Hi folks,
this is a testmail, because I got some trouble with the mailingist.
As reported before, I get all ,mails from
debian-user@lists.debian.org with tagged with *****SPAM**** added to
the subject. This is because of some DKIM failure, as reported
before. As I could fix this by setting a special rule for this
mailaddresse in spamassassin, I know dicovered another issue.
When I am sending a mail to the list, it looks like the subject is
completely replaced with only "*****SPAM*****".
I would like to know, when this happens. Either during the transfer
from me to the debian server, or when it is sent from the debian
server to me.
This mail has the subject "This is a testmail!".
It would be nice, if someone could tell me, if this mail is tagged
with "****SPAM****" somewhere
and if the subject is removed or not.
Now I got my last mail back with the spam tag!
X-Spam-Flag: YES
X-SPAM-FACTOR: DKIM
Authentication-Results: mail39c50.megamailservers.eu;
dkim=fail reason="signature verification failed" (1024-bit key)
header.d=megamailservers.eu header.i=@megamailservers.eu header.b="QLjumGn/"
Hans wrote:
Now I got my last mail back with the spam tag!
That's very surprising.
X-Spam-Flag: YES
X-SPAM-FACTOR: DKIM
Authentication-Results: mail39c50.megamailservers.eu;
dkim=fail reason="signature verification failed" (1024-bit key)
header.d=megamailservers.eu header.i=@megamailservers.eu header.b="QLjumGn/"
I have absolutely no idea where that spam flag may be coming from.
It's a mystery.
dkim=pass (1024-bit rsa key sha256) header.d=megamailservers.eu
header.i=@megamailservers.eu header.b=QOWbQzHX header.a=rsa-sha256
header.s=maildub
dkim=fail (message has been altered, 1024-bit rsa key sha256)
header.d=megamailservers.eu header.i=@megamailservers.eu
header.b=QLjumGn/ header.a=rsa-sha256 header.s=maildub
dkim=fail (message has been altered, 1024-bit rsa key sha256)
header.d=megamailservers.eu header.i=@megamailservers.eu
header.b=r8P8m4Og header.a=rsa-sha256 header.s=maildub
Hi The Wanderer,
Hans, are you certain you composed those three messages the same
way, using the same interface of the same program, and sent them
the same way?
No, the first mail was created natively (= a new mail),
the one with the "[SOLVED] in the subject was a reply to someones
mail from the list and the last mail was also a reply this time of my
of my own.
It looks like replying to soemone (my normal behaviour) is causing
this issue.
And it looks like, that I am getting the SPAM tag, not you.
Some minutes ago I informed megamailservers.eu of my problem and sent
them the mail with the headers, i sent here, too.
Hopefully I will get some response.
The strange thing is,this issue suddenly apeared from nowhere. I have
nothing changed here (except of upgrades). I am running debian
bookworm and my mail client is kmail. But that should not be the
problem.
Hans, are you certain you composed those three messages the same way,
using the same interface of the same program, and sent them the same
way?
Me again, sorry.
Now I got my last mail back with the spam tag!
Subject:
Re: *****SPAM***** [SOLVED] Re: This is a testmail!
This is the header:
--------------------
X-Spam-Flag: YES
X-SPAM-FACTOR: DKIM
X-Envelope-From: bounce-debian-user=hans.ullrich=loop.de@lists.debian.org DMARC-Filter:
OpenDMARC Filter v1.4.1 mail39c50.megamailservers.eu 464C5Iek122979 Authentication-Results: mail39c50.megamailservers.eu;
dmarc=none (p=none dis=none) header.from=loop.de
Authentication-Results: mail39c50.megamailservers.eu;
spf=none smtp.mailfrom=lists.debian.org
Authentication-Results: mail39c50.megamailservers.eu;
dkim=fail reason="signature verification failed" (1024-bit key)
header.d=megamailservers.eu header.i=@megamailservers.eu header.b="QLjumGn/"
Return-Path: <bounce-debian-user=hans.ullrich=loop.de@lists.debian.org> Received:
from bendel.debian.org (bendel.debian.org [82.195.75.100]) by
mail39c50.megamailservers.eu (8.14.9/8.13.1) with ESMTP id 464C5Iek122979 for
<hans.ullrich@loop.de>; Thu, 4 Jul 2024 12:05:21 +0000
Received:
from localhost (localhost [127.0.0.1]) by bendel.debian.org (Postfix) with
QMQP id EA3E420682; Thu, 4 Jul 2024 12:05:15 +0000 (UTC)
X-Mailbox-Line:
From debian-user-request@lists.debian.org Thu Jul 4 12:05:15 2024 Old-Return-Path: <hans.ullrich@loop.de>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on bendel.debian.org X-Spam-Status: No, score=-10.5 required=4.0 tests=DKIM_INVALID,DKIM_SIGNED,
FOURLA,KHOP_HELO_FCRDNS,LDOSUBSCRIBER,LDO_WHITELIST autolearn=unavailable
autolearn_force=no version=3.4.6
X-Original-To: lists-debian-user@bendel.debian.org
Delivered-To: lists-debian-user@bendel.debian.org
Received:
from localhost (localhost [127.0.0.1]) by bendel.debian.org (Postfix) with
ESMTP id C18E42067A for <lists-debian-user@bendel.debian.org>; Thu,
4 Jul 2024 12:05:07 +0000 (UTC)
X-Virus-Scanned: at lists.debian.org with policy bank en-ht X-Amavis-Spam-Status: No,
score=-6.301 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2,
DKIM_INVALID=0.1, DKIM_SIGNED=0.1, FOURLA=0.1, KHOP_HELO_FCRDNS=0.399,
LDO_WHITELIST=-5] autolearn=ham autolearn_force=no
Received:
from bendel.debian.org ([127.0.0.1]) by localhost (lists.debian.org
[127.0.0.1]) (amavisd-new,
port 2525) with ESMTP id CNGEsE8xgvQ4 for
<lists-debian-user@bendel.debian.org>; Thu, 4 Jul 2024 12:05:03 +0000 (UTC)
X-policyd-weight:
NOT_IN_SBL_XBL_SPAMHAUS=-1.5 HELO_IP_IN_CL_SUBNET=-1.2 (check from: .loop. -
helo: .mail194c50.megamailservers. - helo-domain: .megamailservers.)
FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -4.7
Received:
from mail194c50.megamailservers.eu (mail208c50.megamailservers.eu
[91.136.10.218]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384
(256/256 bits)) (Client did not present a certificate) by bendel.debian.org
(Postfix) with ESMTPS id EC67D20677 for <debian-user@lists.debian.org>; Thu,
4 Jul 2024 12:05:02 +0000 (UTC)
X-Authenticated-User: 01793666059@o2online.de
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=megamailservers.eu;
s=maildub; t=1720094700; bh=5Um9/MplAQNd+svZJOunmBGElnorPOi9odLzGqxgObQ=;
h=From:To:Subject:Date:In-Reply-To:References:From;
b=QLjumGn/60xFVhN9BUbajEg0uTOZxqi/Uz8jodz7E1EE2Hi7W3VtjJFW4LGmbJGnC
Lt7Nym0B3iEmO+1/fxpnDfmt1lRnzu+Q65akTEd8eaEHbj8G7yo5OCpI4oVjRr7q9o
pn0upeaUIrxnepbAwXeozeebIuTSx2zuaH0xvL30=
Feedback-ID: hans.ullrich@lo
Received:
from protheus2.localnet (a89-183-193-109.net-htp.de [89.183.193.109])
(authenticated bits=0) by mail194c50.megamailservers.eu (8.14.9/8.13.1) with
ESMTP id 464C4rxR025870 (version=TLSv1/SSLv3
cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for
<debian-user@lists.debian.org>; Thu, 4 Jul 2024 12:04:55 +0000
From: Hans <hans.ullrich@loop.de>
To: debian-user@lists.debian.org
Subject: *****SPAM***** [SOLVED] Re: This is a testmail!
Date: Thu, 04 Jul 2024 14:04:53 +0200
Message-ID: <2408526.NG923GbCHz@protheus2>
In-Reply-To: <46505217.fMDQidcC6G@protheus2>
References:
<3645068.R56niFO833@protheus2> <66868718.1030800@fastmail.fm>
<46505217.fMDQidcC6G@protheus2>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="UTF-8"
X-VADE-SPAMSTATE: clean
X-VADE-SPAMSTATE: clean
X-VADE-SPAMSCORE: 0
X-VADE-SPAMSCORE: 0
X-VADE-SPAMCAUSE:
gggruggvucftvghtrhhoucdtuddrgeeftddrudelgdegiecutefuodetggdotefrodftvfcurfhrohhfihhlvgem
ucfjqffuvffqrffktedpgffpggdqveehtdenuceurghilhhouhhtmecufedtudenucenucfjughrpefhvffufffkjgh
fggfgtgejudeftdfjphegsehtufertddttdejnecuhfhrohhmpefjrghnshcuoehhrghnshdruhhllhhrihgthhesl
hhoohhprdguvgeqnecuggftrfgrthhtvghrnhephfdvudekheefueevieelgefftdfhtedvlefgfefhieevveejud
elhffhleethfeknecukfhppeekvddrudelhedrjeehrddutddtpdekledrudekfedrudelfedruddtleenucevlhh
ushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeekvddrudelhedrjeehrddutddtpdhhvghlohepsg
gvnhguvghlrdguvggsihgrnhdrohhrghdpmhgrihhlfhhrohhmpegsohhunhgtvgdquggvsghirghnqdhus
hgvrhephhgrnhhsrdhulhhlrhhitghhpehlohhophdruggvsehlihhsthhsrdguvggsihgrnhdrohhrghdpnhg
spghrtghpthhtohepuddprhgtphhtthhopehhrghnshdruhhllhhrihgthheslhhoohhprdguvg X-VADE-SPAMCAUSE:
gggruggvucftvghtrhhoucdtuddrgeeftddrudelgdegjecutefuodetggdotefrodftvfcurfhrohhfihhlvgem
ucfjqffuvffqrffktedpqfgfvfdpgffpggdqveehtdenuceurghilhhouhhtmecufedtudenucenucfjughrpefhvf
fufffkjghfggfgtgesthfuredttddtjeenucfhrhhomhepjfgrnhhsuceohhgrnhhsrdhulhhlrhhitghhsehlohho
phdruggvqeenucggtffrrghtthgvrhhnpeefvdethfeludejieeljeeugefgieekheeitdfggfehuedvvdfhjedute
ekkedtvdenucfkphepkeelrddukeefrdduleefrddutdelnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrgh
mpehinhgvthepkeelrddukeefrdduleefrddutdelpdhhvghlohepphhrohhthhgvuhhsvddrlhhotggrlhhnv
ghtpdhmrghilhhfrhhomhephhgrnhhsrdhulhhlrhhitghhsehlohhophdruggvpdhnsggprhgtphhtthhope
dupdhrtghpthhtohepuggvsghirghnqdhushgvrheslhhishhtshdruggvsghirghnrdhorhhg X-Rspamd-Status: No, score=1.59
X-Rspamd-Result: default: False [1.59 / 6.00];
R_DKIM_REJECT(1.00)[megamailservers.eu:s=maildub]; CTE_CASE(0.50)[];
Isn't this the usual DKIM problem with lists?
The From: has @loop.de, but the sender and DKIM signature
is from lists.debian.org.
That's why most lists these days rewrite the From: header.
Detlef
On 7/4/24 14:24, Hans wrote:
Me again, sorry.
Now I got my last mail back with the spam tag!
Subject:
Re: *****SPAM***** [SOLVED] Re: This is a testmail!
