Hier mal den Header wenn sich das ändert!
Received: from test-EXCH.test-HB.DE (192.168.0.112) by test-EXCH.test-HB.DE
(192.168.0.112) with Microsoft SMTP Server (TLS) id 15.0.1395.4 via Mailbox
Transport; Fri, 31 May 2019 15:08:52 +0200
Received: from test-EXCH.test-HB.DE (192.168.0.112) by test-EXCH.test-HB.DE
(192.168.0.112) with Microsoft SMTP Server (TLS) id 15.0.1395.4; Fri, 31 May
2019 15:08:52 +0200
Received: from spam.test-HB.DE (192.168.0.33) by test-EXCH.test-HB.DE
(192.168.0.112) with Microsoft SMTP Server id 15.0.1395.4 via Frontend
Transport; Fri, 31 May 2019 15:08:52 +0200
Received: from spam.test-HB.DE (localhost.localdomain [127.0.0.1])
by spam.test-HB.DE (Proxmox) with ESMTP id 3318A4E1428
for <fth@test.de>; Fri, 31 May 2019 15:08:52 +0200 (CEST)
Received: from exchange-pop3-connector.com (test-exch.test-hb.de [192.168.0.112])
by spam.test-HB.DE (Proxmox) with SMTP id 567294E141C
for <fth@test.de>; Fri, 31 May 2019 15:08:49 +0200 (CEST)
Delivery-date: Fri, 31 May 2019 15:07:25 +0200
Received: from [80.67.18.51] (helo=mx08.ispgateway.de)
by mailcluster2-2.ispgateway.de with esmtps (TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)
(Exim 4.90_1)
(envelope-from <bounces+6906183-f359-fth=test.de@sendmail.test.de>)
id 1hWhFl-0006kz-9G; Fri, 31 May 2019 15:07:25 +0200
X-Envelope-to:
fth@test.de
Received: from [168.245.42.74] (helo=o1.sendmail.test.de)
by mx08.ispgateway.de with esmtps (TLSv1.2:ECDHE-RSA-AES128-GCM-SHA256:128)
(Exim 4.90_1)
(envelope-from <bounces+6906183-f359-fth=test.de@sendmail.test.de>)
id 1hWhFj-0001jZ-4T
for
fth@test.de; Fri, 31 May 2019 15:07:24 +0200
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; d=test.de;
h=from:subject:to:content-type:mime-version:reply-to:list-unsubscribe;
s=s1; bh=v9q7EGpptTRGhdr9VZnZ/FUE0DI=; b=nqsP4ZVwRWFYX8aYu2HO8C7
WeXM48y/J6m0Yu0nC5f1uFLL5VvUfiPuE8WVr0FK4G5C2Aj08aaN4rQclv2TPkAQ
C1rLKrSqwZ/eitLVIR4jmSihC0g9IgGuspj2KzMl3V1nqssrMdB4t08zeaaT13dM
iPL0Nbc7uOAtWLCLJTwg=
Received: by filter0896p1las1.sendgrid.net with SMTP id filter0896p1las1-14699-5CF12706-4F
2019-05-31 13:07:19.061948065 +0000 UTC m=+142510.515335327
Received: from test115-27-1 (mail.test-hb.de [217.92.186.124])
by ismtpd0004p1lon1.sendgrid.net (SG) with ESMTP id s9bos7fxT1SonnEhKCKvgg
for <fth@test.de>; Fri, 31 May 2019 13:07:18.271 +0000 (UTC)
From: "test: Reinigung & Pflege" <newsletter@test.de>
Subject: Damit bringen Sie Ihr Boot auf Hochglanz
To: "
fth@test.de" <fth@test.de>
Content-Type: multipart/alternative; boundary="2xxFT8ctVTBxioM=_mk5IACqZxS7v4ZuSK"
MIME-Version: 1.0
Reply-To: <info@test.de>
Date: Fri, 31 May 2019 13:07:19 +0000
List-Unsubscribe: <
https://www.test24.com/?t=newsletter&action=confirmUnsubscribe&type=newsletter&data=>
Message-ID: <31172019050715A5D2539086$44C7B32512@test>
X-SG-EID: kNZrUP8FO0qFuBos6Wo+drcC7TsIebJ1sHeCaYoi01MhygVUynmwNsregBv3A9g+Y9kJiH+yf6lKNW
oiJk00BmMpgrlJBNwtwO0naIAZSaWAEm/ApEqFkIy+t6NfzjB6eqiE9z8YlrZFEgMLp5MJc12RNXJc
ZgFnyIWOjIP0QpO47l4kRNQ8OkHr9XL94Mj0mr7uA0xjgCu59K+6XOW2fKjFXmpoPTyMfcB2BgOzA1
U=
X-Received-SPF: pass ( mx08.ispgateway.de: domain of sendmail.test.de designates 168.245.42.74 as permitted sender )
X-DKIM: DKIM passed: (address=bounces+6906183-f359-fth=test.de@sendmail.test.de domain=test.de), signature is good.
