Wondering if there is someone from Comcast that can provide assistance or
if anyone can shed some light on what's going on here.

Our abuse inbox is getting hit with Comcast FBL reports that reference our
IPs but for mail that is not ours. The mail that is being reported as spam
also looks very benign and personal, so I'm hesitant to say it's header
spoofing. We're seeing this with multiple IPs of ours and only with Comcast.

*Comcast FBL Email:*
This is a Comcast email abuse report for an email message received from IP
216.27.86.171 on Mon, 28 Nov 2016 14:28:35 +0000

The IP mentioned above is ours but the message did not originate from us.

The email that is being reported as spam is screenshot here:
http://screencast.com/t/9r86n18j2

The full headers of the message being reported as spam is pastebin here:
http://pastebin.com/Hicx0gvM

What is concerning to me is that the IP (216.27.86.171) which has a
hostname of drone114.ral.icpbounce.com is being reported as coming from
Comcast. (highlighted below)

Return-Path: <[email protected]>
Delivered-To: [email protected]
Received: from dovdir1-asb-03o.email.comcast.net ([216.27.86.171]) by
  dovback1-asb-20o.email.comcast.net (Dovecot) with LMTP id
  /NuGBBQ/PFjrJgAA2Etxvw for <[email protected]>; Mon, 28 Nov 2016
  14:28:36 +0000
Received: from dovpxy-hob-09o ([216.27.86.171]) by
  dovdir1-asb-03o.email.comcast.net (Dovecot) with LMTP id
  e8/zKBM/PFh7RwAApm0j0w ; Mon, 28 Nov 2016 14:28:36 +0000
Received: from resimta-ch2-03v.sys.comcast.net ([216.27.86.171]) by
  dovpxy-hob-09o (Dovecot) with LMTP id GE1kNhI/PFisfQAAwfAatg ; Mon, 28 Nov
  2016 14:28:35 +0000
Received: from mail-qt0-x241.google.com ([IPv6:2607:f8b0:400d:c0d::241]) by
  resimta-ch2-03v.sys.comcast.net with SMTP id BMuQc3WdRiOyDBMv1cuFsj; Mon,
28
  Nov 2016 14:28:34 +0000


We are getting a handful of these reports a day from Comcast and I can't
figure out what's going on.

Thanks in advance for the help!

Justin
_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to