[mailop] Looking for any mimecast folks

[Liam Fisher via mailop]

Looking for a contact at mimecast to talk about an issue
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Microsoft Sending DMARC Reports From IP In SBL

[Mark Milhollan via mailop]

On Tue, 19 Jul 2022, Matt Corallo wrote:

Relevant headers below, but note that its actually the very first Received 
header that matches SBL-CSS.


You are via Spamassassin doing what Google does and I guess at least 
some other Spamassassin users do -- presuming to know how earlier hops 
should have authenticated/judged their peers because of how you would 
have.  Yes Microsoft should get their internal system off the Spamhaus 
list since it uses a GUA, but it is risky to decide how others should 
have made their decisions.  Since it is your MTA your rules, it is also 
fine that you lose mail for that rule.



/mark
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] So, Sendgrid / Zoom, planning on actually doing anything about webinar spams?

[Brie via mailop]

So, hey, yeah, Sendgrid and Zoom...

It's still going on even though it was 'being looked into'.

Why do you not respect permanent errors when delivering? My system is 
rejecting the mails, so Sendgrid's systems should be marking the mails 
as undeliverables and removing the address or flagging the list.


Today, got a new one sent directly through Zoom's systems without 
Sendgrid.  New topic but same Vietnamese spammer.



--
Return-path: 
Delivery-date: Wed, 20 Jul 2022 11:11:03 -0600
Received: from smtp-n11.zoom.us ([170.114.15.183])
	by mail.sosdg.org with utf8esmtps 
(TLS1.3:ECDHE_X25519__RSA_PSS_RSAE_SHA256__AES_128_GCM:128) (Exim 
4.94.2-SOSDG)

id 1oEDDu-00FpyA-RT
for ; Wed, 20 Jul 2022 11:11:03 -0600
Message-ID: 
<1658337048.bvpf1sb7ennprz1yuclh1d29a5gungkt36ai4...@smtp-n11.zoom.us>

Received: from smtp-n11.zoom.us (ip-10-0-217-112.ec2.internal
 [170.114.15.183])
 by smtp-n11.zoom.us (ESMTP)
 with ESMTPSA id
 v=2.0;clid=us02;rid=WEB_a3403e86d1c0f57ec65ad13bdde3bbb4;
 Wed, 20 Jul 2022 17:10:48 +
Date: Wed, 20 Jul 2022 17:10:48 +
From: "Robocash Vietnam" 
To: "xxx" 


Valid SPF and DKIM signature.

Body has a Zoom Meeting link.

You guys ever going to do something about this?


On 1/8/22 8:44 PM, Brie wrote:

Hi Sendgrid and Zoom,

We've been over this before, multiple times...  But alas, it looks like 
that you neither of you seem to care a single bit about your services 
being used to send spams that can't be unsubscribed from.


Yep, I know you, Sendgrid, told me that you'd be working on it with 
Zoom.  And, as expected, nothing ever happened and they still keep coming.


Should I just give up hoping that anything will ever be done about it 
and blacklist Sendgrid and Zoom?


Because, lets be honest here, based on what others are reporting, it 
looks like that I'd have an easier time trying to broker world peace AND 
cure cancer than it would be to get you guys to deal with abuse from 
your network.



Yep.  This message is written in anger, and I'll probably be accused of 
being unprofessional.


But, frankly, if you (Sendgrid) or them (Zoom) ain't going to do jack 
shit, then don't fucking tell me you are "working on it".







--
Brielle Bruns
The Summit Open Source Development Group
http://www.sosdg.org/ http://www.ahbl.org
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] Microsoft PTR record(s) missing

[Gellner, Oliver via mailop]

I hope Outlook does not completley mess up this message, otherwise please bear 
with me since I'm forced to use it.