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
spamfilter02.ispgateway.de
X-Spam-Level:
X-Spam-Status: No, hits=-1.0 required=9999.0 tests=BAYES_40 autolearn=disabled
version=3.4.0
X-Spam-CMAETAG: v=2.2 cv=VtFTO6+n c=1 sm=1 tr=0
a=gBP/v/g7RTwjwyULV5Tdkw==:17 a=E5NmQfObTbMA:10 a=-uNXE31MpBQA:10
a=asVA6J3dlVkA:10 a=9DvhAHx2yrWFMPxQWpQA:9 a=7d38hfPxAAAA:8
a=3j4BkbkPAAAA:8 a=vnREMb7VAAAA:8 a=JqEG_dyiAAAA:8 a=BkpHzsgbAAAA:8
a=T97JPWIHAAAA:8 a=yoKCU4lKAAAA:8 a=lDxrLyAtAAAA:8
a=b5dK86QUpyjLVI7o6TgA:9 a=QEXdDO2ut3YA:10 a=9XZf-FdBAAAA:8
a=NUCYDQmgAAAA:8 a=6CP9Q7bD9H_4OEG2WpYA:9
a=mr7UayG8oM6LZRdLZkxIgYpTFvM=:19 a=jRUwEoZB862cOjbq:21
a=_W_S_7VecoQA:10 a=frz4AuCg-hUA:10 a=nYBdnHjlEloA:10
a=CyVrLGhRzwco8DsR8p-R:22 a=zn1Bn5UEq07r09HF0sPc:22
a=Cl6MOUeTcZj1dgAx2RQ7:22 a=MCDO2F9zckLLskVJCuGe:22
a=_mrYAxTklNlniqQj6SOv:22
X-Spam-CMAECATEGORY:
X-Spam-CMAESUBCATEGORY:
X-Spam-CMAESCORE:
Return-Path:
newsletter@test.de
X-MS-Exchange-Organization-AuthSource: test-EXCH.test-HB.DE
X-MS-Exchange-Organization-AuthAs: Internal
X-MS-Exchange-Organization-AuthMechanism: 10
X-MS-Exchange-Organization-Network-Message-Id: c069ae43-e78b-424b-e03a-08d6e5c920e2
Ulkig ist, das der Header richtig aussieht und dort unter Subjetct sich nichts ändert!
PMG DUMP
Found RULE 20 (prio: 98, in, active): Blacklist
FOUND FROM GROUP 27: Blacklist
FOUND ACTION GROUP 43: Block
OBJECT 131: block message
Found RULE 19 (prio: 96, out, active): Virus Alert
FOUND WHAT GROUP 34: Virus
OBJECT 122: active
FOUND ACTION GROUP 43: Block
OBJECT 131: block message
FOUND ACTION GROUP 45: Notify Admin
OBJECT 133: notify __ADMIN__
FOUND ACTION GROUP 46: Notify Sender
OBJECT 134: notify __SENDER__
Found RULE 18 (prio: 96, in, active): Block Viruses
FOUND WHAT GROUP 34: Virus
OBJECT 122: active
FOUND ACTION GROUP 44: Quarantine
OBJECT 132: Move to quarantine.
FOUND ACTION GROUP 45: Notify Admin
OBJECT 133: notify __ADMIN__
Found RULE 17 (prio: 93, in, active): Block Dangerous Files
FOUND WHAT GROUP 33: Dangerous Content
OBJECT 116: content-type=application/javascript
OBJECT 117: content-type=application/x-executable
OBJECT 115: content-type=application/x-java
OBJECT 114: content-type=application/x-ms-dos-executable
OBJECT 118: content-type=application/x-ms-dos-executable
OBJECT 119: content-type=message/partial
OBJECT 120: filename=.*\.(vbs|pif|lnk|shs|shb)
OBJECT 121: filename=.*\.\{.+\}
FOUND ACTION GROUP 40: Remove attachments
OBJECT 128: remove matching attachments
Found RULE 21 (prio: 90, in, inactive): Modify Header
FOUND ACTION GROUP 38: Modify Spam Level
OBJECT 126: modify field: X-SPAM-LEVEL:__SPAM_INFO__
Found RULE 28 (prio: 87, in+out, inactive): Block Multimedia Files
FOUND WHAT GROUP 31: Multimedia
OBJECT 105: content-type=audio/.*
OBJECT 106: content-type=video/.*
FOUND ACTION GROUP 40: Remove attachments
OBJECT 128: remove matching attachments
Found RULE 22 (prio: 85, in, active): Whitelist
FOUND FROM GROUP 28: Whitelist
FOUND ACTION GROUP 42: Accept
OBJECT 130: accept message
Found RULE 25 (prio: 82, in, active): Block Spam (Level 10)
FOUND WHAT GROUP 37: Spam (Level 10)
OBJECT 125: Level 10
FOUND ACTION GROUP 43: Block
OBJECT 131: block message
Found RULE 24 (prio: 81, in, inactive): Quarantine/Mark Spam (Level 5)
FOUND WHAT GROUP 36: Spam (Level 5)
OBJECT 124: Level 5
FOUND ACTION GROUP 39: Modify Spam Subject
OBJECT 127: modify field: subject:SPAM: __SUBJECT__
FOUND ACTION GROUP 44: Quarantine
OBJECT 132: Move to quarantine.
Found RULE 23 (prio: 80, in, active): Quarantine/Mark Spam (Level 3)
FOUND WHAT GROUP 35: Spam (Level 3)
OBJECT 123: Level 3
FOUND ACTION GROUP 44: Quarantine
OBJECT 132: Move to quarantine.
Found RULE 26 (prio: 70, out, inactive): Block outgoing Spam
FOUND WHAT GROUP 35: Spam (Level 3)
OBJECT 123: Level 3
FOUND ACTION GROUP 43: Block
OBJECT 131: block message
FOUND ACTION GROUP 45: Notify Admin
OBJECT 133: notify __ADMIN__
FOUND ACTION GROUP 46: Notify Sender
OBJECT 134: notify __SENDER__
Found RULE 27 (prio: 60, out, inactive): Add Disclaimer
FOUND ACTION GROUP 47: Disclaimer
OBJECT 135: disclaimer
Im etc/spamassasin/custom.cfg
steht nichts!
