Jump to content

Lking

Forum Admin
  • Content Count

    26,526
  • Joined

  • Last visited

Posts posted by Lking


  1. The copy of the email from spamcop was deleted because:

    Quote
    
     Do not post this email in public.  It contains confidential information related to the security of your SpamCop account.

    As you may imagine, spammers and other bad actors do cruse this forum.  Your private, 16 digit reporting code used to identify your account is included in several places.

    I think you may not be considering the interaction of your domain/IP, and your host name & their domains/IP.  The interplay of your email MX record, and the internal processing by your host  on their domains and subdomains, may result in unexpected entries in you mailhost file.  Erroring on the side of caution, the purpose of the mailhost information is to be sure NO spam reports will be sent to any managers associated with your email system.  This would include managers associated with the domain names, subdomains and IP addresses identified in the header of the test email.


  2. Your mailhost records are outside the forum and I do not have access/visibility  to them.  For some reason the file you tried to attach is not/no longer available.

    Have you looked up the domain names/IP addresses to identify their relationship to your email host?  Does your email provider utilize aspects of the cloud?

    Looking at your questions from the other end, does your reporting of spam from the new mailbox work correctly - i.e. the parser does not send reports to your email host,?


  3. Take a look at the header of the email sent from spamcop to the email address you wanted to add.  You can step through the same process that the mailhost application does.  Starting at the top (the last Received: entry -- or the email final deliver) and work down the header.  You should see the host you are questioning as part of that path of delivery.

    I do not think that the old register (ranaur,net) would cause an issue.  The mailhost process is an exclusion process.  What I mean is, that the host listed in your mailhost are excluded from being reported as part of the path to source of spam.


  4. Thanks for the information. The tracking URI others suggested would have given others access to the information you provided above AND allowed visibility to the actions by the parser.

    I would think that a talk with your email service provider is in order. As you noted the delays reflected by the top three Receive entries is, I think, excessive.  Have you brought this to your ISP's attention?  They may not be aware of the delay, nor the consequences.  It is likely that none of their other customers report spam and care about the delay in receiving spam.  I am amused by the server name: front26-smtp-dirty.sfrmc.priv.atos.fr  Does you other email go through this server? Or only spam?

    I would not want to assign motive to the delay in receiving spam. As I said, your provider my not be aware of the delay caused by the spam filtering/ email Authentication process.

    For your reference the tracking URL can be found a the top of the reporting screen

    Quote

    SpamCop v 5.1.0 © 2020 Cisco Systems, Inc. All rights reserved.
    Here is your TRACKING URL - it may be saved for future reference:

    following the lines above.


  5. Glad to see all is still working in the rest of the world.  The other night the town lost power for about an hour, killing cell service and the internet. I assume the power bump killed the fiber optic equipment - as a single thread out of town.

    All is back after 28 hours. My first call this morning (08:30!!) was a robo call. There was also a text asking to conserve water next 48 hours while the system recovers from a fire in town.  Yes, I live here by choice. Things above, keep down the local crowds and I wontn't have to move to  higher ground due to sea rise.  Although global warming will have its effect.

    Happy holidays to all.


  6. There is no limit.  I report hundreds a day.  Day before yesterday I reported over 450.

    Having used Thunderbird for years and never had, or heard of, an issue with headers, I do believe the issue is the processing of your email provider.

    On the other hand, No one else using the same email provider is reporting the same problem.

    I don't remember, have you used <ctrl>U to look at the header of spam that fail to see if the Received: lines are there before you forward them?

    The reason for looking is a "divide and conquer" troubleshooting.  "We" know the receive lines need to be in the header to arrive at your email provider from outside. If we can eliminate your system/how you report that will help localize where the problem is occurring.


  7. 2 hours ago, RobiBue said:

    s Thunderbird still in development?

    Well yes, currently version 68.x   Things would be easy enough to check <ctrl>U will display the full content and header received.  By looking at a "good" email from a known source (a friend, your bank...) would tell the story.

    TB has been one of the easiest to send reports from for a really long time.


  8. An auto response to a spam report can be frustrating.

    In addition to the spam report that resulted in this (these) auto replies, the offending IP may have been added to the blocklist which is used directly and indirectly by others to filter ALL email from this source.

    You can check the IP by clicking on the <Statistics> tab on the SpamCop.net website.

    Getting any response from an ISP is a step up


  9. 1 hour ago, RobiBue said:

    something must have changed this last 3-4 weeks since you've been having trouble reporting.

    Hotmail, gmail, outlook have been known to make changes, without notice or acknowledgement. Not sure why others have not reported similar issues.

    Good research @RobiBue


  10. Yes spam seems to be a never ending fight. My count sense midnight is 109. I assume you are reporting/attaching several spam a time.  I settled on 15 spam at a time.  This is a convenient cumber to visually scan and attach.  It also keeps the size small enough to pass all limits

    Many users report just the number they have time or interest to report.  For example reporting just the "Canada drug" spam or other block that catch their eye.  The others are just dumped in the trash.


  11. 23 minutes ago, Dracosse said:

    I have been posting in the lounge a problem that has been plaguing me for the last 2 or 3 weeks.

    http://forum.spamcop.net/topic/42877-no-headers/?tab=comments#comment-149703

    Link to other thread included for reference.

    Suggestion:  Not sure this would save time, but before submitting a spam the header could be inspected for "Received:" lines (<ctrl> U) and not report those similar to those reflected in the examples above.


  12. @Dracosse, thanks for the information.  I too have been using FF for years, and forwarding as attachment with FireFly works just fine as a process. 

    The problem remains with the header's lack of "Received:" line as identified by @gnarlymarley

    On 12/6/2019 at 9:18 AM, Dracosse said:

    have not contacted Comcast/xfinity  to ask how these messages are being handled.

    Have you gotten any answer for Comcast or you email provider?  I would suggest that Comcast/xfinity is just the deliver 'pipe'  connecting you to you email host, @gmail, @hotmail, @outlook or whoever.  They are the ones that received and passed on to you the email with the badly formed header.

    NOTE:  The previous two post (by @Hanco and copied by @Dracosse) revealed the private code for submitting spam - and have been deleted.

×