Re: [mailop] It's almost getting funny out there now..

2024-02-06 Thread Randolf Richardson, Postmaster via mailop
[Sarcasm]
Oh, but their customers would never send spam -- they pay for mail 
services, and their credit cards aren't even lost, forged, or stolen!
[/Sarcasm]

They really do need to work on customer intake, but the inflow of 
billions of dollars is likely pushing a lot of heavy rocks through 
the streams. :(

> For the record, looking at the 'too big to block' stats, and definitely 
> the o365 spam is leading the pack..
> 
> IPs that are temporarily rate limited because of too many invalid 
> recipients reported in a 24 hour period.. (2871 IPs vs Gmail 155 IPs)
> 
> Of course, not 100% relative, as their retry algorithms can be vastly 
> different.. but the point is, it is getting to crazy levels.
> 
> And so much obvious stuff..
> 
> But just sharing one of the latest.. (Caution, headers can be forged)
> 
> X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 103.143.76.89)
> 
> host 103.143.76.89
> 89.76.143.103.in-addr.arpa domain name pointer unpggl.onmicrosoft.com
> 
> But of course the IP is on OBHost LLC
> 
> X-EL-THREAT: NO
> X-EL-SUSPECT: NO
> X-Vade-Score: 0
> X-Vade-State: 0
> X-MS-Exchange-SenderADCheck: 2
> X-Microsoft-Antispam-Untrusted: BCL:0;
> X-Microsoft-Antispam-Message-Info-Original:
> X-Forefront-Antispam-Report-Untrusted: .. :NSPM; ..
> X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: 
> TenantId=b86cf7d6-acf7-4a9b-8515-21b3b6e45fa1;Ip=[103.143.76.89];Helo=[bishopstown-cs.ie]
> 
> All of these spam protections can't help at o365 outbound, but yet 
> simple email filters can inbound?
> 
> Just a once a month rant, when billion dollar companies are not 
> responsible for the threats leaving their networks..
> 
> 
> 
> 
> 
> -- 
> "Catch the Magic of Linux..."
> 
> Michael Peddemors, President/CEO LinuxMagic Inc.
> Visit us at http://www.linuxmagic.com @linuxmagic
> A Wizard IT Company - For More Info http://www.wizard.ca
> "LinuxMagic" a Reg. TradeMark of Wizard Tower TechnoServices Ltd.
> 
> 604-682-0300 Beautiful British Columbia, Canada
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop


-- 
Postmaster - postmas...@inter-corporate.com
Randolf Richardson, CNA - rand...@inter-corporate.com
Inter-Corporate Computer & Network Services, Inc.
Vancouver, Beautiful British Columbia, Canada
https://www.inter-corporate.com/


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] It's almost getting funny out there now..

2024-02-06 Thread Michael Peddemors via mailop
For the record, looking at the 'too big to block' stats, and definitely 
the o365 spam is leading the pack..


IPs that are temporarily rate limited because of too many invalid 
recipients reported in a 24 hour period.. (2871 IPs vs Gmail 155 IPs)


Of course, not 100% relative, as their retry algorithms can be vastly 
different.. but the point is, it is getting to crazy levels.


And so much obvious stuff..

But just sharing one of the latest.. (Caution, headers can be forged)

X-MS-Exchange-Authentication-Results: spf=fail (sender IP is 103.143.76.89)

host 103.143.76.89
89.76.143.103.in-addr.arpa domain name pointer unpggl.onmicrosoft.com

But of course the IP is on OBHost LLC

X-EL-THREAT: NO
X-EL-SUSPECT: NO
X-Vade-Score: 0
X-Vade-State: 0
X-MS-Exchange-SenderADCheck: 2
X-Microsoft-Antispam-Untrusted: BCL:0;
X-Microsoft-Antispam-Message-Info-Original:
X-Forefront-Antispam-Report-Untrusted: .. :NSPM; ..
X-MS-Exchange-CrossTenant-OriginalAttributedTenantConnectingIp: 
TenantId=b86cf7d6-acf7-4a9b-8515-21b3b6e45fa1;Ip=[103.143.76.89];Helo=[bishopstown-cs.ie]


All of these spam protections can't help at o365 outbound, but yet 
simple email filters can inbound?


Just a once a month rant, when billion dollar companies are not 
responsible for the threats leaving their networks..






--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Reg. TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop