30 Aug
2021
30 Aug
'21
4:10 p.m.
Hi all!
Don't know why but I'm getting mail bounces from the list:
"
Your mail to 'users(a)trinitydesktop.org' with the subject
Re: [tde-users] Re: Settings missing in Konqueror
Is being held until the list moderator can review it for approval.
The message is being held because:
Header "Yes" matched a header rule
Either the message will get posted to the list, or you will receive
notification of the moderator's decision.
"
Anybody knows why?
Nik
--
Please do not email me anything that you are not comfortable also sharing with the NSA,
CIA ...
30 Aug
30 Aug
4:16 p.m.
On Monday 30 of August 2021 18:10:47 Dr. Nikolaus Klepp wrote:
Hi all!
Don't know why but I'm getting mail bounces from the list:
"
Your mail to 'users(a)trinitydesktop.org' with the subject
Re: [tde-users] Re: Settings missing in Konqueror
Is being held until the list moderator can review it for approval.
The message is being held because:
Header "Yes" matched a header rule
Either the message will get posted to the list, or you will receive
notification of the moderator's decision.
"
Anybody knows why?
Nik
Hi Nik,
it seems that a substantial reason is that your domain got on blacklist.
Here is a complete listing of RSPAMD rating:
X-Spamd-Result: default: False [7.30 / 15.00];
ARC_NA(0.00)[];
RSPAMD_URIBL(4.50)[klepp.biz:email];
FROM_HAS_DN(0.00)[];
TO_DN_SOME(0.00)[];
MIME_GOOD(-0.10)[text/plain];
DMARC_NA(0.00)[klepp.biz];
AUTH_NA(1.00)[];
RCVD_COUNT_THREE(0.00)[3];
TO_MATCH_ENVRCPT_SOME(0.00)[];
RCPT_COUNT_TWO(0.00)[2];
MID_CONTAINS_FROM(1.00)[];
FROM_NAME_HAS_TITLE(1.00)[dr];
R_SPF_NA(0.00)[no SPF record];
FROM_EQ_ENVFROM(0.00)[];
R_DKIM_NA(0.00)[];
MIME_TRACE(0.00)[0:+];
ASN(0.00)[asn:6830, ipnet:62.179.0.0/17, country:NL];
RCVD_TLS_LAST(0.00)[];
RCVD_IN_DNSWL_LOW(-0.10)[62.179.121.140:from]
X-Rspamd-Server: mail
X-Spam: Yes
Note: I gradually approve your posts for delivery to the mailing list, but
I am not sure that everyone receives them because they can also evaluate
them as junk.
Cheers
--
Slávek
4:28 p.m.
Hi Slávek!
Anno domini 2021 Mon, 30 Aug 18:16:06 +0200
Slávek Banko scripsit:
On Monday 30 of August 2021 18:10:47 Dr. Nikolaus
Klepp wrote:
Thank you. So nothing I can do but wait :)
Nik
--
Please do not email me anything that you are not comfortable also sharing with the NSA,
CIA ...
Hi all!
Don't know why but I'm getting mail bounces from the list:
"
Your mail to 'users(a)trinitydesktop.org' with the subject
Re: [tde-users] Re: Settings missing in Konqueror
Is being held until the list moderator can review it for approval.
The message is being held because:
Header "Yes" matched a header rule
Either the message will get posted to the list, or you will receive
notification of the moderator's decision.
"
Anybody knows why?
Nik
Hi Nik,
it seems that a substantial reason is that your domain got on blacklist.
Here is a complete listing of RSPAMD rating:
X-Spamd-Result: default: False [7.30 / 15.00];
ARC_NA(0.00)[];
RSPAMD_URIBL(4.50)[klepp.biz:email];
FROM_HAS_DN(0.00)[];
TO_DN_SOME(0.00)[];
MIME_GOOD(-0.10)[text/plain];
DMARC_NA(0.00)[klepp.biz];
AUTH_NA(1.00)[];
RCVD_COUNT_THREE(0.00)[3];
TO_MATCH_ENVRCPT_SOME(0.00)[];
RCPT_COUNT_TWO(0.00)[2];
MID_CONTAINS_FROM(1.00)[];
FROM_NAME_HAS_TITLE(1.00)[dr];
R_SPF_NA(0.00)[no SPF record];
FROM_EQ_ENVFROM(0.00)[];
R_DKIM_NA(0.00)[];
MIME_TRACE(0.00)[0:+];
ASN(0.00)[asn:6830, ipnet:62.179.0.0/17, country:NL];
RCVD_TLS_LAST(0.00)[];
RCVD_IN_DNSWL_LOW(-0.10)[62.179.121.140:from]
X-Rspamd-Server: mail
X-Spam: Yes
Note: I gradually approve your posts for delivery to the mailing list, but
I am not sure that everyone receives them because they can also evaluate
them as junk.
