Vielen Dank für schnelle Antworten, anbei der Message Track:
Die Domänen, IPs und Sender/Empfänger wurden aus Datenschutzgründen rausgenommen.
{
"sender": {
},
"headerFrom": {
},
"mailId": "dc3b4405-0edc-4ac2-b166-c462e91ef10a",
"messageId": "<>",
"size": 35739,
"subject": "WG: Wattline",
"signed": "None",
"encrypted": "None",
"sent": "2022-07-01T09:57:10.13+02:00",
"processingTime": "00:00:03.9400000",
"status": "PermanentlyBlocked",
"ruleName": "Eingehend_Whiteliste",
"scl": -10,
"validationStatus": "RejectPermanent",
"rejectReason": "Policy",
"cyrenReferenceId": "str=0001.0A702F22.62BEA89E.004D,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0",
"processingGatewayRole": "",
"receiveConnectorName": "SMTP on all addresses",
"clientIPAddress": "",
"wasReceivedFromRelayServer": false,
"detailsWereDeleted": false,
"urlSafeguardInfoWasDeleted": false,
"senderConnectionSecurity": {
"tlsProtocol": "Tls12",
"hashAlgorithm": "Sha384",
"keyExchangeAlgorithm": "DiffieHellmanEllipticKey",
"keyExchangeAlgorithmStrength": 256,
"cipherAlgorithm": "Aes256"
},
"deliveryAttempts": [
{
"recipient": "",
"deliveryDate": "2022-07-01T09:57:10.13+02:00",
"status": "PermanentlyBlocked",
"dane": "None",
"statusMessage": "5.7.1 This email was rejected because it violates our security policy\r\n5.7.1 Die Dateianhänge image002.emz sind nicht erlaubt.",
"sendConnector": ""
}
],
"levelOfTrust": {
"domainBonus": 0,
"addressPairingBonus": 100,
"messageIdBonus": 0,
"subjectBonus": 0,
"dsnPoints": 0,
"mailIsTrusted": true,
"scl": -10,
"senderDomainIsFreeMailer": false,
"isSenderAuthenticated": true,
"addressPairingIsWildcardEntry": false,
"wasHeaderFromAddressUsedForValidation": false
},
"actions": [
{
"name": "Projekt Heimdall (Vorschau)",
"time": "00:00:00.1900000",
"decision": "Pass"
},
{
"name": "Inhaltsfilter",
"time": "00:00:00",
"decision": "RejectPermanent",
"message": "Die Dateianhänge image002.emz sind nicht erlaubt."
},
{
"name": "URL Safeguard",
"time": "00:00:00",
"decision": "Pass"
},
{
"name": "S/MIME- und PGP-Überprüfung sowie Entschlüsselung (vorzugsweise eingehend)",
"time": "00:00:00",
"decision": "Pass"
},
{
"name": "Malware-Scanner",
"time": "00:00:00.6400000",
"decision": "Pass"
},
{
"name": "CSA-Whitelist",
"time": "00:00:00",
"decision": "Pass"
}
],
"filters": [
{
"name": "Cyren AntiSpam",
"time": "00:00:00",
"scl": 0
},
{
"name": "Realtime Blocklists",
"time": "00:00:02.6300000",
"scl": 0
},
{
"name": "Wortübereinstimmungen",
"time": "00:00:00.3100000",
"scl": 0
},
{
"name": "Spam URI Realtime Blocklists",
"time": "00:00:00.3200000",
"scl": 0
},
{
"name": "Reputationsfilter",
"time": "00:00:00.2000000",
"scl": 0
},
{
"name": "Cyren IP Reputation",
"time": "00:00:00.3700000",
"scl": 0
}
],
"operations": [
{
"created": "2022-07-01T09:56:18.973+02:00",
"operation": {
"type": "MalwareScan",
"data": "{\"$type\":\"MalwareScanValidationEntry\",\"cyrenZeroHourClassification\":{\"spamClassification\":\"Unknown\",\"virusClassification\":\"Unknown\",\"threatCount\":0,\"detectedThreatType\":\"None\",\"detectedThreatAccuracy\":\"None\",\"threatName\":\"\"},\"action\":\"Pass\",\"infectedMailParts\":[],\"availableScanners\":\"Cyren, Filebased, CyrenZeroHour\",\"hasAdministrativeNotificationBeenSent\":false,\"childValidationEntries\":[],\"typeName\":\"MalwareScan\"}"
}
},
{
"created": "2022-07-01T09:56:18.973+02:00",
"operation": {
"type": "AttachmentManagement",
"data": "{\"$type\":\"AttachmentManagementValidationEntry\",\"mailWasBlocked\":true,\"actions\":[{\"Filename\":\"image002.emz\",\"Action\":{\"actionType\":\"Block\",\"isAttachmentPasswordRequired\":false,\"name\":\"Reject entire mail\",\"removeActiveContentFromPdf\":false,\"convertWordDocumentToPdf\":false,\"convertExcelDocumentToPdf\":false,\"originalDocumentRetention\":\"Discard\",\"requireAdministrativeApproval\":false,\"sendAdministrativeNotification\":true,\"keepAttachmentOnWebPortal\":false,\"analyzeInSandbox\":false,\"uploadToSandbox\":true,\"sandboxMaliciousAttachmentAction\":\"None\",\"addInformationalPrefacePage\":true},\"Recipients\":[{\"localPart\":\"\",\"domain\":\"\"}],\"IsContentDisarmed\":false,\"MailWasPutOnHold\":false,\"IsAttachmentPasswordProtected\":false}],\"mailWasPutOnHold\":false,\"tnefAttachmentConvertedForRecipients\":[],\"isTnefAttachmentConverted\":false,\"childValidationEntries\":[],\"typeName\":\"AttachmentManagement\"}"
}
},
{
"created": "2022-07-01T09:56:18.973+02:00",
"operation": {
"type": "DnsValidationEntry",
"data": "{\"$type\":\"DnsValidationEntry\",\"senderAddress\":\"\",\"hasMailFromDomainARecord\":true,\"mailFromDomainARecordValue\":\" ()\",\"hasPtrRecord\":true,\"isPtrRecordValid\":true,\"ptrRecordValue\":\"\",\"isPtrRecordForwardLookupValid\":true,\"ptrRecordForwardLookupValue\":\"\",\"childValidationEntries\":[],\"typeName\":\"DnsValidationEntry\"}"
}
},
{
"created": "2022-07-01T09:56:18.973+02:00",
"operation": {
"type": "CyrenIpReputationFilterEntry",
"data": "{\"$type\":\"CyrenIpReputationFilterEntry\",\"ipAddress\":\"\",\"referenceId\":\"tid=0001.0A702F8D.62BEA89B.0058\",\"riskLevel\":0,\"recommendedAction\":\"Accept\",\"ipRange\":\"\",\"ipClass\":\"G1\",\"validBulkRatio\":-1,\"childValidationEntries\":[],\"typeName\":\"CyrenIpReputationFilterEntry\"}"
}
},
{
"created": "2022-07-01T09:56:18.973+02:00",
"operation": {
"type": "DmarcValidationEntry",
"data": "{\"$type\":\"DmarcValidationEntry\",\"effectivePolicy\":\"None\",\"rfc5322FromDomain\":\"\",\"validationResult\":\"BestGuessPass\",\"organizationalDomain\":\"\",\"dkimResult\":[{\"failures\":\"None\",\"authenticatedDomain\":\"\"}],\"spfResult\":[{\"result\":\"Pass\",\"domain\":\"\"},{\"result\":\"Pass\",\"domain\":\"\"}],\"spfValidationStatus\":\"Validated\",\"dkimAlignment\":true,\"spfAlignment\":true,\"childValidationEntries\":[],\"typeName\":\"DmarcValidationEntry\"}"
}
},
{
"created": "2022-07-01T09:56:18.973+02:00",
"operation": {
"type": "SenderRecipientValidationEntry",
"data": "{\"$type\":\"SenderRecipientValidationEntry\",\"localAddresses\":[],\"ownedDomainsInHeaderFromDisplayName\":[],\"dnsValidationResultWithAddress\":{\"result\":\"Success\"},\"headerFromContainsAngleBracketsWithInvalidEmailAddress\":false,\"headerFromIsInvalidWithEmptyMailFrom\":false,\"headerFromContainsMultipleAddresses\":false,\"headerFromDisplayNameContainsDomainDifferentFromEmailAddress\":false,\"headerToContainsAtSignOutsideOfEmailAddress\":false,\"headerToContainsAngleBracketsWithInvalidEmailAddress\":false,\"headerToIsEmpty\":false,\"headerFromOrToContainMultipleUnicodeLanguagePlanes\":false,\"headerToDoesNotContainLocalUser\":false,\"childValidationEntries\":[],\"typeName\":\"SenderRecipientValidationEntry\"}"
}
}
]
}
