99.9 to 100%
* [score: 1.0000]
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
* domain
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 1.0 RDNS_DYNAMIC Delivered to internal network by host with
* dynamic-looking rDNS
X-Spam-Status: Yes, hits=6.4 required=-20.0 tests=BAYES_99,BAYES_999,
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,RCVD_IN_SBL,RDNS_DYNAMIC,SPF_PASS,
TVD_RCVD_IP,URIBL_BLOCKED,URIBL_SBL,URIBL_SBL_A autolearn=no
autolearn_force=no version=3.4.1
Envelope-to: [email]ins-bleowdfe@isnotspam.com[/email]
Delivery-date: Sun, 06 Sep 2015 19:43:52 -0500
Received: from 194.94-71-198.rdns.scalabledns.com ([198.71.94.194] helo=vps.straightarrowhosting.net)
by s15387396.onlinehome-server.com with esmtp (Exim 4.80.1)
(envelope-from <support@straightarrowhosting.net>)
id 1ZYkXH-0004FS-Vc
for [email]ins-bleowdfe@isnotspam.com[/email]; Sun, 06 Sep 2015 19:43:52 -0500
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=straightarrowhosting.net; s=default;
h=Content-Transfer-Encoding:Content-Type:MIME-Version:Message-ID:Subject:From:To:Date; bh=rXpUrMd5uqxxg4iTeY0TK770J2inwQlJGKLfp+mg0Kk=;
b=OoFvyNfS/cS0KQbzcMy49hUhR3zGhOAMdJsm+OtmKrkynxxu1+I6u1uNBAd2G+9bi2qP4F8pam3eaGjHjlvtv4jUDR5b6esYNCl1G3Hyixx9gFXqbjEbe74mLDZEd9hnW5Ef4NAA9sfVCz2fzYDGVYJiXwjF68D46RSAgIS1nDo=;
Received: from 194.94-71-198.rdns.scalabledns.com ([198.71.94.194]:40206 helo=www.straightarrowhosting.net)
by vps.straightarrowhosting.net with esmtpsa (TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.85)
(envelope-from <support@straightarrowhosting.net>)
id 1ZYkXC-0001x3-FK; Sun, 06 Sep 2015 17:43:46 -0700
Date: Mon, 7 Sep 2015 03:43:46 +0300
To: test client <ins-bleowdfe@isnotspam.com>
From: Straight Arrow Hosting <support@straightarrowhosting.net>
Subject: Customer Invoice
Message-ID: <48c7c53139e5c182f3a6202837b3595f@www.straightarrowhosting.net>
X-Priority: 3
X-Mailer: Straight Arrow Hosting
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="b1_48c7c53139e5c182f3a6202837b3595f"
Content-Transfer-Encoding: 8bit
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - vps.straightarrowhosting.net
X-AntiAbuse: Original Domain - isnotspam.com
X-AntiAbuse: Originator/Caller UID/GID - [47 12] / [47 12]
X-AntiAbuse: Sender Address Domain - straightarrowhosting.net
X-Get-Message-Sender-Via: vps.straightarrowhosting.net: authenticated_id: [email]support@straightarrowhosting.net[/email]
X-DKIM-Status: pass (straightarrowhosting.net)
This is a multi-part message in MIME format.

--b1_48c7c53139e5c182f3a6202837b3595f
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

Straight Arrow Hosting And Web Development Services
Dear test client,
Thank you for being a customer of StraightArrowHosting.net. Â This is a notice that an invoice for services or hosting has been generated on 09/07/2015.
Our system shows that your preferred payment method is: PayPalThe details of this invoice is included below and a PDF copy of the invoice is attached should you wish to look at it.
Invoice #178 Amount Due: $9.99 USD Due Date: 09/07/2015
Invoice Items
Basic (09/07/2015 - 10/06/2015) $9.99 USD

------------------------------------------------------
Sub Total: $9.99 USD
Credit: $0.00 USD
Total: $9.99 USD ------------------------------------------------------
You can login to your client area at any time to view and pay the invoice at [url]https://www.straightarrowhosting.net/whmcs/viewinvoice.php?id=178[/url]. Â If you have any questions or problems with this process please feel free to submit a ticket through the hosting ticket system and we will get back to you as soon as poassible.
Sincerely,
Straight Arrow Web Hosting and Development Services
Email: [email]support@straightarrowhosting.net[/email]
Ticket Support: [url]https://www.straightarrowhosting.net/whmcs/supporttickets.php[/url]


--b1_48c7c53139e5c182f3a6202837b3595f
Content-Type: application/pdf; name="Invoice-178.pdf"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename=Invoice-178.pdf

JVBERi0xLjcKJeLjz9MKNiAwIG9iago8PCAvVHlwZSAvUGFnZSAvUGFyZW50IDEgMCBSIC9MYXN0

[Sliffer21]

This is a mail server problem not WHMCS itself. Try going through a thirt party mail provider like Google Apps for business or Mandrill. They specifically sell email hosting for these reasons.