Welcome, Guest
Username: Password: Remember me
Keyword

TOPIC: spam problem

spam problem 2 years 7 months ago #33324

hi with a spam checker based on spam assassin i get this errors:

2.5 points: missing blank line between message header and body
2.2 point sendere does not match SPF record (neutral)

other results
- received by server with no name
Please log in to post a reply

Re: spam problem 2 years 7 months ago #33327

  • Adrien
  • Adrien's Avatar
  • Unlimited pack owner
  • AcySMS owner
  • Templates pack owner
  • Posts: 17956
  • Karma: 600
Hello,

What mailer method are you using?

About SPF, you should check this article to create one on your server:
www.acyba.com/en/support/documentation/1...ailing-spam.html#spf

And about the server name, you should ask your hosting company about it (or set it by yourself if you own a dedicated server).
Please have a look at our official documentation before posting a new message!

Do you like AcyMailing? We love your reviews!
We would appreciate if you could take 5 minutes to register on the JED and then post a review on the Joomla! Extensions Directory.
We answered one of your question? Well, it's the best way to thank us!
Please log in to post a reply

Re: spam problem 2 years 7 months ago #33328

i'm using smtps from aruba.it with SSL

recently i belive there was an hacking on my site or similar because i got many many bouncebacks with the text i paste below.... so i'm checking that the template i use for the email is ok ... that is why i got this reports.....


here is a spam check i've done

This message is an automatic response from Port25's authentication verifier
service at verifier.port25.com. The service allows email senders to perform
a simple check of various sender authentication mechanisms. It is provided
free of charge, in the hope that it is useful to the email community. While
it is not officially supported, we welcome any feedback you may have at
<This email address is being protected from spambots. You need JavaScript enabled to view it.>.

Thank you for using the verifier,

The Port25 Solutions, Inc. team

==========================================================
Summary of Results
==========================================================
SPF check: neutral
DomainKeys check: neutral
DKIM check: neutral
Sender-ID check: neutral
SpamAssassin check: ham

==========================================================
Details:
==========================================================

HELO hostname: smtplq02.aruba.it
Source IP: 62.149.158.66
mail-from: This email address is being protected from spambots. You need JavaScript enabled to view it.

SPF check details:
Result: neutral (SPF-Result: None)
ID(s) verified: smtp.mailfrom=bounce@yoga-acrobatico.it
DNS record(s):
yoga-acrobatico.it. SPF (no records)
yoga-acrobatico.it. TXT (no records)

DomainKeys check details:
Result: neutral (message not signed)
ID(s) verified: header.From=info@yoga-acrobatico.it
DNS record(s):

DKIM check details:
Result: neutral (message not signed)
ID(s) verified:

NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions. If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.

Sender-ID check details:
Result: neutral (SPF-Result: None)
ID(s) verified: header.From=info@yoga-acrobatico.it
DNS record(s):
yoga-acrobatico.it. SPF (no records)
yoga-acrobatico.it. TXT (no records)

SpamAssassin check details:
SpamAssassin v3.3.1 (2010-03-16)

Result: ham (-1.9 points, 5.0 required)

pts rule name description
----

-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at www.dnswl.org/, no
trust
[62.149.158.66 listed in list.dnswl.org]
0.0 T_FRT_POSSIBLE BODY: ReplaceTags: Possible
-1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message

==========================================================
Explanation of the possible results (from RFC 5451)
==========================================================

SPF and Sender-ID Results
=========================

"none"
No policy records were published at the sender's DNS domain.

"neutral"
The sender's ADMD has asserted that it cannot or does not
want to assert whether or not the sending IP address is authorized
to send mail using the sender's DNS domain.

"pass"
The client is authorized by the sender's ADMD to inject or
relay mail on behalf of the sender's DNS domain.

"policy"
The client is authorized to inject or relay mail on behalf
of the sender's DNS domain according to the authentication
method's algorithm, but local policy dictates that the result is
unacceptable.

"fail"
This client is explicitly not authorized to inject or
relay mail using the sender's DNS domain.

"softfail"
The sender's ADMD believes the client was not authorized
to inject or relay mail using the sender's DNS domain, but is
unwilling to make a strong assertion to that effect.

"temperror"
The message could not be verified due to some error that
is likely transient in nature, such as a temporary inability to
retrieve a policy record from DNS. A later attempt may produce a
final result.

"permerror"
The message could not be verified due to some error that
is unrecoverable, such as a required header field being absent or
a syntax error in a retrieved DNS TXT record. A later attempt is
unlikely to produce a final result.


