I'll reply you offlist for someone at Comcast, Justin. I'm researching
smthg interesting for FBLs as well....

Udeme

On Tue, Nov 29, 2016 at 11:10 AM, Justin Frechette <[email protected]>
wrote:

> Wondering if there is someone from Comcast that can provide assistance or
> if anyone can shed some light on what's going on here.
>
> Our abuse inbox is getting hit with Comcast FBL reports that reference our
> IPs but for mail that is not ours. The mail that is being reported as spam
> also looks very benign and personal, so I'm hesitant to say it's header
> spoofing. We're seeing this with multiple IPs of ours and only with Comcast.
>
> *Comcast FBL Email:*
> This is a Comcast email abuse report for an email message received from IP
> 216.27.86.171 on Mon, 28 Nov 2016 14:28:35 +0000
>
> The IP mentioned above is ours but the message did not originate from us.
>
> The email that is being reported as spam is screenshot here:
> http://screencast.com/t/9r86n18j2
>
> The full headers of the message being reported as spam is pastebin here:
> http://pastebin.com/Hicx0gvM
>
> What is concerning to me is that the IP (216.27.86.171) which has a
> hostname of drone114.ral.icpbounce.com is being reported as coming from
> Comcast. (highlighted below)
>
> Return-Path: <[email protected]>
> Delivered-To: [email protected]
> Received: from dovdir1-asb-03o.email.comcast.net ([216.27.86.171]) by
>   dovback1-asb-20o.email.comcast.net (Dovecot) with LMTP id
>   /NuGBBQ/PFjrJgAA2Etxvw for <[email protected]>; Mon, 28 Nov 2016
>   14:28:36 +0000
> Received: from dovpxy-hob-09o ([216.27.86.171]) by
>   dovdir1-asb-03o.email.comcast.net (Dovecot) with LMTP id
>   e8/zKBM/PFh7RwAApm0j0w ; Mon, 28 Nov 2016 14:28:36 +0000
> Received: from resimta-ch2-03v.sys.comcast.net ([216.27.86.171]) by
>   dovpxy-hob-09o (Dovecot) with LMTP id GE1kNhI/PFisfQAAwfAatg ; Mon, 28
> Nov
>   2016 14:28:35 +0000
> Received: from mail-qt0-x241.google.com ([IPv6:2607:f8b0:400d:c0d::241])
> by
>   resimta-ch2-03v.sys.comcast.net with SMTP id BMuQc3WdRiOyDBMv1cuFsj;
> Mon, 28
>   Nov 2016 14:28:34 +0000
>
>
> We are getting a handful of these reports a day from Comcast and I can't
> figure out what's going on.
>
> Thanks in advance for the help!
>
> Justin
>
> _______________________________________________
> mailop mailing list
> [email protected]
> https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
>
>
_______________________________________________
mailop mailing list
[email protected]
https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

Reply via email to