Re: [mailop] Synchrony Bank hit by security breach

I got the deposit messages yesterday and reported it as phishing to AT Noticed that there was a valid PTR in addition to the DKIM and SPF you mentioned, but no matching A record. At least they fessed up. I think it was just a systems issue and not a breach. --George -- Original

Re: [mailop] Synchrony Bank hit by security breach

On Nov 25, 2019, at 4:12 PM, Bob via mailop wrote: > > On 11/25/2019 20:57, Matthew Black via mailop wrote: > >> Curious if any other servers have been compromised. > > Per Amazon's response to the issue on Reddit (of all places), copied below, > it doesn't sound like anything was

Re: [mailop] [FOR THE RECORD] Large Scale Windows Bot traffic..

On Tue, 26 Nov 2019 10:45:15 -0800, Michael Peddemors via mailop wrote: >Just in case you are wondering about a large increase in DUL sourced >spam overnight, (and of course, most systems probably stop the bulk of >it), it appears to be a Windows based bot, that is sending.. > >MAIL FROM:

Re: [mailop] [FOR THE RECORD] Large Scale Windows Bot traffic..

> MAIL FROM: @marketplace.amazon.in A strict syntax check would reject this :-) (e.g., no space after : allowed) ___ mailop mailing list mailop@mailop.org https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop

[mailop] [FOR THE RECORD] Large Scale Windows Bot traffic..

Just in case you are wondering about a large increase in DUL sourced spam overnight, (and of course, most systems probably stop the bulk of it), it appears to be a Windows based bot, that is sending.. MAIL FROM: @marketplace.amazon.in Interestingly, no SPF records for "marketplace.amazon.in"

Re: [mailop] list bombing

I discussed this briefly with our Abuse Prevention team, but I’d love it if I could get some more info. Is Mailchimp signup email included in the spike you are seeing? If so would you mind sending me some examples so that I can share those with the Abuse Prevention team to make sure nothing is

Re: [mailop] list bombing

Hi everyone, Are there any mailbox providers out there that actually check this Form-Sub: header? I remember it being discussed few years ago and I do know that this draft is available but, is it used by mailbox providers? It being just a draft and all? On Tue, Nov 26, 2019 at 5:51 PM Matt

Re: [mailop] list bombing

Hey Carl, Thanks for noticing that. We’re going to get that header included in the signature shortly. Thanks, Matt Gilbert -- Deliverability Engineer | Mailchimp delivery.mailchimp.com > On Nov 25, 2019, at 9:50 PM, Carl Byington via mailop > wrote: > > -BEGIN PGP SIGNED MESSAGE-

Re: [mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

On Tue, 26 Nov 2019 at 14:13, Paul Smith via mailop wrote: > On 26/11/2019 12:41, Stefano Bagnara via mailop wrote: > > I don't know if ItaliaOnLine postmaster follow this list and if they > > consider this new behaviour a feature or a bug, but I wanted to share > > this finding/news with you. >

Re: [mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

ItaliaOnline is rolling out new rules, including the necessity of having a DMARC record (and also a valid DKIM signature), among other things. I believe those kind of delivery placement (on p=none) is a side effect of what they're trying to do. -- Benjamin -Original Message- From:

Re: [mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

On 26/11/2019 12:41, Stefano Bagnara via mailop wrote: I don't know if ItaliaOnLine postmaster follow this list and if they consider this new behaviour a feature or a bug, but I wanted to share this finding/news with you. What do you think about this? Do you know other providers making this

[mailop] ItaliaOnLine (@libero.it, +) now interpreting DMARC p=none as p=quarantine

Hi all, We noticed that since 3 days, ItaliaOnLine is delivering to Junk every email failing a DMARC check, even when the sender domain publish a p=none rule. You can check the "reason" in the headers: "X-IOL-DMARC: fail_quarantine con il dominio msn.com" This is expected for p=quarantine

Re: [mailop] [EXTERNAL] Blank emails to office 365

And have they raised this as an issue with Customer Support? Aloha, Michael. — “Your Spam Specimen Has Been Processed,” From: mailop on behalf of Tim Bray via mailop Sent: Tuesday, November 26, 2019 1:56:08 AM To: mailop@mailop.org Subject: [EXTERNAL] [mailop]

Re: [mailop] Blank emails to office 365

Hi, I've kind of solved my own problem.  Generate it as a plain text mime email and works fine. Sorry for add in: MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: quoted-printable (I'll make it utf-8 and drop the quoted printable later, but solved

Re: [mailop] Blank emails to office 365

Headers and a sample body would be great (not hotmail or Microsoft here) --srs From: mailop on behalf of Tim Bray via mailop Sent: Tuesday, November 26, 2019 3:40 PM To: mailop@mailop.org Subject: [mailop] Blank emails to office 365 Hi, Weird problem. We

[mailop] Blank emails to office 365

Hi, Weird problem. We have a system that sends order updates to our customers. Plain text emails.  Not changed for years. Same system, same customers. We suddenly have a problem  for some where customers receive the email, but it looks blank.  The problem has only occurred with people using