Re: [mailop] Intuit directly spaming

John Levine via mailop skrev den 2023-03-05 03:22: $ host -t txt 1.1.89.167.asn.routeviews.org 1.1.89.167.asn.routeviews.org descriptive text "11377" "167.89.0.0" "18" or free as in free, with ip2location sqlitedb created with a single php code loader, then anorher php to find results for

Re: [mailop] h-email.net

Jaroslaw Rafa via mailop skrev den 2023-03-04 20:00: Dnia 3.03.2023 o godz. 22:21:28 John Levine via mailop pisze: Why isn't it just "v=spf1 -all" then? That's the most common way of indicating that a domain should never send mail... it would be more weak then rfc 7505 anyway, since not all

Re: [mailop] h-email.net

Raymond Dijkxhoorn via mailop skrev den 2023-03-04 00:51: $ host -t txt h-email.net h-email.net descriptive text "v=spf1 ip6:fd96:1c8a:43ad::/48 -all" Disposable email services. 10minutemail[.]pro 10minutesmail[.]net And so on ... fd96: is bogus aswell, as in i like to see an email from

Re: [mailop] Intuit directly spaming

On 2023-03-04 22:58:23 +, MRob via mailop wrote: Thanks you Atro, is there popular tool for to do that in real time? There's also https://bgp.tools/, made by a friend and former colleague. -- Alex ___ mailop mailing list mailop@mailop.org

Re: [mailop] Intuit directly spaming

It appears that MRob via mailop said: >On 2023-02-27 23:53, Atro Tossavainen via mailop wrote: >>> > harder to give due suspision on sendgrid because they give full >> >> It's actually kind of easy. >> >> Is the IP announced by AS11377? >> >> Yes? -> SendGrid. > >Thanks you Atro, is there

Re: [mailop] [EXT] - Re: [EXT] - Re: [EXT] - Re: [EXT] - Re: New member, trying to bring our mail server inline.

Unfortunetly that is not possible with the sophos box as it's the gateway, so it's the first place incoming hits and the last place outgoing hits and there is no way to change that. We are looking at replacing it as it is really not a good system so this may be something I can use to push for

Re: [mailop] h-email.net

they also own thousands of typo domains like gmai.com On Sat, Mar 4, 2023 at 1:28 PM Collider via mailop wrote: > Likely that ULA has to send email from that host inside their network? > > On 4 March 2023 19:00:18 UTC, Jaroslaw Rafa via mailop > wrote: >> >> Dnia 3.03.2023 o godz. 22:21:28

Re: [mailop] [EXT] - Re: [EXT] - Re: [EXT] - Re: New member, trying to bring our mail server inline.

As a rule you need to finish your antivirus / antispam etc BEFORE you sign the message, especially where this scanning is done by a separate appliance with its own mailserver that inserts headers. --srs From: mailop on behalf of Salvatore Jr Walter P via

Re: [mailop] [EXT] - Re: [EXT] - Re: [EXT] - Re: New member, trying to bring our mail server inline.

On Mar 4, 2023, at 3:58 PM, Salvatore Jr Walter P wrote: Something just accored to me, we have a sophos email appliance. All incoming and outgoing email go through that box and it scans everything. Do you think that may be modifying the headers before it leaves our network?That is highly

Re: [mailop] [EXT] - Re: [EXT] - Re: [EXT] - Re: New member, trying to bring our mail server inline.

That would definitely do it - does it have the ability to sign DKIM? Maybe you should do it there, instead of on exchange. Typically you want to sign DKIM at the edge. On 3/4/2023 5:48 PM, Salvatore Jr Walter P via mailop wrote: Something just accored to me, we have a sophos email appliance.

[mailop] Google sending IPs/SPF confusion

Hello! lately we had some website hacking breakin and bots being used to proxying abuse, etc. For to fight the abuse gathered IP addrs from server logs many of which including Google IP address ranges. I have to firewall bot and other bad IPs but dont want to firewall Gmail sending IPs. My

Re: [mailop] [EXT] - Re: [EXT] - Re: [EXT] - Re: New member, trying to bring our mail server inline.

Something just accored to me, we have a sophos email appliance. All incoming and outgoing email go through that box and it scans everything. Do you think that may be modifying the headers before it leaves our network? From: Josh Daynard Sent: Saturday, March 4, 2023 6:37 PM To: Salvatore Jr

Re: [mailop] [EXT] - Re: [EXT] - Re: New member, trying to bring our mail server inline.

On Mar 4, 2023, at 3:11 PM, Salvatore Jr Walter P via mailop wrote:Sorry, but I have no idea what any of that means?what is a z tag?I was curious as well and managed to find a decent resource here:What are DKIM Tags?easydmarc.comBottom line is that the verification error you’re seeing

Re: [mailop] Intuit directly spaming

I'm not sure if they have an API, but I've used Hurricane Electric's BGP toolkit   to look up AS' frequently. If you want API integration, BGPview is quite useful. On 3/4/2023 4:58 PM, MRob via mailop

Re: [mailop] [EXT] - Re: [EXT] - Re: New member, trying to bring our mail server inline.

Sorry, but I have no idea what any of that means? what is a z tag? ___ Walter P Salvatore Jr Systems Administrator Information Technology City of Warwick (401) 921-9663 https://www.warwickri.gov walter.p.salvat...@warwickri.gov From:

Re: [mailop] Intuit directly spaming

On 2023-02-27 23:53, Atro Tossavainen via mailop wrote: > harder to give due suspision on sendgrid because they give full It's actually kind of easy. Is the IP announced by AS11377? Yes? -> SendGrid. Thanks you Atro, is there popular tool for to do that in real time?

Re: [mailop] Google Postmaster Crash

Thank you Mark , so there is a global problem . On Sun, Mar 5, 2023 at 12:40 AM Mark Alley wrote: > I've seen the same with my domains. Just spins on load. > > On Sat, Mar 4, 2023, 3:35 PM Emre Üst via mailop > wrote: > >> Hello , >> >> Google Postmaster not working since Friday. After log in,

Re: [mailop] Google Postmaster Crash

I've seen the same with my domains. Just spins on load. On Sat, Mar 4, 2023, 3:35 PM Emre Üst via mailop wrote: > Hello , > > Google Postmaster not working since Friday. After log in, it should list > the domain list, but the loading screen returns and does not appear. > > Are you like that

[mailop] Google Postmaster Crash

Hello , Google Postmaster not working since Friday. After log in, it should list the domain list, but the loading screen returns and does not appear. Are you like that too? Or are we just experiencing this situation? Thank you -- *Emre ÜST* Deliverability Team Leader *t.* +90 212 343 07 39

Re: [mailop] h-email.net

Likely that ULA has to send email from that host inside their network? On 4 March 2023 19:00:18 UTC, Jaroslaw Rafa via mailop wrote: >Dnia 3.03.2023 o godz. 22:21:28 John Levine via mailop pisze: >> It appears that Jan Schaumann via mailop said: >> >$ host -t txt h-email.net >> >h-email.net

Re: [mailop] h-email.net

Dnia 3.03.2023 o godz. 22:21:28 John Levine via mailop pisze: > It appears that Jan Schaumann via mailop said: > >$ host -t txt h-email.net > >h-email.net descriptive text "v=spf1 ip6:fd96:1c8a:43ad::/48 -all" > > That's the most interestingly broken SPF record I have ever seen. > > All valid

Re: [mailop] Mail Sending Self-Test Platform

Heho, > Heh, it turns out that actually works, so not a big deal :-) Not tooo sure; There were a lot of timeouting tests which looked like 'did not reload page'; Wouldn't be surprised if _some_ browsers are fine with it, while others aren't. Anyway, for good measure, it's fixed now. ;-) And

Re: [mailop] [EXT] - Re: New member, trying to bring our mail server inline.

Heho, > Check that no other filters alter those fields after signing.  Can > you sign messages off-line?  Do Bcc: copies verify? (Use any off-line > dkim verifier.) You can also give https://email-security-scans.org/ a try and (important!) select "Store my emails so I can download them later."

Re: [mailop] Does gmail accept unicode character in From domain? I don't think so

On Thu, Mar 02, 2023 at 04:38:16PM -0700, Alex Burch via mailop wrote: > I am using unicode in the From: not the MAIL FROM. Do you have to specify > it SMTPUTF8 in the MAIL FROM to use it in the From header? I don't see > anything about that here: https://www.rfc-editor.org/rfc/rfc6531 Without

Re: [mailop] [EXT] - Re: New member, trying to bring our mail server inline.

On Fri 03/Mar/2023 21:39:46 +0100 Salvatore Jr Walter P via mailop wrote: Thanks Mark. I sent an email as suggested and it came back as a fail for DKIM. “I see you've included a DKIM signature. I've retrieved the public key from 1._domainkey.warwickri.gov The signature failed validation. The

Re: [mailop] h-email.net

At second glance, it seems more that I’m seeing spammers stating their HELO as “mail.h-email.net” while sending from IPs unrelated to that of the actual mail.h-email.net. So probably what I’m seeing is actually unrelated to anything run by whoever owns that domain. On 2023-03-03 18:49,

Re: [mailop] h-email.net

All of the domains I’ve checked with that MX are parked. Many of them go through multiple rounds of redirects and some of them even attempt to load apps when visited. I don’t know what they’re used for, but there don’t appear to be users there. When I do hygiene for clients I list anything

Re: [mailop] New member, trying to bring our mail server inline.

oops! Looks like I grabbed the wrong value. laura > On 3 Mar 2023, at 16:58, Mark Alley via mailop wrote: > > The selector seems to just be "1", of which the published record appears to > be valid in DNS. > > https://tools.wordtothewise.com/dkim/check/warwickri.gov/1 > > DNS propagation