On Wed, Feb 7, 2024 at 1:58 AM John Covici via mailop
wrote:
> Hi. I am trying to make sure my mail server is properly
> authenticated, and I have spf and dkim set up -- seemingly correctly
> -- but I am not sure about dmarc. I have downloaded and installed the
> open-dmarc package and I have
On Wed, Feb 7, 2024 at 12:37 AM Lyle Giese via mailop
wrote:
> Are you/your company a subscriber to Spamhaus?
>
> If you abuse free access, this can happen.
>
> See for further information:
>
> https://www.spamhaus.org/organization/dnsblusage/
>
> Lyle Giese
>
I don't think it has gotten to
On Wed, Feb 7, 2024 at 12:53 AM Mark Milhollan
wrote:
> On Tue, 6 Feb 2024, Odhiambo Washington wrote:
>
> >Today morning I woke up to all emails being rejected as I was using
> >zen.spamhaus.org in my dnslists.
> >Almost all incoming emails - even from gmail.com - were being rejected.
> >Did I
On Wed, Feb 7, 2024 at 5:09 AM John Levine wrote:
> It appears that Odhiambo Washington via mailop said:
> >-=-=-=-=-=-
> >-=-=-=-=-=-
> >
> >Today morning I woke up to all emails being rejected as I was using
> >zen.spamhaus.org in my dnslists.
> >Almost all incoming emails - even from
On Tue, 2024-02-06 at 17:46 -0500, John Covici via mailop wrote:
> Hi. I am trying to make sure my mail server is properly
> authenticated, and I have spf and dkim set up -- seemingly
> correctly
> -- but I am not sure about dmarc. I have downloaded and installed
> the
> open-dmarc package and I
Which mail server software and OS are you using? Are you receiving
some error messages (e.g., in syslog)?
I'm using Postfix on Debian, and I'd be happy to try to help you get
things working no matter which software you're using.
The OpenDMARC package supports running
[Sarcasm]
Oh, but their customers would never send spam -- they pay for mail
services, and their credit cards aren't even lost, forged, or stolen!
[/Sarcasm]
They really do need to work on customer intake, but the inflow of
billions of dollars is likely pushing a lot of heavy
> It appears that Andreas Schamanek via mailop said:
> >
> >Hi mailops,
> >
> >Thought some might be interested, though those affected sure already
> >know:
> >
> >On January 25 I was alerted to false positives due to Spamhaus SBL
> >listing IP addresses of fonts.googleapis.com.
The IP
It appears that Michael Peddemors via mailop said:
>Obviously.. ;) Unless you are renting from OBHost LLC
>
>But you can see the offender is using a onmicrosoft.com PTR record..
Please don't tell ua that you are using names from PTR records without
checking that they resolve back to the same IP.
It appears that Odhiambo Washington via mailop said:
>-=-=-=-=-=-
>-=-=-=-=-=-
>
>Today morning I woke up to all emails being rejected as I was using
>zen.spamhaus.org in my dnslists.
>Almost all incoming emails - even from gmail.com - were being rejected.
>Did I maybe miss something?
Are you
Obviously.. ;) Unless you are renting from OBHost LLC
But you can see the offender is using a onmicrosoft.com PTR record..
hehehe.. passing off as if microsoft, sure you have people that can do
cease and desist ..
Not the first time we see offenders using microsoft PTR's.
On 2024-02-06
103.143.76.89 is not a Microsoft IP.
At all.
Aloha,
Michael.
--
Michael J Wise
Microsoft Corporation| Spam Analysis
"Your Spam Specimen Has Been Processed."
Open a ticket for Hotmail ?
-Original Message-
From: mailop On Behalf Of Michael Peddemors via
mailop
Sent: Tuesday, February 6,
On 2024-02-06 at 15:55 +, Vitali wrote:
>
> Are they violating the RFC or is there a new DMARC report exception
> if both domains share the MX root domain?
>
> Thank you.
> Vitali
It would have been preferable that you shared that domain, but it does
seem to violate the RFC.
The only
Some days.. it's like F* DMARC.. hehehe..
Anything that created a multi-million dollar industry of consultants on
how to set up DMARC, well.. email should NOT be that difficult..
I still remember when email administrators didn't know how to set up DNS
correctly.. (oh wait, some still do)
On 2024-02-06 at 21:52 +0100, Andreas Schamanek wrote:
> Thanks, that's the aspect my foggy brain missed. It only matters for
> those who check URIs, especially if found in the body, or more
> precisely the IPs of the hostnames of these URIs.
>
> (...)
>
> So, I still got questions :) like why
Hi. I am trying to make sure my mail server is properly
authenticated, and I have spf and dkim set up -- seemingly correctly
-- but I am not sure about dmarc. I have downloaded and installed the
open-dmarc package and I have the text record I will have to put in
the zone, but I don't know what
On 06.02.2024 at 21:06 Al Iverson via mailop wrote:
I also observed them ejecting a company from their
organization for not following their rules. I can't really go into
specifics on that one.
CSA actually publishes the names of the companies whose membership has recently
been suspended on
On Tue, 6 Feb 2024, Odhiambo Washington wrote:
Today morning I woke up to all emails being rejected as I was using
zen.spamhaus.org in my dnslists.
Almost all incoming emails - even from gmail.com - were being rejected.
