Tracking Center Missing messages

K

KatyComputer

Well-Known Member
Sep 26, 2019
193
16
58
62
St Louis
katycomputer.com
I received a couple suspicious messages from message@adobe.com, so I thought I would see who else is receiving these messages, Tracking says nada - including my messages. Where am I going wrong?

Tracking Center:
1579294694801.png



Message header:
From: Adobe Document Cloud <message@adobe.com>
To: John Schmerold <john@katycomputer.com>
Subject: Delivery Receipt: Version 2 Review Ad Draft. half page. 10.25x5.5
February 6, 2020 Open House
Thread-Topic: Delivery Receipt: Version 2 Review Ad Draft. half page.
10.25x5.5 February 6, 2020 Open House
Thread-Index: AQHVzXf1v7Om7w6ATUW9WnbGKG3LTQ==
Date: Fri, 17 Jan 2020 20:51:51 +0000
Message-ID:
<0100016fb546c431-b481f289-1f54-447e-a0b4-bdcaa632fd82-000000@email.amazonses.com>
Reply-To: Adobe Document Cloud <message@adobe.com>
Content-Language: en-US
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Exchange-Organization-AuthSource:
BN3NAM04FT005.eop-NAM04.prod.protection.outlook.com
X-MS-Has-Attach:
X-MS-Exchange-Organization-Network-Message-Id:
f01feba1-6d41-49a3-ba9d-08d79b8f15d9
X-MS-Exchange-Organization-SCL: -1
X-MS-TNEF-Correlator:
X-MS-Exchange-Organization-RecordReviewCfmType: 0
x-ms-publictraffictype: Email
received-spf: pass (amazonses.com: 54.240.14.29 is authorized to use
'0100016fb546c431-b481f289-1f54-447e-a0b4-bdcaa632fd82-#@amazonses.com' in
'mfrom' identity (mechanism 'ip4:54.240.0.0/18' matched))
 
a) [x] Include Empty Senders [x] Include Greylist (yeah I know, but just do it)
b) Check Start and End Date (I've seen it bug out, just changing it suddenly gave results)
c) Your log is incomplete. Make sure the mail actually came in via PMG
 
No joy, the message sailed through PMG:
15.20.2644.19 via Frontend Transport; Fri, 17 Jan 2020 20:51:54 +0000
Received: from stl-mx.fastnet1.com (localhost [127.0.0.1])
by stl-mx.fastnet1.com (KatyComputer) with ESMTP id EAE69C924
for <adobe@saintaustinschool.org>; Fri, 17 Jan 2020 14:51:53 -0600 (CST)
Received: from a14-29.smtp-out.amazonses.com (a14-29.smtp-out.amazonses.com [54.240.14.29])
(using TLSv1.2 with cipher ECDHE-RSA-AES128-SHA256 (128/128 bits))
(No client certificate requested)
by stl-mx.fastnet1.com (KatyComputer) with ESMTPS id ABAD6C8F3
for <adobe@saintaustinschool.org>; Fri, 17 Jan 2020 14:51:52 -0600 (CST)



1579480434803.png
 
Is message@adobe.com also the envelope-from address?
AFAIR the tracking center tracks the envelope addresses (since those are the ones that are logged

I hope this helps!
 
  • Like
Reactions: chotaire
Yep:
1579520763567.png

I understand why the message doesn't appear in tracking center when searching for message@adobe.com, of course, this makes the message center useless for solving my original question "I want to know more about message@adobe.com emails?"

And as a sidenote, if I want to whitelist (or blacklist) all message@adobe.com messages, will PMG whitelisting work, or do I need to create a SpamAssassin rule to look at the from header?
 
No, it does not make the message center useless. Repeatedly you have only provided sniplets of the header instead of the full header.
As stated by Stoiko, search for envelope-from address in header, and use this within tracking center.

The whitelist or blacklist should work with the From: email address.
 
I am not saying the tracking center is useless, however in this instance it is useless because it's searching on the envelope address, not the from address.

Searching based on time received was a good idea, it helped me solve the problem of why I couldn't find the original message.
 
hello, how i can filter only "status=blocked" in old version its working, in new 6.1.3 Filter not accept status.
thank you
 
You must log in or register to reply here.
Top Bottom