Did you look for the destination address or for *@ups.com, the destination address won't exist as it's a wildcard entry...

Sorry, Found wild *@ups.com prvs=1537b0fda3=tmaricon@ups.com in User blacklist dest: <accounts@kareelaaviation.com.au>"

This means they have:

    *@ups.com

In their blacklist. 

ChrisP

Hi

A customer complained that they were not getting email from UPS going to their company account.

It was received when sent to a google account .

I did an extract from the logs, see below, they say bounced, listed in users black list.

I checked all the places I could find User, Domain and Global, not listed.

Any ideas???

==================================================================================================================

2020-09-25 12:31:13.41 [33661873:5880] Rcpt 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 0  ""

2020-09-25 12:31:14.19 [33661873:5880] SPF 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 0  "Accepted(unknown) spf_block=false"

2020-09-25 12:31:18.41 [33661873:5880] Received 148.163.154.203 prvs=153739451e=cclaudine@ups.com <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "Relay=islocal, nrcpt=1, f=<cclaudine@ups.com>, withSSL, s=[Invoice copy]"

2020-09-25 12:31:19.32 [33661873:5880] Aspam 148.163.154.203 prvs=153739451e=cclaudine@ups.com <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "notrust **: 2.449000 I wonder how many emails they sent in error=0.6, From3consonants=0.7, NakedCR=0.8, SPF Pass=-0.5, From: does not include a real name=0.8"

2020-09-25 12:31:19.62 [33661873:5880] Bounced 148.163.154.203 <prvs=153739451e=cclaudine@ups.com> <accounts@kareelaaviation.com.au> 623406 <abd38217bd9c4b6984ec69abb274aee9@SVRP00055C54.us.ups.com> "[148.163.154.203] Sorry, Found wild *@ups.com prvs=153739451e=cclaudine@ups.com in User blacklist dest: <accounts@kareelaaviation.com.au>"

2020-09-25 12:44:25.97 [33661946:7116] Rcpt 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 0  ""

2020-09-25 12:44:26.96 [33661946:7116] SPF 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 0  "Accepted(unknown) spf_block=false"

2020-09-25 12:44:28.62 [33661946:7116] Received 148.163.151.9 prvs=1537b0fda3=tmaricon@ups.com <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "Relay=islocal, nrcpt=1, f=<tmaricon@ups.com>, withSSL, s=[0000A44599 KAREELA AVIATION PTY LTD             ]"

2020-09-25 12:44:29.15 [33661946:7116] Aspam 148.163.151.9 prvs=1537b0fda3=tmaricon@ups.com <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "notrust : 0.139000 Content Clean match=-1.0, NakedCR=0.8, SPF Pass=-0.5, Accept Orbs=-1.0, Suspicious proportion of text in CAPS=1.0, From: does not include a real name=0.8"

2020-09-25 12:44:29.43 [33661946:7116] Bounced 148.163.151.9 <prvs=1537b0fda3=tmaricon@ups.com> <accounts@kareelaaviation.com.au> 35758 <9d1ca25b87c54d53beb1a67f16d8e08f@SVRP00055C52.us.ups.com> "[148.163.151.9] Sorry, Found wild *@ups.com prvs=1537b0fda3=tmaricon@ups.com in User blacklist dest: <accounts@kareelaaviation.com.au>"

================================================================================================================== 

regards 

tom cross

partner HTMLnet

e: tomc@html.com.au

m: 0418 295 336

 

--
p.s. We'd love a link from your website to our new domain: https://surgemail.com if/when u have time.