Skip to content

leap_mx should query if users pubkey is available to prevent spam backscatter

  • mail was sent from spammer to existing account someone@cdev
  • leap_mx could not process mail due to the lack of this users pubkey
  • leap_mx bounces mail to (forged) sender addr
  • mail re-bounces from mx server of forged sender addr
  • Delivery failure mail is sent to root@cdev and aliased to provider admin
Return-Path: 
Delivered-To: xxxxxx@xxxx.xx
Received: from mx2.nadir.org (mx2.nadir.org [204.13.164.135])
  (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
  (No client certificate requested)
  by snail.zeromail.org (Postfix) with ESMTPS id 38D7EBFA0F
  for ; Mon, 16 Mar 2015 16:02:33 +0100 (CET)
Received: from localhost (localhost [127.0.0.1])
  by mx2.nadir.org (Postfix) with ESMTP id BEF7E882AD
  for ; Mon, 16 Mar 2015 16:02:30 +0100 (CET)
X-Virus-Scanned: Debian amavisd-new at mx2.nadir.org
X-Spam-Flag: NO
X-Spam-Score: 2.64
X-Spam-Level: **
X-Spam-Status: No, score=2.64 tagged_above=0 required=5 tests=[AWL=1.232,
  BAYES_00=-1.9, URIBL_BLACK=1.7, URIBL_WS_SURBL=1.608] autolearn=no
Received: from mx2.nadir.org ([127.0.0.1])
  by localhost (mx2.nadir.org [127.0.0.1]) (amavisd-new, port 10024)
  with ESMTP id wJOB-HA7pP1X for ;
  Mon, 16 Mar 2015 16:02:12 +0100 (CET)
Received: from spider.leap.se (spider.leap.se [204.13.164.165])
  (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
  (No client certificate requested)
  by mx2.nadir.org (Postfix) with ESMTPS id B0984881BE
  for ; Mon, 16 Mar 2015 16:02:12 +0100 (CET)
Received: from chipmonk.cdev.bitmask.net (unknown [199.119.112.254])
  (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
  (Client CN "chipmonk.cdev.bitmask.net", Issuer "Bitmask Root CA" (not verified))
  by spider.leap.se (Postfix) with ESMTPS id 4946215391;
  Mon, 16 Mar 2015 15:02:12 +0000 (UTC)
Received: by chipmonk.cdev.bitmask.net (Postfix)
  id 38D8F5FC18; Mon, 16 Mar 2015 15:02:11 +0000 (UTC)
Delivered-To: root@chipmonk.cdev.bitmask.net
Received: by chipmonk.cdev.bitmask.net (Postfix)
  id 281335FEF5; Mon, 16 Mar 2015 15:02:11 +0000 (UTC)
Date: Mon, 16 Mar 2015 15:02:11 +0000 (UTC)
From: MAILER-DAEMON@chipmonk.cdev.bitmask.net (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: root@chipmonk.cdev.bitmask.net
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
  boundary="4F2D45FC43.1426518131/chipmonk.cdev.bitmask.net"
Message-Id: <20150316150211.281335FEF5@chipmonk.cdev.bitmask.net>

This is a MIME-encapsulated message.

--4F2D45FC43.1426518131/chipmonk.cdev.bitmask.net
Content-Description: Notification
Content-Type: text/plain; charset=us-ascii

This is the mail system at host chipmonk.cdev.bitmask.net.

I'm sorry to have to inform you that your message could not
be delivered to one or more recipients. It's attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

                   The mail system

: host mx1.emailsrvr.com[50.57.0.16] said: 550
    5.7.1 : Relay access denied. (in reply to RCPT
    TO command)

--4F2D45FC43.1426518131/chipmonk.cdev.bitmask.net
Content-Description: Delivery report
Content-Type: message/delivery-status

Reporting-MTA: dns; chipmonk.cdev.bitmask.net
X-Postfix-Queue-ID: 4F2D45FC43
X-Postfix-Sender: rfc822; root@chipmonk.cdev.bitmask.net
Arrival-Date: Mon, 16 Mar 2015 15:02:10 +0000 (UTC)

Final-Recipient: rfc822; vumuqxbfz@albania-hotel.com
Action: failed
Status: 5.7.1
Remote-MTA: dns; mx1.emailsrvr.com
Diagnostic-Code: smtp; 550 5.7.1 : Relay access
    denied.

--4F2D45FC43.1426518131/chipmonk.cdev.bitmask.net
Content-Description: Undelivered Message
Content-Type: message/rfc822

Return-Path: 
Received: by chipmonk.cdev.bitmask.net (Postfix, from userid 0)
  id 4F2D45FC43; Mon, 16 Mar 2015 15:02:10 +0000 (UTC)
Content-Type: multipart/mixed; boundary="===============5507393935661410445=="
MIME-Version: 1.0
From: bounce@chipmonk.cdev.bitmask.net
To: "Elaine Henderson" 
Date: Mon, 16 Mar 2015 15:02:10 +0000
Subject: Delivery failure
Message-Id: <20150316150210.4F2D45FC43@chipmonk.cdev.bitmask.net>

--===============5507393935661410445==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit

Delivery to the following recipient failed:
    "Elaine Henderson" 

Reasons:
    Missing PubKey: There was a problem locating the user's public key in our database.

Original message:
    Return-Path: 
X-Original-To: tes_h29@cdev.bitmask.net
Delivered-To: 3c516deebf2964dfc24067c43f372a04@chipmonk.cdev.bitmask.net
Received: from static.35.185.76.144.clients.your-server.de (unknown
 [178.124.132.5])
 by chipmonk.cdev.bitmask.net (Postfix) with SMTP id 1362F5FB9B;
 Mon,  9 Mar 2015 05:19:45 +0000 (UTC)
X-Message-Info: 4rWBdX20KdN4R1MVeRVcaevunPvHv07O
Received: from bette.shelby.com ([192.127.50.118]) by lo4-k58.hotmail.com with
 Microsoft SMTPSVC(5.0.2195.6824); Mon, 09 Mar 2015 10:17:48 -0400
Received: from transceiver.micro.com (larch.crummy.com [64.170.236.156])
 by assurance.branch.com (8.12.10/8.12.9) with ESMTP id o3DZHgSO143855
 for ; Mon, 09 Mar 2015 16:17:48 +0200 (EST)
 (envelope-from vumuqxbfz@albania-hotel.com)
Received: from JC681765748429 (modemcable129.271-034-48.co.videotron.ca
 [200.226.172.59]) (authenticated bits=0)
 by impertinent.checkerboard.com (8.12.10/8.12.9) with ESMTP id v1SFN8tm030965
 for ; Mon, 09 Mar 2015 07:12:48 -0700 (EST)
 (envelope-from vumuqxbfz@albania-hotel.com)
Message-ID: <207205s2pno7$sj8a0b11$0434f8t0@IN654266463393>
From: "Elaine Henderson" 
To: 
Subject: Don't deprive yourself from the fabulous sex that you can achieve due
 to our sale!
Date: Mon, 09 Mar 2015 10:13:48 -0400
MIME-Version: 1.0
Content-Type: multipart/alternative;
  boundary="--684010263392081"

----684010263392081
Content-Type: text/plain;
Content-Transfer-Encoding: 7Bit

Don't deprive yourself from the fabulous sex that you can achieve due to our sale!
Everyone wants to have perfect sex and sexual partners. Make a step forward!
this weekend - 80% off
http://qlql.ru/iG1

----684010263392081--


--===============5507393935661410445==--

--4F2D45FC43.1426518131/chipmonk.cdev.bitmask.net--

(from redmine: created on 2015-03-16, closed on 2015-05-28)

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information