MuckRock / squarelet

MuckRock User Service
GNU Affero General Public License v3.0
11 stars 10 forks source link

Password reset emails never received #94

Closed adriensalz closed 10 months ago

adriensalz commented 11 months ago

Users have written into Zendesk saying they never received password reset emails from us. This includes users affiliated with newsrooms, including ProPublica, an ABC affiliate station, and Chicago Sun Times email domains, as well as Hotmail and Yahoo personal emails.

https://muckrock.zendesk.com/agent/tickets/121645 https://muckrock.zendesk.com/agent/tickets/118604 https://muckrock.zendesk.com/agent/tickets/119939 https://muckrock.zendesk.com/agent/tickets/119123 https://muckrock.zendesk.com/agent/tickets/119034 https://muckrock.zendesk.com/agent/tickets/117082

This seems to have been ongoing since at least August 28.

I've been able to confirm in our diagnostics inbox that these emails are being generated and have send timestamps, but none of the users above were able to find the emails in their Spam folder or their main inbox.

image

I sent a password reset to myself and received it within a minute using both my MuckRock email and my personal Gmail account.

image image

I've been able to get these users their password reset emails in the past by manually forwarding it to them from adrien@muckrock.com, but this is time-consuming and users have complained about not receiving the email sooner. I'm not sure how frequently this is occurring and I haven't been able to reproduce this bug personally.

mitchelljkotler commented 10 months ago

I asked Mailgun to rotate our IP address, can see if that helps

mitchelljkotler commented 10 months ago

They rotated our IP, this should prevent our emails from being black holed

After reviewing the currently assigned IP, it appears that a problematic sender led to the IP's listing on a reputable blocklist. While we work to delist this IP, we have reassigned your sending to a new IP.