|
|
Testing Your Email Authentication
So you poured through every resource you can find, you tested everything to the best of your knowledge, you're positive you have your email set up correctly.
But how do you really know you have everything set up correctly?
"The answer is simple," all you have to do is send an email to
"mailtest@unlocktheinbox.com" and it will autorespond within minutes with a
complete email analysis, to the "RFC5322.from" address also known as the "From Address". If you want the test to respond to the "RFC5321.from" also known as the "ReturnPath or Mail From", send an email to "mailtest2@unlocktheinbox.com".
If you want the test to respond to the first recipient on the "Reply-To" address, send an email to "mailtest3@unlocktheinbox.com".
If you fail on any of the checks, it will let you know
and provide you useful information to help you make corrections. If you need clarification, just post a message on our forums.
Below is an example of the email you will receive if everything passes. At this point you can create an account and follow the instructions here to earn your Trusted Senders Site Seal.
If you have trouble passing, please view our Email Authentication Knowledge Base.
Note: If "mailtest@unlocktheinbox.com" does not auto respond within 5 minutes, you might be on our internal blacklist. If you find your email addresses listed, simply remove yourself and repeat the test.
| Publication: RFC 822 |
| Header Information |
| Name |
Value |
| return-path |
<mailtest@unlocktheinbox.com> |
| received |
from mail.unlocktheinbox.com (mail.unlocktheinbox.com [168.144.32.46]) by unlocktheinbox.com with SMTP; Thu, 5 Apr 2012 22:56:19 -0400 |
| dkim-signature |
v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=unlocktheinbox.com; s=secure; h=Content-Transfer-Encoding:Content-Type:MIME-Version:To:From:Subject:Date:Message-ID; bh=g3zLYH4xKxcPrHOD18z9YfpQcnk/GaJedfustWU5uGs=; b=V9/t0UnN278ioLmuMkylTQYQnYs3Si59CEMbSkgoxBxOgTL5A1J7GwZLH2POnGvVN107izPGI5ekUxONZRG19a+F/8owB675w4kc6ragbvNX3Op5MFBquy0WlbLL5GlJ; |
| domainkey-signature |
a=rsa-sha1; q=dns; c=nofws; s=secure; d=unlocktheinbox.com; h=Message-ID:Date:Subject:From:To:User-Agent:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:Importance; b=dSMhrkgARCXZqVdkDq/1/irPFgXoAUllgC0elg5PUAMsWHp8yQ9sq
JERhAlJvrlJ49Mp8cfba6oYCAGpiP0uP0c3TASDsRvpMOjP+aQBOri2A/
ic2UDQ2LALXJn0QoUs; |
| received |
from localhost.localdomain ([127.0.0.1] helo=mail.unlocktheinbox.com) by
mail.unlocktheinbox.com with esmtpa (Exim 4.69) (envelope-from) id 1SFzLW-00013Y-MV for mailtest@unlocktheinbox.com; Thu, 05 Apr 2012 22:55:54 -0400 |
| received |
from 168.144.32.46 ([168.144.32.46]) (proxying for 168.144.32.46) (SquirrelMail
authenticated user mailtest@unlocktheinbox.com) by mail.unlocktheinbox.com with HTTP; Thu, 5 Apr 2012 21:56:18 -0500 |
| message-id |
<cafd4302c5235420@mail.unlocktheinbox.com> |
| date |
Thu, 5 Apr 2012 21:56:18 -0500 |
| subject |
This is a test of Unlock The Inbox Email Authentication System. |
| from |
"Mail Test" <mailtest@unlocktheinbox.com> |
| to |
mailtest@unlocktheinbox.com |
| user-agent |
SquirrelMail/1.4.22 |
| mime-version |
1.0 |
| content-type |
text/plain;charset=iso-8859-1 |
| content-transfer-encoding |
8bit |
| x-priority |
3 (Normal) |
| importance |
Normal |
| x-antiabuse |
This header was added to track abuse, please include it with any abuse report |
| x-antiabuse |
Primary Hostname - mail.unlocktheinbox.com |
| x-antiabuse |
Original Domain - unlocktheinbox.com |
| x-antiabuse |
Originator/Caller UID/GID - [47 12] / [47 12] |
| x-antiabuse |
Sender Address Domain - unlocktheinbox.com |
| rDNS PTR Records |
| Type |
Mail Domain |
ARPA Record |
PTR Record |
Results |
| MX |
mail.unlocktheinbox.com [168.144.32.36] |
36.32.144.168.in-addr.arpa. |
1 |
Passed |
| LSIP |
unlocktheinbox.com [168.144.32.46] |
46.32.144.168.in-addr.arpa. |
1 |
Passed |
| Last Sending Domain Name - A Record Test |
| Domain |
Results |
| unlocktheinbox.com |
Passed - A Record Was Found in DNS |
| Mail Flow |
| Mail Domain |
IP Address |
| mail.unlocktheinbox.com |
168.144.32.46 |
| localhost.localdomain |
127.0.0.1 |
| 168.144.32.46 |
168.144.32.46 |
| ISIPP Email Certification and Accreditation |
| Mail Server IP |
IP Address |
| 168.144.32.46 |
Listed |
| RFC5322.FROM - Address Specification Test - Section 3.4 |
| RFC5322.FROM |
Result |
| "Mail Test" <mailtest@unlocktheinbox.com> |
Passed |
| MIME-Version - Syntax Check - RFC2045 |
| MIME-Version |
Result |
| 1.0 |
Passed |
| Content-Type - Syntax Check - RFC2045 |
| Content-Type |
Result |
| text/plain; charset=utf-8 |
Passed |
| Content-Transfer-Encoding - Syntax Check - RFC2045 |
| Content-Transfer-Encoding |
Result |
| quoted-printable |
Passed |
| Email Port Checks for: mail.unlocktheinbox.com |
| Protocol |
Results |
| SMTP (Port 25): |
Connection Established |
| - Time To Connect: |
1 Second - Passed |
| - Extensions: |
SIZE, 8BITMIME, PIPELINING, AUTH, STARTTLS, HELP |
| - Server Greeting: |
unlocktheinbox.com |
| - SSL Hostname: |
mail.unlocktheinbox.com |
| - SSL Subject: |
CN=mail.unlocktheinbox.com, OU=Domain Control Validated, O=mail.unlocktheinbox.com |
| - SSL Issuer: |
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US |
| - SMTP Banner rDNS Check: |
Passed |
| - SSL Valid: |
Certificate is Valid |
| - SSL Protocol Used:: |
TLS 1.2 |
| - SSL Cipher Algorithm: |
AES 256 |
| - SSL Hash Algorithm: |
SHA 384 |
| - SSL Exchange Algorithm: |
ECDH |
| - SSL Key Size: |
2048 |
| - SSLv3 Disabled: |
Yes |
| | |
| SMTP SSL (Port 465): |
Connection Established |
| - Time To Connect: |
1 Second - Passed |
| - Extensions: |
SIZE, 8BITMIME, PIPELINING, AUTH, HELP |
| - Server Greeting: |
unlocktheinbox.com |
| - SSL Hostname: |
mail.unlocktheinbox.com |
| - SSL Subject: |
CN=mail.unlocktheinbox.com, OU=Domain Control Validated, O=mail.unlocktheinbox.com |
| - SSL Issuer: |
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US |
| - SMTP Banner rDNS Check: |
Passed |
| - SSL Valid: |
Certificate is Valid |
| - SSL Protocol Used:: |
TLS 1.2 |
| - SSL Cipher Algorithm: |
AES 256 |
| - SSL Hash Algorithm: |
SHA 384 |
| - SSL Exchange Algorithm: |
ECDH |
| - SSL Key Size: |
2048 |
| - SSLv3 Disabled: |
Yes |
| | |
| POP3 (Port 110): |
Connection Established |
| - Time To Connect: |
1 Second - Passed |
| - Extensions: |
STLS, TOP, USER, LOGIN-DELAY, PIPELINING, UIDL, IMPLEMENTATION |
| - Server Greeting: |
unlocktheinbox.com |
| - SSL Hostname: |
mail.unlocktheinbox.com |
| - SSL Subject: |
CN=mail.unlocktheinbox.com, OU=Domain Control Validated, O=mail.unlocktheinbox.com |
| - SSL Issuer: |
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US |
| - POP3 Banner rDNS Check: |
Passed |
| - SSL Valid: |
Certificate is Valid |
| - SSL Protocol Used:: |
TLS 1.2 |
| - SSL Cipher Algorithm: |
AES 256 |
| - SSL Hash Algorithm: |
SHA 384 |
| - SSL Exchange Algorithm: |
ECDH |
| - SSL Key Size: |
2048 |
| - SSLv3 Disabled: |
Yes |
| | |
| MAIL SUBMISSION (Port 587): |
Connection Established |
| - Time To Connect: |
1 Second - Passed |
| - Extensions: |
IMAP4rev1, UIDPLUS, CHILDREN, NAMESPACE, AUTH, AUTH, SORT, QUOTA, IDLE, AUTH, ACL, ACL2 |
| - Server Greeting: |
unlocktheinbox.com |
| - SSL Hostname: |
mail.unlocktheinbox.com |
| - SSL Subject: |
CN=mail.unlocktheinbox.com, OU=Domain Control Validated, O=mail.unlocktheinbox.com |
| - SSL Issuer: |
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US |
| - SMTP Banner rDNS Check: |
Passed |
| - SSL Valid: |
Certificate is Valid |
| - SSL Protocol Used:: |
TLS 1.2 |
| - SSL Cipher Algorithm: |
AES 256 |
| - SSL Hash Algorithm: |
SHA 384 |
| - SSL Exchange Algorithm: |
ECDH |
| - SSL Key Size: |
2048 |
| - SSLv3 Disabled: |
Yes |
| | |
| POP3 SSL (Port 995): |
Connection Established |
| - Time To Connect: |
1 Second - Passed |
| - Extensions: |
IMAP4rev1, UIDPLUS, CHILDREN, NAMESPACE, AUTH, AUTH, SORT, QUOTA, IDLE, ACL, ACL2, STARTTLS |
| - Server Greeting: |
unlocktheinbox.com |
| - SSL Hostname: |
mail.unlocktheinbox.com |
| - SSL Subject: |
CN=mail.unlocktheinbox.com, OU=Domain Control Validated, O=mail.unlocktheinbox.com |
| - SSL Issuer: |
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US |
| - POP3 Banner rDNS Check: |
Passed |
| - SSL Valid: |
Certificate is Valid |
| - SSL Protocol Used:: |
TLS 1.2 |
| - SSL Cipher Algorithm: |
AES 256 |
| - SSL Hash Algorithm: |
SHA 384 |
| - SSL Exchange Algorithm: |
ECDH |
| - SSL Key Size: |
2048 |
| - SSLv3 Disabled: |
Yes |
| | |
| IMAP (Port 143): |
Connection Established |
| - Time To Connect: |
1 Second - Passed |
| - Extensions: |
FoundIMAP4rev1, UIDPLUS, CHILDREN, NAMESPACE, AUTH, AUTH, SORT, QUOTA, IDLE, ACL, ACL2, STARTTLS |
| - Server Greeting: |
unlocktheinbox.com |
| - SSL Hostname: |
mail.unlocktheinbox.com |
| - SSL Subject: |
CN=mail.unlocktheinbox.com, OU=Domain Control Validated, O=mail.unlocktheinbox.com |
| - SSL Issuer: |
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US |
| - IMAP Banner rDNS Check: |
Passed |
| - SSL Valid: |
Certificate is Valid |
| - SSL Protocol Used:: |
TLS 1.2 |
| - SSL Cipher Algorithm: |
AES 256 |
| - SSL Hash Algorithm: |
SHA 384 |
| - SSL Exchange Algorithm: |
ECDH |
| - SSL Key Size: |
2048 |
| - SSLv3 Disabled: |
Yes |
| | |
| IMAP SSL (Port 993): |
Connection Established |
| - Time To Connect: |
1 Second - Passed |
| - Extensions: |
IMAP4rev1, UIDPLUS, CHILDREN, NAMESPACE, AUTH, AUTH, SORT, QUOTA, IDLE, AUTH, ACL, ACL2 |
| - Server Greeting: |
unlocktheinbox.com |
| - SSL Hostname: |
mail.unlocktheinbox.com |
| - SSL Subject: |
CN=mail.unlocktheinbox.com, OU=Domain Control Validated, O=mail.unlocktheinbox.com |
| - SSL Issuer: |
SERIALNUMBER=07969287, CN=Go Daddy Secure Certification Authority, OU=http://certificates.godaddy.com/repository, O="GoDaddy.com, Inc.", L=Scottsdale, S=Arizona, C=US |
| - IMAP Banner rDNS Check: |
Passed |
| - SSL Valid: |
Certificate is Valid |
| - SSL Protocol Used:: |
TLS 1.2 |
| - SSL Cipher Algorithm: |
AES 256 |
| - SSL Hash Algorithm: |
SHA 384 |
| - SSL Exchange Algorithm: |
ECDH |
| - SSL Key Size: |
2048 |
| - SSLv3 Disabled: |
Yes |
| Publication: RFC 4408 |
| SPF Records |
| ARSoft Check: |
Passed |
| SmarterMail Check: |
Passed |
| SpamAssassin Check: |
Passed |
| SPF DNS Location: |
Click Here: unlocktheinbox.com |
| SPF Record in TXT (TYPE 16): |
v=spf1 a mx a:unlocktheinbox.com mx:mail.unlocktheinbox.com ip4:168.144.32.45 ~all |
| (TYPE 16) Syntax: |
Passed |
| SPF Record in SPF (TYPE 99): |
v=spf1 a mx a:unlocktheinbox.com mx:mail.unlocktheinbox.com ip4:168.144.32.45 ~all |
| (TYPE 99) Syntax: |
Passed |
| SPF/TXT Match: |
Passed |
| SPF Lookups: |
Passed |
| Information : Identifier Alignments |
| SPF Alignment Test (Used in DMARC ASPF Test) |
| Mail From/Return Path Domain: |
unlocktheinbox.com |
| From Domain: |
unlocktheinbox.com |
| SPF Identifier Alignment: |
Strict |
| Publication: RFC 4406 |
| Sender ID |
| Sender ID Check: |
Passed |
| Sender ID Record: |
Uses SPF implementation above |
| Public Domain Key |
| Selector Location: |
Click Here: secure._domainkey.unlocktheinbox.com |
| DNS Record Found: |
Yes |
| Record Syntax: |
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSFbcDPNOPcrg28a7m6RTH/BheXoR9R8kxtUIZ2CB9NeF+sF+mMP09PoXJdQe/9iu4+tPgotjNDUyWSgbawCWOps+i3mnVUdi/ZBF8aKltv0uTx0lRIdA17lMr6tci4tY/+n2piNaUequvDrPFAIPcDsDjRh9ivjjG+HZwhoMiYwIDAQAB |
| Key Size: |
1024 bits |
| Domain Keys Check (Obsolete) |
| Signature Found: |
Yes |
| Signature Verified: |
Passed |
| From Signed: |
Yes |
| Restricted Headers Signed: |
No |
| Key Algorithm: |
Passed |
| Canonicalization Syntax: |
Passed |
| DKIM Validation Check |
| Signature Found: |
Yes |
| SmarterMail DKIM Test: |
Passed |
| LimiLabs DKIM Test: |
Passed |
| SpamAssassin DKIM Test: |
Passed |
| Publication: RFC 4870 |
| Domain Keys Additional Information |
| Tag |
Value |
| Key Algorithm: |
a=rsa-sha1 |
| Query Method: |
q=dns |
| Canonicalization: |
c=nofws |
| Selector: |
s=default |
| Domain Name: |
d=unlocktheinbox.com |
| Signed Headers: |
h=Message-ID:Date:Subject:From:To:User-Agent:MIME-Version:Content-Type:Content-Transfer-Encoding:X-Priority:Importance |
| Signature Data: |
b=dSMhrkgARCXZqVdkDq/1/irPFgXoAUllgC0elg5PUAMsWHp8y
Q9sqJERhAlJvrlJ49Mp8cfba6oYCAGpiP0uP0c3TASDsRvpMOjP+
aQBOri2A/ic2UDQ2LALXJn0QoUs |
| Public DKIM Key |
| Selector Location: |
Click Here: secure._domainkey.unlocktheinbox.com |
| DNS Record Found: |
Yes |
| Record Syntax: |
k=rsa;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDSFbcDPNOPcrg28a7m6RTH/BheXoR9R8kxtUIZ2CB9NeF+sF+mMP09PoXJdQe/9iu4+tPgotjNDUyWSgbawCWOps+i3mnVUdi/ZBF8aKltv0uTx0lRIdA17lMr6tci4tY/+n2piNaUequvDrPFAIPcDsDjRh9ivjjG+HZwhoMiYwIDAQAB |
| Key Size: |
1024 bits |
| DKIM RFC Check |
| From Signed: |
Yes |
| Restricted Headers Signed: |
No |
| Key Algorithm: |
Passed |
| Canonicalization Syntax: |
Passed |
| Information : Identifier Alignments |
| DKIM Alignment Test (Used in DMARC ADKIM Test) |
| DKIM d= Tag: |
unlocktheinbox.com |
| From Domain: |
unlocktheinbox.com |
| SPF Identifier Alignment: |
Strict |
| Draft Publication: DMARC Base-00-01 |
| DMARC Check |
| DMARC Record Syntax: |
Passed |
| DKIM Test: |
Passed |
| SPF Test: |
Passed |
| ADKIM Test: |
Passed |
| ASPF Test: |
Passed |
| RUA Test: |
Passed |
| RUF Test: |
Passed |
| DMARC Passed: |
Yes |
| Dmarc Record Location: |
Click Here: _dmarc.unlocktheinbox.com |
| DMARC Record: |
v=DMARC1;p=none;pct=100;aspf=s;adkim=s;rua=mailto:admin@domain.com;
ruf=mailto:admin@domain.com; |
| Acceptance of Abuse Address |
| abuse@domain.com |
Passed |
| Spam Assassin Results |
Content analysis details: (You scored -1.9 points, 5.0 or higher is considered to be spam)
|
| Pts |
Rule Name |
Description |
| -1.2 |
RP_MATCHES_RCVD |
Envelope sender domain matches handover relay domain |
| -0.7 |
RCVD_IN_DNSWL_LOW |
RBL: Sender listed at http://www.dnswl.org/, low [168.144.32.46 listed in list.dnswl.org] |
Source: Unlock The Inbox
|
|