DKIM and DomainKeys Results
===========================

"none"
The message was not signed.

"pass"
The message was signed, the signature or signatures were
acceptable to the verifier, and the signature(s) passed
verification tests.

"fail"
The message was signed and the signature or signatures were
acceptable to the verifier, but they failed the verification
test(s).

"policy"
The message was signed but the signature or signatures were
not acceptable to the verifier.

"neutral"
The message was signed but the signature or signatures
contained syntax errors or were not otherwise able to be
processed. This result SHOULD also be used for other
failures not covered elsewhere in this list.

"temperror"
The message could not be verified due to some error that
is likely transient in nature, such as a temporary inability
to retrieve a public key. A later attempt may produce a
final result.

"permerror"
The message could not be verified due to some error that
is unrecoverable, such as a required header field being
absent. A later attempt is unlikely to produce a final result.


==========================================================
Original Email
==========================================================

Return-Path: <This email address is being protected from spambots. You need JavaScript enabled to view it.>
Received: from smtplq02.aruba.it (62.149.158.66) by verifier.port25.com id hfcco411u9cp for <This email address is being protected from spambots. You need JavaScript enabled to view it.>; Tue, 3 Apr 2012 11:38:41 -0400 (envelope-from <This email address is being protected from spambots. You need JavaScript enabled to view it.>)
Authentication-Results: verifier.port25.com; spf=neutral (SPF-Result: None) smtp.mailfrom=bounce@yoga-acrobatico.it
Authentication-Results: verifier.port25.com; domainkeys=neutral (message not signed) header.From=info@yoga-acrobatico.it
Authentication-Results: verifier.port25.com; dkim=neutral (message not signed)
Authentication-Results: verifier.port25.com; sender-id=neutral (SPF-Result: None) header.From=info@yoga-acrobatico.it
Received: (qmail 13700 invoked by uid 89); 3 Apr 2012 15:38:38 -0000
Received: from unknown (HELO smtp6.aruba.it) (62.149.158.226)
by smtplq02.aruba.it with SMTP; 3 Apr 2012 15:38:38 -0000
Received: (qmail 3594 invoked by uid 89); 3 Apr 2012 15:38:38 -0000
Received: from unknown (HELO www.yoga-acrobatico.it) (info@yoga-acrobatico.it@62.149.141.207)
by smtp6.ad.aruba.it with ESMTPA; 3 Apr 2012 15:38:38 -0000
Date: Tue, 3 Apr 2012 17:38:38 +0200
Return-Path: This email address is being protected from spambots. You need JavaScript enabled to view it.
To: SpamControl <This email address is being protected from spambots. You need JavaScript enabled to view it.>
From: AcroYoga Italia <This email address is being protected from spambots. You need JavaScript enabled to view it.>
Reply-To: AcroYoga Italia <This email address is being protected from spambots. You need JavaScript enabled to view it.>
Subject: Prova template
Message-ID: <This email address is being protected from spambots. You need JavaScript enabled to view it.>
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version 2.0.4]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_bfbad8df6909ea5aaeb5a69e8a2c1f64"
X-Spam-Rating: smtplq02.aruba.it 1.6.2 0/1000/N

--b1_bfbad8df6909ea5aaeb5a69e8a2c1f64
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Last Edit: 2 years 7 months ago by jacopo.
Please log in to post a reply

Re: spam problem 2 years 7 months ago #33333

  • Adrien
  • Adrien's Avatar
  • Unlimited pack owner
  • AcySMS owner
  • Templates pack owner
  • Posts: 17956
  • Karma: 600
Hello,

I checked the message (the one which makes you thinking you have been hacked) and it's sent by 62.149.141.166 and using the PHPMailer library v5.2

Acy does not use this version of PHPMailer but Joomla 2.5 does so it may indeed be an hacking issue you should check.


About your own spam report, you should take the time to validate your SPF and make sure you secure your website.
Please have a look at our official documentation before posting a new message!

Do you like AcyMailing? We love your reviews!
We would appreciate if you could take 5 minutes to register on the JED and then post a review on the Joomla! Extensions Directory.
We answered one of your question? Well, it's the best way to thank us!
Please log in to post a reply

Re: spam problem 2 years 7 months ago #33335

Your support is the fastest of the planet!!!!!