Did I maybe miss something?
Are you using your own resolver (like BIND,
For the record, looking at the 'too big to block' stats, and definitely
the o365 spam is leading the pack..
IPs that are temporarily rate limited because of too many invalid
recipients reported in a 24 hour period.. (2871 IPs vs Gmail 155 IPs)
Of course, not 100% relative, as their retry
> On Feb 6, 2024, at 12:59 PM, Al Iverson via mailop wrote:
>
> I have worked with people from the CSA over the past few years, mostly
> on webinar training sessions, and they seem kind and seem to care
> about email. I also observed them ejecting a company from their
> organization for not
On 6 February 2024 20:51:59 Odhiambo Washington via mailop
wrote:
Today morning I woke up to all emails being rejected as I was using
zen.spamhaus.org in my dnslists.
Almost all incoming emails - even from gmail.com - were being rejected.
Did I maybe miss something
Are you checking the
Are you/your company a subscriber to Spamhaus?
If you abuse free access, this can happen.
See for further information:
https://www.spamhaus.org/organization/dnsblusage/
Lyle Giese
On 2/6/24 14:50, Odhiambo Washington via mailop wrote:
Today morning I woke up to all emails being rejected as I
Am 06.02.2024 um 23:50:14 Uhr schrieb Odhiambo Washington via mailop:
> Today morning I woke up to all emails being rejected as I was using
> zen.spamhaus.org in my dnslists.
> Almost all incoming emails - even from gmail.com - were being
> rejected. Did I maybe miss something?
Most likely your
Replied of list. Sent from my iPhoneOn Feb 6, 2024, at 1:42 PM, Aric Archebelle-Smith via mailop wrote:Hi all,I'm also looking for a contact for Shaw.ca, but it is not related to the changes due to the SMTP smuggling vulnerability. I've reached out to postmas...@shaw.ca, but have not received a
On Tue, 6 Feb 2024, at 15:24, John Levine via mailop wrote:
On January 25 I was alerted to false positives due to Spamhaus SBL
listing IP addresses of fonts.googleapis.com.
Are those IPs supposed to send mail? If not, why would an SBL
listing, even a mistaken one, matter?
Thanks, that's
Today morning I woke up to all emails being rejected as I was using
zen.spamhaus.org in my dnslists.
Almost all incoming emails - even from gmail.com - were being rejected.
Did I maybe miss something?
--
Best regards,
Odhiambo WASHINGTON,
Nairobi,KE
+254 7 3200 0004/+254 7 2274 3223
In an
Hi all,
I'm also looking for a contact for Shaw.ca, but it is not related to the
changes due to the SMTP smuggling vulnerability. I've reached out to
postmas...@shaw.ca, but have not received a response.
Beginning in late January, we received user reports that mail was not being
delivered to
It appears that Andreas Schamanek via mailop said:
>
>Hi mailops,
>
>Thought some might be interested, though those affected sure already
>know:
>
>On January 25 I was alerted to false positives due to Spamhaus SBL
>listing IP addresses of fonts.googleapis.com.
Are those IPs supposed to send
Hi mailops,
Thought some might be interested, though those affected sure already
know:
On January 25 I was alerted to false positives due to Spamhaus SBL
listing IP addresses of fonts.googleapis.com. According to our spam
filter stats this, as expected, did not last long. But it seems to
I have worked with people from the CSA over the past few years, mostly
on webinar training sessions, and they seem kind and seem to care
about email. I also observed them ejecting a company from their
organization for not following their rules. I can't really go into
specifics on that one. I don't
Hello,
I'm looking for feedback on the Certified Senders Alliance (CSA).
My current reasoning : at job, we provide a SaaS solution for cash
collection & credit management.
This implies to send emails to end customers in order to exchange about
incoming invoices. We sent emails to servers
Hi list,
I've found this case where DMARC reports are sent to an external destination
without the verification TXT record being published.
```
❯dig _dmarc.[redacted] txt +short
"v=DMARC1; p=none; rua=mailto:dm...@emailzustellbarkeit.de;
```
The external destination domain does not publish a
Am 29.01.2024 um 14:05:30 Uhr schrieb Michael Peddemors via mailop:
> And of course, this 'could' be caused by backscatter on their
> servers, if the emails originated from your server ;)
>
> Ensure your domains have SPF records of course, but we need more
> information on the list to determine
Thanks for diving deeper there.
One other issue is that the recipient addresses do not exist on our system.
But more importantly, at the time of posting there were no subdomain DNS
records for the sender’s domain. We’ve seen bad actors leverage legitimate
company’s unprotected subdomains
Am 27.01.2024 um 13:46:34 Uhr schrieb Gellner, Oliver via mailop:
> If I as a customer or business partner would receive emails which are
> coming from apa...@webserver1.company.tld then I‘d be under the
> impression that this company lost control of their infrastructure.
> But maybe that’s just
On 05.02.2024 at 13:55 L. Mark Stone via mailop wrote
> Overnight in our logs, we are starting to see Microsoft spam like this:
> Feb 5 12:19:28 my postfix/smtpd[1015436]: NOQUEUE: filter: RCPT from
> mail-mw2nam10acsn2106.outbound.protection.outlook.com[104.47.55.106]:
> : Sender address
36 matches
Mail list logo