This is the header:
--------------------
X-Spam-Flag: YES
X-SPAM-FACTOR: DKIM
X-Envelope-From:
bounce-debian-user=hans.ullrich=loop.de@lists.debian.org
DMARC-Filter:
OpenDMARC Filter v1.4.1 mail39c50.megamailservers.eu 464C5Iek122979
Authentication-Results: mail39c50.megamailservers.eu;
dmarc=none (p=none dis=none) header.from=loop.de
Authentication-Results: mail39c50.megamailservers.eu;
spf=none smtp.mailfrom=lists.debian.org
Authentication-Results: mail39c50.megamailservers.eu;
dkim=fail reason="signature verification failed" (1024-bit key)
header.d=megamailservers.eu header.i=@megamailservers.eu
header.b="QLjumGn/"
Return-Path:
<bounce-debian-user=hans.ullrich=loop.de@lists.debian.org>
Received:
from bendel.debian.org (bendel.debian.org [82.195.75.100]) by
mail39c50.megamailservers.eu (8.14.9/8.13.1) with ESMTP id
464C5Iek122979 for
<hans.ullrich@loop.de>; Thu, 4 Jul 2024 12:05:21 +0000
Received:
from localhost (localhost [127.0.0.1]) by bendel.debian.org
(Postfix) with
QMQP id EA3E420682; Thu, 4 Jul 2024 12:05:15 +0000 (UTC)
X-Mailbox-Line:
From debian-user-request@lists.debian.org Thu Jul 4 12:05:15 2024
Old-Return-Path: <hans.ullrich@loop.de>
X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on
bendel.debian.org
X-Spam-Status: No, score=-10.5 required=4.0
tests=DKIM_INVALID,DKIM_SIGNED,
FOURLA,KHOP_HELO_FCRDNS,LDOSUBSCRIBER,LDO_WHITELIST
autolearn=unavailable
autolearn_force=no version=3.4.6
X-Original-To: lists-debian-user@bendel.debian.org
Delivered-To: lists-debian-user@bendel.debian.org
Received:
from localhost (localhost [127.0.0.1]) by bendel.debian.org
(Postfix) with
ESMTP id C18E42067A for <lists-debian-user@bendel.debian.org>; Thu,
4 Jul 2024 12:05:07 +0000 (UTC)
X-Virus-Scanned: at lists.debian.org with policy bank en-ht
X-Amavis-Spam-Status: No,
score=-6.301 tagged_above=-10000 required=5.3 tests=[BAYES_00=-2,
DKIM_INVALID=0.1, DKIM_SIGNED=0.1, FOURLA=0.1,
KHOP_HELO_FCRDNS=0.399,
LDO_WHITELIST=-5] autolearn=ham autolearn_force=no
Received:
from bendel.debian.org ([127.0.0.1]) by localhost (lists.debian.org
[127.0.0.1]) (amavisd-new,
port 2525) with ESMTP id CNGEsE8xgvQ4 for
<lists-debian-user@bendel.debian.org>; Thu, 4 Jul 2024 12:05:03
+0000 (UTC)
X-policyd-weight:
NOT_IN_SBL_XBL_SPAMHAUS=-1.5 HELO_IP_IN_CL_SUBNET=-1.2 (check from:
.loop. -
helo: .mail194c50.megamailservers. - helo-domain: .megamailservers.)
FROM/MX_MATCHES_HELO(DOMAIN)=-2; rate: -4.7
Received:
from mail194c50.megamailservers.eu (mail208c50.megamailservers.eu
[91.136.10.218]) (using TLSv1.2 with cipher
ECDHE-RSA-AES256-GCM-SHA384
(256/256 bits)) (Client did not present a certificate) by
bendel.debian.org
(Postfix) with ESMTPS id EC67D20677 for
<debian-user@lists.debian.org>; Thu,
4 Jul 2024 12:05:02 +0000 (UTC)
X-Authenticated-User: 01793666059@o2online.de
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple;
d=megamailservers.eu;
s=maildub; t=1720094700;
bh=5Um9/MplAQNd+svZJOunmBGElnorPOi9odLzGqxgObQ=;
h=From:To:Subject:Date:In-Reply-To:References:From;
b=QLjumGn/60xFVhN9BUbajEg0uTOZxqi/Uz8jodz7E1EE2Hi7W3VtjJFW4LGmbJGnC
Lt7Nym0B3iEmO+1/fxpnDfmt1lRnzu+Q65akTEd8eaEHbj8G7yo5OCpI4oVjRr7q9o
pn0upeaUIrxnepbAwXeozeebIuTSx2zuaH0xvL30=
Feedback-ID: hans.ullrich@lo
Received:
from protheus2.localnet (a89-183-193-109.net-htp.de
[89.183.193.109])
(authenticated bits=0) by mail194c50.megamailservers.eu
(8.14.9/8.13.1) with
ESMTP id 464C4rxR025870 (version=TLSv1/SSLv3
cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NO) for
<debian-user@lists.debian.org>; Thu, 4 Jul 2024 12:04:55 +0000
From: Hans <hans.ullrich@loop.de>
To: debian-user@lists.debian.org
Subject: *****SPAM***** [SOLVED] Re: This is a testmail!
Date: Thu, 04 Jul 2024 14:04:53 +0200
Message-ID: <2408526.NG923GbCHz@protheus2>
In-Reply-To: <46505217.fMDQidcC6G@protheus2>
References:
<3645068.R56niFO833@protheus2> <66868718.1030800@fastmail.fm>
<46505217.fMDQidcC6G@protheus2>
MIME-Version: 1.0
Content-Transfer-Encoding: 7Bit
Content-Type: text/plain; charset="UTF-8"
X-VADE-SPAMSTATE: clean
X-VADE-SPAMSTATE: clean
X-VADE-SPAMSCORE: 0
X-VADE-SPAMSCORE: 0
X-VADE-SPAMCAUSE:
gggruggvucftvghtrhhoucdtuddrgeeftddrudelgdegiecutefuodetggdotefrodftvfcurfhrohhfihhlvgem
ucfjqffuvffqrffktedpgffpggdqveehtdenuceurghilhhouhhtmecufedtudenucenucfjughrpefhvffufffkjgh
fggfgtgejudeftdfjphegsehtufertddttdejnecuhfhrohhmpefjrghnshcuoehhrghnshdruhhllhhrihgthhesl
hhoohhprdguvgeqnecuggftrfgrthhtvghrnhephfdvudekheefueevieelgefftdfhtedvlefgfefhieevveejud
elhffhleethfeknecukfhppeekvddrudelhedrjeehrddutddtpdekledrudekfedrudelfedruddtleenucevlhh
ushhtvghrufhiiigvpedtnecurfgrrhgrmhepihhnvghtpeekvddrudelhedrjeehrddutddtpdhhvghlohepsg
gvnhguvghlrdguvggsihgrnhdrohhrghdpmhgrihhlfhhrohhmpegsohhunhgtvgdquggvsghirghnqdhus
hgvrhephhgrnhhsrdhulhhlrhhitghhpehlohhophdruggvsehlihhsthhsrdguvggsihgrnhdrohhrghdpnhg
spghrtghpthhtohepuddprhgtphhtthhopehhrghnshdruhhllhhrihgthheslhhoohhprdguvg >> X-VADE-SPAMCAUSE:
gggruggvucftvghtrhhoucdtuddrgeeftddrudelgdegjecutefuodetggdotefrodftvfcurfhrohhfihhlvgem
ucfjqffuvffqrffktedpqfgfvfdpgffpggdqveehtdenuceurghilhhouhhtmecufedtudenucenucfjughrpefhvf
fufffkjghfggfgtgesthfuredttddtjeenucfhrhhomhepjfgrnhhsuceohhgrnhhsrdhulhhlrhhitghhsehlohho
phdruggvqeenucggtffrrghtthgvrhhnpeefvdethfeludejieeljeeugefgieekheeitdfggfehuedvvdfhjedute
ekkedtvdenucfkphepkeelrddukeefrdduleefrddutdelnecuvehluhhsthgvrhfuihiivgeptdenucfrrghrrgh
mpehinhgvthepkeelrddukeefrdduleefrddutdelpdhhvghlohepphhrohhthhgvuhhsvddrlhhotggrlhhnv
ghtpdhmrghilhhfrhhomhephhgrnhhsrdhulhhlrhhitghhsehlohhophdruggvpdhnsggprhgtphhtthhope
dupdhrtghpthhtohepuggvsghirghnqdhushgvrheslhhishhtshdruggvsghirghnrdhorhhg >> X-Rspamd-Status: No, score=1.59
X-Rspamd-Result: default: False [1.59 / 6.00];
R_DKIM_REJECT(1.00)[megamailservers.eu:s=maildub]; CTE_CASE(0.50)[];
Sysop: | Keyop |
---|---|
Location: | Huddersfield, West Yorkshire, UK |
Users: | 546 |
Nodes: | 16 (0 / 16) |
Uptime: | 157:03:39 |
Calls: | 10,384 |
Calls today: | 1 |
Files: | 14,056 |
Messages: | 6,416,474 |