Cheers 
7:02 p.m.
On Monday 30 August 2021 11:28:46 am Dr. Nikolaus Klepp wrote:
Anno domini 2021 Mon, 30 Aug 18:16:06 +0200 Slávek
Banko scripsit:
> On Monday 30 of August 2021 18:10:47 Dr. Nikolaus Klepp wrote:
> > Don't know why but I'm getting mail
bounces from the list:
> > Anybody knows why?
> it seems that a substantial reason is that your
domain got on blacklist.
> Here is a complete listing of RSPAMD rating:
Thank you. So nothing I can do but wait :)
Hi Nik,
Naw, just go un-blacklist your email domain.
RSPAMD_URIBL(4.50)[klepp.biz:email];
There are plenty of completely free web sites that'll show you how (so don't
get sucked into paying some ashhat). After you find an aggregator who'll
give you a report on all the different white/black list services, you'll
usually need to go to the ones that blacklist you directly to un-blacklist
yourself. Startpage, DuckDuckGo, etc... will get you where you need.
Per the below you could also:
- not use .biz (don't see that happening!)
- add some anti-forgery methods to your klepp.biz DNS? (DKIM1 and spf1
specifically) *
* Yeah, not sure on that, it seems the original sender is neo.lan
([85.126.97.210]). You’d have to send me a mail directly for me to dig
through the headers with any accuracy.
Best,
Michael
More info from headers you send:
Content analysis details: (1.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
Content analysis details: (1.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
manager
X-Spam-Flag: NO
7:28 p.m.
Hi Michael!
Anno domini 2021 Mon, 30 Aug 14:02:19 -0500
Michael scripsit:
On Monday 30 August 2021 11:28:46 am Dr. Nikolaus
Klepp wrote:
From what I can tell the problem is only on tde mailing list. Blacklist check did not show
any blacklisting for my maildomain. So without knowing what triggered RSPAMD_URIBL I have
no chance of resolving this.
Nik
Anno domini 2021 Mon, 30 Aug 18:16:06 +0200
Slávek Banko scripsit:
> On Monday 30 of August 2021 18:10:47 Dr. Nikolaus Klepp wrote:
> > Don't know why but I'm getting
mail bounces from the list:
> > Anybody knows why?
> it seems that a substantial reason is that
your domain got on blacklist.
> Here is a complete listing of RSPAMD rating:
Thank you. So nothing I can do but wait :)
Hi Nik,
Naw, just go un-blacklist your email domain.
RSPAMD_URIBL(4.50)[klepp.biz:email];
There are plenty of completely free web sites that'll show you how (so don't
get sucked into paying some ashhat). After you find an aggregator who'll
give you a report on all the different white/black list services, you'll
usually need to go to the ones that blacklist you directly to un-blacklist
yourself. Startpage, DuckDuckGo, etc... will get you where you need.
Per the below you could also:
- not use .biz (don't see that happening!)
- add some anti-forgery methods to your klepp.biz DNS? (DKIM1 and spf1
specifically) *
* Yeah, not sure on that, it seems the original sender is neo.lan
([85.126.97.210]). You’d have to send me a mail directly for me to dig
through the headers with any accuracy.
Best,
Michael
More info from headers you send:
Content analysis details: (1.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
Content analysis details: (1.0 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.2 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level
mail domains are different
0.8 KAM_INFOUSMEBIZ Prevalent use of
.info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
domains in spam/malware
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
-1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
manager
X-Spam-Flag: NO
____________________________________________________
tde-users mailing list -- users(a)trinitydesktop.org
To unsubscribe send an email to users-leave(a)trinitydesktop.org
Web mail archive available at
https://mail.trinitydesktop.org/mailman3/hyperkitty/list/users@trinitydeskt…
--
Please do not email me anything that you are not comfortable also sharing with the NSA,
CIA ...
8:56 p.m.
On Monday 30 August 2021 12:28:02 Dr. Nikolaus Klepp wrote:
Hi Michael!
