Wizard IT Products

Wizard Tower TechnoServices Ltd. is proud to host these public forums
https://forums.magicspam.com/

Email address Blacklist question

https://forums.magicspam.com/viewtopic.php?f=15&t=237525

Page 1 of 1

Email address Blacklist question

Posted: Mon Mar 27, 2023 5:38 am
by frank
Below is a header where I've added the sender to the blacklist. However, the email continues to arrive in my inbox.

]Return-Path: <bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
server.whitecapinternet.com
X-Spam-Level:
X-Spam-Status: No, score=0.7 required=4.0 tests=BAYES_50,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,
RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,UNPARSEABLE_RELAY autolearn=ham
autolearn_force=no version=3.4.0
X-Original-To: frank@xxxxxxx.com
Delivered-To: frank@xxxxxxx.com
Received: from o1375.shared.klaviyomail.com (o1375.shared.klaviyomail.com [149.72.197.103])
by server.whitecapinternet.com (Postfix) with ESMTPS id 5A03DD401D0
for <frank@xxxxxxx.com>; Tue, 31 Jan 2023 20:31:30 -0500 (EST)
Authentication-Results: server.whitecapinternet.com;
dmarc=none (p=NONE sp=NONE) smtp.from=send.diypestcontrol.com header.from=diypestcontrol.com;
dkim=pass header.d=diypestcontrol.com;
spf=pass (sender IP is 149.72.197.103) smtp.mailfrom=bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com smtp.helo=o1375.shared.klaviyomail.com
Received-SPF: pass (server.whitecapinternet.com: domain of send.diypestcontrol.com designates 149.72.197.103 as permitted sender) client-ip=149.72.197.103; envelope-from=bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com; helo=o1375.shared.klaviyomail.com;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=diypestcontrol.com;
h=content-type:from:mime-version:subject:list-unsubscribe:to:cc:
content-type:from:subject:to;
s=kl; bh=ME/V5z51puDoaDsJwvYxuHGTC+LRuaEigO0hmiwOHxo=;
b=VXh1o/b5IonUTxsplcJBAYoLxo8orhi7qQOnmk9t2isKDcK8oy+xvf+q9xycBXCXFDXj
NA416uwZoLCKmr/thILp9DUl5W2hcvrpw/sCKl5ZpoClPPmtjPpQHOxRDbKyPtQAa0FIJb
Ve7LWXiR8V12B4wYrC/+d4WbBaZWWxgmMWZdkZuN8rJdsUo6nVXGKZOyi9TMp0Nr5PT6Tf
05xJhreerhGLJjKLq582SF63usx1n0JUKwJsfYhqMW4LnKd7xRMefStI50eUz7BIIg3HKd
b6F7fUbL59A9RqO9KDJ1NVauKfJkYcDjVL2j9rn7o3/pNQmyQF9EzTqdmHg853uA==
Received: by filterdrecv-679d598b6f-q4v88 with SMTP id filterdrecv-679d598b6f-q4v88-1-63D9C0EF-B1
2023-02-01 01:31:27.845450001 +0000 UTC m=+6488753.098715542
Received: from MjU0OTY4NTI (unknown)
by geopod-ismtpd-5-5 (SG) with HTTP
id icCVZEtzTKmfe2ok4D7ITw
Wed, 01 Feb 2023 01:31:27.751 +0000 (UTC)
Content-Type: multipart/alternative; boundary=b40bb629b105290fc56e577e88e57022e12554c3a1ab373aaa71f6466c39
Date: Wed, 01 Feb 2023 01:31:27 +0000 (UTC)
From: Do-It-Yourself Pest Control <info@diypestcontrol.com>
Mime-Version: 1.0
Message-ID: <icCVZEtzTKmfe2ok4D7ITw@geopod-ismtpd-5-5>
Subject: Fact or myth? =?UTF-8?B?8J+klA==?=
X-Kmail-Message: 01GR2R0BGE4QVPJ2571YEXFPFB
X-Kmail-Account: Vp5MQ2
X-Kmail-Relay: [2509531.krelaymail.com]:587
List-Unsubscribe:
=?us-ascii?Q?=3Chttp=3A=2F=2Fdiy-pest-control-production=2Emyklpages=2Ecom=2Fp=2Fpreference?=
=?us-ascii?Q?center=3Fa=3DVp5MQ2&c=3D01FVDGVXV9AE3PV7SSHCE?=
=?us-ascii?Q?XR3Z0&k=3Dd93ce89f127840df2a9142d54963034?=
=?us-ascii?Q?b&m=3D01GR2R0BGE4QVPJ2571YEXFPFB&r=3D34PCFR?=
=?us-ascii?Q?sA=3E?=
X-Kmail-Ops: 01FVDGVXV9AE3PV7SSHCEXR3Z0
X-SG-EID:
=?us-ascii?Q?3FwykhDDwHQcXE9JoLOATFNJ9dyHUfUYtQCkU9vpyZi8q59VFY7mChq4b1r4uU?=
=?us-ascii?Q?RQr5tAhrhP0QOWoiKNbwbOYNMexR8YXXh998JZ4?=
=?us-ascii?Q?OcdW5ZFSoZKr8xsH71kC2HDQzwTiJpVgruZ7JbP?=
=?us-ascii?Q?P5RGj8iJ3s1GHBL0K1aySdUzyN9VVAEOebL5CPT?=
=?us-ascii?Q?uKtmUN7VSZPGIwi9Dr3a4XzrJFhiha+1YSvm7hs?=
=?us-ascii?Q?i5YkvsiCI1UIWWdL2w3fzOkfCutB8PfCl5gfzf1?=
=?us-ascii?Q?zMm7GxmqaZdBDZtHSypFg=3D=3D?=
X-SG-ID:
=?us-ascii?Q?N2C25iY2uzGMFz6rgvQsb3WdckyvbC2eFaxvdDHn8D1nndBBW0fUClUlZF2fTQ?=
=?us-ascii?Q?6KQWt2ZgQbwzvihUJ1vzwxI61on299XnYpJt4Z7?=
=?us-ascii?Q?oa1fQ4LkkUWI2cUW38AslXrzEsp0aRDkgR2nza7?=
=?us-ascii?Q?f=2FDg9ipTtir9BytbGmM10oXrWpwtLoHDSD3KwxP?=
=?us-ascii?Q?thc5dDF77Bc=2F4nPH0fSjACwwPncJOxSEIdCw4YY?=
=?us-ascii?Q?VYDcirvupLHYZ6Ka8=3D?=
To: Frank White <frank@xxxxxxx.com>
X-Entity-ID: WGbFvxfU+TKZPmvfxvvDyQ==

NOTE: I've masked my email address with xxxxxxx
The sender's IP address constantly changes. I'm accessing Magicspam from my Plesk control panel. Can you help?
Thanks,

Re: Email address Blacklist question

Posted: Tue Mar 28, 2023 2:44 pm
by magicspam
Hello Frank,

Thank you for contacting us.

Based on our understanding, incoming emails from specific email addresses are allowed for delivery despite being listed in the MagicSpam Sender From Black List. Did we understand you correctly?

The MagicSpam Sender From Black List does not operate on the From header but rather the SMTP MAIL FROM which is the equivalent to the Return-Path header, so the most probable reason for the reported issue is that the incoming email uses a different sender address in SMTP MAIL FROM.

In this specific case, the correct email address for the blacklist entry would be:

Return-Path: <bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com>

Since this email address is dynamic in nature, we recommend to add the blacklist entry using the wildcard character (*).

MagicSpam Admin Panel >> Anti-Spam >> Exemptions >> Sender From Black List

*@send.diypestcontrol.com

This will ensure that any inbound emails from the sender domain (send.diypestcontrol.com) will be rejected for delivery (SPAM).

Note that you can also find the Sender to blacklist through the MagicSpam logs which is equivalent to the email address in the Return-Path header from the email source.

Please let us know if you have any other questions.

Re: Email address Blacklist question

Posted: Thu May 25, 2023 2:37 am
by waltergarcia
me too.....

Re: Email address Blacklist question

Posted: Thu May 25, 2023 9:04 am
by magicspam
Hello Walter,

Thank you for the reply.

Based on our understanding, you are facing the same issues with Sender From Blacklist entries not being effective. Did we understand you correctly?

In order to start troubleshooting, would you be able to provide us with more details about the case -- e.g. Return-Path header sample, and email address used in the Sender From Blacklist entry.

Please note that MagicSpam Sender From Black List does not operate on the From header but rather the SMTP MAIL FROM which is the equivalent to the Return-Path header, so the most probable reason for the reported issue is that the incoming email uses a different sender address in SMTP MAIL FROM.

Please let us know if you have any other questions.

Re: Email address Blacklist question

Posted: Mon Aug 28, 2023 4:00 am
by Kurt Torres
frank wrote: ↑
Mon Mar 27, 2023 5:38 am
 Below is a header where I've added the sender to the blacklist. However, the email continues to arrive in my inbox.

