Re: [mailop] Fake fax spam from sendgrid

2020-10-19 Thread Michael Peddemors via mailop
Yeah, it's still happening, thankfully the volume is getting a lot 
lower, but probably because they keep getting themselves listed, and 
more and more filtering rules are targeting SendGrid phishing specifically..


I stopped getting numbers, when we started seeing less than 10 new IP(s) 
in a day, but they are still coming in..


From: Chase Alert!!! 
Subject: Chase Account Notifications!!!

But with auto-detection mechanisms' in place now, back to worrying about 
the higher volume stuff.. Emotet's new templates, Google Leakage, 
SharePoint file sharing spam abuse, and Digital Ocean still sending a 
lot of phishing..


On 2020-10-19 5:29 p.m., John Levine via mailop wrote:

I'm getting a steady stream of spam from Sendgrid purporting to be
Efax messages, with what appears to be an XLS spreadsheet attached.
The return addresses are all over the place but they all come through
Sendgrid, e.g.,

Subject: E-FAX - 963554 DNW

You have a new fax! Click the attachment to view.

Caller ID: +15131711332
Date Received: 2020-10-19 08:15:38 CDT
Type: Attached in xls
Number of pages: 1
Reference #: vsshGfjF9_87575643-34844314-98773826

 [ Part 2, Application/VND.MS-EXCEL (Name: "001110952.xls") 1.4 MB. ]

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop





--
"Catch the Magic of Linux..."

Michael Peddemors, President/CEO LinuxMagic Inc.
Visit us at http://www.linuxmagic.com @linuxmagic
A Wizard IT Company - For More Info http://www.wizard.ca
"LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd.

604-682-0300 Beautiful British Columbia, Canada

This email and any electronic data contained are confidential and intended
solely for the use of the individual or entity to which they are addressed.
Please note that any views or opinions presented in this email are solely
those of the author and are not intended to represent those of the company.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] Fake fax spam from sendgrid

2020-10-19 Thread John Levine via mailop
I'm getting a steady stream of spam from Sendgrid purporting to be
Efax messages, with what appears to be an XLS spreadsheet attached.
The return addresses are all over the place but they all come through
Sendgrid, e.g., 

Subject: E-FAX - 963554 DNW

You have a new fax! Click the attachment to view.

Caller ID: +15131711332
Date Received: 2020-10-19 08:15:38 CDT
Type: Attached in xls
Number of pages: 1
Reference #: vsshGfjF9_87575643-34844314-98773826

[ Part 2, Application/VND.MS-EXCEL (Name: "001110952.xls") 1.4 MB. ]

___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] Looking for contact at Altice regarding suddenlink.net delivery issues

2020-10-19 Thread Allen Kevorkov via mailop
Happy Belated Weekend! 
I know this has been discussed a couple of years ago, but has anyone been able 
to find a contact to help with delivery issues to suddenlink.net since then? 
They're rejecting an entire network. If I'm not mistaken, they're run by Altice 
and we've tried abuse/postmaster addresses to no avail.
Any assistance would be greatly appreciated.
~ Allen K___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Problems reaching uwo.ca

2020-10-19 Thread Graeme Fowler via mailop
On 19 Oct 2020, at 12:18, Graeme Fowler via mailop  wrote:
> Just seeing if anyone else is experiencing an issue we're having ("we" being 
> Loughborough University), or if it is indeed Just Us [tm]. If anyone from or 
> related to uwo.ca is on the list, so much the better.

Not yet resolved but a contact withing UWO has advised they're having network 
problems with their connection to their local NREN.

Ta for the off-list responses.

Graeme
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] Problems reaching uwo.ca

2020-10-19 Thread Graeme Fowler via mailop
Hi all

(cross-posted so apologies if you get this more than once)

Just seeing if anyone else is experiencing an issue we're having ("we" being 
Loughborough University), or if it is indeed Just Us [tm]. If anyone from or 
related to uwo.ca is on the list, so much the better.

We've had reports this morning of us rejecting emails from uwo.ca, and we have 
emails to uwo.ca stuck in the outbound queue. Inbound rejections are because we 
can't resolve the inbound MAIL FROM domain - lookups time out.

It seems we are unable to make any DNS queries against their IPv4 nameserver 
addresses. We can against their IPv6 nameserver addresses but there's no IPv6 
glue in their delegation from the .ca nameservers, we need to use v4 - and 
can't.

It also looks like we can't talk to the MX server farm on port 25 either.

So... is it a routing problem, or have we upset uwo.ca for some reason?

Regards

Graeme


___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] Proofpoint some delivery issues ?

2020-10-19 Thread James Hoddinott via mailop
postmas...@proofpoint.com is your friend in cases like these.

On Fri, 16 Oct 2020 at 22:13, L. Mark Stone via mailop 
wrote:

> Very interested in this; we are seeing DKIM signing issues with emails
> sent by proofpoint for the recipient to click to obtain an encrypted email.
>
> Regards,
> Mark
> ___
> *L. Mark Stone, Founder*
>
> *North America's Leading Zimbra VAR/BSP/Training Partner*
> *For Companies With Mission-Critical Email Needs*
> *Need more email security & compliance? Ask me about Mimecast!*
>
>
>
> --
> *From: *"Bressier Simon via mailop" 
> *To: *"mailop" 
> *Sent: *Friday, October 16, 2020 10:29:33 AM
> *Subject: *[mailop] Proofpoint some delivery issues ?
>
> Hi folks,
> Someone from PP could contact me to dig into a kind of random "closing
> connection" issue ?
>
> Thank you very much in advance !
>
> Simon Bressier, head of deliv at Sendinblue
>
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop
>


-- 
James Hoddinott
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop