A customer complained that they were not getting email from UPS going to their company account.
It was received when sent to a google account .
I did an extract from the logs, see below, they say bounced, listed in users black list.
I checked all the places I could find User, Domain and Global, not listed.
==================================================================================================================
2020-09-25 12:31:13.41 [33661873:5880] Rcpt 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 0 ""
2020-09-25 12:31:14.19 [33661873:5880] SPF 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 0 "Accepted(unknown) spf_block=false"
2020-09-25 12:31:18.41 [33661873:5880] Received 148.163.154.203 prvs=153739451e=cclaudine@ups.com <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "Relay=islocal, nrcpt=1, f=<cclaudine@ups.com>, withSSL, s=[Invoice copy]"
2020-09-25 12:31:19.32 [33661873:5880] Aspam 148.163.154.203 prvs=153739451e=cclaudine@ups.com <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "notrust **: 2.449000 I wonder how many emails they sent in error=0.6, From3consonants=0.7, NakedCR=0.8, SPF Pass=-0.5, From: does not include a real name=0.8"
2020-09-25 12:31:19.62 [33661873:5880] Bounced 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "[148.163.154.203] Sorry, Found wild *@ups.com prvs=153739451e=cclaudine@ups.com in User blacklist dest: <accounts@kareelaaviation.com.au>"
2020-09-25 12:44:25.97 [33661946:7116] Rcpt 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 0 ""
2020-09-25 12:44:26.96 [33661946:7116] SPF 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 0 "Accepted(unknown) spf_block=false"
2020-09-25 12:44:28.62 [33661946:7116] Received 148.163.151.9 prvs=1537b0fda3=tmaricon@ups.com <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "Relay=islocal, nrcpt=1, f=<tmaricon@ups.com>, withSSL, s=[0000A44599 KAREELA AVIATION PTY LTD ]"
2020-09-25 12:44:29.15 [33661946:7116] Aspam 148.163.151.9 prvs=1537b0fda3=tmaricon@ups.com <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "notrust : 0.139000 Content Clean match=-1.0, NakedCR=0.8, SPF Pass=-0.5, Accept Orbs=-1.0, Suspicious proportion of text in CAPS=1.0, From: does not include a real name=0.8"
2020-09-25 12:44:29.43 [33661946:7116] Bounced 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "[148.163.151.9] Sorry, Found wild *@ups.com prvs=1537b0fda3=tmaricon@ups.com in User blacklist dest: <accounts@kareelaaviation.com.au>"
==================================================================================================================
