Re: [mailop] How did this get routed to me?

2022-02-16 Thread Peter N. M. Hansteen via mailop



On 2/16/22 16:40, Sinclair, John via mailop wrote:
Valid email (supposedly) from petvetcarecenters.com to 
drew.q.tay...@gmail.com , and it got 
delivered to MY domain (mspca.org)…


Sorry in advance if this violates any of the list’s rules, but here’s 
the header in full – do I have something very misconfigured?


The simple and likely explanation as to why you received the messages is 
that your address was in the Bcc: field, this seems to be the header 
from the ingress point:



Received: from us-smtp-delivery-145.mimecast.com (us-smtp-delivery-145.mimecast.com 
[170.10.129.145]) by smtp.mspca.org with ESMTP id cGBcexMi1gACFRR2 (version=TLSv1.2 
cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128 verify=NO) for 
; Wed, 16 Feb 2022 08:31:07 -0500 (EST)
So my educated guess is that this particular incident is not down to a 
misconfiguration on your part.


However, the data do not tell us whether you could have other gremlins 
lurking in your configuration ;P


All the best,
Peter N. M. Hansteen

--
Peter N. M. Hansteen, member of the first RFC 1149 implementation team
http://bsdly.blogspot.com/ http://www.bsdly.net/ http://www.nuug.no/
"Remember to set the evil bit on all malicious network traffic"
delilah spamd[29949]: 85.152.224.147: disconnected after 42673 seconds.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] How did this get routed to me?

2022-02-16 Thread Hans-Martin Mosner via mailop
16. Februar 2022 17:05, "Todd Herr via mailop" mailto:mailop@mailop.org?to=%22Todd%20Herr%20via%20mailop%22%20)>
 schrieb:
My presumption would be that you were bcc'd on the message.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] How did this get routed to me?

2022-02-16 Thread Hans-Martin Mosner via mailop
16. Februar 2022 17:26, "Hans-Martin Mosner" mailto:h...@heeg.de?to=%22Hans-Martin%20Mosner%22%20)> schrieb:
16. Februar 2022 17:05, "Todd Herr via mailop" mailto:mailop@mailop.org?to=%22Todd%20Herr%20via%20mailop%22%20)>
 schrieb:

My presumption would be that you were bcc'd on the message.
Sorry, my webmail program does something unexpected when I hit ctrl-enter - it 
sends the incomplete message :-(

Bcc is a possibility, but technically the contents of the mail "To:" header and 
the envelope recipient address (which is transmitted in the SMTP "RCPT TO" 
command) don't need to bear any relationship.

Cheers,
Hans-Martin
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] How did this get routed to me?

2022-02-16 Thread Brayden via mailop
There's a clue in the Barracuda headers: BSF_SC0_MISMATCH_TO Envelope 
rcpt doesn't match header


So I'm guessing John's e-mail was specified in the envelope but they 
used some Gmail address for the header.


It's essentially working as intended albeit very confusing.

On 17/2/22 00:05, Todd Herr via mailop wrote:
On Wed, Feb 16, 2022 at 10:58 AM Sinclair, John via mailop 
 wrote:


Valid email (supposedly) from petvetcarecenters.com
 to drew.q.tay...@gmail.com, and it
got delivered to MY domain (mspca.org )…


My presumption would be that you were bcc'd on the message.
--
*Todd Herr *| Technical Director, Standards and Ecosystem
*e:*todd.h...@valimail.com

This email and all data transmitted with it contains confidential 
and/or proprietary information intended solely for the use of 
individual(s) authorized to receive it. If you are not an intended and 
authorized recipient you are hereby notified of any use, disclosure, 
copying or distribution of the information included in this 
transmission is prohibited and may be unlawful. Please immediately 
notify the sender by replying to this email and then delete it from 
your system.



___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


Re: [mailop] How did this get routed to me?

2022-02-16 Thread Todd Herr via mailop
On Wed, Feb 16, 2022 at 10:58 AM Sinclair, John via mailop <
mailop@mailop.org> wrote:

> Valid email (supposedly) from petvetcarecenters.com to
> drew.q.tay...@gmail.com, and it got delivered to MY domain (mspca.org)…
>
>
>

My presumption would be that you were bcc'd on the message.
-- 

*Todd Herr * | Technical Director, Standards and Ecosystem
*e:* todd.h...@valimail.com

This email and all data transmitted with it contains confidential and/or
proprietary information intended solely for the use of individual(s)
authorized to receive it. If you are not an intended and authorized
recipient you are hereby notified of any use, disclosure, copying or
distribution of the information included in this transmission is prohibited
and may be unlawful. Please immediately notify the sender by replying to
this email and then delete it from your system.
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop


[mailop] How did this get routed to me?

2022-02-16 Thread Sinclair, John via mailop
Valid email (supposedly) from petvetcarecenters.com to 
drew.q.tay...@gmail.com, and it got delivered 
to MY domain (mspca.org)...

Sorry in advance if this violates any of the list's rules, but here's the 
header in full - do I have something very misconfigured?