]Return-Path: <bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
server.whitecapinternet.com
X-Spam-Level:
X-Spam-Status: No, score=0.7 required=4.0 tests=BAYES_50,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,
RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,UNPARSEABLE_RELAY autolearn=ham
autolearn_force=no version=3.4.0
X-Original-To: frank@xxxxxxx.com
Delivered-To: frank@xxxxxxx.com
Received: from o1375.shared.klaviyomail.com (o1375.shared.klaviyomail.com [149.72.197.103])
by server.whitecapinternet.com (Postfix) with ESMTPS id 5A03DD401D0
for <frank@xxxxxxx.com>; Tue, 31 Jan 2023 20:31:30 -0500 (EST)
Authentication-Results: server.whitecapinternet.com;
dmarc=none (p=NONE sp=NONE) smtp.from=send.diypestcontrol.com header.from=diypestcontrol.com;
dkim=pass header.d=diypestcontrol.com;
spf=pass (sender IP is 149.72.197.103) smtp.mailfrom=bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com smtp.helo=o1375.shared.klaviyomail.com
Received-SPF: pass (server.whitecapinternet.com: domain of send.diypestcontrol.com designates 149.72.197.103 as permitted sender) client-ip=149.72.197.103; envelope-from=bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com; helo=o1375.shared.klaviyomail.com;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=diypestcontrol.com;
h=content-type:from:mime-version:subject:list-unsubscribe:to:cc:
content-type:from:subject:to;
s=kl; bh=ME/V5z51puDoaDsJwvYxuHGTC+LRuaEigO0hmiwOHxo=;
b=VXh1o/b5IonUTxsplcJBAYoLxo8orhi7qQOnmk9t2isKDcK8oy+xvf+q9xycBXCXFDXj
NA416uwZoLCKmr/thILp9DUl5W2hcvrpw/sCKl5ZpoClPPmtjPpQHOxRDbKyPtQAa0FIJb
Ve7LWXiR8V12B4wYrC/+d4WbBaZWWxgmMWZdkZuN8rJdsUo6nVXGKZOyi9TMp0Nr5PT6Tf
05xJhreerhGLJjKLq582SF63usx1n0JUKwJsfYhqMW4LnKd7xRMefStI50eUz7BIIg3HKd
b6F7fUbL59A9RqO9KDJ1NVauKfJkYcDjVL2j9rn7o3/pNQmyQF9EzTqdmHg853uA==
Received: by filterdrecv-679d598b6f-q4v88 with SMTP id filterdrecv-679d598b6f-q4v88-1-63D9C0EF-B1
2023-02-01 01:31:27.845450001 +0000 UTC m=+6488753.098715542
Received: from MjU0OTY4NTI (unknown)
by geopod-ismtpd-5-5 (SG) with HTTP
id icCVZEtzTKmfe2ok4D7ITw
Wed, 01 Feb 2023 01:31:27.751 +0000 (UTC)
Content-Type: multipart/alternative; boundary=b40bb629b105290fc56e577e88e57022e12554c3a1ab373aaa71f6466c39
Date: Wed, 01 Feb 2023 01:31:27 +0000 (UTC)
From: Do-It-Yourself Pest Control <info@diypestcontrol.com>
Mime-Version: 1.0
Message-ID: <icCVZEtzTKmfe2ok4D7ITw@geopod-ismtpd-5-5>
Subject: Fact or myth? =?UTF-8?B?8J+klA==?=
X-Kmail-Message: 01GR2R0BGE4QVPJ2571YEXFPFB
X-Kmail-Account: Vp5MQ2
X-Kmail-Relay: [2509531.krelaymail.com]:587
List-Unsubscribe:
=?us-ascii?Q?=3Chttp=3A=2F=2Fdiy-pest-control-production=2Emyklpages=2Ecom=2Fp=2Fpreference?=
=?us-ascii?Q?center=3Fa=3DVp5MQ2&c=3D01FVDGVXV9AE3PV7SSHCE?=
=?us-ascii?Q?XR3Z0&k=3Dd93ce89f127840df2a9142d54963034?=
=?us-ascii?Q?b&m=3D01GR2R0BGE4QVPJ2571YEXFPFB&r=3D34PCFR?=
=?us-ascii?Q?sA=3E?=
X-Kmail-Ops: 01FVDGVXV9AE3PV7SSHCEXR3Z0
X-SG-EID:
=?us-ascii?Q?3FwykhDDwHQcXE9JoLOATFNJ9dyHUfUYtQCkU9vpyZi8q59VFY7mChq4b1r4uU?=
=?us-ascii?Q?RQr5tAhrhP0QOWoiKNbwbOYNMexR8YXXh998JZ4?=
=?us-ascii?Q?OcdW5ZFSoZKr8xsH71kC2HDQzwTiJpVgruZ7JbP?=
=?us-ascii?Q?P5RGj8iJ3s1GHBL0K1aySdUzyN9VVAEOebL5CPT?=
=?us-ascii?Q?uKtmUN7VSZPGIwi9Dr3a4XzrJFhiha+1YSvm7hs?=
=?us-ascii?Q?i5YkvsiCI1UIWWdL2w3fzOkfCutB8PfCl5gfzf1?=
=?us-ascii?Q?zMm7GxmqaZdBDZtHSypFg=3D=3D?=
X-SG-ID:
=?us-ascii?Q?N2C25iY2uzGMFz6rgvQsb3WdckyvbC2eFaxvdDHn8D1nndBBW0fUClUlZF2fTQ?=
=?us-ascii?Q?6KQWt2ZgQbwzvihUJ1vzwxI61on299XnYpJt4Z7?=
=?us-ascii?Q?oa1fQ4LkkUWI2cUW38AslXrzEsp0aRDkgR2nza7?=
=?us-ascii?Q?f=2FDg9ipTtir9BytbGmM10oXrWpwtLoHDSD3KwxP?=
=?us-ascii?Q?thc5dDF77Bc=2F4nPH0fSjACwwPncJOxSEIdCw4YY?=
=?us-ascii?Q?VYDcirvupLHYZ6Ka8=3D?=
To: Frank White <frank@xxxxxxx.com>
X-Entity-ID: WGbFvxfU+TKZPmvfxvvDyQ==

NOTE: I've masked my email address with xxxxxxx
The sender's IP address constantly changes. I'm accessing Magicspam from my Plesk control panel. Can you help?
Thanks,
Thank you
All times are UTC-07:00
Page 1 of 1
Powered by phpBB® Forum Software © phpBB Limited
https://www.phpbb.com/