Justin, We’d already seen the issue and the short-term fix has been rolled out. We’re taking a look at longer-term solutions. Thanks for the heads-up.
-- Alex Brotman Sr. Engineer, Anti-Abuse Comcast x5364 From: mailop [mailto:[email protected]] On Behalf Of Justin Frechette Sent: Tuesday, November 29, 2016 11:10 AM To: [email protected] Subject: [mailop] Comcast FBL - Erroneous Reports Wondering if there is someone from Comcast that can provide assistance or if anyone can shed some light on what's going on here. Our abuse inbox is getting hit with Comcast FBL reports that reference our IPs but for mail that is not ours. The mail that is being reported as spam also looks very benign and personal, so I'm hesitant to say it's header spoofing. We're seeing this with multiple IPs of ours and only with Comcast. Comcast FBL Email: This is a Comcast email abuse report for an email message received from IP 216.27.86.171 on Mon, 28 Nov 2016 14:28:35 +0000 The IP mentioned above is ours but the message did not originate from us. The email that is being reported as spam is screenshot here: http://screencast.com/t/9r86n18j2 The full headers of the message being reported as spam is pastebin here: http://pastebin.com/Hicx0gvM What is concerning to me is that the IP (216.27.86.171) which has a hostname of drone114.ral.icpbounce.com<http://drone114.ral.icpbounce.com> is being reported as coming from Comcast. (highlighted below) Return-Path: <[email protected]<mailto:[email protected]>> Delivered-To: [email protected]<mailto:[email protected]> Received: from dovdir1-asb-03o.email.comcast.net<http://dovdir1-asb-03o.email.comcast.net> ([216.27.86.171]) by dovback1-asb-20o.email.comcast.net<http://dovback1-asb-20o.email.comcast.net> (Dovecot) with LMTP id /NuGBBQ/PFjrJgAA2Etxvw for <[email protected]<mailto:[email protected]>>; Mon, 28 Nov 2016 14:28:36 +0000 Received: from dovpxy-hob-09o ([216.27.86.171]) by dovdir1-asb-03o.email.comcast.net<http://dovdir1-asb-03o.email.comcast.net> (Dovecot) with LMTP id e8/zKBM/PFh7RwAApm0j0w ; Mon, 28 Nov 2016 14:28:36 +0000 Received: from resimta-ch2-03v.sys.comcast.net<http://resimta-ch2-03v.sys.comcast.net> ([216.27.86.171]) by dovpxy-hob-09o (Dovecot) with LMTP id GE1kNhI/PFisfQAAwfAatg ; Mon, 28 Nov 2016 14:28:35 +0000 Received: from mail-qt0-x241.google.com<http://mail-qt0-x241.google.com> ([IPv6:2607:f8b0:400d:c0d::241]) by resimta-ch2-03v.sys.comcast.net<http://resimta-ch2-03v.sys.comcast.net> with SMTP id BMuQc3WdRiOyDBMv1cuFsj; Mon, 28 Nov 2016 14:28:34 +0000 We are getting a handful of these reports a day from Comcast and I can't figure out what's going on. Thanks in advance for the help! Justin
_______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