Received: from EXCH-MBX2.mspca.org (10.10.0.51) by EXCH-MBX1.mspca.org
(10.10.0.50) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.2375.7 via Mailbox
Transport; Wed, 16 Feb 2022 08:31:11 -0500
Received: from EXCH-MBX1.mspca.org (10.10.0.50) by EXCH-MBX2.mspca.org
(10.10.0.51) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.2375.7; Wed, 16
Feb 2022 08:31:11 -0500
Received: from smtp.mspca.org (50.231.100.136) by EXCH-MBX1.mspca.org
(10.10.0.50) with Microsoft SMTP Server (version=TLS1_2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.2375.7 via
Frontend Transport; Wed, 16 Feb 2022 08:31:11 -0500
X-ASG-Debug-ID: 1645018267-06414a551797040001-r2rvxp
Received: from us-smtp-delivery-145.mimecast.com 
(us-smtp-delivery-145.mimecast.com [170.10.129.145]) by smtp.mspca.org with 
ESMTP id cGBcexMi1gACFRR2 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 
bits=128 verify=NO) for ; Wed, 16 Feb 2022 08:31:07 -0500 
(EST)
X-Barracuda-Envelope-From: elunsf...@petvetcarecenters.com
X-Barracuda-Effective-Source-IP: 
us-smtp-delivery-145.mimecast.com[170.10.129.145]
X-Barracuda-Apparent-Source-IP: 170.10.129.145
Received: from MBX120-E2-VA-2.pexch120.serverpod.net
(out.east.pexch120.serverdata.net [199.193.202.5]) by relay.mimecast.com
with ESMTP with STARTTLS (version=TLSv1.2,
cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
us-mta-184-I1idvlBLPEqoTr2Ize4cVA-4; Wed, 16 Feb 2022 08:30:29 -0500
X-MC-Unique: I1idvlBLPEqoTr2Ize4cVA-4
Received: from PMBX120-E1-VA-1.pexch120.serverpod.net (10.217.12.11) by
PMBX120-E1-VA-1.pexch120.serverpod.net (10.217.12.11) with Microsoft SMTP
Server (TLS) id 15.0.1497.28; Wed, 16 Feb 2022 08:30:09 -0500
Received: from PMBX120-E1-VA-1.pexch120.serverpod.net ([10.217.12.11]) by
PMBX120-E1-VA-1.pexch120.serverpod.net ([10.217.12.11]) with mapi id
15.00.1497.028; Wed, 16 Feb 2022 08:30:09 -0500
From: Emily Lunsford 
To: "drew.q.tay...@gmail.com" 
Subject: $20,000 sign-on bonus to bring your skills to Natick, MA!
Thread-Topic: $20,000 sign-on bonus to bring your skills to Natick, MA!
X-ASG-Orig-Subj: $20,000 sign-on bonus to bring your skills to Natick, MA!
Thread-Index: AdgjOTPq3Jz4hWIbRlm2Z93jOTKyRg==
Date: Wed, 16 Feb 2022 13:30:09 +
Message-ID: 

Accept-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-exchange-transport-fromentityheader: Hosted
x-originating-ip: [174.202.34.43]
x-source-routing-agent: Processed
MIME-Version: 1.0
Authentication-Results: relay.mimecast.com;
   auth=pass smtp.auth=CUSA45A297 
smtp.mailfrom=elunsf...@petvetcarecenters.com
X-Mimecast-Spam-Score: 0
X-Mimecast-Originator: petvetcarecenters.com
Content-Language: en-US
Content-Type: multipart/related;
   
boundary="_004_bf41e0835acc436585914db4e90df1afPMBX120E1VA1pexch120ser_";
   type="multipart/alternative"
X-Barracuda-Connect: us-smtp-delivery-145.mimecast.com[170.10.129.145]
X-Barracuda-Start-Time: 1645018267
X-Barracuda-Encrypted: ECDHE-RSA-AES128-GCM-SHA256
X-Barracuda-URL: https://smtp.mspca.org:443/cgi-mod/mark.cgi
X-Barracuda-BRTS-Status: 1
X-Virus-Scanned: by bsmtpd at mspca.org
X-Barracuda-Scan-Msg-Size: 6428
X-Barracuda-Bayes: INNOCENT USER 0.6913 1. 1.3044
X-Barracuda-Spam-Score: 2.25
X-Barracuda-Spam-Status: No, SCORE=2.25 using per-user scores of TAG_LEVEL=6.0 
QUARANTINE_LEVEL=3.5 KILL_LEVEL=5.0 tests=BSF_SC0_MISMATCH_TO, BSF_SC0_SA1034, 
EXTRA_MPART_TYPE, HTML_MESSAGE, SUBJ_DOLLARS
X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.96066
   Rule breakdown below
   pts rule name  description
    -- 
--
   0.84 SUBJ_DOLLARS   Subject starts with dollar amount
   0.00 EXTRA_MPART_TYPE   Header has extraneous 
Content-type:...type= entry
   0.00 HTML_MESSAGE   BODY: HTML included in message
   0.00 BSF_SC0_MISMATCH_TOEnvelope rcpt doesn't match header
   0.10 BSF_SC0_SA1034 Custom rule BSF_SC0_SA1034
Return-Path: elunsf...@petvetcarecenters.com
X-MS-Exchange-Organization-Network-Message-Id: 
3a71baa8-5afa-411c-38a8-08d9f15098c8
X-MS-Exchange-Organization-AuthSource: EXCH-MBX1.mspca.org
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Transport-EndToEndLatency: 00:00:00.1718942
X-MS-Exchange-Processed-By-BccFoldering: 15.01.2375.007
___
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop