Heho,
I recently described how this could actually be used by a malicious third party 
to cause a sender to be blocklisted by major mail operators (see thread titled 
"DMARC/TLSRPT to non-existing accounts/reflection and sender reputation" from 
the end of April). However, in your case it does not really sound malicious.

Still, spamhaus might have picked up expired domains to setup spam traps, and 
you may be sending to a ruf/rua on an expired domain. (Note: Wild guess)

In any case, I would be _really_ interested in hearing more in case you figure 
out the root-cause of this.

With best regards,
Tobias

-----Original Message-----
From: mailop <[email protected]> On Behalf Of Benoit Panizzon via mailop
Sent: Tuesday, 17 May 2022 10:49
To: [email protected]
Subject: [mailop] Spamhaus: Get more details about LISTING (Could a DMARC 
Report Address point to a spamtrap)?

Hopefully somebody from spamhaus is reading.

The 2nd day in a row, our main mailplattform IP address is listed and 
outlook.com blocks all emails.

Spamhaus only gives a timestamp +/- 5 minutes.

There are A LOT OF EMAILS passing our plattform in 10 Minutes.

Yesterday I found a suspect. One customer had configured his exchange server to 
relay 'bounces' via our platform. That was fixed.

Today I am looking through the logs again. No suspicious emails. But in that 
timespam, we send out DMARC reports.

Could it be, that someone publishes a DMARC Report address which points to a 
Spamhaus Spamtrap?

For the 2nd time I requestd 'more details' from Spamhaus. Is there a chance to 
get such informations?

Mit freundlichen Grüssen

-Benoît Panizzon-
-- 
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________
_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

_______________________________________________
mailop mailing list
[email protected]
https://list.mailop.org/listinfo/mailop

Reply via email to