> As a heads up to any of our Microsoft contacts, and to anyone else who may 
> see their own filters hitting this today,
> there appears to be missing PTR records over on the MS side again right now. 
> Most specifically, the IP 40.107.236.10
> called it into question on our side. The IP would send it's HELO as 
> NAM11-BN8-obe.outbound.protection.outlook.com,
> which resolves to 23.103.198.239, and while 40.107.236.10 has no PTR at all.

Unfortunately it's not only right now, but has been like this since I can 
remember. Examples of Microsoft servers with broken DNS setup from this week:

40.93.12.0 resolves to mail-eus2azlp1701.outbound.protection.outlook.com.
40.93.12.3 resolves to mail-eus2azlp17010003.outbound.protection.outlook.com.
40.93.12.4 resolves to mail-eus2azlp17010004.outbound.protection.outlook.com.
40.93.12.8 resolves to mail-eus2azlp17010008.outbound.protection.outlook.com.
52.101.56.14 resolves to mail-eus2azon11020014.outbound.protection.outlook.com.
52.101.56.15 resolves to mail-eus2azon11020015.outbound.protection.outlook.com.
52.101.56.16 resolves to mail-eus2azon11020016.outbound.protection.outlook.com.
52.101.56.17 resolves to mail-eus2azon11020017.outbound.protection.outlook.com.
52.101.56.18 resolves to mail-eus2azon11020018.outbound.protection.outlook.com.
52.101.56.19 resolves to mail-eus2azon11020019.outbound.protection.outlook.com.
52.101.56.20 resolves to mail-eus2azon11020020.outbound.protection.outlook.com.
52.101.56.21 resolves to mail-eus2azon11020021.outbound.protection.outlook.com.
52.101.56.22 resolves to mail-eus2azon11020022.outbound.protection.outlook.com.
52.101.56.23 resolves to mail-eus2azon11020023.outbound.protection.outlook.com.
52.101.56.24 resolves to mail-eus2azon11020024.outbound.protection.outlook.com.
52.101.56.27 resolves to mail-eus2azon11020027.outbound.protection.outlook.com.
52.102.138.5 resolves to mail-eus2azhn15010005.outbound.protection.outlook.com.

The A records all resolve back to 127.0.0.1...
Their HELO hostnames are again completely different and neither match the IP 
nor the A record.

Best regards
Oliver
--



dmTECH GmbH
Am dm-Platz 1, 76227 Karlsruhe * Postfach 10 02 34, 76232 Karlsruhe
Telefon 0721 5592-2500 Telefax 0721 5592-2777
dmt...@dm.de * www.dmTECH.de
GmbH: Sitz Karlsruhe, Registergericht Mannheim, HRB 104927
Geschäftsführer: Christoph Werner, Martin Dallmeier, Roman Melcher

Datenschutzrechtliche Informationen
Wenn Sie mit uns in Kontakt treten, beispielsweise wenn Sie an unser 
ServiceCenter Fragen haben, bei uns einkaufen oder unser dialogicum in 
Karlsruhe besuchen, mit uns in einer geschäftlichen Verbindung stehen oder sich 
bei uns bewerben, verarbeiten wir personenbezogene Daten. Informationen unter 
anderem zu den konkreten Datenverarbeitungen, Löschfristen, Ihren Rechten sowie 
die Kontaktdaten unserer Datenschutzbeauftragten finden Sie 
hier.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop

Re: [mailop] gmx.de contact?

[Arne Allisat via mailop]

Responded off list.

Best
Arne


Arne Allisat

Head of Product Mail Platform
Vorstand Produktmanagement Portal

1&1 Mail & Media GmbH | Brauerstraße 48 | 76135 Karlsruhe | Deutschland



> Am 20.07.2022 um 00:30 schrieb John Von Essen via mailop :
> 
> Need assistance to stop some abuse going to gmx.de  - if 
> anyone from GMX is on list, please contact me directly.
> 
> Thanks
> John
> ___
> mailop mailing list
> mailop@mailop.org
> https://list.mailop.org/listinfo/mailop



signature.asc
Description: Message signed with OpenPGP
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop