Received-SPF: pass (Last token {include:spf.n2net.net} (res=PASS)) client-ip=207.166.203.21; envelope-from=<JimL@n2net.net>; x-ip-name=mail1.n2net.net;
X-Received: from mail1.n2net.net (mail1.n2net.net [207.166.203.21])
by netwin.co.nz (SurgeMail 7.3h) with ESMTP (TLS) id 2689249-1391920
for <surgemail-list@netwin.co.nz>; Thu, 17 May 2018 00:12:16 +0000
X-Return-Path: JimL
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=n2net.net;
s=default; t=1526515936;
bh=8a75o82b3R3Vm/FGy1YJU7t+uudYgUwXSHwSuSOgVIw=;
h=From:To:Subject:Date:References:In-Reply-To;
b=GrRhLYHoyaepBnAhyRK0xs0ydFBuWEBMOA5v4cVw/Hf3AEaOtZW5hTqwmqqY+b74Y
2LAJ4R65cBa8e9iwcQAZ9mbpXRSAutehXwpD6OXIBw0u+sVFYQwtsPUyaW+IfC5qel
fN2IC27qC2RXSWUVWDJQ6vXZuva2LehmKeAj1GJ4=
X-Default-Received-SPF: pass (skip=forwardok (res=PASS)) x-ip-name=207.166.203.3;
X-Received: from exchange.n2net.net (unverified [207.166.203.3])
by mail1.n2net.net (SurgeMail 7.3e2) with ESMTP (TLS) id 151975048-1907077
for <surgemail-list@netwin.co.nz>; Wed, 16 May 2018 20:12:14 -0400
X-Return-Path: JimL
X-Received: from EXCHANGE.n2net.local ([2002:cfa6:cb03::cfa6:cb03]) by
EXCHANGE.n2net.local ([2002:cfa6:cb03::cfa6:cb03]) with mapi id
14.03.0399.000; Wed, 16 May 2018 20:12:13 -0400
From: Jim Lohiser
To: "surgemail-list@netwin.co.nz" <surgemail-list@netwin.co.nz>
Subject: Re: [SurgeMail List] Incoming Messages suddenly bouncing
Thread-Topic: [SurgeMail List] Incoming Messages suddenly bouncing
Thread-Index: AQHT7W/TqkaOjQhkLUqczBunTeqBS6QzDImY
Date: Thu, 17 May 2018 00:12:13 +0000
Message-ID: <801251F4-D071-472A-9E02-A42A0FA1DF23@n2net.net>
References: <5afcc242.1198.a24.5b1e@html.com.au>
In-Reply-To: <5afcc242.1198.a24.5b1e@html.com.au>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
MIME-Version: 1.0
X-X-Originating-IP: 207.166.203.3
X-Country: code=US country="United States" ip=207.166.203.3
X-Originating-IP: 207.166.203.21
X-Country: code=US country="United States" ip=207.166.203.21
X-ORBS-Accept: dnswl_none
X-Rcpt-To: <surgemail-list@netwin.co.nz>
X-SpamDetect: **************: 14.2 sd=14.2 NoRule 0.99(SURBL) 0.99(S_phishing) 0.04(X-myrbl:Color=white) 0.05(X-SpamContent:clean) 0.10(dnswl_none) 0.90(X-Phrase:isspam) 0.88(SPF Negate) 0.30(X-Verify-Helo:+OK) 0.40(X-Country:States) 0.43(genuine) 0.43(dkimok) 0.57(X-NotAscii:us-ascii) 0.47(X-LangGuess:English) 0.51(spfpass) Nbetter 6.0 Saned 10.0 sanitym 7.3 -> 10.0 NotSaned s=7.3 was=10.0 Sval 7.3,rx:myrblwhite,rx:surbl
X-NotAscii: charset=us-ascii
X-Surbl: phishing nelsonbaytiles.com multi.surbl.org
X-SpamContent: Clean
X-LangGuess: English
X-Probe: +OK skipped, known ip address
X-Phrase: IsSpam score=1.00
X-Verify-Helo: +OK mail1.n2net.net
Authentication-Results: netwin.co.nz header.from=JimL@n2net.net; dkim=pass (good signature)
X-Encryption: SSL encrypted
X-MyRbl: Color=White Age=266 Spam=0 Notspam=0 Stars=0 Good=59 Friend=61 Surbl=0 Catch=0 r=0 ip=207.166.203.21
X-IP-stats: Incoming Outgoing Last 0, First 266, in=31558, out=185, spam=0 Known=true ip=207.166.203.21
List-Unsubscribe: <mailto:surgemail-list-leave@netwin.co.nz?subject=unsubscribe>
X-Mailing-List: surgemail-list@netwin.co.nz
List-ID: <surgemail-list@netwin.co.nz>
Precedence: bulk
Reply-To: surgemail-list@netwin.co.nz
Content-Transfer-Encoding: quoted-printable
Content-Transfer-Encoding: quoted-printable
Try adding the domain to g_surbl_skip.
Jim L
Hi
I have a customer that, all of a sudden some of their incoming mail is being bounced.
The "Rejected" line in the logs is as follows
=====================================================================
=====================================================================
I have added the *@nelsonbaytiles.com to the domain and local Friends list.
Content-Description: HTML 2014 logo.jpg
Content-Disposition: inline; filename="HTML 2014 logo.jpg"; size=14669;
Content-ID: <signature_img1@1526514242.2596.3708>
Content-Transfer-Encoding: base64
Still being bounced.
tom cross
m: 0418 295 336
partner HTMLnet.
<HTML 2014 logo.jpg>
Ransomware Attacks Double for Second Year in a Row:
Think Before You Click: