Weird Email Delivered

Anyone get messages like this:

This is the mail system at host mx4.mail.rice.edu.

I’m sorry to have to inform you that your message could not
be delivered to one or more recipients. It’s attached below.

For further assistance, please send mail to postmaster.

If you do so, please include this problem report. You can
delete your own text from the attached returned message.

               The mail system

ccl@cyrus2p.mail.rice.edu (expanded from ccl+spam@cyrus2p.mail.rice.edu):
host mxa-0010f301.gslb.pphosted.com[148.163.149.254] said: 550 5.7.0
Blocked - see Home | Proofpoint Dynamic Reputation - IP Lookup (in reply
to end of DATA command)
Reporting-MTA: dns; mx4.mail.rice.edu
X-Postfix-Queue-ID: 3922F433A9A
X-Postfix-Sender: rfc822; chris@
Arrival-Date: Mon, 3 Oct 2022 18:39:08 -0500 (CDT)

Final-Recipient: rfc822; ccl@cyrus2p.mail.rice.edu
Original-Recipient: rfc822;ccl+spam@rice.edu
Action: failed
Status: 5.7.0
Remote-MTA: dns; mxa-0010f301.gslb.pphosted.com
Diagnostic-Code: smtp; 550 5.7.0 Blocked - see
Home | Proofpoint Dynamic Reputation - IP Lookup
Return-Path: <chris@>
Received-X: from mx4.mail.rice.edu (localhost [127.0.0.1])
by mx4.mail.rice.edu (Postfix) with ESMTP id 3922F433A9A
for ccl+spam@cyrus2p.mail.rice.edu; Mon, 3 Oct 2022 18:39:08 -0500 (CDT)
X-Rice-PlusExt: ccl+spam@rice.edu
Received-X: from localhost (localhost [127.0.0.1])
by mx4.mail.rice.edu (Postfix) with ESMTP id 2E07D209DFE
for ccl+spam@rice.edu; Mon, 3 Oct 2022 18:39:08 -0500 (CDT)
X-Virus-Scanned: by amavis-2.12.1 at mx4.mail.rice.edu
X-Spam-Flag: YES
X-Spam-Score: 6.855
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.855 tagged_above=0 required=6.31
tests=[BAYES_00=-1.9, FREEMAIL_FORGED_REPLYTO=2.095,
FREEMAIL_REPLYTO_END_DIGIT=0.25, HTML_IMAGE_ONLY_04=1.172,
HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=0.377, MIME_HTML_ONLY=0.1,
MPART_ALT_DIFF=0.79, PDS_TONAME_EQ_TOLOCAL_FREEM_FORGE=1.999,
RCVD_DOTEDU_SHORT=1, RDNS_NONE=0.793, SPF_FAIL=0.001,
SPF_HELO_FAIL=0.001, TVD_SPACE_RATIO_MINFP=0.166, T_REMOTE_IMAGE=0.01]
autolearn=no autolearn_force=no
Received-X: from mx4.mail.rice.edu ([127.0.0.1])
by localhost (mx4.mail.rice.edu [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 6vVmijY7U8ut for ccl@rice.edu;
Mon, 3 Oct 2022 18:39:03 -0500 (CDT)
X-SMTP-Auth: no
X-policyd-weight: NOT_IN_SBL_XBL_SPAMHAUS=-1.5 NOT_IN_SPAMCOP=-1.5 CL_IP_NE_HELO=1.5 (check from: .catucci. - helo: .catucci. - helo-domain: .catucci.) MAIL_SEEMS_FORGED=2.5 RESOLVED_IP_IS_NOT_HELO=1.5; rate: 2.5
Received: from (unknown [182.204.179.197])
by mx4.mail.rice.edu (Postfix) with ESMTP id A27742038B3
for ccl@rice.edu; Mon, 3 Oct 2022 18:38:50 -0500 (CDT)
X-GUID: CAD5FA39-3DAE-4A8F-9CB5-B42BB731EBC1
X-Has-Attach: yes
From: “340BjN” <chris@>
Subject: 360050254699396
To: “ccl” ccl@rice.edu
Content-Type: multipart/mixed; charset=GB2312; boundary="----=756_NextPart253678992587=----"
MIME-Version: 1.0
Reply-To: vutq1871@21cn.com
Date: Tue, 4 Oct 2022 07:38:52 +0800
Message-Id: <202210040738359570617@>
X-Mailer: Foxmail 7, 2, 5, 140[cn]

Return-Path: <>
Delivered-To: chris@<MYDOMAIN>
Received: from <MYDOMAIN> ([127.0.0.1])
    by mail with LMTP id uKhqJZ5yO2PoUQAAZU03Dg
    for <chris@<MYDOMAIN>>; Mon, 03 Oct 2022 19:39:10 -0400
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on
    <MYDOMAIN>
X-Spam-Level:
X-Spam-Status: No, score=0.3 required=5.0 tests=BAYES_00,DMARC_NONE,
    SPF_HELO_NONE,SPF_NONE,URI_HEX autolearn=no autolearn_force=no
    version=3.4.2
X-Spam-Report:
    * -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1%
    * [score: 0.0000]
    * 0.1 DMARC_NONE DMARC record not found
    * 2.0 SPF_NONE SPF record not found
    * 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
    * 0.1 URI_HEX URI: URI hostname has long hexadecimal sequence
X-Spam-Score: 0.3
Received: from mx4-pp.mail.rice.edu (mx4-pp.mail.rice.edu [128.42.199.201])
    (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
    (No client certificate requested)
    by <MYDOMAIN> (Postfix) with ESMTPS id 51C855C
    for <chris@<MYDOMAIN>>; Mon, 3 Oct 2022 19:39:10 -0400 (EDT)
Authentication-Results: <MYDOMAIN>; dmarc=none (p=none dis=none) header.from=mx4.mail.rice.edu
Authentication-Results: <MYDOMAIN>; spf=none smtp.helo=mx4-pp.mail.rice.edu
Authentication-Results: <MYDOMAIN>; dkim=none;
    dkim-atps=neutral
Received: by mx4.mail.rice.edu (Postfix)
    id 64AF2433AAE; Mon, 3 Oct 2022 18:39:09 -0500 (CDT)
Date: Mon, 3 Oct 2022 18:39:09 -0500 (CDT)
From: MAILER-DAEMON@mx4.mail.rice.edu (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: chris@<MYDOMAIN>
Auto-Submitted: auto-replied
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
    boundary="3922F433A9A.1664840349/mx4.mail.rice.edu"
Content-Transfer-Encoding: 8bit
Message-Id: <20221003233909.64AF2433AAE@mx4.mail.rice.edu>

obviously is replaced with the actual info…

It’s spam using a domain with no SPF record.

I also get these but for me Spamassassin adds:

3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%

why isn’t spamassassin adding that for mine?

If I understand it correctly, that score is unique to the server based on training the Bayes filter. I’ve really had a ton of those messages over the years and for a long time they did go to my inbox, but not for some time now.

How do you train the Bayes filter? I’ve never had any messages about Bayes in my headers either; does that mean it’s not enabled?

It is enabled by default. When you move a message in or out of the spam folder, it trains the filter.

1 Like