On 10.09.23 21:05, Jesper Hansen via Postfix-users wrote:
My ISP might be filtering port 25, I have no idea.
BUT, I’m NOT connecting to my ISP as the mail log show.
I connect directly to the recipients SMTP and get the right reply.
That’s why I find suspicious that I get a bounce where the ISP is mentioned.

Unless they, considering this is Thailand, is intercepting network traffic if 
that is even possible.
I wouldn’t be too surprised.

it is possible and most likely this is happening.
On 10 Sep 2023, at 15:42, postfix--- via Postfix-users 
<postfix-users@postfix.org> wrote:

Sep 10 12:21:39 wopr postfix/smtp[25425]: 94E7840E5C: to=<recipi...@gmail.com>, relay=gmail-smtp-in.l.google.com[74.125.130.27]:25, delay=0.85, delays=0.03/0.04/0.56/0.22, dsn=2.0.0, status=sent (250 2.0.0 38A5LeYj001108-38A5LeYl001108 Message accepted for delivery)

google SMTP results have different output format:

Sep 6 14:59:57 fantomas postfix/smtp[8330]: 3F325A03AA: to=<[...]>, relay=smtp.google.com[142.250.102.26]:25, delay=1.8, delays=0.2/0.01/0.34/1.2, dsn=2.0.0, status=sent (250 2.0.0 OK 1694005196 q4-20020a170906940400b0099dae56c0e1si8847726ejx.914 - gsmtp)

so, your ISP apparently redirected SMTP traffic to its servers.
Ask your ISP if you can avoid it.

Reporting-MTA: dns; spamfilter-02.totbroadband.com

What’s suspicious here is the "Reporting-MTA: dns; 
spamfilter-02.totbroadband.com” line.



Man in the middle? Your ISP filtering port 25 with good intentions?

Try a telnet connection to those host (gmail/mail-tester) on 25 and see who 
actually answers.

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
   One OS to rule them all, One OS to find them,
One OS to bring them all and into darkness bind them
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to