1. Contact: How Best To Contact Me

Email david@davidfavor.com with information about the problem you’re trying to solve. We’ll go from there.

2. Story: My Long Winding Road

1980 - I wrote my first lines of code. Mostly custom machine code for testing Boeing Avionics modules…​ the electronics that keeps airplanes in the air.

Then an oddity occurred. One of the guys I worked with had gotten a Mag Tape (big magnetic, reel to reel tape) of something call UNIX with a "C" compiler. An old PHP-11 became the home of this UNIX thing, which we all played with.

I was hooked.

1993 - CERN (European Nuclear Research Center and Large Hadron Collider) released it’s Web server and Web browser code into the public domain.

1994 - I got one of the first ISDN lines in Austin, TX run to my house. This gave me 1x static IP address.

I purchased a stack of 3.5" hard floppies containing Linux. Spun up my first Linux system running in a spare bedroom, then went to work running Web servers and Mail servers.

I’ve been in business running online projects ever since.

1994 - Also the year of my first contact with Dan Kennedy, who provided me the practical knowledge to easily monetize my tech experience.

Dan and Linus (Original Linux Developer) top my gratitude list.

2005 - Wrapped up a 10 year contract with IBM working as on a Tech SWAT team related to the HACMP project. The interesting part of this work was the tech had to do with targeting near 100% uptime, so I learned a lot. Also, many HACMP clients had SLAs (Service Level Agreements) where IBM paid these clients $25,000/hour for any downtime caused by IBM related problems.

Today, I provide Fractional CTO services for many projects. Clients pay a monthly retainer for a block of hours, so they have access to my expertise without paying me a high six figure, yearly salary.

This gives them access to me, along with access to my infrastructure of high speed, high traffic Web servers and an array of Email Delivery Tech which can work with existing email services, or my own custom, in-house MTA (Mail Transport Agent) mail sending system.

This page provides a walk through of actions you can take to get your mail delivered (accepted by Mailbox Providers), then a high chance of landing in a recipients Inbox.

3. Consideration: Getting Started

Today online and offline technology are tightly intertwined.

Part of these actions can be implemented by you or your in-house tech team.

Other actions, are best handled by your CTO, who understands how your entire business works - online/offline marketing, Web content, Email content, everything end-to-end.

Normally new clients come to me when they’ve suffered some catastrophic technical failure. These failures range from $1000s/week to one client with an estimated loss of nearly $200M due to flakey $9000/month Hosting which died under traffic load.

Almost always these problems could have been avoided, and fortunes saved, with a little testing and measuring.

Axiom: Better to test, measure and know, than guess.

Do yourself a favor.

Designing your next $1,000,000/month project…​

You know you have a high chance of success…​

If you cry yourself to sleep every night because of the egregious retainer you pay your CTO.

And your CTO is a constant thorn in your side about testing, measuring, security…​ all things leading to sustained cashflow increases…​ forever…​

4. Aside: RBL - Realtime Blacklisting Systems

This is very important.

If your email deliverability goes to zero.

You must stop mailing immediately. Do not say to yourself, of my offer must be bad or something with my ESP (Email Service Provider) must have gone wrong.

Low deliverability is a first indication blacklisting is coming soon.

Anytime you have a mail send problem, hire someone to help you.

Remember, you’re always only one email away from blacklisting.

5. Aside: Terse SPF & DKIM & DMARC Overview

The following are the primary DNS Email records required for ensuring high email deliverability.

These records also determine, technically, whether email has a chance of Inboxing or will end up SPAM, then eventually end up adding your IPs/Domains to RBLs (Realtime Blacklists).

Once you’re RBL’ed, you’re out of business till you hire someone to help you recover.

  1. SPF - Authorizes IPs to send mail on behalf of a site, by publishing a DNS SPF block record for inclusion in the site’s SPF record.

  2. DKIM - Verifies a message arrives intact, not modified while in flight/transit. If DKIM message verification fails, this suggests a message injection of a Malware Payload, Phishing URL or some other evil/nefarious message modification.

  3. DMARC - What action shall occur for SPF or DKIM failure.

6. Action: DMARC Record For Inboxing

Most people have no DMARC record setup or if it is setup, the DMARC record is incorrect for Inboxing.

If you send email, having no DMARC record or an incorrect DMARC record, this like pulling the wire out of your dashboard oil gauge or hiding your head in the sand like an Ostrich.

Hiding a problem is no solution. With

_dmarc.davidfavor.com.  IN  TXT "v=DMARC1; p=reject; sp=reject; fo=1; adkim=s; aspf=s; pct=100; rf=afrf; ri=300; ruf=mailto:dmarc@davidfavor.com; rua=mailto:dmarc@davidfavor.com;"

We’ll book a call to talk about your specific situation to determine if we’re a good fit together.

7. Aside: What’s an ESP

In our story’s context, ESP (Email Service Provider) means - any system initiating email, including…​

  1. CRMs - InfusionSoft, HubSpot, OntraPort, etc…​

  2. Mail Relays - MailGun, SendGrid, Aweber, etc…​

  3. Email Marketing Managers - MailChimp, ConvertKit, GetResponse…​

  4. Landing Page Systems - ClickFunnels, LeadPages, etc…​

  5. In House MTAs - Mail Transport Agents like Sendmail, Exim, Postfix, etc…​

All ESPs I’ve tested, at some point, have various types of breakage.

Sometimes this breakage lasts a few days, sometimes months, occasionally breakage lasts for years, so I class this as persistent, with no expected fix ever coming.

Breakage may relate to SPF, DKIM, DMARC, or incorrectly processing of Mailbox Provider (Gmail, Yahoo, etc…​) return codes when messages are submitted to a Mailbox Provider for delivery to one of their users.

We’ll cover how to fix all these.

During ESP breakage…​ all email sent…​ on behalf of your domain…​ is classified as SPAM…​ by all Mailbox Providers…​ Period…​ No exception…​

If your sending IPs or domains keeps getting blacklisted…​ or you’re deliverability is low for no good reason…​ ESP breakage is almost certainly the problem.

Please read the previous sentences till horror sets in…​ then relax…​ because…​

There’s a dirt simple solution…​ which can be up and running in a few minutes.

8. Story: $1.84M Lost On One Mailing

This is one of many lost fortunes I’ve seen over the years which occur because of some minor technological glitch.

If you’re serious about maximizing your conversions and cashflow, you must invest as much in your tech as your core business.

What follows is one of these many stories and the fixes to avoid this problem in your business.

Recently I took on a new Fractional CTO client.

Fractional CTO: Keeping a $1M+/year CTO on staff, for < $1M+/year.

When I take on new clients, 2x technologies are effected.

  1. Their Websites to my High Speed, High Traffic, Private Hosting infrastructure.

  2. Their Email Deliverability Tracking (auditing) begins, which continues…​ All day. Every day. Forever.

  3. Eventually all Email sending moves over to an in-house MTA (mail sending system) which actually works.

This story relates to…​

Email Deliverability Tracking which occurs by receiving DMARC reports, then in realtime analyzing these reports, then instantly patching SPF blocks to fix broken ESP (Email Service Providers).

DMARC reports contain detail about every IP sending mail on behalf of a domain, along with whether SPF and DKIM passed or failed.

This story relates to client yearly mailing sent to leads prepared over the last year to purchase an $8,000 product which showed…​

  1. Delivered mail produced a 1% buy through rate (conversion).

  2. DMARC reports showed 23,000 people failed to get this email, so rough math suggests…​

  3. $1,840,000 Loss - 23,000 bounced/blocked/spammed email * 1% conversion * $8,000 price point == $1,840,000.

This fails to account for additional lost lifetime revenue associated with lost IP/domain reputation for all these lost email.

To me, this level of lost revenue is unacceptable, especially because this loss occurred due to a CRM system’s SPF record breakage.

In this case, the problem was sending IPs missing from an SPF block provided by a large CRM firm.

This means, this client did everything right. The CRM sending mail dropped the ball. My client lost $1,840,000 with no recourse.

Here’s how you can fix this…​

9. Fix: DMARC: Policy: Reject

This one will be hard for most site owner to swallow, because so many Email Consultants thoroughly misunderstand how to correctly setup a site’s DMARC Policy.

Take this DMARC record, for example…​

_dmarc.davidfavor.com.  IN  TXT "v=DMARC1; p=reject; sp=reject; fo=1; adkim=s; aspf=s; pct=100; rf=afrf; ri=300; ruf=mailto:dmarc@davidfavor.com; rua=mailto:dmarc@davidfavor.com;"

Here’s what this means…​

  1. DMARC Version - v=DMARC1;

  2. DMARC Policy - p=reject; sp=reject; - Hard reject policy for mail sent from domain and any subdomain.

  3. DMARC Reporting - fo=1 - Generate a DMARC failure report for any SPF or DKIM non-pass, so soft or hard failures.

  4. DMARC Alignment - adkim=s; aspf=s; pct=100; - Strict enforcement for 100% of mail messages.

  5. DMARC Report Format - rf=afrf; - Generate a standard report. Required for 100% Mailbox Provider support of DMARC report generation.

  6. DMARC Interval - ri=300; - Currently most Mailbox Providers prompt 300 seconds to 3600 seconds. Setting this to 300 means as Mailbox Providers begin supporting shorter intervals, this means SPF repairs can be initiated more quickly, in realtime.

We’ll focus here on the policy, which can be - none, quarantine, reject - for both the site policy (sp) and subdomain policy (sp), where a site might be foo.com, with mail.foo.com as a subhost.

Mailbox Providers determine how to handle mail being received which fails SPF authorization or DKIM verification, based on DMARC policy settings.

9.1. DMARC: Policy: None

This policy instructs Mailbox Providers to accept and process mail.

For none, it’s anyone’s guess how mail will be processed. There is no definition of what none means. Each Mailbox Provider determine what’s best. Gmail normally reduces IP/site reputation, throttling mail submission speed. This is internal blacklisting. Rarely does Gmail submit offenders to global blacklists. When they do, they generally blacklist every IP, subdomain, domain related to the offense. Yahoo on the other hand, tends to incrementally submit IPs to global blacklists very quickly. Then if this behavior continues across many IPs, domain or subdomain blacklisting occurs.

9.2. DMARC: Policy: Quarantine

This policy instructs Mailbox Providers to accept and process mail.

For quarantine, messages are sent straight to the SPAM folder. No amount of user intervention moving these message from SPAM to their Inbox will change this behavior. Any SPF or DKIM breakage set with a policy=quarantine forever lands in the SPAM folder.

9.3. DMARC: Policy: Reject

This policy instructs Mailbox Providers to instantly bounce mail, with no further processing.

This is the policy you’ll set to maximize your sending reputation, email deliverability, income.

For years policy=none was used to process DMARC reports and fix problems.

This was when problems were few and far between.

These days are gone now. Never to return.

With so much rampant, long running, many times persistent ESP breakage, best use policy=reject.

10. Fix: SPF Breakage: Realtime Patching

SPF records are very simple to understand.

If an IP exists in the SPF record for a site, then the IP is authorized to send mail for the site. If the IP is missing from the SPF record, mail sent is at best SPAM, at worst Malware/Phishing/Evilness.

Here’s an SPF record…​

@  IN  TXT  "v=spf1 mx include:foo.com include:sendgrid.net include:send.aweber.com include:infusionmail.com ~all"

SPF records authorize a set of IPs to send mail for a giving domain, so the above TXT record authorizes mail from foo.com, SendGrid, Aweber, InfusionSoft.

In this example if foo.com adds many IPs, then starts sending from these IPs without adding them to the SPF block (include:foo.com), all mail from these IPs is Malware/Phishing/Evilness…​ well…​ maybe, maybe not, but if your Gmail or Yahoo, you’re not taking any chances so these IPs will at first be throttled, next blacklisted internally, then blacklisted globally, then you’re bankrupt.

Realtime SPF patching is easy to understand also.

Every time a DMARC report arrives, the report is parsed, then the IP is tested to determine if this is a Valid Failure (truly forged or hacked email) or a Broken ESP Failure. In the 2nd case, a custom SPF record for site is modified to immediately include the missing IP block.

The longer DMARC reports are generated for a site, the more corrected the SPF record, resulting in IP/site reputation and deliverability.

11. Fix: DKIM Breakage

This one is very tough, as there is no fix.

DKIM signing occurs inside each ESP MTA system, so if DKIM signing is broken, there’s no fixing the problem.

In your DMARC reports, if you see 100% SPF pass along with 100% DKIM fail, the you must do the following or your site reputation will be lost, maybe for a very long time.

  1. Stop sending email. In fact anytime you get a DMARC report storm, do not send another email till the problem is resolved, if preserving your IP/site reputation and email deliverability is essential to your income.

  2. Open a ticket with the offending ESP to fix the problem.

  3. If they refuse to fix the problem, you must fire them, switching ESPs. Unfortunately most ESP tickets I’ve opened receive a canned response that the ESP system software is perfect, so no fix will be done, then the ticket is closed.

  4. If the ESP actually has staff smart enough to determine there is a problem, then smart enough to fix the problem, great! After they update the ticket saying the problem is fixed, initiate an email from your ESP to a DMARC test tool to verify the problem really is fixed.

  5. Then send out a small test mailing. Wait a day. Verify your DMARC reports clear (no longer received) showing this problem.

  6. Then resume normal operations.

12. Fix: Other Breakage

Other breakage occurs which is beyond the scope of this discussion.

Company principles are served to research…​

  1. Offer Breakage - Breaking formatting rules which cause content filters to classify messages as SPAM.

  2. Realtime URL Checking - When sending messages containing any clickable links (URLs) blacklist authorities should be checked in realtime. If any URL in the offer is blacklisted, the offer can’t be send else your reputation may be destroyed. If an offer URL becomes blacklisted, during a mail send, then the mail send must be terminated immediately, else your reputation may be destroyed.

  3. Fast Stable Hosting - If visitors arrive at one of your landing pages showing a blank page, Apache error, Database error or simply serve content slow, then your conversions will circle the drain.

  4. Avoid Landing Page Services - If you’re running traffic to a page, where your financial life depends on visitors seeing this content 100% of the time, you must self host your landing pages. This is the only way to avoid the constant slowness and crashes of Landing Page Services.

  5. Avoid 3rd Party Callouts - If you’re running traffic to an opt-in page, then the actual opt-in occurs into a CRM or Email Marketing System off your site, every time this 3rd Party site is slow, your site will crash. Every time this 3rd Party site is down, your site may crash or you’ll just lose all your opt-ins. The fix for this is always capture opt-ins on your site, then constantly sync your contacts (onsite opt-ins) with your 3rd party system(s), till all API calls return success for each new contact addition.

There are others. The list expands every day.

Best for your CTO to stay on top of tech, rolling in fixes as required for your specific business model.