Hi, I have recently started receiving regular junk mail that is passing the spam filter (which I would expect as it looks like genuine mail) that is allegedly from one of my addresses, so I decided to blacklist the specific address.
My "mydomain.co.uk" is hosted at JTN with all mail forwarded to Plusnet "mydomain.plus.com" where the blacklisted address in question goes to a specific mailbox and all other addresses go to a catch-all.
According to the FAQ's reference to problem 55215, blacklisting mail destined for a specific mailbox should work. It appears to work fine if I impersonate "blacklisted@mydomain.co.uk" from an external account and send test mail to "blacklisted@mydomain.co.uk" with the same content as the spam in question (so should pass the edge filter), the mail gets blackholed. Unfortunately, it isn't working for the spam which is still getting through ... strange. Has anyone any ideas?
Header that gets past the blacklist -
**************************************************************************************************
Return-path: <jeannette.hage@akzonobel.com>
Envelope-to: blacklisted@mydomain.plus.com
Delivery-date: Mon, 03 May 2010 08:51:58 +0100
Received: from [212.159.7.103] (helo=mx.pcl-ipin04.plus.net)
by inmx22.plus.net with esmtp (PlusNet MXCore v2.00) id 1O8qRa-00059p-21
for blacklisted@mydomain.plus.com; Mon, 03 May 2010 08:51:58 +0100
Authentication-Results: mx.pcl-ipin04.plus.net; dkim=neutral (message not signed) header.i=none
Received-SPF: None identity=pra; client-ip=84.92.2.65;
receiver=mx.pcl-ipin04.plus.net;
envelope-from="xxxxxxxx@akzonobel.com";
x-sender="blacklisted@mydomain.co.uk";
x-conformance=sidf_compatible
Received-SPF: Fail identity=mailfrom; client-ip=84.92.2.65;
receiver=mx.pcl-ipin04.plus.net;
envelope-from="xxxxxxxx@akzonobel.com";
x-sender="xxxxxxxx@akzonobel.com";
x-conformance=sidf_compatible
Received-SPF: None identity=helo; client-ip=84.92.2.65;
receiver=mx.pcl-ipin04.plus.net;
envelope-from="xxxxxxxx@akzonobel.com";
x-sender="postmaster@xxxxxxxxxx.plus.net";
x-conformance=sidf_compatible
X-SBRS: 5.1
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AgYXALsd3ktUXAJBl2dsb2JhbAAKbgGQBQEBinxGdAEBAQEBCBUHM44tqxKCTwUZCIIdBA
X-IronPort-AV: E=McAfee;i="5100,188,5970"; a="325312136"
X-IronPort-AV: E=Sophos;i="4.52,318,1270422000";
d="scan'208,217";a="325312136"
Received: from mx.ironport.plus.net (HELO relay.pcl-ipout01.plus.net) ([84.92.2.65])
by mx.pcl-ipin04.plus.net with ESMTP; 03 May 2010 08:51:57 +0100
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: Am4tAIod3kvVomGh/2dsb2JhbAAKbgGQBQEBinxGgVCOLasYgk8FGQiCHQQ
Received: from just-the-name.co.uk (HELO mail.just-the-name.co.uk) ([213.162.97.161])
by relay.pcl-ipout01.plus.net with ESMTP; 03 May 2010 08:51:57 +0100
Received: from akzonobel.com (unknown [92.81.169.118])
by mail.just-the-name.co.uk (Postfix) with SMTP id 5A637404D63
for <blacklisted@mydomain.co.uk>; Mon, 3 May 2010 08:51:50 +0100 (BST)
To: <blacklisted@mydomain.co.uk>
From: <blacklisted@mydomain.co.uk>
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
Message-Id: <20100503075150.5A637404D63@mail.just-the-name.co.uk>
Date: Mon, 3 May 2010 08:51:50 +0100 (BST)
X-PN-Virus-Filtered: by PlusNet MXCore (v5.00)
X-PN-Spam-Filtered: by PlusNet MXCore (v5.00)
**************************************************************************************************
