Jump to content

Should I Give Up Reporting? "Mailhost configuration problem, identified internal IP as source"


emanmb

Recommended Posts

Yep all are yahoo but the last one is a duplicate of the 3rd one and the info in the headers is slightly different in the first 2 examples from the 3rd from AWS. The first one is a shared MS IP and did not really come from icloud support and the amazon email did not come from amazon. Still would like to see a post of one that worked but the author has not visited since last thurs, might still be reading posts or resolved issue with virus. In the good old days macs rarely got infected. Not sure but they appear to be truncated

Edited by ninth
add
Link to comment
Share on other sites

This may not be helpful, but I have the same problem with about 70% of the spam I report that comes in to my HOTMAIL email account, where it identifies an internal IP and the source. I have no problems with any of my other email providers, but like I said, it's not all of the spam that comes in to my Hotmail, but a good majority. I forward the spam emails using my SpamCop reporting address. For a little while, I was manually doing the ones that failed, but even that came back the same, so I stopped trying.

Based on what I've been reading in this thread so far, it would seem that headers can get mangled by different places, including the email client. I don't know what the issue would be in my case. I receive emails from 11 different email address: 4 from my ISP, 4 from Gmail, 2 from Hotmail, and 1 from Yahoo. I use Outlook 2021 Desktop Edition as my email reader. The problem only seems to affect the Hotmail accounts, but like I stated, it's not every piece of spam that is received in those Hotmail accounts, only about 70% that comes back with the internal IP address error.

Don't know if it would be helpful or not to include an example here, start my own thread, or if not helpful at all, I'll not worry about at all.

Link to comment
Share on other sites

1 hour ago, FeMaster said:

Don't know if it would be helpful or not to include an example here, start my own thread, or if not helpful at all, I'll not worry about at all.

Makes it a LOT easier if you would learn to send a SpamCop Tracking URL 
Examples
SpamCop v 5.5.0 © 2024 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6907592413z40dc77adf4337a9ad943ff8ab30487e8z

more this case these are apparently? Sent directly from a email APP my guess is they are Mangal lining headers 
https://www.spamcop.net/sc?id=z6907592462zb95da977592c2070aa92672a19186d36z
https://www.spamcop.net/sc?id=z6907592585z68fd5791ded811ed09b8b93d034264b0z
https://www.spamcop.net/sc?id=z6907592709z8ccc2584cf2aa11ef5684c5f660af490z

If you go to Yahoo! email to copy then paste onto your SpamCop reporting page
How to view headers in Yahoo! Mail
Log in to Yahoo! Mail.
Open the message for which you wish to view the headers.
Right Click the ...  (three dots) above the message pane.
In the menu,
select View Raw Message.
A new tab will open containing your message's headers,
which you can now copy and paste.
 

Link to comment
Share on other sites

5 hours ago, petzl said:

Makes it a LOT easier if you would learn to send a SpamCop Tracking URL 
Examples
SpamCop v 5.5.0 © 2024 Cisco Systems, Inc. All rights reserved.
Here is your TRACKING URL - it may be saved for future reference:
https://www.spamcop.net/sc?id=z6907592413z40dc77adf4337a9ad943ff8ab30487e8z

more this case these are apparently? Sent directly from a email APP my guess is they are Mangal lining headers 
https://www.spamcop.net/sc?id=z6907592462zb95da977592c2070aa92672a19186d36z
https://www.spamcop.net/sc?id=z6907592585z68fd5791ded811ed09b8b93d034264b0z
https://www.spamcop.net/sc?id=z6907592709z8ccc2584cf2aa11ef5684c5f660af490z

If you go to Yahoo! email to copy then paste onto your SpamCop reporting page
How to view headers in Yahoo! Mail
Log in to Yahoo! Mail.
Open the message for which you wish to view the headers.
Right Click the ...  (three dots) above the message pane.
In the menu,
select View Raw Message.
A new tab will open containing your message's headers,
which you can now copy and paste.
 

Makes it a LOT easier if you would actually read my post to start with.

I'm NOT the OP, nor is my problem with Yahoo.  Maybe go back and actually READ the post this time and you will understand why I didn't include the tracking URL in the first place. Not that it will do you a bit of good in answering my question, but here it is: https://www.spamcop.net/sc?id=z6907851038zb5202193ea030740d49cb2b355232281z

Perhaps you know what you are talking about, but your delivery LEAVES A LOT TO BE DESIRED! The term arrogant comes to mind...

Edited by FeMaster
Link to comment
Share on other sites

1 hour ago, FeMaster said:

Without clay one cannot make bricks. "Sherlock Holmes"
Just looking for a resolution of a problem sorry
The examples were about someone having problems with Yahoo! in that case. not yours;
Again the problem is having email hosts set
It may be you need to, if your ISP is not mangling headers you don't need Mailhosts
Without them SpamCop will look for the IP source Singapore IP which is 223.130.23.106
Which was then sent through UK email IP  77.90.185.38
https://check.spamhaus.org/results?query=77.90.185.38 
The Spamhaus Block List (SBL) is a realtime database of IP addresses of spam sources, including known spammers, spam gangs, spam operations and spam support services. SBL listings are made according to policies outlined in SBL Policy & Listing Criteria.

Edited by petzl
Link to comment
Share on other sites

On 8/31/2024 at 12:10 PM, emanmb said:

All I can say is I cut and paste the raw message into the SC reporting page as I've always done.  If SC can't parse this then it becomes pointless to report them anymore.  

 

Screen Shot 2024-09-08 at 3.15.45 PM.png

Link to comment
Share on other sites

11 hours ago, emanmb said:

All I can say is I cut and paste the raw message into the SC reporting page as I've always done.  If SC can't parse this then it becomes pointless to report them anymore.  

If SpamCop errs it errs on the side of caution.
Never happen with me or major majority of others?
If one puts rubbish into SpamCop one gets Rubbish out

Link to comment
Share on other sites

8 hours ago, petzl said:

If SpamCop errs it errs on the side of caution.
Never happen with me or major majority of others?
If one puts rubbish into SpamCop one gets Rubbish out

So I do it the way you said to do it and now I'm inputting rubbish.  

Got it.  

image.png.1eb9b3386c54b6bf2d8e7535fcf29337.png

 

Link to comment
Share on other sites

2 hours ago, emanmb said:
10 hours ago, petzl said:

If SpamCop errs it errs on the side of caution.
Never happen with me or major majority of others?
If one puts rubbish into SpamCop one gets Rubbish out

So I do it the way you said to do it and now I'm inputting rubbish.  

Got it.  

You tried?

If you go to Yahoo! email to copy then paste onto your SpamCop reporting page

How to view headers in Yahoo! Mail
Log in to Yahoo! Mail.
Open the message for which you wish to view the headers.
Right Click the ...  (three dots) above the message pane.
In the menu,
select View Raw Message.
A new tab will open containing your message's headers,
which you can now copy and paste.
 

Link to comment
Share on other sites

On 9/7/2024 at 10:50 PM, petzl said:

Without clay one cannot make bricks. "Sherlock Holmes"
Just looking for a resolution of a problem sorry
The examples were about someone having problems with Yahoo! in that case. not yours;
Again the problem is having email hosts set
It may be you need to, if your ISP is not mangling headers you don't need Mailhosts
Without them SpamCop will look for the IP source Singapore IP which is 223.130.23.106
Which was then sent through UK email IP  77.90.185.38
https://check.spamhaus.org/results?query=77.90.185.38 
The Spamhaus Block List (SBL) is a realtime database of IP addresses of spam sources, including known spammers, spam gangs, spam operations and spam support services. SBL listings are made according to policies outlined in SBL Policy & Listing Criteria.

Thank you for the response. If I understand you correctly, in my case (non-yahoo issue) the issue likely resides with the way my ISP deals with the headers, and I should remove the entries from the mailhosts section on SpamCop? It's easy enough to do, so  I could certainly experiment with it. Should I be removing only the entry(ies) that pertain to my ISP, or are we looking at removing them all, or would it just be the one that I use to report (forward) them all to SpamCop?

If I get time this evening I'll do some experimenting, otherwise I'll wait for further information and play with it tomorrow night.

Received 2 more this evening to my same ISP based email address, in case you wanted to look at those at all.
https://www.spamcop.net/sc?id=z6908020406z854f903db73176c4c1f699598553e027z
https://www.spamcop.net/sc?id=z6908020407zf9c01458d4152d2faa69db290d85ea9cz

 

Link to comment
Share on other sites

8 hours ago, FeMaster said:

If I get time this evening I'll do some experimenting, otherwise I'll wait for further information and play with it tomorrow night.

Received 2 more this evening to my same ISP based email address, in case you wanted to look at those at all.
https://www.spamcop.net/sc?id=z6908020406z854f903db73176c4c1f699598553e027z
https://www.spamcop.net/sc?id=z6908020407zf9c01458d4152d2faa69db290d85ea9cz

Best to log into Gmail and get "show Original"  headers copy these and past them into your SpamCop reporting page and see what happens
Email source IP is
47.43.20.16
https://ibb.co/tmZjXb2

With mailhosts set SC will only give source of Email which is pretty near useless
209.85.208.175 which is Gmail who do nothing about spam reports from outside Gmail
Just mark spam phishing and delete
Anyhow you get the idea
pays to check from the original  headers and text body before you point the blame at the SpamCop Bot
If it is the SpamCop Bot then it is of concern
 mailhosts are meant to stop naïve  SC users reporting themselves
If confident it is best not to use mailhpsts who only report the email server, not the source even if available!
If not available SpamCop will only then report the email server.
As you use Gmail Maillhosts SpamCop refuse to send you email from Gmail as you use them
I'm very confident Gmail headers are set up correctly so at least remove Gmail from your mailhosts 
But if you have other mailhosts listed this will not work either ALL mailhosts need removing for SC to report properly.

Edited by petzl
Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

×
×
  • Create New...