Received-SPF: none (Cache: No spf1 record for (html.com.au) ) client-ip=203.19.159.237; envelope-from=<tomc@html.com.au>; x-ip-name=mail.html.com.au;
X-Default-Received-SPF: pass (Last token {mx/16} (res=PASS)) client-ip=203.19.159.237; envelope-from=<tomc@html.com.au>; x-ip-name=mail.html.com.au;
X-Received: from html.com.au (mail.html.com.au [203.19.159.237])
by netwin.co.nz (SurgeMail 7.3h) with ESMTP (TLS) id 2688457-1391920
for <surgemail-list@netwinsite.com>; Wed, 16 May 2018 23:44:06 +0000
X-Return-Path: tomc
X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=110.20.18.118;
From: Tom Cross
To: <surgemail-list@netwinsite.com>
Subject: [SurgeMail List] Incoming Messages suddenly bouncing
Date: Thu, 17 May 2018 09:44:02 +1000
Message-ID: <5afcc242.1198.a24.5b1e@html.com.au>
MIME-Version: 1.0
X-X-Originating-IP: 110.20.18.118
X-Mailer: SurgeWeb - Ajax Webmail Client
X-X-Authenticated-User: tomc@html.com.au
X-Originating-IP: 203.19.159.237
X-Country: code=AU country="Australia" ip=203.19.159.237
X-ORBS-Stamp: hostkarma_nobl
X-Rcpt-To: <surgemail-list@netwinsite.com>
X-SpamDetect: **************: 14.2 sd=14.2 NoRule 0.99(SURBL) 0.99(S_phishing) 0.05(X-SpamContent:clean) 0.90(X-Phrase:isspam) 0.74(X-Verify-Helo:-ERR) 0.40(X-myrbl:Color=orange) 0.47(X-LangGuess:English) 0.47(X-NotAscii:utf) Nbetter 6.0 Saned 10.0 sanitym 10.6 -> 10.0 NotSaned s=10.6 was=10.0 Sval 10.6,rx:surbl
X-NotAscii: charset=utf-8
X-Surbl: phishing nelsonbaytiles.com multi.surbl.org
X-SpamContent: Clean
X-LangGuess: English
X-Probe: +OK skipped, known ip address
X-Phrase: IsSpam score=1.00
X-Verify-Helo: -ERR missmatch: html.com.au->203.19.159.237->mail.html.com.au
X-Encryption: SSL encrypted
X-MyRbl: Color=Orange Age=266 Spam=3 Notspam=0 Stars=0 Good=88 Friend=103 Surbl=0 Catch=0 r=0.12 ip=203.19.159.237
X-IP-stats: Incoming Outgoing Last 0, First 266, in=17906, out=224, spam=0 Known=true ip=203.19.159.237
List-Unsubscribe: <mailto:surgemail-list-leave@netwin.co.nz?subject=unsubscribe>
X-Mailing-List: surgemail-list@netwin.co.nz
List-ID: <surgemail-list@netwin.co.nz>
Precedence: bulk
Reply-To: surgemail-list@netwin.co.nz
Content-Transfer-Encoding: quoted-printable
Hi
I have a customer that, all of a sudden some of their incoming mail is being bounced.
The "Rejected" line in the logs is as follows
=====================================================================
2018-05-17 07:42:50.43 [30537153:3192] Rejected 203.38.21.15 <sales@nelsonbaytiles.com> <vickiw@wheelerbros.com.au> 141552 <20180517074747.0001.CanonTxNo.4819@[10.0.0.100]> "[203.38.21.15] Surbl: phishing nelsonbaytiles.com multi.surbl.org"
=====================================================================
I have added the *@nelsonbaytiles.com to the domain and local Friends list.
Still being bounced.
tom crossm: 0418 295 336
partner HTMLnet.
Ransomware Attacks Double for Second Year in a Row:Content-Transfer-Encoding: base64
Content-ID: <signature_img1@1526514242.2596.3708>
Think Before You Click: