Email address Blacklist question

This is the area for a general support questions, discussions and information that you can read and share. Post your experiences, stats and tricks and tips that are not covered elsewhere. Remember, for questions please search the FAQ first, as your question may already be answered.

Moderators: wizard, magicspam

Post Reply
frank
Posts: 3
Joined: Mon Sep 28, 2020 9:30 pm

Email address Blacklist question

Post by frank » Mon Mar 27, 2023 5:38 am

Below is a header where I've added the sender to the blacklist. However, the email continues to arrive in my inbox.

]Return-Path: <bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
server.whitecapinternet.com
X-Spam-Level:
X-Spam-Status: No, score=0.7 required=4.0 tests=BAYES_50,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,
RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,UNPARSEABLE_RELAY autolearn=ham
autolearn_force=no version=3.4.0
X-Original-To: frank@xxxxxxx.com
Delivered-To: frank@xxxxxxx.com
Received: from o1375.shared.klaviyomail.com (o1375.shared.klaviyomail.com [149.72.197.103])
by server.whitecapinternet.com (Postfix) with ESMTPS id 5A03DD401D0
for <frank@xxxxxxx.com>; Tue, 31 Jan 2023 20:31:30 -0500 (EST)
Authentication-Results: server.whitecapinternet.com;
dmarc=none (p=NONE sp=NONE) smtp.from=send.diypestcontrol.com header.from=diypestcontrol.com;
dkim=pass header.d=diypestcontrol.com;
spf=pass (sender IP is 149.72.197.103) smtp.mailfrom=bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com smtp.helo=o1375.shared.klaviyomail.com
Received-SPF: pass (server.whitecapinternet.com: domain of send.diypestcontrol.com designates 149.72.197.103 as permitted sender) client-ip=149.72.197.103; envelope-from=bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com; helo=o1375.shared.klaviyomail.com;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=diypestcontrol.com;
h=content-type:from:mime-version:subject:list-unsubscribe:to:cc:
content-type:from:subject:to;
s=kl; bh=ME/V5z51puDoaDsJwvYxuHGTC+LRuaEigO0hmiwOHxo=;
b=VXh1o/b5IonUTxsplcJBAYoLxo8orhi7qQOnmk9t2isKDcK8oy+xvf+q9xycBXCXFDXj
NA416uwZoLCKmr/thILp9DUl5W2hcvrpw/sCKl5ZpoClPPmtjPpQHOxRDbKyPtQAa0FIJb
Ve7LWXiR8V12B4wYrC/+d4WbBaZWWxgmMWZdkZuN8rJdsUo6nVXGKZOyi9TMp0Nr5PT6Tf
05xJhreerhGLJjKLq582SF63usx1n0JUKwJsfYhqMW4LnKd7xRMefStI50eUz7BIIg3HKd
b6F7fUbL59A9RqO9KDJ1NVauKfJkYcDjVL2j9rn7o3/pNQmyQF9EzTqdmHg853uA==
Received: by filterdrecv-679d598b6f-q4v88 with SMTP id filterdrecv-679d598b6f-q4v88-1-63D9C0EF-B1
2023-02-01 01:31:27.845450001 +0000 UTC m=+6488753.098715542
Received: from MjU0OTY4NTI (unknown)
by geopod-ismtpd-5-5 (SG) with HTTP
id icCVZEtzTKmfe2ok4D7ITw
Wed, 01 Feb 2023 01:31:27.751 +0000 (UTC)
Content-Type: multipart/alternative; boundary=b40bb629b105290fc56e577e88e57022e12554c3a1ab373aaa71f6466c39
Date: Wed, 01 Feb 2023 01:31:27 +0000 (UTC)
From: Do-It-Yourself Pest Control <info@diypestcontrol.com>
Mime-Version: 1.0
Message-ID: <icCVZEtzTKmfe2ok4D7ITw@geopod-ismtpd-5-5>
Subject: Fact or myth? =?UTF-8?B?8J+klA==?=
X-Kmail-Message: 01GR2R0BGE4QVPJ2571YEXFPFB
X-Kmail-Account: Vp5MQ2
X-Kmail-Relay: [2509531.krelaymail.com]:587
List-Unsubscribe:
=?us-ascii?Q?=3Chttp=3A=2F=2Fdiy-pest-control-production=2Emyklpages=2Ecom=2Fp=2Fpreference?=
=?us-ascii?Q?center=3Fa=3DVp5MQ2&c=3D01FVDGVXV9AE3PV7SSHCE?=
=?us-ascii?Q?XR3Z0&k=3Dd93ce89f127840df2a9142d54963034?=
=?us-ascii?Q?b&m=3D01GR2R0BGE4QVPJ2571YEXFPFB&r=3D34PCFR?=
=?us-ascii?Q?sA=3E?=
X-Kmail-Ops: 01FVDGVXV9AE3PV7SSHCEXR3Z0
X-SG-EID:
=?us-ascii?Q?3FwykhDDwHQcXE9JoLOATFNJ9dyHUfUYtQCkU9vpyZi8q59VFY7mChq4b1r4uU?=
=?us-ascii?Q?RQr5tAhrhP0QOWoiKNbwbOYNMexR8YXXh998JZ4?=
=?us-ascii?Q?OcdW5ZFSoZKr8xsH71kC2HDQzwTiJpVgruZ7JbP?=
=?us-ascii?Q?P5RGj8iJ3s1GHBL0K1aySdUzyN9VVAEOebL5CPT?=
=?us-ascii?Q?uKtmUN7VSZPGIwi9Dr3a4XzrJFhiha+1YSvm7hs?=
=?us-ascii?Q?i5YkvsiCI1UIWWdL2w3fzOkfCutB8PfCl5gfzf1?=
=?us-ascii?Q?zMm7GxmqaZdBDZtHSypFg=3D=3D?=
X-SG-ID:
=?us-ascii?Q?N2C25iY2uzGMFz6rgvQsb3WdckyvbC2eFaxvdDHn8D1nndBBW0fUClUlZF2fTQ?=
=?us-ascii?Q?6KQWt2ZgQbwzvihUJ1vzwxI61on299XnYpJt4Z7?=
=?us-ascii?Q?oa1fQ4LkkUWI2cUW38AslXrzEsp0aRDkgR2nza7?=
=?us-ascii?Q?f=2FDg9ipTtir9BytbGmM10oXrWpwtLoHDSD3KwxP?=
=?us-ascii?Q?thc5dDF77Bc=2F4nPH0fSjACwwPncJOxSEIdCw4YY?=
=?us-ascii?Q?VYDcirvupLHYZ6Ka8=3D?=
To: Frank White <frank@xxxxxxx.com>
X-Entity-ID: WGbFvxfU+TKZPmvfxvvDyQ==


