Received-SPF: none (No spf1 record for (html.com.au) ) client-ip=203.19.159.237; envelope-from=<tomc@html.com.au>; x-ip-name=mail.html.com.au;
X-Default-Received-SPF: pass (Last token {mx/16} (res=PASS)) client-ip=203.19.159.237; envelope-from=<tomc@html.com.au>; x-ip-name=mail.html.com.au;
X-Received: from html.com.au (mail.html.com.au [203.19.159.237])
by netwin.co.nz (SurgeMail 7.4r) with ESMTP (TLS) id 27549666-1391920
for <surgemail-list@netwinsite.com>; Fri, 02 Oct 2020 06:00:28 +0000
X-Return-Path: tomc
X-Default-Received-SPF: pass (skip=forwardok (res=PASS)) x-ip-name=124.246.22.60; envelope-from=<tomc@html.com.au>;
From: Tom Cross
To: <surgemail-list@netwinsite.com>
Subject: [SurgeMail List] Mail bounced but not in black list
Date: Fri, 02 Oct 2020 16:00:21 +1000
Message-ID: <5f76c1f5.430.1a74.2e57@html.com.au>
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
X-X-Originating-IP: 124.246.22.60
X-Mailer: SurgeWeb - Ajax Webmail Client
X-X-Authenticated-User: tomc@html.com.au
X-Originating-IP: 203.19.159.237
X-Country: code=AU country="Australia" ip=203.19.159.237
X-ORBS-Stamp: hostkarma_nobl
X-Rcpt-To: <surgemail-list@netwinsite.com>
X-Kann: +OK 0.618 0.792 2/4
X-SpamDetect: *****: 5.0 sd=5.0 NoRule 0.04(X-myrbl:Color=white) 0.07(X-SpamContent:clean) 0.90(X-Phrase:isspam) 0.13(X-Country:australia) 0.14(PNGImage) 0.83(X-Verify-Helo:-ERR) 0.34(CountryTLD) 0.36(Suspicious proportion of ) 0.37(X-NotAscii:utf) 0.47(X-LangGuess:English) Saned 5.0 sanitym 0.0 -> 5.0 NotSaned s=0.0 was=5.0 Sval 0.0
X-NotAscii: charset=utf-8
X-SpamContent: Clean
X-LangGuess: English
X-Phrase: IsSpam score=1.00
X-Verify-Helo: -ERR missmatch: html.com.au->203.19.159.237->mail.html.com.au
X-Encryption: SSL encrypted
X-MyRbl: Color=White Age=3727 Spam=4 Notspam=0 Stars=15 Good=6357 Friend=5286 Surbl=1 Catch=0 r=0.0068 ip=203.19.159.237
X-IP-stats: Incoming Outgoing Last 0, First 1136, in=75393, out=591, spam=0 Known=true ip=203.19.159.237
List-Unsubscribe: <mailto:surgemail-list-leave@netwin.co.nz?subject=unsubscribe>
X-Mailing-List: surgemail-list@netwin.co.nz
List-ID: <surgemail-list@netwin.co.nz>
Precedence: bulk
Reply-To: surgemail-list@netwin.co.nz
Content-Transfer-Encoding: quoted-printable
Content-Transfer-Encoding: quoted-printable
Hi
A customer complained that they were not getting email from UPS going to their company account.
It was received when sent to a google account .
I did an extract from the logs, see below, they say bounced, listed in users black list.
I checked all the places I could find User, Domain and Global, not listed.
Any ideas???
==================================================================================================================
2020-09-25 12:31:13.41 [33661873:5880] Rcpt 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 0 ""
2020-09-25 12:31:14.19 [33661873:5880] SPF 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 0 "Accepted(unknown) spf_block=false"
2020-09-25 12:31:18.41 [33661873:5880] Received 148.163.154.203 prvs=153739451e=cclaudine@ups.com <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "Relay=islocal, nrcpt=1, f=<cclaudine@ups.com>, withSSL, s=[Invoice copy]"
2020-09-25 12:31:19.32 [33661873:5880] Aspam 148.163.154.203 prvs=153739451e=cclaudine@ups.com <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "notrust **: 2.449000 I wonder how many emails they sent in error=0.6, From3consonants=0.7, NakedCR=0.8, SPF Pass=-0.5, From: does not include a real name=0.8"
2020-09-25 12:31:19.62 [33661873:5880] Bounced 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "[148.163.154.203] Sorry, Found wild *@ups.com prvs=153739451e=cclaudine@ups.com in User blacklist dest: <accounts@kareelaaviation.com.au>"
2020-09-25 12:44:25.97 [33661946:7116] Rcpt 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 0 ""
2020-09-25 12:44:26.96 [33661946:7116] SPF 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 0 "Accepted(unknown) spf_block=false"
2020-09-25 12:44:28.62 [33661946:7116] Received 148.163.151.9 prvs=1537b0fda3=tmaricon@ups.com <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "Relay=islocal, nrcpt=1, f=<tmaricon@ups.com>, withSSL, s=[0000A44599 KAREELA AVIATION PTY LTD ]"
2020-09-25 12:44:29.15 [33661946:7116] Aspam 148.163.151.9 prvs=1537b0fda3=tmaricon@ups.com <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "notrust : 0.139000 Content Clean match=-1.0, NakedCR=0.8, SPF Pass=-0.5, Accept Orbs=-1.0, Suspicious proportion of text in CAPS=1.0, From: does not include a real name=0.8"
Content-Transfer-Encoding: base64
Content-ID: <signature_img1@1601618421.6772.2875>
2020-09-25 12:44:29.43 [33661946:7116] Bounced 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "[148.163.151.9] Sorry, Found wild *@ups.com prvs=1537b0fda3=tmaricon@ups.com in User blacklist dest: <accounts@kareelaaviation.com.au>"
==================================================================================================================
regards
tom cross
partner HTMLnet
e: tomc@html.com.au
m: 0418 295 336