Jump to content

mgolden

Members
  • Content Count

    37
  • Joined

  • Last visited

Community Reputation

0 Neutral

About mgolden

  • Rank
    Member

Profile Information

  • Gender
    Male
  • Location
    Florida

Recent Profile Visitors

595 profile views
  1. I'm trying to report spam sent to my wife's email account "X at cqmail dot net" which forwards to "X". Here is what I get when I submit spam: SpamCop v 5.2.0 © 2020 Cisco Systems, Inc. All rights reserved. Here is your TRACKING URL - it may be saved for future reference: https://www.spamcop.net/sc?id=z6647396719z1c85af8ff1b35c113afc617dde926bb5z Mailhost configuration problem, identified internal IP as source Mailhost: Please correct this situation - register every email address where you receive spam No source IP address found, cannot proceed. Add/edit your mailhost configuration Finding full email headers Submitting spam via email (may work better) Example: What spam headers should look like Nothing to do. When I attempt to add the mailhost I get this: host 2001:67c:2050:104:0:1:25:1 = mx1.mailbox.org (cached) mx1.mailbox.org is 2001:67c:2050:104:0:1:25:1 host 2001:67c:2050:104:0:1:25:1 = mx1.mailbox.org (cached) mx1.mailbox.org is 2001:67c:2050:104:0:1:25:1 Host dobby24a.heinlein-hosting.de (checking ip) = 10.192.2.23 Sorry, SpamCop has encountered errors: The email sample you submitted for X appears to traverse more than one domain. Please ensure that you configure each mailhost individually and in order. Proceed here: <https://www.spamcop.net/mcgi?mhc2=EpFFIg9AfJIQSKvh> When I "Proceed here" I get: 500 Internal Server Error Sorry, your request could not be processed. Typically, this is the result of a temporary problem. Please re-try the operation which caused this error in a minute or two. You can even leave this error screen open and use your browser's "reload" button to re-try. Please do not press reload repeatedly though. Pressing the button more often does not resolve the problem faster. It just makes a bad situation worse. If you believe this is a bug which occurs only under specific circumstances or have observed the problem frequently, please contact us with a full description of the problem. And last, this is the header of the spam I am trying to report: Return-Path: <bounces+1667099-d681-X=cqmail.net@sendgrid.tapingo.com> Delivered-To: X Received: from director-04.heinlein-hosting.de ([80.241.60.212]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by dobby24a.heinlein-hosting.de with LMTPS id OFtSH7XoRV911QEAzQY4MA (envelope-from <bounces+1667099-d681-Xcqmail.net@sendgrid.tapingo.com>) for <X>; Wed, 26 Aug 2020 06:44:37 +0200 Received: from mx1.mailbox.org ([80.241.60.212]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)) by director-04.heinlein-hosting.de with LMTPS id uNrlHbXoRV8r9wEAgupzMw (envelope-from <bounces+1667099-d681-X=cqmail.net@sendgrid.tapingo.com>) for <X>; Wed, 26 Aug 2020 06:44:37 +0200 X-Virus-Scanned: amavisd-new at heinlein-support.de Authentication-Results: spamfilter03.heinlein-hosting.de (amavisd-new); dkim=pass (1024-bit key) header.d=tapingo.com X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 CL_IP_EQ_HELO_IP=-2 (check from: .tapingo. - helo: .esa2.spamcop.iphmx. - helo-domain: .iphmx.) FROM/MX_MATCHES_NOT_HELO(DOMAIN)=1; rate: -2.5 Received: from esa2.spamcop.iphmx.com (esa2.spamcop.iphmx.com [68.232.143.151]) by mx1.mailbox.org (Postfix) with ESMTP id E6E5642118 for <X>; Wed, 26 Aug 2020 06:44:31 +0200 (CEST) IronPort-SDR: 0OXwuuv3ewUt9UKepJCR/Yh4ibOfIiWn7bAJdfd5pB29rq01myPFIjz1yNTUQN84WOz6cAuDWL fZ4rI9+kERh3lmBwQ8uM/0IGjBYGqDISDr1226SU97qre21D4PEvrtaGk76O15I+XZ7CizK3xt VbaXIx92nFcB8CF9a6RnClMlDFb27EI1ld9KAudfr3UhmgHNrnyHE1vN2Y+yWAZ1DkOSRA5GNA cU3BQDvIQ6lysV5x5b3R8RalLs+9Yd3hvT4f9btRPeUqU8Kzlo0dUjbZWwtHy+G4GWLuWYBkQs oOE= X-IPAS-Result: =?us-ascii?q?A3D8CADv50VffVJy/sBZBoN2gXdVXoQ3iQGGbwEFgRyDQ?= =?us-ascii?q?IZ3hjaCEIMqhCmBEQNgAQEBAQEBAQEBGxELBAEBhEyCSiU4EwIDAQEBAwIDA?= =?us-ascii?q?QEBAQEFAQEBAQEBBQQUAQGFejmGEAcRCAITAQEMLEcIDQISHwEBDQFOBAGDB?= =?us-ascii?q?YF/TAEBCiUFCqJxAYEoPgIjAT8BDIEFigCBMg0SgmIBAQWCOYI6BAqCQAmBI?= =?us-ascii?q?ReGRoZ3eQkFeYFHgi0BgmNjAgIXfw0qOxQOgkoXgkm2TQqCYwSBDIdUiTt3h?= =?us-ascii?q?zSDBYEliECISQ4BIYEggXiHPo18jxWWB2EqWoEgcIIdgRwJYA2OY4Mth3qCX?= =?us-ascii?q?EEzFCADAgYKAQEDCY5XFYFERRcBAQ?= X-IronPort-Anti-spam-Filtered: true X-IronPort-AV: E=McAfee;i="6000,8403,9724"; a="27033606" X-IronPort-AV: E=Sophos;i="5.76,354,1592899200"; d="scan'208,217";a="27033606" Received: from vmx.spamcop.net (HELO vmx5.spamcop.net) ([184.94.240.112]) by esa2.spamcop.iphmx.com with ESMTP; 25 Aug 2020 20:48:22 -0800 Received: from o1.email.notifications.tapingo.com (o1.email.notifications.tapingo.com [192.254.114.82]) by vmx5.spamcop.net (Postfix) with ESMTP id ADB69ED1E2 for <X>; Tue, 25 Aug 2020 21:44:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=tapingo.com; h=content-type:from:mime-version:reply-to:subject:to; s=smtpapi; bh=Mq96fr3MyyinE1a+mYYOzh9nDbMiCtimJH5iCcqDH8I=; b=SbmCgS27jkhQA R6kNtEjXGnx5Qf85Ga/LJWDBqu47d3vvjuC/q+Ad4Lc+qDXL/8ntOhWHIXjvmudK U9KYYQ4UuKSC5vH/dinlvlWbcSAL/pTQDVDBnoacpv6b3mcA/7wxhqeCctjIourp 5XhDMOkGkDjSSGMyreoPow1mLCXPcM= Content-Type: multipart/alternative; boundary=52d5ae253d929097ac711b4eb8f1116dc5b890c2448443110348fb6b2ddb Date: Wed, 26 Aug 2020 04:44:25 +0000 (UTC) From: "Morgan Stanley" <lawoffice@tapingo.com> Mime-Version: 1.0 Reply-to: robertwilliam2646@gmail.com Subject: Unusual activities on account To: X Message-ID: <699MTMyDQ6Sq4PQWSW6egg@ismtpd0053p1iad1.sendgrid.net> X-SG-EID: /NujteeM9hlJOKOrDG96aLv88/IJptBK0erbBznRorenzKPhFtbBv9QyUgIfBEu8246O/RaHy82FmW Gqm9WYQVKfFA+4rLZXZTIbO+dNdJAa7veXeN2qHwjWVHZox2nO45hY+naF3YzX8q/pZWwZURQ54tIZ RidF243sjZu1NlNaQT3yj6LcBWwAOuw7TvyoeDpPgdcEULqlisP/Pa0AtMvPkWr8kpWx00U/uU+3Kq g= X-SG-ID: Z2FxZazunBjVeNuNdzHDqrF8mxuCpi0krmont6YQrP1Pv0Kr6qCO/y0Z1UNxiW3o2fMbXcONGWHXCI AC+rdaa//3Lqhe8tnxsayqkTPURtQsfsiwbeMJdFl3JJIPTRYkl5VcpK9WFKK6p1vCFeXN6RyAMX2m hbCsUauW5ygKJ7FDP1rsm01l2G8sruO6ZC7oauU7PChHLySyrUsgRgZvsQ== X-MBO-spam-Probability: * X-Rspamd-Score: 1.14 / 15.00 / 200.00 X-Rspamd-Queue-Id: E6E5642118 X-Rspamd-UID: a91e0a --52d5ae253d929097ac711b4eb8f1116dc5b890c2448443110348fb6b2ddb Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=UTF-8 Mime-Version: 1.0 At the present time my Spamcop Mailhosts page shows the following: Incomplete: X Mailhost name: mailbox.org Email address: X Hosts/Domains: mx3.mailbox.org Relaying IPsv4: 80.241.60.212 Relaying IPsv6: 2001:67c:2050:104:0:1:25:1 Mailhost name: SpamCop Email address: X Hosts/Domains: va1.mxservers.net Relaying IPsv4: 131.220.18.243 Relaying IPsv6 2002:ac8:b46:0:0:0:0:0 Any ideas what I am doing wrong?
  2. Abuse contact for 64.21.76.101 & 64.21.76.119 is abuse[at]inboxfirst.com
  3. mgolden

    spam Flood

    My wife's inbox has been flooded with something called RightNews every two hours for the past month. Originating IPs are 64.21.76.101 & 64.21.76.119 They appear to be on bullet proof hosting and are evidently white listed by someone at SpamCop.
  4. The reporting server seems to be having problems this morning.
  5. mgolden

    Service Unavailable

    Oh, look. It's working now. Be still my heart.
  6. mgolden

    Service Unavailable

    Service Unavailable The server is temporarily unable to service your request. Please try again later. Reference #6.cd3de93f.1470230549.148b8a43
  7. It appears that adding "digital-no-reply at amazon.com" to the whitelist takes care of the problem. Thank you for your assistance.
  8. My wife has a Kindle. When she makes a purchase, Amazon sends a confirmation email. Amazon's mail server retries 6 times then gives up. Is there anyway to adjust the sensitivity of Greylisting? I've repeatedly gone into "Manage Greylist -- Rejected Entries" and ticked the Unblock - Allow box on the Amazon related entries but the problem persists.
  9. mgolden

    DNS outage update 2

    Sounds like another zombie company. The last employee walking out the door should turn out the lights. Course, I'm just as guilty. The servers I managed ran unattended for several years after I was shown the door. Unattended and unpatched. 8(
  10. mgolden

    What Say Ye?

    Here's the headers I received from a scammer's email relating to an item I have posted on Craigslist. Will Spamcop send a spam report to Craigslist, which is an innocent party, or will it correctly send the report to the mail server being used to relay [211.11.172.146]? Return-Path: <bounce-anon-munged=spamcop.net[at]craigslist.org> Delivered-To: spamcop-net-munged[at]spamcop.net Received: (qmail 15878 invoked from network); 10 Apr 2011 15:39:59 -0000 X-spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on blade5 X-spam-Level: X-spam-Status: hits=0.1 tests=TW_ZJ version=3.2.4 Received: from unknown (192.168.1.86) by blade5.cesmail.net with QMQP; 10 Apr 2011 15:39:59 -0000 Received: from mxo3p.craigslist.org (208.82.236.168) by mxin2.cesmail.net with SMTP; 10 Apr 2011 15:45:44 -0000 Received: from tnkv.tnk-tanaka.co.jp (mail.tnk-tanaka.co.jp [211.11.172.146]) by mxi8p.craigslist.org (Postfix) with ESMTP id 7DF7A74A29 for <sale-zjd2z-2313205499[at]craigslist.org>; Sun, 10 Apr 2011 08:03:17 -0700 (PDT) Received: from localhost ([90.183.45.18]) by tnkv.tnk-tanaka.co.jp (Post.Office MTA v3.9.0 release 20041101 ID# 6003-011U100L2S100V39B) with ESMTP id jp for <sale-zjd2z-2313205499[at]craigslist.org>; Mon, 11 Apr 2011 00:03:32 +0900 From: carter <carterworkx951566[at]gmail.com> Subject: i like... interested Message-Id: <20110410150317.7DF7A74A29[at]mxi8p.craigslist.org> Date: Sun, 10 Apr 2011 08:03:17 -0700 (PDT) To: undisclosed-recipients:; X-SpamCop-Checked: 208.82.236.168 211.11.172.146 90.183.45.18
  11. mgolden

    [Resolved] DOS in progress?

    Trying to login to webmail. It cleared up after a couple of hours and appears to be working fine now.
  12. The hour glass is spinning here...
  13. mgolden

    New Spamcop Phishing

    Heh. [19:45 EDT] Please be alert to the fact that there are a lot of phishes being sent pretending to be mail about your SpamCop email account -- they may contain an attachment or may be just a link to googlegroups. Do not open the attachment; do not click the link.
×