4. Oktober 2020

Rejects spam the Inbox – Abgelehnte Mails fluten den Posteingang

Your mail provider tells you that a mail sent by you – even a reply – was not delivered. That’s good and useful. Not so however if the mechanism is used for spam, with a faked sender, namely you.
   Usually these fake rejects are sent with UTF-8 content, see below.
   So you can weed out these messages by a rule in Outlook. by catching “?UTF8” and “charset='utf-8'”. I show the finished rule with German Outlook 2003.

In Outlook 2003 you enter the rules setup (in normal mails listing mode) via Extras, selecting “rules and alers” (or something like that), German »Regeln und Benachrichtigungen…« and go step ny step in making the rule. Be sure to activate the rule.
   You should end the rule with “and apply no more further rules”, as otherwise the result is a copy of the mail and not a clear move. (Thank you Andreas !). I use a separate, new folder “UTF8-Spam”, which I added myself, so that I can check and eventually recuperate these rejects. The whole idea is from Stephen Barner

Imap. If the whole thing won’t work, it may be because of Outlook handling Imap with too heavy a hand. See http://pgabri.com/blog/outlook-2003-with-imap/, and in German my https://bit.ly/fj33quiE7 .

Link to here https://bit.ly/fj33quiE7
 = https://blogabissl.blogspot.com/2020/10/rejects-spam-inbox-abgelehnte-mails.html 

Decoding UTF8s: https://www.rapidtables.com/convert/number/hex-to-ascii.html


Example of a apam reject message. The subject line in clear text reads »øGluckwunsch T-Online Kunde!« (Gratulation T-Online customer!«:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es)

SMTP error from remote server for TEXT command, host: gmail-smtp-in.l.google.com ( reason: 550-5.7.1 [      18] Our system has detected that this message
550-5.7.1 likely suspicious due to the very low reputation of the sending IP
550-5.7.1 address. To best protect our users from spam, the message has be en
550-5.7.1 blocked. Please visit
550 5.7.1  https://support.google.com/mail/answer/188131 for more informat ion. b185si3480379wmc.183 - gsmtp

--- The header of the original message is following. ---

Received: from [] ([]) by mx.kundenserver.de
 (mxeue011 []) with ESMTP (Nemesis) id 1N495t-1kXtt32fU9-01004L
 for <Fritz.Joern@Gmail.com>; Sat, 03 Oct 2020 07:37:12 +0200
Received: from magenta.at ([]) by mx.kundenserver.de (mxeue011
 []) with ESMTP (Nemesis) id 1MNLNC-1k10hm2fNq-00OxMc for
 <fritz@joern.de>; Sat, 03 Oct 2020 07:37:12 +0200
MIME-Version: 1.0
Message-ID: <CADeNcyPN8nuuFxVoA_Wuxc=Dun4KFtoedNkdErSADmypuAHjNg@mail.gmail.com>
From: =?UTF-8?B?T3JpZ2luYWwgS2V0byBCb2R5VG9uZQ==?= <from@wix.com>
Subject: =?UTF-8?B?UmV2b2x1dGlvbmFyZSBNZWRpemluIHp1ciBHZXdpY2h0c3JlZHVrdGlvbg==?=
To: fritz@joern.de
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
Date: Sat, 03 Oct 2020 05:37:40 +0200
X-Spam-Flag: YES
X-UI-Out-Filterresults: junk:10;V03:K0:jGcr7Hkbesc=:7sdplkJsP9rONxKcRVdiXEYM

Keine Kommentare: