Re: [dmarc-discuss] Fwd: Hotmail forwarding

Fri, 31 Mar 2017 01:23:45 -0700 

Ah yes, idiot taste tasting :-)
I can't pick it on this one; it's spent an astonishing number of hops inside Microsoft. I'd hazard a guess that there's some user-specified forwarding going on, perhaps between a free account and a corporate account, or vice versa, which is leading to breakage. This would explain reassessing SPF when the message was forwarded from one Microsoft address (40.92.65.94) to another. It doesn't otherwise make much sense, but configurations take time to optimise in large environments of course. 

I do note two gems:

 * Test mode DKIM: "dkim=fail (*testing mode*; identity alignment
   result is pass and alignment mode is relaxed)
   header.d=groups.ilovefreegle.org" and in the DNS
   "x._domainkey.groups.ilovefreegle.org. 3599 IN TXT "v=DKIM1; *t=y*;
   k=rsa; p=MHwwDQYJKoZ...". I'd be getting rid of t=y.
 * Short DKIM key: "dkim=ignore (*ignored public key size*)
   header.d=groups.ilovefreegle.org;hotmail.com". You're using a 1024
   bit key, Microsoft is using a 2048 bit key. I've stopped paying
   close attention, but perhaps they've decided that 1024 bits doesn't
   cut it. I'd consider switching to 2048 bit.

- Roland

------------------------------------------------------------------------

On 31/03/17 15:35, Edward Hibbert via dmarc-discuss wrote:

On Mon, Mar 27, 2017 at 7:20 PM, Steve Atkins <[email protected] 
<mailto:[email protected]>> wrote:



    > On Mar 27, 2017, at 11:19 AM, Edward Hibbert
    <[email protected] <mailto:[email protected]>> wrote:
    >
    >
    >
    > ------ Original Message ------
    > From: "Steve Atkins via dmarc-discuss" <[email protected]
    <mailto:[email protected]>>
    > To: "dmarc-discuss" <[email protected]
    <mailto:[email protected]>>
    > Sent: 27/03/2017 18:53:59
    > Subject: Re: [dmarc-discuss] Hotmail forwarding
    >
    >>
    >> You're DKIM signing a message with a selector/d= pair for which
    there's no public key published in DNS. That seems like a mistake,
    and means your mail isn't DKIM signed.
    >>
    >> If SPF fails due to forwarding (which it usually will, that's
    what SPF does) and your mail isn't DKIM signed, that'll trigger
    DMARC action.
    > I think you're right, and I'm an idiot who can't use the
    interface to my DNS.  I'll put the DNS record in correctly.

    :)

    There's an online checker at
    http://tools.wordtothewise.com/authentication
    <http://tools.wordtothewise.com/authentication> if you want to
    check that it's published correctly once you're done.



Well, I corrected it yesterday, and checked it using 
http://dkimvalidator.com/ <http://dkimvalidator.com/> , but I'm still 
getting NDRs (example below).  I would be grateful for any indication 
of what flavour of idiot I am currently being.


Edward



Delivered-To: [email protected] <mailto:[email protected]>

Received: by 10.129.159.149 with SMTP id w143csp1699298ywg; Tue, 28 
Mar 2017

 05:16:54 -0700 (PDT)
X-Received: by 10.129.154.201 with SMTP id

 r192mr22023444ywg.324.1490703414422; Tue, 28 Mar 2017 05:16:54 -0700 
(PDT)
Return-Path: 
<dist-list-geeks+bncbd4pj45lrqhrbnni5hdakgqebbss...@ilovefreegle.org 
<mailto:dist-list-geeks%[email protected]>>
Received: from mail-yw0-x247.google.com 
<http://mail-yw0-x247.google.com> (mail-yw0-x247.google.com 
<http://mail-yw0-x247.google.com>.
 [2607:f8b0:4002:c05::247]) by mx.google.com <http://mx.google.com> 
with ESMTPS id
 d72si1304661ywh.114.2017.03.28.05.16.53 for <[email protected] 
<mailto:[email protected]>>
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); 
Tue, 28 Mar

 2017 05:16:53 -0700 (PDT)
Received-SPF: pass (google.com <http://google.com>: domain of

dist-list-geeks+bncbd4pj45lrqhrbnni5hdakgqebbss...@ilovefreegle.org 
<mailto:dist-list-geeks%[email protected]>

 designates 2607:f8b0:4002:c05::247 as permitted sender)
 client-ip=2607:f8b0:4002:c05::247;
Authentication-Results: mx.google.com <http://mx.google.com>; dkim=pass

 [email protected] 
<http://ilovefreegle-org.20150623.gappssmtp.com>; spf=pass (google.com 
<http://google.com>:
 domain of 
dist-list-geeks+bncbd4pj45lrqhrbnni5hdakgqebbss...@ilovefreegle.org 
<mailto:dist-list-geeks%[email protected]>

 designates 2607:f8b0:4002:c05::247 as permitted sender)

 smtp.mailfrom=dist-list-geeks+bncbd4pj45lrqhrbnni5hdakgqebbss...@ilovefreegle.org 
<mailto:dist-list-geeks%[email protected]>;
 dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=hotmail.com 
<http://hotmail.com>
Received: by mail-yw0-x247.google.com 
<http://mail-yw0-x247.google.com> with SMTP id c66sf89300701ywd.23 for
 <[email protected] <mailto:[email protected]>>; Tue, 28 Mar 
2017 05:16:53 -0700 (PDT)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;

 d=ilovefreegle-org.20150623.gappssmtp.com 
<http://ilovefreegle-org.20150623.gappssmtp.com>; s=20150623;

 h=delivered-to:date:from:subject:to:mime-version:message-id
 :x-original-sender:x-original-authentication-results:precedence
 :mailing-list:list-id:x-spam-checked-in-group:list-help;
 bh=0B5woYJe+/XDYBYI+9CP9aIjBjkb3ItOET585wIN4EE=;
 b=guive/L13ylfpHgIuBURAN7f3bh8ExCrqTF0r3fyI5lzYIBlV6WNHvuWhVpzKBx6BJ
 u8I2c1VNTsVEt76bKpSsz+Wh8nXHQpJrAgtJyHnmujXOZKwSlawSlA7gn9M77zB0MIRh
7U1yrO6zej0kAFIYgtS0bu8mXesVts8eJkLa4AGJFTw/Ez3F7UP0fzDFT5NzO0EBfekr
 xVa+tsI1/cdNAbA/HCm36l6YOP8tq44TBO6jAZr5XfbZ+ozO1cqGphkwXMzi4YG0p9H5

1oQvqkr2Eojfpta8Zb1HWGNCbPvj7rvNdjykjAmbr/LkZwIYrCFnr3nKj95IOxcm7AXo 
Y0MA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; 
d=1e100.net <http://1e100.net>;

 s=20161025;
 h=x-gm-message-state:delivered-to:date:from:subject:to:mime-version
 :message-id:x-original-sender:x-original-authentication-results
 :precedence:mailing-list:list-id:x-spam-checked-in-group:list-help;
 bh=0B5woYJe+/XDYBYI+9CP9aIjBjkb3ItOET585wIN4EE=;
 b=eAF84YicfkMW0Nh6gijn6k387iLRPxkIsMHbOopND+/13PFlJnJcP1XSUFPZvMNEBy
 Nvz89+m0nW3sGEwuAEm3NZ25Fa3KeCa/isAa1B2abz3GhHlVDJKnEkv/X07j6eOhjslk
 N4T0D6CXKaZ9AxFVB+iipVBzSdsh3vZR8BHoXQYL6xT5qmURALNo2lK6Vntqr5Iu2xZ8
 9XaFby58FZILif4kSVMn2s/qy/2535TJCYGanjwxwz98WXs53XyPoj1PR5+iIqUNOnTS

 6CBGK5+OhZWOlRk9T2dHoHwLkrP0rbsQJRPahdSTK9VnCkwgk/riSINLlZ6Z2ZRaijgn 
DJaA==
X-Gm-Message-State: 
AFeK/H0/J/90Kp6miLhLdQE6qEOp1roh8dkMsLJ1AAV2vUoOb/h5R9kdIQKV8gjw0LFp7A==
X-Received: by 10.13.196.196 with SMTP id 
g187mr9524542ywd.79.1490703413255;

 Tue, 28 Mar 2017 05:16:53 -0700 (PDT)

X-BeenThere: [email protected] 
<mailto:[email protected]>
Received: by 10.157.0.36 with SMTP id 33ls11949420ota.46.gmail; Tue, 
28 Mar

 2017 05:16:53 -0700 (PDT)

X-Received: by 10.55.162.203 with SMTP id 
l194mr23039843qke.221.1490703412635;

 Tue, 28 Mar 2017 05:16:52 -0700 (PDT)

Received: from mail-qt0-f171.google.com 
<http://mail-qt0-f171.google.com> (mail-qt0-f171.google.com 
<http://mail-qt0-f171.google.com>.

 [209.85.216.171]) by mx.google.com <http://mx.google.com> with ESMTPS id
 p132si3288347qka.200.2017.03.28.05.16.52 for

 <[email protected] 
<mailto:[email protected]>> (version=TLS1_2
 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Tue, 28 Mar 2017 
05:16:52

 -0700 (PDT)
Received-SPF: pass (google.com <http://google.com>: domain of

 [email protected] 
<mailto:[email protected]> designates

 209.85.216.171 as permitted sender) client-ip=209.85.216.171;

Received: by mail-qt0-f171.google.com 
<http://mail-qt0-f171.google.com> with SMTP id x35so61801238qtc.2 for
 <[email protected] 
<mailto:[email protected]>>; Tue, 28 Mar 2017 05:16:52 
-0700 (PDT)
X-Received: by 10.237.43.69 with SMTP id 
p63mr24940862qtd.68.1490703412018;

 Tue, 28 Mar 2017 05:16:52 -0700 (PDT)

X-Forwarded-To: [email protected] 
<mailto:[email protected]>
X-Forwarded-For: [email protected] 
<mailto:[email protected]> [email protected] 
<mailto:[email protected]>

Delivered-To: [email protected] <mailto:[email protected]>
Received: by 10.12.162.132 with SMTP id g4csp1612083qva; Tue, 28 Mar 2017
 05:16:50 -0700 (PDT)

X-Received: by 10.202.175.13 with SMTP id 
y13mr12885215oie.54.1490703410786;

 Tue, 28 Mar 2017 05:16:50 -0700 (PDT)

Received: from BAY004-OMC4S8.hotmail.com 
<http://BAY004-OMC4S8.hotmail.com> (bay004-omc4s8.hotmail.com 
<http://bay004-omc4s8.hotmail.com>.

 [65.54.190.210]) by mx.google.com <http://mx.google.com> with ESMTPS id

 p10si1969233oib.82.2017.03.28.05.16.50 for <[email protected] 
<mailto:[email protected]>>
 (version=TLS1_2 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Tue, 28 
Mar 2017

 05:16:50 -0700 (PDT)

Received-SPF: pass (google.com <http://google.com>: domain of 
[email protected] <mailto:[email protected]> designates

 65.54.190.210 as permitted sender) client-ip=65.54.190.210;
Received: from bay0-xmr-059.phx.gbl ([65.54.190.200]) by

BAY004-OMC4S8.hotmail.com <http://BAY004-OMC4S8.hotmail.com> with 
Microsoft SMTPSVC(7.5.7601.23008); Tue, 28 Mar

 2017 05:16:49 -0700
Received: from mail pickup service by bay0-xmr-059.phx.gbl with Microsoft
 SMTPSVC; Tue, 28 Mar 2017 05:16:49 -0700
Date: Tue, 28 Mar 2017 05:16:49 -0700
From: [email protected] <mailto:[email protected]>
Subject: [Sheffield Freegle] What's New (36 messages) - Glass desk/tables,
 cot, Ceramic toilet and sink, chrome towel rail...
To: [email protected] <mailto:[email protected]>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=feedback-report;
 boundary="54F35B35-14AE-4773-B82B-1EBAAC1ED4CA"
Message-ID: <[email protected]>
X-OriginalArrivalTime: 28 Mar 2017 12:16:49.0837 (UTC)
 FILETIME=[2D5505D0:01D2A7BD]
X-Removed-Original-Auth: Dkim didn't pass.
X-Original-Sender: [email protected] <mailto:[email protected]>

X-Original-Authentication-Results: mx.google.com 
<http://mx.google.com>;       spf=pass (google.com <http://google.com>:
 domain of 
[email protected] 
<mailto:[email protected]>

 designates 209.85.216.171 as permitted sender)

 smtp.mailfrom=geeks+caf_=dist-list-geeks=ilovefreegle....@ilovefreegle.org 
<mailto:[email protected]>;
 dmarc=fail (p=NONE sp=NONE dis=NONE) header.from=hotmail.com 
<http://hotmail.com>

Precedence: list

Mailing-list: list [email protected] 
<mailto:[email protected]>; contact
[email protected] 
<mailto:dist-list-geeks%[email protected]>
List-ID: <dist-list-geeks.ilovefreegle.org 
<http://dist-list-geeks.ilovefreegle.org>>
X-Spam-Checked-In-Group: [email protected] 
<mailto:[email protected]>

X-Google-Group-Id: 1083502690077

List-Help: 
<https://support.google.com/a/ilovefreegle.org/bin/topic.py&topic=25838 
<https://support.google.com/a/ilovefreegle.org/bin/topic.py&topic=25838>>,
 <mailto:[email protected] 
<mailto:dist-list-geeks%[email protected]>>


--54F35B35-14AE-4773-B82B-1EBAAC1ED4CA
Content-Type: text/plain; charset="US-ASCII"
Content-Transfer-Encoding: 7bit


This is an email abuse report for an email message received from IP 
40.92.65.94 on Tue, 28 Mar 2017 05:16:48 -0700.

The message below did not meet the sending domain's authentication policy.

For more information about this format please see 
http://www.ietf.org/rfc/rfc5965.txt <http://www.ietf.org/rfc/rfc5965.txt>.


--54F35B35-14AE-4773-B82B-1EBAAC1ED4CA
Content-Type: message/feedback-report

Feedback-Type: auth-failure
User-Agent: XMR/2.2
Version: 1.0

Original-Mail-From: <[email protected] 
<mailto:[email protected]>>

Arrival-Date: Tue, 28 Mar 2017 05:16:48 -0700

Message-ID: <[email protected] 
<mailto:[email protected]>>
Authentication-Results: hotmail.com <http://hotmail.com>; spf=fail 
(sender IP is 40.92.65.94; identity alignment result is pass and 
alignment mode is relaxed) 
[email protected] 
<mailto:[email protected]>; dkim=fail 
(testing mode; identity alignment result is pass and alignment mode is 
relaxed) header.d=groups.ilovefreegle.org 
<http://groups.ilovefreegle.org>; x-hmca=fail header.id 
<http://header.id>[email protected] 
<mailto:[email protected]>

Source-IP: 40.92.65.94
Auth-Failure: spf
Reported-Domain: groups.ilovefreegle.org <http://groups.ilovefreegle.org>
DKIM-Domain: groups.ilovefreegle.org <http://groups.ilovefreegle.org>
DKIM-Identity: @groups.ilovefreegle.org <http://groups.ilovefreegle.org>
DKIM-Selector: x


--54F35B35-14AE-4773-B82B-1EBAAC1ED4CA
Content-Type: message/rfc822
Content-Disposition: inline


Authentication-Results: hotmail.com <http://hotmail.com>; spf=fail 
(sender IP is 40.92.65.94; identity alignment result is pass and 
alignment mode is relaxed) 
[email protected] 
<mailto:[email protected]>; dkim=fail 
(testing mode; identity alignment result is pass and alignment mode is 
relaxed) header.d=groups.ilovefreegle.org 
<http://groups.ilovefreegle.org>; x-hmca=fail header.id 
<http://header.id>[email protected] 
<mailto:[email protected]>
X-Envelope-Sender: [email protected] 
<mailto:[email protected]>
X-SID-PRA: [email protected] 
<mailto:[email protected]>

X-AUTH-Result: FAIL
X-SID-Result: FAIL

Received: from EUR01-HE1-obe.outbound.protection.outlook.com 
<http://EUR01-HE1-obe.outbound.protection.outlook.com> ([40.92.65.94]) 
by SNT004-MC4F8.hotmail.com <http://SNT004-MC4F8.hotmail.com> over TLS 
secured channel with Microsoft SMTPSVC(7.5.7601.23143);

Tue, 28 Mar 2017 05:16:48 -0700

Received: from DB5EUR01FT055.eop-EUR01.prod.protection.outlook.com 
<http://DB5EUR01FT055.eop-EUR01.prod.protection.outlook.com>
 (10.152.4.57) by DB5EUR01HT090.eop-EUR01.prod.protection.outlook.com 
<http://DB5EUR01HT090.eop-EUR01.prod.protection.outlook.com>

 (10.152.5.107) with Microsoft SMTP Server (version=TLS1_2,

 cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.977.7; 
Tue, 28 Mar

 2017 12:16:46 +0000

Received: from DB5PR08MB1046.eurprd08.prod.outlook.com 
<http://DB5PR08MB1046.eurprd08.prod.outlook.com> (10.152.4.54) by
DB5EUR01FT055.mail.protection.outlook.com 
<http://DB5EUR01FT055.mail.protection.outlook.com> (10.152.5.250) with 
Microsoft SMTP
 Server (version=TLS1_2, 
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id

 15.1.977.7 via Frontend Transport; Tue, 28 Mar 2017 12:16:45 +0000

Received: from DB5PR08MB1046.eurprd08.prod.outlook.com 
<http://DB5PR08MB1046.eurprd08.prod.outlook.com> ([::1]) by
DB5PR08MB1046.eurprd08.prod.outlook.com 
<http://DB5PR08MB1046.eurprd08.prod.outlook.com> 
([fe80::e0e2:2bf5:32c4:92d%14]) with

 Microsoft SMTP Server id 15.01.0991.020; Tue, 28 Mar 2017 12:16:45 +0000

From: Sheffield Freegle 
<[email protected] 
<mailto:[email protected]>>

To: "REDACTED" <[email protected] <mailto:[email protected]>>
Subject: [Sheffield Freegle] What's New (36 messages) - Glass desk/tables,
 cot, Ceramic toilet and sink, chrome towel rail...
Thread-Topic: [Sheffield Freegle] What's New (36 messages) - Glass
 desk/tables, cot, Ceramic toilet and sink, chrome towel rail...
Thread-Index: AQHSp70qNwq3Fa5rGUGBwPk0sn83ag==
Date: Tue, 28 Mar 2017 12:16:24 +0000

Message-ID: <[email protected] 
<mailto:[email protected]>>
List-Unsubscribe: 
<mailto:[email protected] 
<mailto:[email protected]>>,
 <https://www.ilovefreegle.org/unsubscribe?u=29839023&k=dbbhyy4Lg8NMzDo0KHhLaSToMn0ey4cL&src=digest 
<https://www.ilovefreegle.org/unsubscribe?u=29839023&k=dbbhyy4Lg8NMzDo0KHhLaSToMn0ey4cL&src=digest>>
Reply-To: Sheffield Freegle <[email protected] 
<mailto:[email protected]>>

X-MS-Has-Attach:
X-MS-Exchange-Inbox-Rules-Loop: xxxxx
X-MS-TNEF-Correlator:
authentication-results: spf=pass (sender IP is 5.28.62.25)

 smtp.mailfrom=users.ilovefreegle.org <http://users.ilovefreegle.org>; 
hotmail.com <http://hotmail.com>; dkim=ignore (ignored
 public key size) header.d=groups.ilovefreegle.org 
<http://groups.ilovefreegle.org>;hotmail.com <http://hotmail.com>; 
dmarc=pass
 action=none header.from=groups.ilovefreegle.org 
<http://groups.ilovefreegle.org>;
received-spf: Pass (protection.outlook.com 
<http://protection.outlook.com>: domain of users.ilovefreegle.org 
<http://users.ilovefreegle.org>
 designates 5.28.62.25 as permitted sender) 
receiver=protection.outlook.com <http://protection.outlook.com>;
 client-ip=5.28.62.25; helo= bulk2.ilovefreegle.org 
<http://bulk2.ilovefreegle.org>;
x-incomingtopheadermarker: 
OriginalChecksum:6358B4A822C854E47FA6C3639C9AE393622EB33A3871C222D0553E8152E15261;UpperCasedChecksum:425E70D91FE8E4D129FF49767C1E64799BF1B467EBA3ECFAE0680C115F9EF988;SizeAsReceived:1597;Count:14

dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple;

d=groups.ilovefreegle.org <http://groups.ilovefreegle.org>; s=x; 
t=1490703384;

bh=yVyC1M6MKluQ1itPDg25IKgb23jNeH2Ej3sTIfHZIQA=;
h=Date:Subject:From:Reply-To:To:List-Unsubscribe;
b=piUT94kb90KG5i4ZTEYI7KTVgzvNIyIXMZDu4sXEf4OfrsYh0kctOiUpGvWpIDwzZ
mdqPZoTvM8qitT/jqdRHuq4VzXs29/DSblXFefhAUn47u4Vs1Ojp9j72XE43h9h
x-originalarrivaltime: 28 Mar 2017 12:16:25.0068 (UTC)
 FILETIME=[1E9192C0:01D2A7BD]
x-incomingheadercount: 60
x-eopattributedmessage: 1
x-eoptenantattributedmessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0
cmm-sender-ip: 5.28.62.25
cmm-sending-ip: 5.28.62.25

cmm-authentication-results: hotmail.com <http://hotmail.com>; spf=pass 
(sender IP is 5.28.62.25;

 identity alignment result is pass and alignment mode is relaxed)

 [email protected] 
<mailto:[email protected]>; dkim=pass

 (testing mode; identity alignment result is pass and alignment mode is

 relaxed) header.d=groups.ilovefreegle.org 
<http://groups.ilovefreegle.org>; x-hmca=pass
header.id 
<http://header.id>[email protected] 
<mailto:[email protected]>
cmm-x-sid-pra: [email protected] 
<mailto:[email protected]>

cmm-x-auth-result: PASS
cmm-x-sid-result: PASS
cmm-x-message-status: n:n
cmm-x-message-delivery: Vj0xLjE7dXM9MTtsPTE7YT0xO0Q9MTtHRD0xO1NDTD0y

cmm-x-message-info: 
NhFq/7gR1vTU1bbqqTE+lNJkuXmBMKX2ZNtkjHT41E4i7L3XCaKw9/7muU+fSTuppox9bExlDRK++9irrNxni4vF72mbFYmsGVX5kF6xpAse6wmJmtlhkbH087a/+GLbR9mWuvTz9FvXBt2GrS3ntsrqj/hyUoTAFMj1CUgVnqZH8XAIbEQF7XtYv1Cl7+aVSzMSAtwQ4/Wd0PvUyuYnbHaQOWURBujAbRG+Z6I6Fpi3WTA+ksg9cQ==
x-microsoft-exchange-diagnostics: 
1;DB5EUR01HT090;7:YXkMo1pHSkFVUDs5MkmpPJJ+8Ol02ILwK73INYeIV7Grt12sBgtcGzkCsS2hN37EoRDdBwBFi7JrUIIsM5P3XKpfEF27RHUR3RxNslb3ZYkgJ4nuoxGnTDXkQdi9pL9sXi8kJQaZqUrqCG/LQ8PQQnUhjiTfZ+JcOCuIYnfnXJ2ARD8w6uk6WfZ59wIVAHeM/yPCW+CKSHW2Y7IOMl/zlVJndl2nOvZGidXUYM+S3oKuXN7P2hMk8TKAhFFVbE/FoE3K+hxoUBPuEYWAOjjAwB+3+I2JBOVP4mHWNQZ4RYYT9Rqp8is16hSJdS/khiKo
x-forefront-antispam-report: 
EFV:NLI;SFV:NSPM;SFS:(7070007)(98901004);DIR:OUT;SFP:1901;SCL:1;SRVR:DB5EUR01HT090;H:DB5PR08MB1046.eurprd08.prod.outlook.com 
<http://DB5PR08MB1046.eurprd08.prod.outlook.com>;FPR:;SPF:None;LANG:en;
x-ms-office365-filtering-correlation-id: 
c1291662-8450-455d-6c07-08d475d44d7f
x-microsoft-antispam: 
UriScan:;BCL:0;PCL:0;RULEID:(22001)(421252002)(2017031320274)(201702221075);SRVR:DB5EUR01HT090;
x-exchange-antispam-report-cfa-test: 
BCL:2;PCL:0;RULEID:(444111366)(82015058);SRVR:HE1EUR02HT013;BCL:2;PCL:0;RULEID:;SRVR:HE1EUR02HT013;BCL:0;PCL:0;RULEID:(444000031);SRVR:DB5EUR01HT090;BCL:0;PCL:0;RULEID:;SRVR:DB5EUR01HT090;

spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM

x-ms-exchange-crosstenant-originalarrivaltime: 28 Mar 2017 
12:16:34.9182 (UTC)

x-ms-exchange-crosstenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
x-ms-exchange-crosstenant-fromentityheader: Internet
x-ms-exchange-transport-crosstenantheadersstamped: HE1EUR02HT013
x-ms-exchange-transport-endtoendlatency: 00:00:10.4885018
Resent-From: <xxxxx>

x-microsoft-exchange-diagnostics-untrusted: 
1;HE1EUR02HT013;7:BqxhH37hnzfLvZiw74C0LVXsnL6T+DqQDMdM237QMOiLN0uE7Vbs+WCU21Zm7Yi6H0fPxB1WLY+FxgAJeWNgVb/n/oRS1KlIidetR4fS5XWxinG0yM7ZlaW/MLkP9C/l5wM3qPvM9KHnaEM78QX9eQloZrLphJUn4koQapw1GX1hKOt4xNCjAkh00fpKnKPHmZnCSjHljzSZ0I9U35VKK3Bq3a2AsQtWOwHOEl0OHNKWBgS1NMaL425oBb2Nl3GCTUGFS6NvdYqRmfwSZR8uPfLEiEkrdWwLc514c9QHMNP02GyZwwBuN2JuiR7ig87wyP5L1R9TvC78MA6i9YFN+A==
x-forefront-antispam-report-untrusted: 
EFV:NLI;SFV:NSPM;SFS:(98901004);DIR:INB;SFP:;SCL:1;SRVR:HE1EUR02HT013;H:SNT004-MC5F6.hotmail.com 
<http://SNT004-MC5F6.hotmail.com>;FPR:;SPF:None;LANG:en;
x-microsoft-antispam-untrusted: 
BCL:2;PCL:0;RULEID:(22001)(8291500097)(8291501071);SRVR:HE1EUR02HT013;
x-ms-exchange-transport-crosstenantheadersstripped: 
DB5EUR01FT055.eop-EUR01.prod.protection.outlook.com 
<http://DB5EUR01FT055.eop-EUR01.prod.protection.outlook.com>

x-forefront-prvs: 0260457E99
Content-Type: multipart/alternative;
boundary="_000_3461013086edce53fcc0c9567f936298usersilovefreegleorg_"
MIME-Version: 1.0
X-OriginatorOrg: outlook.com <http://outlook.com>
X-MS-Exchange-CrossTenant-originalarrivaltime: 28 Mar 2017 12:16:45.8100
 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Internet
X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB5EUR01HT090

Return-Path: [email protected] 
<mailto:[email protected]>


--_000_3461013086edce53fcc0c9567f936298usersilovefreegleorg_
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64

<trimmed>

--_000_3461013086edce53fcc0c9567f936298usersilovefreegleorg_
Content-Type: text/html; charset="utf-8"

Content-ID: 
<[email protected] 
<mailto:[email protected]>>

Content-Transfer-Encoding: base64

<trimmed>

--_000_3461013086edce53fcc0c9567f936298usersilovefreegleorg_--

--54F35B35-14AE-4773-B82B-1EBAAC1ED4CA--




_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)




_______________________________________________
dmarc-discuss mailing list
[email protected]
http://www.dmarc.org/mailman/listinfo/dmarc-discuss

NOTE: Participating in this list means you agree to the DMARC Note Well terms 
(http://www.dmarc.org/note_well.html)





















					Reply via email to