Jump to content
lisali

"Mailhost configuration problem, identified internal IP as source" - can't submit ANY spam!

Recommended Posts

Hi, 

Since about a month ago, I can't submit ANY spam. All I get, every time, is:

"Mailhost configuration problem, identified internal IP as source"

It seems to be a SpamCop parsing issue, as other online tools parse the same email headers correctly:

https://mxtoolbox.com/EmailHeaders.aspx

https://www.iptrackeronline.com/email-header-analysis.php

What do I do?
Thanks!

Share this post


Link to post
Share on other sites

Without a Tracking URL as an example of "why/how" processed you submission, anyone would just be guessing as to what to do.

Share this post


Link to post
Share on other sites
23 hours ago, Lking said:

Without a Tracking URL as an example of "why/how" processed you submission, anyone would just be guessing as to what to do.

Hi!

I was going to add an example, but they all seem to reveal a bit too much data, including the email the spam was sent to (only the final catch-all email seems to be redacted). Is there a way around this?

Share this post


Link to post
Share on other sites
4 minutes ago, Lking said:

I believe that if you check your tracking URL when you are not logged into spamcop.net you will see what other will see and that your email will not be revealed. For example:

https://www.spamcop.net/sc?id=z6469367419z07b4227d56dc0803077ec3b56d0aaef8z

Hi!

If you click "view full message", it shows more details. In my case, it shows the full email that the spam was sent to, even if not logged in. As mentioned, only the final destination that the offending email is forwarded to is redacted by SpamCop.

Share this post


Link to post
Share on other sites

I don't know what your are seeing. In my example above my email is replaced by <x> (red bold below added).  Take a look at you reporting options.

Quote

Received: from localhost (unknown [158.69.21.96])
	by knob.com (Postfix) with ESMTP id 7A62B9B9C58
	for <x>; Sat, 16 Jun 2018 04:59:08 +0000 (UTC)
Received: from knob.com ([158.69.132.42])
 by localhost (maia-mtl.ca.hub.org [158.69.21.96]) (maiad, port 10024)
 with ESMTP id 97784-03 for <x>;
 Sat, 16 Jun 2018 04:59:08 +0000 (UTC)
X-Greylist: from auto-whitelisted by SQLgrey-1.8.0
Received: from o29.healthcarereform.businsure.com (o29.healthcarereform.businsure.com [198.37.157.158])
	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by knob.com (Postfix) with ESMTPS id 022349B9C53
	for <x>; Sat, 16 Jun 2018 04:59:07 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=businsure.com; 
	h=content-transfer-encoding:content-type:from:mime-version:reply-to:to:subject; 
	s=smtpapi; bh=AphJ+LD/k9UDhFzfB0SjruP4rNo=; b=au5R6P57MTuPCWCzyi
	TM20VEycRAHvcYPzcAY1jQJUKW4j2hOnRS+mhLGjGETh2kPQIhDEz2AooIDhSTYl
	b/qF3wYAiT4+jGv5a9ZoyDMplWQ5d7J/+Ojzd2ZGqkNaS3VipZfGi1TdK0GtNAuE
	WDELm8Mzh/JJrDddNBC4rjlqM=
Received: by filter0033p3las1.sendgrid.net with SMTP id filter0033p3las1-16562-5B249919-12
        2018-06-16 04:59:05.671646071 +0000 UTC
Received: from NjQxOTE3 (mail.instantbusinessresources.com [162.250.10.221])
	by ismtpd0041p1mdw1.sendgrid.net (SG) with HTTP id kznZoqaZSGSYTjSL82UfNg
	Sat, 16 Jun 2018 04:59:05.594 +0000 (UTC)
Content-Transfer-Encoding: quoted-printable
Content-Type: text/html; charset=UTF-8
Date: Sat, 16 Jun 2018 04:59:05 +0000 (UTC)
From: "Gordon Mumpower" <gordon@businsure.com>
Mime-Version: 1.0
Reply-to: gordon@businsure.com
To: "x" <x>

 

Share this post


Link to post
Share on other sites

Hi!

That seems to be the case ONLY if the email is NOT forwarded.

In my case, all emails are forwarded to a catch-all address, let's call it EMAIL B. If spam was sent to EMAIL A, then forwarded to EMAIL B, only EMAIL B will be redacted in the report. I can still see the full EMAIL A in SpamCop reports, even when not logged in.

Share this post


Link to post
Share on other sites
5 hours ago, lisali said:

That seems to be the case ONLY if the email is NOT forwarded.

That is not the case.  I you will check again, now my example has been completed.

Share this post


Link to post
Share on other sites
20 minutes ago, Lking said:

That is not the case.  I you will check again, now my example has been completed.

Sorry - what do you mean? In my case, I can see the original email in my reports. 

Share this post


Link to post
Share on other sites

Have you configured you mailhost to include all the forwardeding?

Sorry I did not read you post closely enough.

Share this post


Link to post
Share on other sites
On 6/17/2018 at 5:46 PM, Lking said:

Have you configured you mailhost to include all the forwardeding?

Sorry I did not read you post closely enough.

Hi! No worries. :) Yes, I have configured all my mailhosts. From what I understand, this issue relates to how Gmail shows the sender/relaying IP, which confuses SpamCop. Other online tools, however,  seem to parse these headers just fine.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×