Rule based Blacklist Problem

eistek · Dec 29, 2020

Hi ,

The mail address info@insaninternational.org is sending spam all the day. I have added "insaninternational.org" to

"Mail Filter / Who Objects / Blacklist" as a Domain. But i am still getting mails.

Also tried to add "info@insaninternational.org" to "Mail Filter / Who Objects / Blacklist" as a Email.

Result is not changed

Then I have checked Tracking center. What i see in tracking center is ;

The question is why From is noreply@hedefmail6.com instead of info@insaninternational.org ?

And this is what i see in Spam Quarantine;

Received-SPF: pass (hedefmail6.com: 185.242.160.90 is authorized to use 'noreply@hedefmail6.com' in 'mfrom' identity (mechanism 'a' matched)) receiver=pmx.mygateway.net; identity=mailfrom; envelope-from="noreply@hedefmail6.com"; helo=hizhosting.com; client-ip=185.242.160.90
To: export@domain.com.tr
subject: SPAM: =?UTF-8?B?VXpha3RhbiBFxJ9pdGltZSBEZXN0ZWsgWcSxbGJhxZ/EsSBQcm9qZXNpIEhha2vEsW5kYQ==?=
Message-ID: <dc0b11cb086b1302c3fcdcd5d1897458@www.hedefmail6.com>
Date: Mon, 28 Dec 2020 23:31:12 +0300
From: "=?UTF-8?B?xLBOU0FOIMSwbnRlcm5hdGlvbmFs?=" <info@insaninternational.org>
Reply-To: info@insaninternational.org
MIME-Version: 1.0

Stoiko Ivanov · Dec 30, 2020

Who Objects (like e.g. the Blacklist who objects) match on smtp-envelope addresses (for this mail noreplay@hedefmail6.com) - since this is the address which sends the mail during the smtp-dialogue
The From you're seeing is the From-header (RFC5322 from)

The difference is explained on quite a few howtos and posts on the internet (also in this forum) - e.g.
https://serverfault.com/questions/5...-mail-from-will-not-match-from-header-in-data

I hope this explains it!

eistek · Dec 30, 2020

Stoiko Ivanov said:
Who Objects (like e.g. the Blacklist who objects) match on smtp-envelope addresses (for this mail noreplay@hedefmail6.com) - since this is the address which sends the mail during the smtp-dialogue
The From you're seeing is the From-header (RFC5322 from)

The difference is explained on quite a few howtos and posts on the internet (also in this forum) - e.g.
https://serverfault.com/questions/5...-mail-from-will-not-match-from-header-in-data

I hope this explains it!

Thanx for your reply

Is there any way to add "From-header (RFC5322 from) " as Who object?

Stoiko Ivanov · Dec 30, 2020

Try adding a 'Match field' what object - Field: 'From' - value a regular expression matching the domain/e-mail address
see https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#chapter_mailfilter

eistek · Dec 30, 2020

Stoiko Ivanov said:
Try adding a 'Match field' what object - Field: 'From' - value a regular expression matching the domain/e-mail address
see https://pmg.proxmox.com/pmg-docs/pmg-admin-guide.html#chapter_mailfilter

Thanks for your support.

Search

Search

Rule based Blacklist Problem

eistek

Member

Stoiko Ivanov

Proxmox Staff Member

eistek

Member

Stoiko Ivanov

Proxmox Staff Member

eistek

Member

We value your privacy