Hacker News Reader

Hacker News

Comment by mustaphah | Hacker News Reader

Parent Full thread

mustaphah

A quick hack: forward @yourdomain.com emails to your Gmail (e.g, Cloudflare Email Routing).

Outbound emails sent via "Send mail as:" using SMTP remain unaffected.

View on HN

doesn't work very well these days with SPF + DKIM

Only if the sender's DMARC setup is broken…

If their DMARC alignment relies on SPF only, it will break. But if it relies on DKIM (far more common) or both SPF and DKIM (best practice), forwarding won't cause any issues.

If your email breaks when forwarded, your setup is broken. Tons of people use Cloudflare Email Routing or similar services; you must account for them.

That being said, I forward mail addressed @mydomain.com to my Gmail, and I've had a couple of cases where legit messages landed in spam because it was SPF-aligned only.

Or forward your gmail to another proper email domain.

I just can't live without the Gmail spamfilter. It's just the best. Industry-leading; no question.

Gmail regularly lets through spam, including backscatter spam from mail sent to the google.com domain spoofing Gmail users. Industry-leading is not the term I would use to describe their spam heuristics.

Grey listing has been far more effective at stopping spam than some half-baked AI garbage from Google.

Not ideal - can't disagree. Still, it's the industry leader. I'm not aware of a better spamfilter.

Grey listing doesn't scale; not for me.

I forward everything including spam to Fastmail. Their spam filter is absolutely fine. This way I don't need to check for false positives in 2 places. You're probably losing one genuine message a year if you don't check your Gmail spam folder.

Hmm. Not really. I run greylisting on my personal domain which is extremely low traffic and lately I'm getting like 4-5 spams per day that obey it correctly.

Which is more than the non spam emails that come on it :)

I control spam by using email aliases. And it makes it easy to track exactly who leaked/sold my email address. But I don't use gmail, as I value my privacy.

I do aliases as well. Never enough. A battle-tested spammer would run s/+[^@]*// on the address before sending.

I have my own domain and just do <website-name>@mydomain.com and redirect everything to the same inbox sorted in folders.

Works pretty well, if any of those addresses gets into some spam list I just block it (hasn't happened yet, though)

Catch-all (*) setup is the best, until a spammer hits a gibberish localpart (on purpose) and your domain cheerfully accepts it.

Don't get me wrong, I use catch-all too (don't tell spammers).

I whitelist using regular expressions (specific prefixes mostly). Gibberish and random localparts are unlikely to match those, it effectively never happens.

Using passmail aliases through protonmail has worked well for me, that way my domain isn't exposed. And everything forwards to one inbox.

Subaddressing != aliasing.

Aliasing !== masked email

Agreed, there are also ways to employ aliases which won't prevent spam, but this still doesn't explain the relation to the subaddressing regex or why other ways or employing aliases (e.g. masking) are never enough.

That's what I thought too until I moved to Fastmail. It certainly isn't worse.

Fastmail is great. It's just that I'm not willing to pay 5$ each month to send 5 emails from @mydomain.com. 1$ per email is too much, right?

I have all of my mail (and all of my domains) there, that makes it a fair deal. It also fetches from gmail and other places.

It is at least 5 months since spammers use fake "delivery error" to skip the filter: http://old.reddit.com/r/cybersecurity/comments/1jzf6o2/fake_... . I would expect more from industry-leading company.

Just joking, I expect nothing from GMail team after I noticed that "block sender" option just puts emails in spam folder instead of deleting them on arrival.

I just can't live without the Gmail spamfilter. It's just the best. Industry-leading; no question.

I have accounts on Gmail and other services, and can say from close to a decade of use that Fastmail's spam filter is usually far better than Gmail's.

Occasionally it'll fall behind for a few weeks, but always seems to catch up or surpass Google's.

Over the last couple of months, for example, 100% of the spam I've received has come from Gmail. 0% from Fastmail.

Have you tried other things? And not saying just Microsoft.

Proton Mail is good (just not as good), but you can't integrate external SMTP for outbound emails; you have to pay to send from @yourdomain.com.

With Gmail, you can configure an external SMTP server using "Send mail as" setting. Super convenient. Tons of mail services offer a generous free tier for personal use (e.g., Mailgun 100 emails/day).

It's not really worth paying just to send a few personal emails from @yourdomain.com each month.

This comment is from 1020.

LOL. Thanks.

Gmail is absolutely terrible for false positives. I'm sure they do it deliberately to discourage people from using other e-mail services.

What's your setup? If you're forwarding, an SPF-only aligned email will fail DMARC, and it's the sender's fault: https://news.ycombinator.com/item?id=45441243

Next time a legit email ends up in your spam folder, use this tool to figure out why: https://mxtoolbox.com/EmailHeaders.aspx

I've had a few cases myself, and it's always been the sender's fault.

Yes, they do. But you'll get 5 responses saying you're doing something wrong.

Reply on news.ycombinator.com