View Issue Details
ID | Project | Category | View Status | Date Submitted | Last Update |
---|---|---|---|---|---|
0000014 | Shelter | Mails | public | 2019-04-23 19:26 | 2019-05-05 14:27 |
Reporter | AxelTerizaki | Assigned To | Sestren | ||
Priority | high | Severity | major | Reproducibility | unable to reproduce |
Status | closed | Resolution | fixed | ||
Summary | 0000014: Spam vers Outlook | ||||
Description | Suite à 0000010 je nous ai inscrits sur le Junk reporting de MS donc on reçoit les mails en spam dirigés vers outlook. Là on en a eu un justement et dans le slogs j'arrive pas trop à voir comment ça s'est connecté (j'avoue c'est pas évident à lire les logs de postfix) Voir les headers en pièce jointe | ||||
Tags | No tags attached. | ||||
Attached Files | headers.txt (7,536 bytes)
Sujet : It will be very nice for me to know such a wonderful person. De : "stegukk1@umanitoba.ca" <info@cooperativaceposs.com> Date : 17/04/2019 � 02:12 Pour : Undisclosed recipients:; X-HmXmrOriginalRecipient: <nardini@hotmail.ca> X-MS-Exchange-EOPDirect: true Received: from BL2NAM06HT027.Eop-nam06.prod.protection.outlook.com (2603:10b6:208:fc::44) by MN2PR06MB5520.namprd06.prod.outlook.com with HTTPS via MN2PR02CA0031.NAMPRD02.PROD.OUTLOOK.COM; Wed, 17 Apr 2019 00:13:37 +0000 Received: from BL2NAM06FT012.Eop-nam06.prod.protection.outlook.com (10.152.106.60) by BL2NAM06HT027.Eop-nam06.prod.protection.outlook.com (10.152.107.17) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384) id 15.20.1813.12; Wed, 17 Apr 2019 00:13:36 +0000 Authentication-Results: spf=none (sender IP is 176.31.224.90) smtp.mailfrom=cooperativaceposs.com; hotmail.ca; dkim=none (message not signed) header.d=none;hotmail.ca; dmarc=none action=none header.from=cooperativaceposs.com; Received-SPF: None (protection.outlook.com: cooperativaceposs.com does not designate permitted sender hosts) Received: from mail.mahoro-net.org (176.31.224.90) by BL2NAM06FT012.mail.protection.outlook.com (10.152.107.7) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.1813.12 via Frontend Transport; Wed, 17 Apr 2019 00:13:36 +0000 X-IncomingTopHeaderMarker: OriginalChecksum:C08A803D9AD713C5D3659505D2AEC00C22AED3F517315B63C7F3ABB8CE9F4C64;UpperCasedChecksum:F81DA66CBD80AA84711BCEC27655A99BA253B9D93486EC710BE92A92ED9CF4D3;SizeAsReceived:1474;Count:14 Received: from localhost (localhost [127.0.0.1]) by dawn.mahoro-net.org (Postfix) with ESMTP id 44D311A0C93; Wed, 17 Apr 2019 02:13:35 +0200 (CEST) Received: from mail.mahoro-net.org ([127.0.0.1]) by localhost (shelterv2.mahoro-net.org [127.0.0.1]) (amavisd-new, port 10024) with LMTP id ZaHY19GbYjhF; Wed, 17 Apr 2019 02:13:35 +0200 (CEST) Received: from 194.156.126.50 (mx-ll-180.183.243-61.dynamic.3bb.co.th [180.183.243.61]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) (Authenticated sender: postmaster@haruhi.fr) by mail.mahoro-net.org (Postfix) with ESMTPSA id 609991A0C4D; Wed, 17 Apr 2019 02:12:10 +0200 (CEST) ID du message : <9F9A2C7F74A08FBC60652C94E096616F@cooperativaceposs.com> R�pondre � : "stegukk1@umanitoba.ca" <stegukk1@umanitoba.ca> Content-Type: multipart/mixed; boundary="9502000dd821b8e55326189964df" X-Spam-Flag: YES X-Spam-Status: Yes, score=7.1 required=5.0 tests=HTML_MESSAGE,MISSING_HEADERS, PDS_FROM_2_EMAILS,REPLYTO_WITHOUT_TO_CC,TO_NO_BRKTS_HTML_IMG, TVD_RCVD_IP,TVD_RCVD_IP4,UNPARSEABLE_RELAY,URIBL_ABUSE_SURBL autolearn=no autolearn_force=no version=3.4.2 X-Spam-Level: ******* X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on shelterv2.mahoro-net.org X-IncomingHeaderCount: 14 Return-Path: info@cooperativaceposs.com X-MS-Exchange-Organization-ExpirationStartTime: 17 Apr 2019 00:13:36.2236 (UTC) X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit X-MS-Exchange-Organization-ExpirationInterval: 2:00:00:00.0000000 X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit X-MS-Exchange-Organization-Network-Message-Id: 28f021db-8b81-4086-99b2-08d6c2c98900 X-EOPAttributedMessage: 0 X-EOPTenantAttributedMessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 X-MS-Exchange-Organization-MessageDirectionality: Incoming X-Forefront-Antispam-Report: EFV:NLI; X-MS-Exchange-Organization-AuthSource: BL2NAM06FT012.Eop-nam06.prod.protection.outlook.com X-MS-Exchange-Organization-AuthAs: Anonymous X-MS-PublicTrafficType: Email X-MS-Office365-Filtering-Correlation-Id: 28f021db-8b81-4086-99b2-08d6c2c98900 X-Microsoft-Antispam: BCL:6;PCL:0;RULEID:(2390118)(5000112)(711020)(4605104)(610169)(8291501072);SRVR:BL2NAM06HT027; X-MS-TrafficTypeDiagnostic: BL2NAM06HT027: X-MS-Exchange-PUrlCount: 1 X-MS-Exchange-Diag-Persisted-Urls-ChunkCount: 1 X-MS-Exchange-Diag-Persisted-Urls-0: [{"ID":1,"OU":"https://cuu.su/mxq/","IBT":false,"U":"https://cuu.su/mxq/","DNR":false,"IAR":false,"LI":{"TN":"a","IC":true,"BF":0,"SI":1346,"EndIndex":1412},"SRCI":1,"CannonicalizedUrl":"https://cuu.su/mxq","NormalizedUrl":"https://cuu.su/mxq/","DPD":{"UF":"256","OCH":"17567108108410359606","CNT":"1","SL":"1"},"PROC":[{"T":2,"PU":"https://cuu.su/mxq/","CR":null,"OR":[{"OC":8,"RC":2,"EX":false},{"OC":16384,"RC":3,"EX":false},{"OC":1,"RC":2,"EX":false},{"OC":512,"RC":3,"EX":false},{"OC":262144,"RC":2,"EX":false},{"OC":256,"RC":2,"EX":false},{"OC":4,"RC":3,"EX":false},{"OC":16,"RC":2,"EX":false},{"OC":1024,"RC":3,"EX":false},{"OC":32,"RC":2,"EX":false}],"UrlOperationFlag":17924},{"T":1,"PU":"https://cuu.su/mxq","CR":null,"OR":[{"OC":8,"RC":2,"EX":false},{"OC":16384,"RC":3,"EX":false},{"OC":1,"RC":2,"EX":false},{"OC":512,"RC":3,"EX":false},{"OC":262144,"RC":2,"EX":false},{"OC":256,"RC":2,"EX":false},{"OC":4,"RC":3,"EX":false},{"OC":16,"RC":2,"EX":false},{"OC":1024,"RC":3,"EX":false},{"OC":32,"RC":2,"EX":false},{"OC":4096,"RC":2,"EX":false}],"UrlOperationFlag":17924}]}] X-MS-Exchange-Diag-PUrlInfoCount: 1 X-MS-Exchange-EOPDirect: true X-Sender-IP: 176.31.224.90 X-SID-PRA: INFO@COOPERATIVACEPOSS.COM X-SID-Result: NONE X-MS-Exchange-Organization-PCL: 8 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-OriginalArrivalTime: 17 Apr 2019 00:13:36.0454 (UTC) X-MS-Exchange-CrossTenant-Network-Message-Id: 28f021db-8b81-4086-99b2-08d6c2c98900 