On Fri, 5 Jun 2026 10:47:33 -0700
Jim Garrison via Postfix-users <[email protected]> wrote:
> On 6/4/2026 14:18, Charles Sprickman via Postfix-users wrote:
> > Hi all,
> [snip]
>
> > Received: from [10.88.0.3]
> > (166.161.185.35.bc.googleusercontent.com [35.185.161.166])
>
> It is extremely unlikely that any legitimate email originates at
> googleusercontent.com.
That is the conclusion I'm reaching.
From my pflogsumm report for yesterday:
message reject detail
---------------------
RCPT
blocked using zen.spamhaus.org (12)
2 googleusercontent.com (< [email protected])
2 googleusercontent.com (< <>)
1 host.inseratex.ch (< [email protected])
1 googleusercontent.com (< [email protected])
1 googleusercontent.com (< [email protected])
1 googleusercontent.com (< [email protected])
1 googleusercontent.com (< [email protected])
1 googleusercontent.com (< [email protected])
1 riverhaul.com (< [email protected])
1 mail3.ablluresistemas.ink (< [email protected])
This pattern has become essentially a daily occurrence.
I considered listing googleusercontent.com locally, but since SH is
getting the stuff, anyway ¯\_(ツ)_/¯
Regards,
Jim
--
Note: My mail server employs *very* aggressive anti-spam
filtering. If you reply to this email and your email is
rejected, please accept my apologies and let me know via my
web form at <http://athena.LinxNet.com/contact/scform.php>.
_______________________________________________
Postfix-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
