On 08.10.26 17:34, ndrs via mailop wrote:
>DKIM marked for the original domain (not GMX), from header for the
> original domain, envelope sender for gmx.net
So SPF passed. I assume, without modifications to headers DKIM passed too
and was aligned with From:, satisfying DMARC as well. GMX did everything
for their customer to deliver and for you to be able filter mail properly.
I guess this is becoming more common. If a mail service can't block outgoing
susicious mail (forwarded or not), it uses separate outgoing mail server.
This way, they send the mail, but don't risk their primary outgoing server
being marked as a spam source.
Just filter such mail standard way, the secondary outgoing mail server
should result into higher spam score.
It's probably bulk mail sent to GMX customers, not a way to abuse GMX to
send spam.
On 10.10.26 04:04, ndrs via mailop wrote:
Except that it was addressed to a address here that has no relationship
with any GMX accounts. I've seen a couple more of these in the days
since. Someone found a way to send junk through there to randomly
selected victims (seems likely that its not targeted by manually entering
a new forwarding address every time, unless maybe they found a way to
automate it).
How do you know? It has no To/Cc: header in gmx network?
I guess you know that the envelope recipient needs not to be in headers.
Spammers steal accounts all the time and use forwarding to benefit from ESP
reputation.
Thanks to responses on this thread so I know I can add some points to that
source by default.
I have checked one of mout-xforward.gmx.net IPs for blocklists and it's
listed in Zen, UCEPROTECT L3 and backscatterer. Yes, that should increase
spam score pretty much.
Good luck.
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux is like a teepee: no Windows, no Gates and an apache inside...
_______________________________________________
mailop mailing list -- [email protected]
To unsubscribe send an email to [email protected]
