Ein schönes Beispiel Die Forumsbestätigunsanfrage geht nicht durch den Spamfilter

[mroedeske]

Wir kämpfen seit Monaten das viel zu viele gute Mails als Spam klassifiziert werden, schönstes Beispiel meine Forenregistrierung hier kam nicht an weil NoSpamProxy sie gefiltert hat. Ist schon ein Sinnbild dafür was unser Problem ist wenn selbst Mailks des Anbieters nicht durchgehen.

nsp-forum@nospamproxy.com
Die E-Mail wurde permanent abgewiesen
Core Antispam Engine 4 Classified as Spam.

NoSpamProxy antwortete:5.7.1 This email was rejected because it violates our security policy5.7.1 Classified as Spam.

Was können wir denn im Globalen tun um nicht hier täglich zu sehen as nicht durchkam und einzelne Anpassungen vorzunehmen. Mir ist bewusst das tendeziell auch böse Mails durchkommen, aber so haben wir täglich Arbeit uns um die guten Mails zu bemühen.

 

[ffischer]

Warum werden diese "guten" Mails als Spam erkannt?
Wer schlägt den zu?
RBLs
oder wie sieht das aus .. gerne mal einen MessageTrack posten (Datenschutzkonform)

 

[JanJäschke]

Guten Morgen,

wie es aussieht scheint es sich um ein temporäres Problem seitens der Engine gehandelt zu haben.
Wir unterliegen hier keiner Ausnahme und stehen auf keiner Allowlist beim Herstellt, damit kann so etwas natürlich auch uns jeder Zeit einmal treffen. In meiner Prüfung von grade sieht wieder alles gut aus, ich werde dennoch einmal schauen ob ich mehr herausfinde.

Bezüglich deines generellen FP Problems werde ich im anderen Thread weiter reagieren.


Gruß
Jan

 

[mroedeske]

Hier mal der MessageTrack, falls es nützlich ist für die Erkenntnis:

{
"productInformation": {
"name": "NoSpamProxy",
"suffix": null,
"version": "15.0.0.164",
"components": [
{
"name": "PowerShell",
"version": "15.0.23346.1109"
},
{
"name": "NoSpamProxy Control Center",
"version": "14.0.21321.1539"
},
{
"name": "NoSpamProxy Command Center",
"version": "15.0.23346.1109"
},
{
"name": "Message Tracking Service",
"version": "1.2.5"
},
{
"name": "Management services",
"version": "15.0.23346.1109"
},
{
"name": "Intranet Role",
"version": "15.0.23346.1109"
}
]
},
"sender": {
"localPart": "nsp-forum",
"domain": "nospamproxy.com"
},
"headerFrom": {
"localPart": "nsp-forum",
"domain": "nospamproxy.com"
},
"mailId": "d8468a1f-53f4-4e83-8ea5-961320bb2b3a",
"transactionId": "d8468a1f-53f4-4e83-8ea5-961320bb2b3a",
"messageId": "<56b98a06ec61f8e64553ec94ba4d49f5@forum.nospamproxy.com>",
"size": 6205,
"subject": "NoSpamProxy Forum - Kontobestätigung erforderlich",
"signed": "None",
"encrypted": "None",
"sent": "2024-01-25T18:23:12.903+01:00",
"processingTime": "00:00:00.9300000",
"status": "PermanentlyBlocked",
"ruleName": "All other inbound emails",
"scl": 4,
"validationStatus": "RejectPermanent",
"rejectReason": "SpamOrVirus",
"processingGatewayRole": "Gateway Role 1",
"receiveConnectorName": "SMTP on all addresses",
"clientIPAddress": "193.37.132.94",
"wasReceivedFromRelayServer": false,
"detailsWereDeleted": false,
"urlSafeguardInfoWasDeleted": false,
"firstDeliveryAttempt": null,
"deliveryDurationInSeconds": null,
"deliveryAttempts": [
{
"recipient": "michael@massagesesselwelt.de",
"deliveryDate": "2024-01-25T18:23:12.903+01:00",
"status": "PermanentlyBlocked",
"dane": "None",
"statusMessage": "5.7.1 This email was rejected because it violates our security policy\r\n5.7.1 Classified as Spam.",
"targetHost": null,
"sendConnector": null,
"tlsCipherSuite": null,
"tlsProtocol": "None"
}
],
"levelOfTrust": {
"domainBonus": 0,
"addressPairingBonus": 0,
"messageIdBonus": 0,
"subjectBonus": 0,
"dsnPoints": 0,
"mailIsTrusted": false,
"scl": 0,
"senderDomainIsFreeMailer": false,
"isSenderAuthenticated": true,
"addressPairingIsWildcardEntry": false,
"wasHeaderFromAddressUsedForValidation": false
},
"actions": [
{
"name": "Greylisting",
"time": "00:00:00.0000000",
"decision": "Pass"
},
{
"name": "Malware-Scanner",
"time": "00:00:00.0400000",
"decision": "Pass"
},
{
"name": "32Guards",
"time": "00:00:00.6700000",
"decision": "Pass"
}
],
"attachments": [],
"filters": [
{
"name": "Echtzeit-Blocklisten",
"time": "00:00:00.1000000",
"scl": 0
},
{
"name": "32Guards",
"time": "00:00:00.6700000",
"scl": 0
},
{
"name": "Core Antispam Engine",
"time": "00:00:00.0500000",
"scl": 4,
"message": "Classified as Spam."
},
{
"name": "Reputationsfilter",
"time": "00:00:00.0200000",
"scl": 0
},
{
"name": "Spam URI Realtime Blocklists",
"time": "00:00:00.0300000",
"scl": 0
},
{
"name": "CSA Certified IP List",
"time": "00:00:00.0000000",
"scl": 0
}
],
"operations": [
{
"created": "2024-01-25T17:23:14.1+01:00",
"operation": {
"idStr": "-6211015842923121267",
"type": "DnsValidationEntry",
"data": "{\"$type\":\"DnsValidationEntry\",\"senderAddress\":\"193.37.132.94\",\"hasMailFromDomainARecord\":true,\"mailFromDomainARecordValue\":\"netatwork-de.mail.cloud.nospamproxy.com (193.37.132.219, 193.37.132.94)\",\"hasPtrRecord\":true,\"isPtrRecordValid\":true,\"ptrRecordValue\":\"de-s111-gw1.mail.cloud.nospamproxy.com\",\"isPtrRecordForwardLookupValid\":true,\"ptrRecordForwardLookupValue\":\"193.37.132.94\",\"typeName\":\"DnsValidationEntry\"}"
}
},
{
"created": "2024-01-25T17:23:14.1+01:00",
"operation": {
"idStr": "-5606542180472989225",
"type": "MalwareScan",
"data": "{\"$type\":\"MalwareScanValidationEntry\",\"action\":\"Pass\",\"infectedMailParts\":[],\"availableScanners\":\"Filebased, Integrated\",\"hasAdministrativeNotificationBeenSent\":false,\"typeName\":\"MalwareScan\"}"
}
},
{
"created": "2024-01-25T17:23:14.1+01:00",
"operation": {
"idStr": "-1256305019345308335",
"type": "ConnectionValidation",
"data": "{\"$type\":\"ConnectionValidationEntry\",\"isConnectionSecured\":true,\"typeName\":\"ConnectionValidation\"}"
}
},
{
"created": "2024-01-25T17:23:14.1+01:00",
"operation": {
"idStr": "872179655972254346",
"type": "DmarcValidationEntry",
"data": "{\"$type\":\"DmarcValidationEntry\",\"effectivePolicy\":\"None\",\"rfc5322FromDomain\":\"nospamproxy.com\",\"validationResult\":\"Success\",\"organizationalDomain\":\"nospamproxy.com\",\"dkimResult\":[{\"failures\":\"None\",\"signatureTime\":\"2024-01-25T18:23:12+01:00\",\"authenticatedDomain\":\"nospamproxy.com\",\"signatureAlgorithm\":\"Ed25519Sha256\",\"selector\":\"dkim1e\"},{\"failures\":\"None\",\"signatureTime\":\"2024-01-25T18:23:12+01:00\",\"authenticatedDomain\":\"nospamproxy.com\",\"signatureAlgorithm\":\"RsaSha256\",\"selector\":\"dkim1r\"}],\"spfResult\":[{\"result\":\"Pass\",\"domain\":\"nospamproxy.com\",\"matchingEntryType\":\"Include\",\"matchingEntryValue\":\"spf.netatwork-de.cloud.nospamproxy.com\"},{\"result\":\"Pass\",\"domain\":\"de-s111-gw1.mail.cloud.nospamproxy.com\",\"matchingEntryType\":\"Ip4\",\"matchingEntryValue\":\"193.37.132.94\"}],\"spfValidationStatus\":\"Validated\",\"dkimAlignment\":true,\"spfAlignment\":true,\"applicablePolicy\":\"Reject\",\"arcDmarcOverride\":\"None\",\"typeName\":\"DmarcValidationEntry\"}"
}
},
{
"created": "2024-01-25T17:23:14.1+01:00",
"operation": {
"idStr": "2781974209339456166",
"type": "SenderRecipientValidationEntry",
"data": "{\"$type\":\"SenderRecipientValidationEntry\",\"localAddresses\":[],\"ownedDomainsInHeaderFromDisplayName\":[],\"dnsValidationResultWithAddress\":{\"result\":\"Success\"},\"headerFromContainsAngleBracketsWithInvalidEmailAddress\":false,\"headerFromIsInvalidWithEmptyMailFrom\":false,\"headerFromContainsMultipleAddresses\":false,\"headerFromDisplayNameContainsDomainDifferentFromEmailAddress\":false,\"headerToContainsAtSignOutsideOfEmailAddress\":false,\"headerToContainsAngleBracketsWithInvalidEmailAddress\":false,\"headerToIsEmpty\":false,\"headerFromOrToContainMultipleUnicodeLanguagePlanes\":false,\"headerToDoesNotContainLocalUser\":false,\"typeName\":\"SenderRecipientValidationEntry\"}"
}
},
{
"created": "2024-01-25T17:23:14.1+01:00",
"operation": {
"idStr": "7413427175906144088",
"type": "GreylistingActionEntry",
"data": "{\"$type\":\"GreylistingActionEntry\",\"isSclThresholdExceeded\":false,\"isMailAlreadyRejected\":false,\"isMailActionDeterminedBySenderAddressReputation\":false,\"mailAction\":\"None\",\"senderNetwork\":\"193.37.132.94\",\"senderAddress\":\"nsp-forum@nospamproxy.com\",\"details\":[],\"isActionExecuted\":false,\"typeName\":\"GreylistingActionEntry\"}"
}
},
{
"created": "2024-01-25T17:23:14.1+01:00",
"operation": {
"idStr": "9023558194774637556",
"type": "Heimdall",
"data": "{\"$type\":\"HeimdallValidationEntry\",\"aggregatedAction\":\"None\",\"aggregatedEmailResult\":{\"action\":\"None\"},\"emailResults\":[],\"aggregatedAttachmentResult\":{\"action\":\"None\"},\"attachmentResults\":[],\"aggregatedUrlResult\":{\"action\":\"None\"},\"urlResults\":[],\"typeName\":\"Heimdall\"}"
}
}
],
"tlsCipherSuite": "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384",
"tlsProtocol": "Tls12"
}