Anno domini 2021 Mon, 30 Aug 14:02:19 -0500
Michael scripsit:
The same thing happened to me awhile back, maybe six months ago or more. I
wondered what was going on, but after waiting awhile, then posting and
getting answers from others, I surmised that I had not yet been banned.
But my email address got flagged (somewhere else online, I forget now) as
apparently a known spammer; which is funny, because I hardly use email at all
compared to almost anybody else I know.
Assuming that my email address hasn't been hijacked (and nobody has complained
to me about getting spammed), I am left to suppose that spam filters get a
lot of false positives, or something like that.
Bill
On Monday 30 August 2021 11:28:46 am Dr. Nikolaus
Klepp wrote:
From what I can tell the problem is only on tde mailing list. Blacklist
check did not show any blacklisting for my maildomain. So without knowing
what triggered RSPAMD_URIBL I have no chance of resolving this.
Nik
> Per the below you could also:
>
> - not use .biz (don't see that happening!)
> - add some anti-forgery methods to your klepp.biz DNS? (DKIM1 and spf1
> specifically) *
>
> * Yeah, not sure on that, it seems the original sender is neo.lan
> ([85.126.97.210]). You’d have to send me a mail directly for me to dig
> through the headers with any accuracy.
>
> Best,
> Michael
>
> More info from headers you send:
> Content analysis details: (1.0 points, 5.0 required)
> pts rule name description
> ---- ----------------------
> -------------------------------------------------- Content analysis
> details: (1.0 points, 5.0 required)
> pts rule name description
> ---- ----------------------
> -------------------------------------------------- 0.2
> HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail
> domains are different
> 0.8 KAM_INFOUSMEBIZ Prevalent use of
> .info|.us|.me|.me.uk|.biz|xyz|id|rocks|life
> domains in spam/malware
> 1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
> anti-forgery methods
> -1.0 MAILING_LIST_MULTI Multiple indicators imply a widely-seen list
> manager
> X-Spam-Flag: NO
>
> Anno domini 2021 Mon, 30 Aug 18:16:06 +0200
Slávek Banko scripsit:
Hi Nik,
Naw, just go un-blacklist your email domain.
On Monday 30 of August 2021 18:10:47 Dr. Nikolaus
Klepp wrote:
> Don't know why but I'm getting mail bounces from the list:
> Anybody knows why?
it seems that a substantial reason is that your domain got on
blacklist. Here is a complete listing of RSPAMD rating:
Thank you. So nothing I can do but wait :) RSPAMD_URIBL(4.50)[klepp.biz:email];
There are plenty of completely free web sites that'll show you how (so
don't get sucked into paying some ashhat). After you find an aggregator
who'll give you a report on all the different white/black list services,
you'll usually need to go to the ones that blacklist you directly to
un-blacklist yourself. Startpage, DuckDuckGo, etc... will get you where
you need. 
11:34 p.m.
On Mon August 30 2021 12:28:02 Dr. Nikolaus Klepp wrote:
From what I can tell the problem is only on tde
mailing list. Blacklist
check did not show any blacklisting for my maildomain. So without knowing
what triggered RSPAMD_URIBL I have no chance of resolving this.
Hi Nik,
What I'm going to write has some information that might seem private but it
is in fact all from the headers of your email and therefore already widely
published.
As best I can determine your IP (85.126.97.210), domain (klepp.biz), and mail
server (172.31.216.41) are clear. However that first mail server redirects
your mail to a second mail server.
The domain of both mail servers (upcmail.net) and the second mail server's
IP (62.179.121.136) are both listed on various UCEPROTECT RBL lists.
UCEPROTECT blocks whole networks which originate a lot of spam, so you're
being blocked either because of spam through upcmail.net or (more likely)
spam from other hosts on the same net as the second mail server.
I'm a postmaster and I don't use UCEPROTECT because (a) it has a lot of
false positives and (b) I've been bitten by UCEPROTECT when another VPS
at one of the hosting services I use had sent some spam.
You could try:
(a) Asking Slávek if there's anyway he can ignore UCEPROTECT and aggregates
that use UCEPROTECT.
(b) Working through http://www.uceprotect.net/ to try to remove the listings
(but they will probably return).
(c) Moving to a different mail server that is less tolerant of outbound spam.
--Mike
978
days inactive
978
days old
6 comments
5 participants
participants (5)
-
Dr. Nikolaus Klepp -
Michael -
Mike Bird -
Slávek Banko -
William Morder