Actually that 62.149.141.166 is one of the IP address used by the server aruba.it (where my site is hosted)

is possible that the phpmail library v5.2 is the one used by their server to send emails?



actually i do not know the difference between smtp and php ..... but my joomla is configured to send via smtps and is version 1.5.25 ....


in case can you suggest some good component to secure the site? i have sh404sef but never spent time to configure it... maybe there is some better extension?
Please log in to post a reply

Re: spam problem 2 years 7 months ago #33336

  • Adrien
  • Adrien's Avatar
  • Unlimited pack owner
  • AcySMS owner
  • Templates pack owner
  • Posts: 17956
  • Karma: 600
Hello,
is possible that the phpmail library v5.2 is the one used by their server to send emails?
No, it's not a server library, it's a php one so only used by php scripts
actually i do not know the difference between smtp and php ..... but my joomla is configured to send via smtps and is version 1.5.25 ....
I don't think J1.5.x uses PHPMailerv5.2...
Or maybe there is an other application on this server using PHPMailerV5.2?
in case can you suggest some good component to secure the site? i have sh404sef but never spent time to configure it... maybe there is some better extension?
Never tried one...
Please have a look at our official documentation before posting a new message!

Do you like AcyMailing? We love your reviews!
We would appreciate if you could take 5 minutes to register on the JED and then post a review on the Joomla! Extensions Directory.
We answered one of your question? Well, it's the best way to thank us!
Please log in to post a reply

Re: spam problem 2 years 6 months ago #35242

I have a question:

when i get a bounce like this is it for:

1) the user flagged the mail as spam so he is rejecting it? (in this case i can remove this user form the list)
2) is a spam filter preventing the user from getting the email? (in this case i'm in a black list)

BOUNCE EMAIL TEXT:

Hi. This is the qmail-send program at smtplqs01.aruba.it.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<This email address is being protected from spambots. You need JavaScript enabled to view it.>:
62.149.128.210 failed after I sent the message.
Remote host said: 552 5.2.0 AeSR1j00Y1bJBaN01eSRFX spam detected

--- Below this line is a copy of the message.

Return-Path: <This email address is being protected from spambots. You need JavaScript enabled to view it.>
Received: (qmail 19830 invoked by uid 89); 16 May 2012 14:26:22 -0000
Received: from unknown (HELO smtp4.aruba.it) (62.149.158.224)
by smtplqs01.aruba.it with SMTP; 16 May 2012 14:26:22 -0000
Received: (qmail 23351 invoked by uid 89); 16 May 2012 14:26:22 -0000
Received: from unknown (HELO www.yogafirenze.it) (info@yogafirenze.it@
62.149.141.168)
by smtp4.ad.aruba.it with ESMTPA; 16 May 2012 14:26:22 -0000
Date: Wed, 16 May 2012 16:26:22 +0200
Return-Path: This email address is being protected from spambots. You need JavaScript enabled to view it.
To: Jennysimon19 <This email address is being protected from spambots. You need JavaScript enabled to view it.>
From: Samadhi Yoga Integrale <This email address is being protected from spambots. You need JavaScript enabled to view it.>
Reply-To: Samadhi Yoga Integrale <This email address is being protected from spambots. You need JavaScript enabled to view it.>
Subject: Estate Yogica
Message-ID: <This email address is being protected from spambots. You need JavaScript enabled to view it.>
X-Priority: 3
X-Mailer: PHPMailer (phpmailer.sourceforge.net) [version 2.0.4]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="b1_63a7d4709cb8420fe16ffce651e20e07"
X-Spam-Rating: smtplqs01.aruba.it 1.6.2 0/1000/N

--b1_63a7d4709cb8420fe16ffce651e20e07
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: 8bit
Please log in to post a reply

Re: spam problem 2 years 6 months ago #35250

  • Adrien
  • Adrien's Avatar
  • Unlimited pack owner
  • AcySMS owner
  • Templates pack owner
  • Posts: 17956
  • Karma: 600
Hello,
Remote host said: 552 5.2.0 AeSR1j00Y1bJBaN01eSRFX spam detected
This bounce message indicates a spam filter blocked your message, it's not related to the user.

But it does not mean you're on a blacklist... it may be because of your message content/subject.
Please have a look at our official documentation before posting a new message!

Do you like AcyMailing? We love your reviews!
We would appreciate if you could take 5 minutes to register on the JED and then post a review on the Joomla! Extensions Directory.
We answered one of your question? Well, it's the best way to thank us!
Please log in to post a reply
Time to create page: 0.202 seconds
Powered by Kunena Forum

Follow us :