我通过了所有测试 spf、dmarc、dkim 但电子邮件仍会进入垃圾邮件

Question

我使用的是 amazon ec2 ubuntu 14.04 实例，我确实配置了 postfix、dkim 和 spf，但仍然有电子邮件进入收件箱。您可以在下面看到原始消息。

Delivered-To: malikkamranabid@gmail.com
Received: by 10.46.36.3 with SMTP id k3csp2397059ljk;
        Sun, 25 Feb 2018 02:44:16 -0800 (PST)
X-Google-Smtp-Source: AG47ELso8sEH+HXagEwS+Cp3omW50lz8Zg7pnhNvaYcsvQjzjA3ezzCRkOZII/vpg/Dws4WboCl+ 
X-Received: by 10.55.168.4 with SMTP id r4mr11222502qke.311.1519555456508;
        Sun, 25 Feb 2018 02:44:16 -0800 (PST)
ARC-Seal: i=1; a=rsa-sha256; t=1519555456; cv=none;
        d=google.com; s=arc-20160816;
        b=bs3mUdAYvaINS8ojtjqe6SkOBmcUEIiWFDx2pxqxVqVoQjv48OJbFqfcOo9xsjuBNV
         7GOEf+9Y33e+sxQEgUdnKnhsR7BDf1zCRb56mdDZLUrUUrMbJmkcADAGkzbAshdAnNH2
         PHmrozAYOGzHUxhGqx8GxdGFp4dfvcFyQ4vv7XUo42jTcvEE72d6IU62s883sFMMhEei
         KecC7gpsSESHi+GR/SO2J5cwgw8/7bVstZB4EMbUc4FRkCDAoW14WUdjpYifVIDGJ6eo
         F+Yy/YOnkdSHqArkh1ECbAdVxducy5Ech7n293IgwWkVbAVPB7gs0rdpbWh9R6mYAAQH
         nuYA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=google.com; s=arc-20160816;
        h=date:message-id:cc:reply-to:from:mime-version:subject:to
         :dkim-signature:arc-authentication-results;
        bh=z6TUz85EdYrACGMHYgZhJGvVy5oQI0dooVMKa2ZT7c4=;
        b=SiayPbnRmwqPYvN/3fDjKeb9AlUFUybSFOjuk6wbwNKOkm67rTByIHSCqyDsyNpALJ
         aNsFUe6TJY+4ADJwfTfekBTAbs6DJthyLR47ELn6G2R7FTDebmg6eu6sZsCrX9mrrGGT
         rCKIvfnPq+56TvU7UYzZvicnw/nnUaA1GmJKQAAn0/94ZlPgf4Q/Qf4QKGUpag/65DTI
         UTzttdeioLEAwaRcbSzOEd77I2e5sv+1VIsn8dPM+zYwbaK5Lic/Zz4y/o3Z2cm6IwcF
         UZmUAB+0Nm01O2U1qXUyVnN4wTrjAp5ruYVNwwCTp7la3RolM9r4gtTaj2T+JYaJKDx+
         Viug== ARC-Authentication-Results: i=1; mx.google.com;
       dkim=pass header.i=@lnl.com.hk header.s=dkim header.b=oyNNr3rQ;
       spf=pass (google.com: domain of noreply@lnl.com.hk designates 54.210.33.152 as permitted sender) smtp.mailfrom=noreply@lnl.com.hk;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=lnl.com.hk Return-Path: <noreply@lnl.com.hk>
Received: from mail.lnl.com.hk (ec2-54-210-33-152.compute-1.amazonaws.com. [54.210.33.152])
        by mx.google.com with ESMTP id m5si5766866qkd.12.2018.02.25.02.44.16
        for <malikkamranabid@gmail.com>;
        Sun, 25 Feb 2018 02:44:16 -0800 (PST)
Received-SPF: pass (google.com: domain of noreply@lnl.com.hk designates 54.210.33.152 as permitted sender) client-ip=54.210.33.152;
Authentication-Results: mx.google.com;
       dkim=pass header.i=@lnl.com.hk header.s=dkim header.b=oyNNr3rQ;
       spf=pass (google.com: domain of noreply@lnl.com.hk designates 54.210.33.152 as permitted sender) smtp.mailfrom=noreply@lnl.com.hk;
       dmarc=pass (p=NONE sp=NONE dis=NONE) header.from=lnl.com.hk
Received: by mail.lnl.com.hk (Postfix, from userid 33) id 34432426FE; Sun, 25 Feb 2018 10:44:17 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=lnl.com.hk; s=dkim; t=1519555457; bh=z6TUz85EdYrACGMHYgZhJGvVy5oQI0dooVMKa2ZT7c4=; h=To:Subject:From:Reply-To:CC:Date:From; b=oyNNr3rQhOdPqaNvZfQv2Fx6C/Ypx6T4SLKyhihBIP3I5A/8Q3NeY/VbFOEdshIvL    pKl1cRm+RzbdNKJULdUCklWJBIoi1EIiAlvUh0cWYTR1YQZo1/b+c2FKoNfK6N5E01      cFp+U1mmuuTXx19T8uQQBRlvZBLUTMuNIq0OvFA8=
To: malikkamranabid@gmail.com
Subject: My subject
X-PHP-Originating-Script: 1000:emailphp.php
MIME-Version: 1.0
Content-type: text/html; charset=iso-8859-1
From: noreply@lnl.com.hk
Reply-To: malikkamranabid@gmail.com
CC: malikkamranabid94@yahoo.com X-Mailer: PHP/5.5.9-1ubuntu4.22
Message-Id: <20180225104417.34432426FE@mail.lnl.com.hk> Date: Sun, 25 Feb 2018 10:44:17 +0000 (UTC)

Hello world!

Answer 1

这可能是反向 DNS 查找问题。如果没有有效的反向 DNS 记录，许多 ISP 会阻止您的电子邮件或将其标记为垃圾邮件。

看到这条线了吗？

'收到：来自 mail.lnl.com.hk (ec2-54-210-33-152.compute-1.amazonaws.com. [54.210.33.152]'

IP 地址 54.210.33.152 反向查找 PTR 记录返回 ec2-54-210-33-152.compute-1.amazonaws.com，而不是 mail.lnl.com.hk。在大多数垃圾邮件评分系统中，这是一个很大的危险信号。它可能在这里影响到你。

有关反向 DNS 的更多信息，请参阅https://www.rackaid.com/blog/email-dns-records/

Answer 2

如果您的邮件服务器没有使用弹性 IP 地址，则需要这样做。

如果你是……

Received: from mail.lnl.com.hk (ec2-54-210-33-152.compute-1.amazonaws.com. [54.210.33.152])

...那么您还没有要求 AWS Support 在您的 EIP 上配置反向 DNS，您肯定会想要这样做。

https://aws.amazon.com/blogs/aws/reverse-dns-for-ec2s-elastic-ip-addresses/

没有什么明显的原因导致此邮件进入垃圾邮件，但如果 gmail 对默认的 *.compute-1.amazonaws.com 反向 DNS 记录赋予一些权重，这将不足为奇，该记录清楚地将源标识为动态或池地址，即指示临时发件人（垃圾邮件发送者）的潜在危险信号。

事后思考：gmail 解释的From 地址显然是错误的。验证您的消息实际上没有格式错误。你需要这个看起来正确。消息正文中的 CC 行看起来也无效。