NOTE: I've masked my email address with xxxxxxx
The sender's IP address constantly changes. I'm accessing Magicspam from my Plesk control panel. Can you help?
Thanks,

magicspam
Posts: 1553
Joined: Tue Oct 28, 2008 2:27 pm

Re: Email address Blacklist question

Post by magicspam » Tue Mar 28, 2023 2:44 pm

Hello Frank,

Thank you for contacting us.

Based on our understanding, incoming emails from specific email addresses are allowed for delivery despite being listed in the MagicSpam Sender From Black List. Did we understand you correctly?

The MagicSpam Sender From Black List does not operate on the From header but rather the SMTP MAIL FROM which is the equivalent to the Return-Path header, so the most probable reason for the reported issue is that the incoming email uses a different sender address in SMTP MAIL FROM.

In this specific case, the correct email address for the blacklist entry would be:

Return-Path: <bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com>

Since this email address is dynamic in nature, we recommend to add the blacklist entry using the wildcard character (*).

MagicSpam Admin Panel >> Anti-Spam >> Exemptions >> Sender From Black List

*@send.diypestcontrol.com

This will ensure that any inbound emails from the sender domain (send.diypestcontrol.com) will be rejected for delivery (SPAM).

Note that you can also find the Sender to blacklist through the MagicSpam logs which is equivalent to the email address in the Return-Path header from the email source.

Please let us know if you have any other questions.
-- MagicSpam Support Team --

waltergarcia
Posts: 1
Joined: Thu May 25, 2023 2:35 am

Re: Email address Blacklist question

Post by waltergarcia » Thu May 25, 2023 2:37 am

me too.....

magicspam
Posts: 1553
Joined: Tue Oct 28, 2008 2:27 pm

Re: Email address Blacklist question

Post by magicspam » Thu May 25, 2023 9:04 am

Hello Walter,

Thank you for the reply.

Based on our understanding, you are facing the same issues with Sender From Blacklist entries not being effective. Did we understand you correctly?

In order to start troubleshooting, would you be able to provide us with more details about the case -- e.g. Return-Path header sample, and email address used in the Sender From Blacklist entry.

Please note that MagicSpam Sender From Black List does not operate on the From header but rather the SMTP MAIL FROM which is the equivalent to the Return-Path header, so the most probable reason for the reported issue is that the incoming email uses a different sender address in SMTP MAIL FROM.

Please let us know if you have any other questions.
-- MagicSpam Support Team --

Kurt Torres
Posts: 1
Joined: Mon Aug 28, 2023 3:58 am

Re: Email address Blacklist question

Post by Kurt Torres » Mon Aug 28, 2023 4:00 am

frank wrote:
Mon Mar 27, 2023 5:38 am
Below is a header where I've added the sender to the blacklist. However, the email continues to arrive in my inbox.

]Return-Path: <bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on
server.whitecapinternet.com
X-Spam-Level:
X-Spam-Status: No, score=0.7 required=4.0 tests=BAYES_50,DKIM_SIGNED,
DKIM_VALID,DKIM_VALID_AU,HTML_FONT_LOW_CONTRAST,HTML_MESSAGE,
RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,SPF_PASS,UNPARSEABLE_RELAY autolearn=ham
autolearn_force=no version=3.4.0
X-Original-To: frank@xxxxxxx.com
Delivered-To: frank@xxxxxxx.com
Received: from o1375.shared.klaviyomail.com (o1375.shared.klaviyomail.com [149.72.197.103])
by server.whitecapinternet.com (Postfix) with ESMTPS id 5A03DD401D0
for <frank@xxxxxxx.com>; Tue, 31 Jan 2023 20:31:30 -0500 (EST)
Authentication-Results: server.whitecapinternet.com;
dmarc=none (p=NONE sp=NONE) smtp.from=send.diypestcontrol.com header.from=diypestcontrol.com;
dkim=pass header.d=diypestcontrol.com;
spf=pass (sender IP is 149.72.197.103) smtp.mailfrom=bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com smtp.helo=o1375.shared.klaviyomail.com
Received-SPF: pass (server.whitecapinternet.com: domain of send.diypestcontrol.com designates 149.72.197.103 as permitted sender) client-ip=149.72.197.103; envelope-from=bounces+25496852-bb5a-frank=xxxxxxx.com@send.diypestcontrol.com; helo=o1375.shared.klaviyomail.com;
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=diypestcontrol.com;
h=content-type:from:mime-version:subject:list-unsubscribe:to:cc:
content-type:from:subject:to;
s=kl; bh=ME/V5z51puDoaDsJwvYxuHGTC+LRuaEigO0hmiwOHxo=;
b=VXh1o/b5IonUTxsplcJBAYoLxo8orhi7qQOnmk9t2isKDcK8oy+xvf+q9xycBXCXFDXj
NA416uwZoLCKmr/thILp9DUl5W2hcvrpw/sCKl5ZpoClPPmtjPpQHOxRDbKyPtQAa0FIJb
Ve7LWXiR8V12B4wYrC/+d4WbBaZWWxgmMWZdkZuN8rJdsUo6nVXGKZOyi9TMp0Nr5PT6Tf
05xJhreerhGLJjKLq582SF63usx1n0JUKwJsfYhqMW4LnKd7xRMefStI50eUz7BIIg3HKd
b6F7fUbL59A9RqO9KDJ1NVauKfJkYcDjVL2j9rn7o3/pNQmyQF9EzTqdmHg853uA==
Received: by filterdrecv-679d598b6f-q4v88 with SMTP id filterdrecv-679d598b6f-q4v88-1-63D9C0EF-B1
2023-02-01 01:31:27.845450001 +0000 UTC m=+6488753.098715542
Received: from MjU0OTY4NTI (unknown)
by geopod-ismtpd-5-5 (SG) with HTTP
id icCVZEtzTKmfe2ok4D7ITw
Wed, 01 Feb 2023 01:31:27.751 +0000 (UTC)
Content-Type: multipart/alternative; boundary=b40bb629b105290fc56e577e88e57022e12554c3a1ab373aaa71f6466c39
Date: Wed, 01 Feb 2023 01:31:27 +0000 (UTC)
From: Do-It-Yourself Pest Control <info@diypestcontrol.com>
Mime-Version: 1.0
Message-ID: <icCVZEtzTKmfe2ok4D7ITw@geopod-ismtpd-5-5>
Subject: Fact or myth? =?UTF-8?B?8J+klA==?=
X-Kmail-Message: 01GR2R0BGE4QVPJ2571YEXFPFB
X-Kmail-Account: Vp5MQ2
X-Kmail-Relay: [2509531.krelaymail.com]:587
List-Unsubscribe:
=?us-ascii?Q?=3Chttp=3A=2F=2Fdiy-pest-control-production=2Emyklpages=2Ecom=2Fp=2Fpreference?=
=?us-ascii?Q?center=3Fa=3DVp5MQ2&c=3D01FVDGVXV9AE3PV7SSHCE?=
=?us-ascii?Q?XR3Z0&k=3Dd93ce89f127840df2a9142d54963034?=
=?us-ascii?Q?b&m=3D01GR2R0BGE4QVPJ2571YEXFPFB&r=3D34PCFR?=
=?us-ascii?Q?sA=3E?=
X-Kmail-Ops: 01FVDGVXV9AE3PV7SSHCEXR3Z0
X-SG-EID:
=?us-ascii?Q?3FwykhDDwHQcXE9JoLOATFNJ9dyHUfUYtQCkU9vpyZi8q59VFY7mChq4b1r4uU?=
=?us-ascii?Q?RQr5tAhrhP0QOWoiKNbwbOYNMexR8YXXh998JZ4?=
=?us-ascii?Q?OcdW5ZFSoZKr8xsH71kC2HDQzwTiJpVgruZ7JbP?=
=?us-ascii?Q?P5RGj8iJ3s1GHBL0K1aySdUzyN9VVAEOebL5CPT?=
=?us-ascii?Q?uKtmUN7VSZPGIwi9Dr3a4XzrJFhiha+1YSvm7hs?=
=?us-ascii?Q?i5YkvsiCI1UIWWdL2w3fzOkfCutB8PfCl5gfzf1?=
=?us-ascii?Q?zMm7GxmqaZdBDZtHSypFg=3D=3D?=
X-SG-ID:
=?us-ascii?Q?N2C25iY2uzGMFz6rgvQsb3WdckyvbC2eFaxvdDHn8D1nndBBW0fUClUlZF2fTQ?=
=?us-ascii?Q?6KQWt2ZgQbwzvihUJ1vzwxI61on299XnYpJt4Z7?=
=?us-ascii?Q?oa1fQ4LkkUWI2cUW38AslXrzEsp0aRDkgR2nza7?=
=?us-ascii?Q?f=2FDg9ipTtir9BytbGmM10oXrWpwtLoHDSD3KwxP?=
=?us-ascii?Q?thc5dDF77Bc=2F4nPH0fSjACwwPncJOxSEIdCw4YY?=
=?us-ascii?Q?VYDcirvupLHYZ6Ka8=3D?=
To: Frank White <frank@xxxxxxx.com>
X-Entity-ID: WGbFvxfU+TKZPmvfxvvDyQ==


NOTE: I've masked my email address with xxxxxxx
The sender's IP address constantly changes. I'm accessing Magicspam from my Plesk control panel. Can you help?
Thanks,
Thank you

Post Reply

Return to “General Discussions and Support Questions”

Who is online

Users browsing this forum: No registered users and 19 guests