well, lists.bufferbloat.net is not in any dns rbls, my spf header is fine, lists.bufferbloat.net HAD an expired cert, maybe that was the source of the problem?