YOUR COMPENSATION FROM CAROL..

Tuesday, January 24, 2023

My yesterday blog entry does not explain why we received a spam mail from our own mail server three days ago.

Here are the relevant headers of that mail:

Return-Path: <cw4826878@gmail.com>
X-Original-To: info@saffre-rumma.net
Delivered-To: info@saffre-rumma.net
Received: by saffre-rumma.net (mail.saffre-rumma.net, from userid 1008)
      id 42C9C21701; Sat, 21 Jan 2023 23:03:45 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=saffre-rumma.net;
      s=mail; t=1674342225;
      bh=4zpM8MrO4ODlv4EnmHUvvh8W56Pgo7H7YgK6tHvZTRM=;
      h=Reply-To:From:To:Subject:Date:From;
      b=zaIcGPvwuxyr07J/O9nSnJJNJZ3CoRV13hHwf/nhBTvFUpt22dY8CKY+0CA9bPZ2v
       ZX/NfcJmhqoKcU0jng1cb9FCdQjFj/QVm8q+iM5HIq98+P562ybG/ryw+SOlSKBT13
       x9ccwA8En7eJY+sgTGG1JFr07iZNQWCoazkLeCe7dM0JGsFIJ6H0x0YEDhFB9CqeuG
       XsXm3/obh+R63rEhBu/C7UqvG1WSLMY+FNifIYHjLnTtcKKLpkpZoZj5C4VBDU9sL+
       TPZTnXpBl9BEYfrfG5DyQh1VXrUcCZSIPcPYc3Y8epEMKmS8NKuCJ4ATtkZ51pfse7
       j8kyVX8hxSVOw==
Received-SPF: Softfail (mailfrom) identity=mailfrom; client-ip=45.137.22.186; helo=hosted-by.rootlayer.net; envelope-from=cw4826878@gmail.com; receiver=<UNKNOWN>
Received: from hosted-by.rootlayer.net (unknown [45.137.22.186])
      by saffre-rumma.net (mail.saffre-rumma.net) with ESMTP id 224AF21672
      for <info@saffre-rumma.net>; Sat, 21 Jan 2023 23:03:42 +0000 (UTC)
Reply-To: philipisclement@gmail.com
From: CAROL@saffre-rumma.net, SMITH@saffre-rumma.net,
      cw4826878@gmail.com
To: info@saffre-rumma.net
Subject: YOUR COMPENSATION FROM CAROL..
Date: 21 Jan 2023 23:03:41 +0100
Message-ID: <20230121230341.2BAFFC26FBE2B2BA@gmail.com>

Here is the relevant part of our mail.log file:

Jan 21 23:03:42 saffre-rumma postfix/smtpd[16463]: warning: hostname hosted-by.rootlayer.net does not resolve to address 45.137.22.186
Jan 21 23:03:42 saffre-rumma postfix/smtpd[16463]: connect from unknown[45.137.22.186]
Jan 21 23:03:43 saffre-rumma policyd-spf[16467]: prepend Received-SPF: Softfail (mailfrom) identity=mailfrom; client-ip=45.137.22.186; helo=hosted-by.rootlayer.net; envelope-from=cw4826878@gmail.com; receiver=<UNKNOWN>
Jan 21 23:03:43 saffre-rumma postfix/smtpd[16463]: 224AF21672: client=unknown[45.137.22.186]
Jan 21 23:03:43 saffre-rumma postfix/cleanup[16471]: 224AF21672: message-id=<20230121230341.2BAFFC26FBE2B2BA@gmail.com>
Jan 21 23:03:43 saffre-rumma opendkim[627]: 224AF21672: [45.137.22.186] [45.137.22.186] not internal
Jan 21 23:03:43 saffre-rumma opendkim[627]: 224AF21672: not authenticated
Jan 21 23:03:43 saffre-rumma opendkim[627]: 224AF21672: no signature data
Jan 21 23:03:43 saffre-rumma postfix/qmgr[28134]: 224AF21672: from=<cw4826878@gmail.com>, size=1938, nrcpt=1 (queue active)
Jan 21 23:03:43 saffre-rumma postfix/smtpd[16463]: disconnect from unknown[45.137.22.186] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
Jan 21 23:03:43 saffre-rumma spamc[16474]: connect to spamd on ::1 failed, retrying (#1 of 3): Connection refused
Jan 21 23:03:43 saffre-rumma spamc[16474]: connect to spamd on 127.0.0.1 failed, retrying (#1 of 3): Connection refused
Jan 21 23:03:44 saffre-rumma spamc[16474]: connect to spamd on ::1 failed, retrying (#2 of 3): Connection refused
Jan 21 23:03:44 saffre-rumma spamc[16474]: connect to spamd on 127.0.0.1 failed, retrying (#2 of 3): Connection refused
Jan 21 23:03:45 saffre-rumma spamc[16474]: connect to spamd on ::1 failed, retrying (#3 of 3): Connection refused
Jan 21 23:03:45 saffre-rumma spamc[16474]: connect to spamd on 127.0.0.1 failed, retrying (#3 of 3): Connection refused
Jan 21 23:03:45 saffre-rumma spamc[16474]: connection attempt to spamd aborted after 3 retries
Jan 21 23:03:45 saffre-rumma postfix/pipe[16472]: 224AF21672: to=<info@saffre-rumma.net>, relay=spamassassin, delay=2.7, delays=0.6/0.02/0/2, dsn=2.0.0, status=sent (delivered via spamassassin service)
Jan 21 23:03:45 saffre-rumma postfix/qmgr[28134]: 224AF21672: removed
Jan 21 23:03:45 saffre-rumma postfix/pickup[17597]: 42C9C21701: uid=1008 from=<cw4826878@gmail.com>
Jan 21 23:03:45 saffre-rumma postfix/cleanup[16471]: 42C9C21701: message-id=<20230121230341.2BAFFC26FBE2B2BA@gmail.com>
Jan 21 23:03:45 saffre-rumma opendkim[627]: 42C9C21701: DKIM-Signature field added (s=mail, d=saffre-rumma.net)
Jan 21 23:03:45 saffre-rumma postfix/qmgr[28134]: 42C9C21701: from=<cw4826878@gmail.com>, size=2104, nrcpt=1 (queue active)
Jan 21 23:03:45 saffre-rumma postfix/local[16519]: 42C9C21701: to=<luc@saffre-rumma.net>, orig_to=<info@saffre-rumma.net>, relay=local, delay=0.04, delays=0.02/0.02/0/0, dsn=2.0.0, status=sent (delivered to maildir)
Jan 21 23:03:45 saffre-rumma postfix/local[16519]: 42C9C21701: to=<hannes@saffre-rumma.net>, orig_to=<info@saffre-rumma.net>, relay=local, delay=0.04, delays=0.02/0.02/0/0.01, dsn=2.0.0, status=sent (delivered to maildir)
Jan 21 23:03:45 saffre-rumma postfix/qmgr[28134]: 42C9C21701: removed