Can I keep my Mailhosts and still report spam?

DaveO8888 · January 26, 2023

I have my email accounts registered with SpamCop. I continue to receive spam from mostly foreign IP hosting addresses. I don't want to remove my mailhosts in SpamCop but after adding them I cannot report spam by either email submission or webform. I get a "Possible Forgery/Nothing to do" message and when I try to report the spam I get a "No Data/Too Much Data" message. If I delete my mailhosts in SpamCop I am again able to report all spam. Is there any way to report spam without deleting mailhosts? Alternatively, does the report generated show the originating host IP's?

SpamCop v 5.4.0 © 2023 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6795733209z8f0052ac2d21f8dea58eb42362b9045dz
Skip to Reports

Reply-To: <toko@intellecticious.com>
From: =?UTF-8?B?Q8KtacKtdMKtaXrCrWVucyDCrUfCrW/CrWxkIMKtVMKtcsKtdcKtc8KtdMKt?=
	=?UTF-8?B?IC3CrSBJbsKtdmVzdG/CrXLCrSDCrUfCrXVpZMKtZcKt?= <toko@intellecticious.com>
To: <x>
Subject: =?UTF-8?B?R2V0IHnCrW/CrXXCrXIgwq1lwq14Y8KtbMKtdXNpdsKtZSDCrUfCrW/CrQ==?=
	=?UTF-8?B?bGTCrSDCrUluwq1mb8KtcsKtbWHCrXTCrWnCrW9uwq0gS8KtacKtdCDCrUg=?=
	=?UTF-8?B?wq1lwq1yZcKt?=
Message-ID: <vWpT________________________________rify@intellecticious.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0536_01D93179.FB906B50"
Thread-Index: AQIXkMu9G8kQOFtf7m7+i9EXKNSH9Q==

View entire message

Parsing header:

0: Received: from 10.220.180.164 by atlas209.free.mail.ne1.yahoo.com pod-id NONE with HTTPS; Thu, 26 Jan 2023 16:15:05 +0000

Internal handoff or trivial forgery

1: Received: from 154.12.170.46 (EHLO 46.170.12.154.in-addr.arpa) by 10.220.180.164 with SMTP; Thu, 26 Jan 2023 16:15:05 +0000

Hostname verified: 170.chordata.dictionary46-untransmitted.welcominists.com

Possible forgery. Supposed receiving system not associated with any of your mailhosts

Will not trust this Received line.

Mailhost configuration problem, identified internal IP as source

Mailhost:
Please correct this situation - register every email address where you receive spam

No source IP address found, cannot proceed.

Add/edit your mailhost configuration
Finding full email headers
Submitting spam via email (may work better)
Example: What spam headers should look like

Nothing to do.

No data / Too much data

You are most likely submitting a very large email. Please trim some of the unnecessary data (noting where this has been done) from this posting and try again. SpamCop will no longer accept email larger than 50.0K bytes.

Other possibilities: You may have a firewall which prevents HTTP POST commands, you may have linked to the wrong URL or your browser does not handle binary submissions correctly (try a different browser)

petzl · January 27, 2023

10 hours ago, DaveO8888 said:

I have my email accounts registered with SpamCop. I continue to receive spam from mostly foreign IP hosting addresses. I don't want to remove my mailhosts in SpamCop but after adding them I cannot report spam by either email submission or webform. I get a "Possible Forgery/Nothing to do" message and when I try to report the spam I get a "No Data/Too Much Data" message. If I delete my mailhosts in SpamCop I am again able to report all spam. Is there any way to report spam without deleting mailhosts? Alternatively, does the report generated show the originating host IP's?

SpamCop v 5.4.0 © 2023 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6795733209z8f0052ac2d21f8dea58eb42362b9045dz

That email is ready to report?

gnarlymarley · January 29, 2023

For the "Nothing to do" messsage, some of the ISPs have thousands of servers, but SpamCop mailhosts only remember just a handful of them. Rather than just removing, you can try resending the setup email for that mailhosts and see if revisting the same tracking URL changes.

DaveO8888 · February 14, 2023

Hello gnarlymarley, I am at war with spam after my most frequently used email addresses were hacked in Yahoo and Microsoft and went to the Dark Web. I have been using SpamCop and adding my mailhosts to reduce the spam in my inbox. However, I am tracking a lot of spam that is not listed in SpamCop's blocklist. For example, 185.253.218.32 not listed in bl.spamcop.net. Most of this spam/spoofs/malware includes forged headers. The images are nearly always posted to Imgur.com. I have requested Imgur remove the images. I have contacted many Hosting companies and many of them are cooperating to remove their customers that violate their terms of service. However, just like cockroaches, the customers find rogue hosters that are not cooperating, including NETH LLC (Ukraine) and many more. Is there any way to request IP spam addresses to be added to the backlist when the server is verified but the spam report cannot be submitted because of the forged headers?

gnarlymarley · February 23, 2023

The only way I know of to get an IP added to the blacklist is to submit a spam report. Now if you know which internal Received: lines are inaccurate, you can trim those off when you submit so that your mailhosts works as expected. (For my hotmail, it was the top two Received: lines.)

Sign In

Can I keep my Mailhosts and still report spam?

Recommended Posts

DaveO8888

Link to comment

Share on other sites

petzl

Link to comment

Share on other sites

gnarlymarley

Link to comment

Share on other sites

DaveO8888

Link to comment

Share on other sites

gnarlymarley

Link to comment

Share on other sites

Join the conversation

Browse

Activity