4. Oktober 2020

Rejects spam the Inbox – Abgelehnte Mails fluten den Posteingang

Your mail provider tells you that a mail sent by you – even a reply – was not delivered. That’s good and useful. Not so however if the mechanism is used for spam, with a faked sender, namely you.
   Usually these fake rejects are sent with UTF-8 content, see below.
   So you can weed out these messages by a rule in Outlook. by catching “?UTF8” and “charset='utf-8'”. I show the finished rule with German Outlook 2003.

In Outlook 2003 you enter the rules setup (in normal mails listing mode) via Extras, selecting “rules and alers” (or something like that), German »Regeln und Benachrichtigungen…« and go step ny step in making the rule. Be sure to activate the rule.
   You should end the rule with “and apply no more further rules”, as otherwise the result is a copy of the mail and not a clear move. (Thank you Andreas !). I use a separate, new folder “UTF8-Spam”, which I added myself, so that I can check and eventually recuperate these rejects. The whole idea is from Stephen Barner

Imap. If the whole thing won’t work, it may be because of Outlook handling Imap with too heavy a hand. See http://pgabri.com/blog/outlook-2003-with-imap/, and in German my https://bit.ly/fj33quiE7 .

Link to here https://bit.ly/fj33quiE7
 = https://blogabissl.blogspot.com/2020/10/rejects-spam-inbox-abgelehnte-mails.html 

Decoding UTF8s: https://www.rapidtables.com/convert/number/hex-to-ascii.html

Besucherzaehler

Example of a apam reject message. The subject line in clear text reads »øGluckwunsch T-Online Kunde!« (Gratulation T-Online customer!«:

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es)
failed:

Fritz.Joern@Gmail.com:
SMTP error from remote server for TEXT command, host: gmail-smtp-in.l.google.com (74.125.71.27) reason: 550-5.7.1 [82.165.159.5      18] Our system has detected that this message
 is
550-5.7.1 likely suspicious due to the very low reputation of the sending IP
550-5.7.1 address. To best protect our users from spam, the message has be en
550-5.7.1 blocked. Please visit
550 5.7.1  https://support.google.com/mail/answer/188131 for more informat ion. b185si3480379wmc.183 - gsmtp

--- The header of the original message is following. ---

Received: from [212.227.15.41] ([212.227.15.41]) by mx.kundenserver.de
 (mxeue011 [212.227.15.41]) with ESMTP (Nemesis) id 1N495t-1kXtt32fU9-01004L
 for <Fritz.Joern@Gmail.com>; Sat, 03 Oct 2020 07:37:12 +0200
Received: from magenta.at ([109.237.96.107]) by mx.kundenserver.de (mxeue011
 [212.227.15.41]) with ESMTP (Nemesis) id 1MNLNC-1k10hm2fNq-00OxMc for
 <fritz@joern.de>; Sat, 03 Oct 2020 07:37:12 +0200
MIME-Version: 1.0
Message-ID: <CADeNcyPN8nuuFxVoA_Wuxc=Dun4KFtoedNkdErSADmypuAHjNg@mail.gmail.com>
From: =?UTF-8?B?T3JpZ2luYWwgS2V0byBCb2R5VG9uZQ==?= <from@wix.com>
Subject: =?UTF-8?B?UmV2b2x1dGlvbmFyZSBNZWRpemluIHp1ciBHZXdpY2h0c3JlZHVrdGlvbg==?=
Reply-To:
Received:
To: fritz@joern.de
Content-Transfer-Encoding: 7bit
Content-Type: text/html; charset="UTF-8"
Date: Sat, 03 Oct 2020 05:37:40 +0200
X-Spam-Flag: YES
X-UI-Out-Filterresults: junk:10;V03:K0:jGcr7Hkbesc=:7sdplkJsP9rONxKcRVdiXEYM
 K14CWWaH3SFnT0NIA9eXj9VaSEcfpX04xlRfToXg+HW13lKbyajC0gmAKCOR22+b8uK6RC6y6
 Y7q9jvDhoDjsZ2oGO5ErNE9zUyiN82f4b+J/UxjwScEjBAAl27FmmzeUJlnJxhiykiKuhbwBb
 G4/NcPhf75mFwuk2wN5ZiOzbSgYLrmiHLez+6Vn5eeOjbbDCYz6Q5e15YTpscrgJ0TiDVKW8V
 wFmk3wD78yFGb+SCpmHgLK8mr5C5jIExBFVkUFVSlkU7DW0Rt0U4AuUmiSVo+bs2hHWKX28L4
 TnsnufchtCZRKaKqxPzFs2j1Zsp3ahYpMBm1hTFWr1oV5hTEU+TadJNb/BjoqqHOOd8B8nkfZ
 B0jK2CvEbTufzez/jOqLT0VgJ52Exy9JvZINVhE04c6hcsmf/Kz1G+0e5pL9YAlLVQWy8/VRY
 GvqyOT/wuvysZnbU192p7DJofLz4aXAq21xE1oVU1zWhdFHvo7XSW3Xq2B7ojz1fbzOXOU6+i
 BK3tATtmdZBPuecNaRFpfqednDu1VzyvKSgvEUd+DTkIoq20INY1pIPxMRcXZgJqO8OrMkz0P
 Iv1yBmGeaYiz8p7Eb8ScBrtjJdhNEhGmxPoJ8CJyDTgk9w9jTG4ZDCOLZInio4lw1CMbcILSf
 0Q3MYRW1fNg5XkRrfcRMxWdVB4vzE5I6vbUH0BBwhZMRKDAhXkMleWb73XAretY057qRHqWz/
 c7NgVLvG9OWqrznyp+Ch0jFSpcrVVjohMpdu5ZvzsfKLM7/zmEN8UyjwG9Ck5ys+Qlf7Na77t
 R32YQmiaqukjI2KmGGeJYt8lOnJlF/1iCm7TPSsmglvU5b3ZbROJMysbDtJRHS3hcvI2az6+e
 pftn4GYCD7ynveifj05VuLfdB5ASIPQ7nytl76HP0ozfPw7jYArjapmcgnfkbMohLp0P+lHA+
 HAFPiO9bw==

Keine Kommentare: