[Eisfair] Problem mit "unorthodoxen" Mails

Detlef Paschke schabau at t-online.de
Sa Jul 27 12:44:02 CEST 2019


Am 27.07.2019 um 11:22 schrieb Detlef Paschke:
> Am 27.07.2019 um 11:00 schrieb Marcus Roeckrath:
>> Hallo Detlef,
> 
> Hallo Marcus,
> 
>> Post doch mal, wie von Jürgen erbeten, den kompletten Header.

So, jetzt habe ich noch aus dem täglichen / nächtlichen Backup von
Proxmox das INBOX File geholt und habe auch den Header der ersten
Nachricht. War nicht 7,5 sondern 7,1

Kamen übrigens gerade noch zwei Mails von Juergen ohne Probleme durch,
einmal mit 3,4 und ein mal mit 4,0 Punkten. Waren aber HTML-Format und
vom Handy/Tablett (Sorry Smartphone) gesendet User-Agent: K-9 Mail for
Android.

Juergen, Soll ich Dir die Header noch extra per Mail zusenden oder
genügt es hier?

Return-path: <juergen at eisfair.org>
Envelope-to: detlef at home.lan
Delivery-date: Fri, 26 Jul 2019 16:02:11 +0200
Received: from localhost ([127.0.0.1] helo=eisfair64.home.lan)
	by eisfair64.home.lan with esmtpa (Exim 4.92)
	(envelope-from <juergen at eisfair.org>)
	id 1hr0nC-0003gJ-Mu
	for detlef at home.lan; Fri, 26 Jul 2019 16:02:11 +0200
Received: from sfwdallmx.t-online.de [194.25.134.46]
	by eisfair64.home.lan with POP3 (fetchmail-6.3.26)
	for <detlef at home.lan> (single-drop); Fri, 26 Jul 2019 16:01:54 +0200 (CEST)
Received: from mailin80.aul.t-online.de ([172.20.26.79])
	by ehead17106.aul.t-online.de (Dovecot) with LMTP id
ftoMOcAHO12ZvAAAE5uu5w;
	Fri, 26 Jul 2019 16:01:36 +0200
Received: from mail.marwe.net ([109.234.104.132]) by
mailin80.aul.t-online.de
	with (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384 encrypted)
	esmtp id 1hr0mk-06acfw0; Fri, 26 Jul 2019 16:01:26 +0200
Received: from localhost (localhost [127.0.0.1])
	by mail.marwe.net (Postfix) with ESMTP id 4111E1B39FF
	for <schabau at t-online.de>; Fri, 26 Jul 2019 16:04:25 +0200 (CEST)
X-Spam-Level: ***
Received: from mail.marwe.net ([127.0.0.1])
	by localhost (mail.marwe.net [127.0.0.1]) (amavisd-new, port 10024)
	with LMTP id 66ogEWwS673z for <schabau at t-online.de>;
	Fri, 26 Jul 2019 16:04:06 +0200 (CEST)
Received: from mail.telejeck.de (p5B2942B1.dip0.t-ipconnect.de
[91.41.66.177])
	(using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits))
	(No client certificate requested)
	by mail.marwe.net (Postfix) with ESMTPSA id B95B11B39FE
	for <schabau at t-online.de>; Fri, 26 Jul 2019 16:04:04 +0200 (CEST)
Received: from endeavour.privatnet.lan ([192.168.1.56])
	by mail.telejeck.de with esmtpsa (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
	(Exim 4.92)
	(envelope-from <juergen at eisfair.org>)
	id 1hr0mO-0002SN-BV
	for schabau at t-online.de; Fri, 26 Jul 2019 16:01:04 +0200
To: "Detlef Paschke" <schabau at t-online.de>
From: "Juergen Edner" <juergen at eisfair.org>
Date: Fri, 26 Jul 2019 16:01:04 +0200
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:60.0) Gecko/20100101
 Thunderbird/60.8.0
MIME-Version: 1.0
Content-Type: multipart/mixed;
 boundary="------------9C6EBC91DC173EF78D755306"
Content-Language: de-DE
X-TOI-SPAM: u;0;2019-07-26T14:01:36Z
X-TOI-VIRUSSCAN: unchecked
X-TOI-MSGID: faf4d57f-2cde-4447-aaf9-40ba034ac687
X-ENVELOPE-TO: <schabau at t-online.de>
X-Scan-Signature: 6683a96935c201212dbdeb3725e0bad8
X-Spam-Flag: YES
X-Spam-Score: 7.1 (+++++++)
X-Spam-Report: Spam detection software, running on the system
"eisfair64.home.lan",
 has identified this incoming email as possible spam.  The original
 message has been attached to this so you can view it or label
 similar future email.  If you have any questions, see
 postmaster for details.

 Content preview:  Hallo Detlef, anbei findest Du ein modifiziertes
Paket, in
    welchem der bisherige Parameter SMTP_CHECK_RFC2047_LENGTH in
SMTP_CHECK_LINE_LENGTH
    umbenannt und dessen Funktion erweitert wurde. Eventuell [...]

 Content analysis details:   (7.1 points, 4.5 required)

  pts rule name              description
 ---- ----------------------
--------------------------------------------------
  0.0 URIBL_BLOCKED          ADMINISTRATOR NOTICE: The query to URIBL was
                             blocked.  See

http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
                              for more information.
                             [URIs: eisfair.org]
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at https://www.dnswl.org/,
                              no trust
                             [109.234.104.132 listed in list.dnswl.org]
  0.0 SPF_HELO_NONE          SPF: HELO does not publish an SPF Record
  1.0 SPF_SOFTFAIL           SPF: sender does not match SPF record
(softfail)
  1.3 RDNS_NONE              Delivered to internal network by a host
with no rDNS
  0.1 MISSING_MID            Missing Message-Id: header
  3.1 FAKE_REPLY_A1          No description available.
  1.6 FORGED_MUA_MOZILLA     Forged mail pretending to be from Mozilla
Subject: *SPAM* Re: Problem mit "unorthodoxen" Mails
X-Original-Recipient: detlef at home.lan

This is a multi-part message in MIME format.
--------------9C6EBC91DC173EF78D755306
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 8bit

Viele Grüße
Detlef Paschke

-- 
registered Fli4l-User #00000209
Das "Zitat des Augenblicks" gibt es nur auf
http://www.schabau.goip.de


Mehr Informationen über die Mailingliste Eisfair