Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 1 subscriber
  • Views 2320 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Spamm trotz fehlendem RDNS erhalten?

Boldmen
Hallo,

habe gestern eine Mail von admin@verifiedoptionz.com erhalten, die offentsichtlich Spamm ist. Wie kam diese Mail durch meine UTM? Der RDNS ist auf jeden Fall nicht korrekt, solche Mails habe ich in letzter Zeit schon öfter erhalten
Hier mal der SMTP Log:

2014:03:14-21:46:10 utm exim-in[21836]: 2014-03-14 21:46:10 [65.60.43.66] F= R= Verifying recipient address with callout
2014:03:14-21:46:12 utm exim-in[21836]: 2014-03-14 21:46:12 1WOYzc-0005gC-1i DKIM: d=myverifiednetworks.com s=private c=relaxed/relaxed a=rsa-sha1 [verification succeeded]
2014:03:14-21:46:13 utm exim-in[21836]: 2014-03-14 21:46:13 1WOYzc-0005gC-1i ctasd reports 'Unknown' RefID:str=0001.0A0C0207.53236A95.0002,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0
2014:03:14-21:46:13 utm exim-in[21836]: 2014-03-14 21:46:13 1WOYzc-0005gC-1i Greylisting: Greylisted 65.60.43.66
2014:03:14-21:46:13 utm exim-in[21836]: [1\29] 2014-03-14 21:46:13 1WOYzc-0005gC-1i H=(server05.ideal-plans.com) [65.60.43.66]:38146 F= temporarily rejected after DATA: Temporary local problem, please try again!
2014:03:14-21:46:13 utm exim-in[21836]: [2\29] Envelope-from: 
2014:03:14-21:46:13 utm exim-in[21836]: [3\29] Envelope-to: 
2014:03:14-21:46:13 utm exim-in[21836]: [4\29] P Received: from [65.60.43.66] (port=38146 helo=server05.ideal-plans.com)
2014:03:14-21:46:13 utm exim-in[21836]: [5\29]  by utm.neise.de with esmtp (Exim 4.76)
2014:03:14-21:46:13 utm exim-in[21836]: [6\29]  (envelope-from )
2014:03:14-21:46:13 utm exim-in[21836]: [7\29]  id 1WOYzc-0005gC-1i
2014:03:14-21:46:13 utm exim-in[21836]: [8\29]  for B***@neise.de; Fri, 14 Mar 2014 21:46:12 +0100
2014:03:14-21:46:13 utm exim-in[21836]: [9\29]   DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=private; d=myverifiednetworks.com;
2014:03:14-21:46:13 utm exim-in[21836]: [10\29]  h=To:Subject:Message-ID[:D]ate:From:Reply-To:MIME-Version:List-Unsubscribe:Content-Type:Content-Transfer-Encoding;
2014:03:14-21:46:13 utm exim-in[21836]: [11\29]  bh=lofPNaZ8kFVtlpFjrN+oOa3N3Io=;
2014:03:14-21:46:13 utm exim-in[21836]: [12\29]  b=VCrn0UFEdsVzRqTqoKpRJVUpCsKeLI6dcA+rXQWBwJxpFb5KfRExY3REJg8f5VfEmqzPqZ/JZlz2
2014:03:14-21:46:13 utm exim-in[21836]: [13\29]    yuy4jqODCZSA7gu0w5jinCzMsh1S97mAWZEIfBCVh+LeF6DfPSu4oXwHKgM7YH7b6kqGP8X1tsou
2014:03:14-21:46:13 utm exim-in[21836]: [14\29]    cPTn+Rvq6vyayYSSK6U=
2014:03:14-21:46:13 utm exim-in[21836]: [15\29] T To: B***@neise.de
2014:03:14-21:46:13 utm exim-in[21836]: [16\29]   Subject:  Re: Hallo Gunnar, Ihr Support-Team
2014:03:14-21:46:13 utm exim-in[21836]: [17\29] I Message-ID: 
2014:03:14-21:46:13 utm exim-in[21836]: [18\29] * Return-Path: bounce@verifiedoptionz.com
2014:03:14-21:46:13 utm exim-in[21836]: [19\29]   Date: Fri, 14 Mar 2014 14:43:13 +0000
2014:03:14-21:46:13 utm exim-in[21836]: [20\29] F From: "Mike.K" 
2014:03:14-21:46:13 utm exim-in[21836]: [21\29] R Reply-To: admin@verifiedoptionz.com
2014:03:14-21:46:13 utm exim-in[21836]: [22\29]   MIME-Version: 1.0
2014:03:14-21:46:13 utm exim-in[21836]: [23\29]   X-Mailer-LID: 7,4,3
2014:03:14-21:46:13 utm exim-in[21836]: [24\29]   List-Unsubscribe: 
2014:03:14-21:46:13 utm exim-in[21836]: [25\29]   X-Mailer-RecptId: 22501
2014:03:14-21:46:13 utm exim-in[21836]: [26\29]   X-Mailer-SID: 109
2014:03:14-21:46:13 utm exim-in[21836]: [27\29]   X-Mailer-Sent-By: 1
2014:03:14-21:46:13 utm exim-in[21836]: [28\29]   Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_e3acd01774fdfdc86ec4ebb54a8b7b27"
2014:03:14-21:46:13 utm exim-in[21836]: [29/29]   Content-Transfer-Encoding: 8bit
2014:03:14-21:46:13 utm exim-in[21836]: 2014-03-14 21:46:13 SMTP connection from (server05.ideal-plans.com) [65.60.43.66]:38146 closed by QUIT

So wie ich das sehe, gibt es keinen korrekten RDNS oder?

Viele Grüsse


This thread was automatically locked due to age.
Parents
  • 0
    Der RDNS ist auf jeden Fall nicht korrekt, solche Mails habe ich in letzter Zeit schon öfter erhalten

    Das schließt Du doch bestimmt nicht aus der Log-Aussage, dass sich der Host 65.60.43.66 mit dem Namen server05.ideal-plans.com gemeldet hat, oder?

    2014:03:14-21:46:13 utm exim-in[21836]: 2014-03-14 21:46:13 SMTP connection from (server05.ideal-plans.com) [65.60.43.66]:38146 closed by QUIT


    Am diesem RDNS ist soweit nichts falsch, auch wenn es mit Deiner Ansicht kollidieren mag, dass Hostname, HELO und IP-Adresse konsistent sein müssen.
Reply
  • 0
    Der RDNS ist auf jeden Fall nicht korrekt, solche Mails habe ich in letzter Zeit schon öfter erhalten

    Das schließt Du doch bestimmt nicht aus der Log-Aussage, dass sich der Host 65.60.43.66 mit dem Namen server05.ideal-plans.com gemeldet hat, oder?

    2014:03:14-21:46:13 utm exim-in[21836]: 2014-03-14 21:46:13 SMTP connection from (server05.ideal-plans.com) [65.60.43.66]:38146 closed by QUIT


    Am diesem RDNS ist soweit nichts falsch, auch wenn es mit Deiner Ansicht kollidieren mag, dass Hostname, HELO und IP-Adresse konsistent sein müssen.
Children
No Data
Cookie Information Banner