X-MS-Exchange-CrossTenant-Id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-CrossTenant-FromEntityHeader: Internet X-MS-Exchange-CrossTenant-RMS-PersistedConsumerOrg: 00000000-0000-0000-0000-000000000000 X-MS-Exchange-Transport-CrossTenantHeadersStamped: BL2NAM06HT027 X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.1314628 X-MS-Exchange-Processed-By-BccFoldering: 15.20.1792.016 X-Microsoft-Antispam-Mailbox-Delivery: abwl:0;wl:0;pcwl:0;kl:0;iwl:0;dwl:0;dkl:0;rwl:0;ucf:0;jmr:0;ex:0;psp:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(5062000261)(5061607266)(5061608174)(4900115)(4920090)(6375004)(4950130)(4990090)(9140004);RF:JunkEmail; X-Message-Info: qoGN4b5S4yp61bh2o1W2jetqR/z3d/FZ9kuS/b8ZjYKqeOQj+UQZd+102BMGBC8C0lakVlzENi6AAHT92GmPoC/rIKgd2hbVBu7gzCpIWtp82a6ZepPAcUQ1EMCyUAfAKgasT1hTF+0YI4rrt9rgWIRk9idEDv1+x2tX4SYI27Pm7x9XpwZkqDzGQVdSafMA0I+DmcdGoWtisgE0LnWIuw== X-Message-Delivery: Vj0xLjE7dXM9MDtsPTA7YT0wO0Q9MjtHRD0yO1NDTD02 X-Microsoft-Antispam-Message-Info: 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 Version de MIME: 1.0 | ||||
related to | 0000016 | closed | AxelTerizaki | Impossible d'envoyer des mails vers Yahoo.fr |
related to | 0000017 | closed | AxelTerizaki | Ménage dans les comptes mails en forward only |
C'est passé parce que le mec s'est log avec le compte suivant: sasl_method=LOGIN, sasl_username=postmaster@haruhi.fr |
|
T'as fait le lien comment? J e vais changer le mdp immédiatement. | |
J'ai regardé les logs postfix | |
grep mail source et mail dest, grep ID de la transaction postfix et voilà | |
Je me note ça pour la documentation. J'avais essayé de regarder à l'oeil nu à partir de la destination mais j'avais pas retrouvé le mail source. | |
L'issue n'était pas close, un problème avec postfixadmin m'a en fait empêché de changer le mot de passe. Le souci vient du fait qu'une version antérieure de postfixadmin du temps de shelterv1/twilight avait mal MAJ les comtpes et du coup ils étaient pas modifiables à cause d'une entrée dans la BDD qui manquait. Il va falloir faire un peu de ménage pour fixer tout ça domaine par domaine. |
|
Date Modified | Username | Field | Change |
---|---|---|---|
2019-04-23 19:26 | AxelTerizaki | New Issue | |
2019-04-23 19:26 | AxelTerizaki | File Added: headers.txt | |
2019-04-23 21:38 | Sestren | Note Added: 0000032 | |
2019-04-23 21:38 | Sestren | Assigned To | => Sestren |
2019-04-23 21:38 | Sestren | Status | new => confirmed |
2019-04-23 21:51 | AxelTerizaki | Note Added: 0000033 | |
2019-04-23 21:53 | AxelTerizaki | Status | confirmed => resolved |
2019-04-23 21:53 | AxelTerizaki | Resolution | open => fixed |
2019-04-23 21:56 | Sestren | Note Added: 0000034 | |
2019-04-23 21:57 | Sestren | Note Added: 0000035 | |
2019-04-23 22:00 | AxelTerizaki | Note Added: 0000036 | |
2019-04-25 11:38 | AxelTerizaki | Relationship added | related to 0000016 |
2019-04-25 18:16 | AxelTerizaki | Note Added: 0000044 | |
2019-04-25 18:18 | AxelTerizaki | Relationship added | related to 0000017 |
2019-05-05 14:27 | Sestren | Status | resolved => closed |