Re: [mailop] Looking for contact at iphmx.com

[John Levine via mailop]

It appears that Lena--- via mailop  said:
>> The good folks at SecurityTrails figured out a few months ago that the
>> presence of the RoundCube webmail product counts as "phishing against
>> the generic brand of email" (I shit you not)
>
>By default RoundCube doesn't include originating-IP into headers
>of outgoing emails. Default means vast majority of installations.

Neither does Gmail. What does that have to do with whether you'd want
to accept the mail?

R's
John


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Looking for contact at iphmx.com

[Lena--- via mailop]

> The good folks at SecurityTrails figured out a few months ago that the
> presence of the RoundCube webmail product counts as "phishing against
> the generic brand of email" (I shit you not)

By default RoundCube doesn't include originating-IP into headers
of outgoing emails. Default means vast majority of installations.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Looking for contact at iphmx.com

[Atro Tossavainen via mailop]

Hey Sidsel, Bastiaan,

On Tue, Jun 28, 2022 at 01:09:45PM +0200, Hetzner Blacklist via mailop wrote:
> That error message means your IP has a poor email reputation on Cisco Talos:
> https://talosintelligence.com/reputation_center/

Cisco Talos has to be the most opaque reputation service I have come
across so far.

They also take the word of a third party (SecurityTrails, or whatever
their IP intelligence arm is called, in this case) as gospel. Or at
least took, some time ago.

The good folks at SecurityTrails figured out a few months ago that the
presence of the RoundCube webmail product counts as "phishing against
the generic brand of email" (I shit you not) and as a result, Cisco
proceeded to list all domains operating RoundCube as bad.

How do I know? I got hit, that's how. :-D

Took me a good deal of time to even figure out who were responsible
and how, and probably wouldn't have been possible without M3AAWG
contacts. Also, I found out that some parties trusting Cisco Talos
intelligence (such as Telia Finland or the government ICT centre of
Finland) are so far behind the requirements of their jobs you
wouldn't believe they had been hired by anyone.

> 
> Regards
> Bastiaan
> 
> Am 28.06.2022 um 12:09 schrieb Sidsel Jensen via mailop:
> >Hi
> >I'm trying to locate a contact to mx1.hc1932.iphmx.com - does anybody know 
> >who to reach out to? They don't respond through ab...@enom.com 
> >mailto:ab...@enom.com (which was the only address whois showed as everything 
> >else was heavily redacted)
> >I'm trying to solve a deliverability problem towards them:
> >host mx1.hc1932.iphmx.com[216.71.154.96] refused to talk to me: 
> >554-esa6.hc1932.iphmx.com 554 Your access to this mail system has been 
> >rejected due to the sending MTA's poor reputation. If you believe that this 
> >failure is in error, please contact the intended recipient via alternate 
> >means.
> >I guess mailop applies as "alternate means" ;-)
> >Kind Regards,
> >Sidsel Jensen
> >Architect of Deliverability and Abuse @ Open-Xchange

-- 
Atro Tossavainen, Chairman of the Board
Infinite Mho Oy, Helsinki, Finland
tel. +358-44-5000 600, http://www.infinitemho.fi/
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Looking for contact at iphmx.com

[Hetzner Blacklist via mailop]

That error message means your IP has a poor email reputation on Cisco Talos:
https://talosintelligence.com/reputation_center/

Regards
Bastiaan

Am 28.06.2022 um 12:09 schrieb Sidsel Jensen via mailop:

Hi
  
I'm trying to locate a contact to mx1.hc1932.iphmx.com - does anybody know who to reach out to? They don't respond through ab...@enom.com mailto:ab...@enom.com (which was the only address whois showed as everything else was heavily redacted)
  
I'm trying to solve a deliverability problem towards them:
  
host mx1.hc1932.iphmx.com[216.71.154.96] refused to talk to me: 554-esa6.hc1932.iphmx.com 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.
  
I guess mailop applies as "alternate means" ;-)
  
Kind Regards,

Sidsel Jensen
  
Architect of Deliverability and Abuse @ Open-Xchange



___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Looking for contact at iphmx.com

[Sidsel Jensen via mailop]

Thank you Laura :-)
 
Apparently I'm blind - for some weird reason I completely missed that 
 
/Sidsel

> On 06/28/2022 12:36 PM Laura Atkins via mailop  wrote:
>  
>  
>  
> If you put iphmx into google, you get a clear statement in the first page of 
> responses that says iphmx is controlled by Cisco. But the rejection message 
> is telling you to contact the recipient - not the filter owner. 
>  
> laura 
> 
> 
> 
> > On 28 Jun 2022, at 11:09, Sidsel Jensen via mailop  > mailto:mailop@mailop.org> wrote:
> > Hi
> >  
> > I'm trying to locate a contact tohttp://mx1.hc1932.iphmx.com - does anybody 
> > know who to reach out to? They don't respond through ab...@enom.com 
> > mailto:ab...@enom.com (which was the only address whois showed as 
> > everything else was heavily redacted)
> >  
> > I'm trying to solve a deliverability problem towards them:
> >  
> > hosthttp://mx1.hc1932.iphmx.com [216.71.154.96] refused to talk to 
> > me:http://554-esa6.hc1932.iphmx.com 554 Your access to this mail system has 
> > been rejected due to the sending MTA's poor reputation. If you believe that 
> > this failure is in error, please contact the intended recipient via 
> > alternate means.
> >  
> > I guess mailop applies as "alternate means" ;-)
> >  
> > Kind Regards,
> > Sidsel Jensen
> >  
> > Architect of Deliverability and Abuse @ Open-Xchange
> > ___
> > mailop mailing list
> > mailop@mailop.org mailto:mailop@mailop.org
> > https://list.mailop.org/listinfo/mailop
> > 
> 
> -- 
> The Delivery Experts
>  
> Laura Atkins
> Word to the Wise
> la...@wordtothewise.com mailto:la...@wordtothewise.com
>  
> Email Delivery Blog: http://wordtothewise.com/blog
> 
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
> 
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Looking for contact at iphmx.com

[Laura Atkins via mailop]

If you put iphmx into google, you get a clear statement in the first page of 
responses that says iphmx is controlled by Cisco. But the rejection message is 
telling you to contact the recipient - not the filter owner. 

laura 


> On 28 Jun 2022, at 11:09, Sidsel Jensen via mailop  wrote:
> 
> Hi
>  
> I'm trying to locate a contact to mx1.hc1932.iphmx.com - does anybody know 
> who to reach out to? They don't respond through ab...@enom.com 
>  (which was the only address whois showed as 
> everything else was heavily redacted)
>  
> I'm trying to solve a deliverability problem towards them:
>  
> host mx1.hc1932.iphmx.com[216.71.154.96] refused to talk to me: 
> 554-esa6.hc1932.iphmx.com 554 Your access to this mail system has been 
> rejected due to the sending MTA's poor reputation. If you believe that this 
> failure is in error, please contact the intended recipient via alternate 
> means.
>  
> I guess mailop applies as "alternate means" ;-)
>  
> Kind Regards,
> Sidsel Jensen
>  
> Architect of Deliverability and Abuse @ Open-Xchange
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop

-- 
The Delivery Experts

Laura Atkins
Word to the Wise
la...@wordtothewise.com 

Email Delivery Blog: http://wordtothewise.com/blog  






___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

[mailop] Looking for contact at iphmx.com

[Sidsel Jensen via mailop]

Hi
 
I'm trying to locate a contact to mx1.hc1932.iphmx.com - does anybody know who 
to reach out to? They don't respond through ab...@enom.com 
mailto:ab...@enom.com (which was the only address whois showed as everything 
else was heavily redacted)
 
I'm trying to solve a deliverability problem towards them:
 
host mx1.hc1932.iphmx.com[216.71.154.96] refused to talk to me: 
554-esa6.hc1932.iphmx.com 554 Your access to this mail system has been rejected 
due to the sending MTA's poor reputation. If you believe that this failure is 
in error, please contact the intended recipient via alternate means.
 
I guess mailop applies as "alternate means" ;-)
 
Kind Regards,
Sidsel Jensen
 
Architect of Deliverability and Abuse @ Open-Xchange___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop