File: /home/admin/Maildir/cur/1728909217.M50446P2258720.kakhelebi.rst.ge:2,S
Return-path: <auth-results@verifier.port25.com>
Envelope-to: admin@kakhelebi.ge
Delivery-date: Mon, 14 Oct 2024 08:33:37 -0400
Received: from verifier.port25.com ([34.209.113.130])
by kakhelebi.rst.ge with esmtps (TLS1.3) tls TLS_AES_256_GCM_SHA384
(Exim 4.98)
(envelope-from <auth-results@verifier.port25.com>)
id 1t0KGT-00000009Tag-3e6K
for admin@kakhelebi.ge;
Mon, 14 Oct 2024 08:33:37 -0400
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=verifier201208; d=port25.com;
h=Date:From:To:Subject:Message-Id:In-Reply-To;
i=auth-results@verifier.port25.com;
bh=vTP8gqWYFeGdr+SqWV+1bdfFerty5l1RpgO968Z5K8I=;
b=a/66CDiaK9nrNCvKwrguEP4F6e27kBXzrFZSBcWHN5xa/VWiUtxVJBobOfeBFQBOgFyAjRNErLyr
IXtZed4Wtr7O4mARQLFx1NX6TC5JsEdKTTfkdcNECdh1rHX1xAJJcMzHhuzqy1q7j2ahF2GhJ4vM
EaJYdPpry5vNgmn9x8T6iJ+Q4trjCJvyJv7a15qCWL43iWxt2DNAWtlKePFdeJGi+9yIdjgzcvjX
hsgUAI3LOdNWGqFF2M8gjeBmEXIriSOKwvSsqu1RdrO6Bnl9P3xusZIJv4KTZ21A7WI1fGlkJIE5
jy6etWqy1Vpdxm5PLUbbkH3+DJ5uKpScweQ9Jw==
Received: from ip-10-52-1-62.us-west-2.compute.internal (127.0.0.1) by verifier.port25.com id h1k7pq2p2tos for <admin@kakhelebi.ge>; Mon, 14 Oct 2024 12:33:33 +0000 (envelope-from <auth-results@verifier.port25.com>)
Date: Mon, 14 Oct 2024 12:33:33 +0000
From: auth-results@verifier.port25.com
To: admin@kakhelebi.ge
Subject: Authentication Report
Message-Id: <1728909213-216592@verifier.port25.com>
Precedence: junk (auto_reply)
In-Reply-To: <cdbac0a5b10e362c9fe95082e5046810@kakhelebi.ge>
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 34.209.113.130, -10 Spam score
SPFCheck: Server passes SPF test, -30 Spam score
X-DKIM: signer='port25.com' status='pass' reason=''
DKIMCheck: Server passes DKIM test, -20 Spam score
X-DKIM: signer='auth-results@verifier.port25.com' status='pass' reason=''
X-Spam-Score: -0.2 (/)
X-Spam-Report: Spam detection software, running on the system "kakhelebi.rst.ge",
has NOT identified this incoming email as spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: This message is an automatic response from Port25's authentication
verifier service at verifier.port25.com. The service allows email senders
to perform a simple check of various sender authentication [...]
Content analysis details: (-0.2 points, 2.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URI: rst.ge]
[URI: mailbaby.net]
[URI: kakhelebi.ge]
[URI: port25.com]
[URI: 205.in-addr.arpa]
0.0 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED RBL: ADMINISTRATOR NOTICE: The
query to Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[34.209.113.130 listed in sa-trusted.bondedsender.org]
0.0 RCVD_IN_VALIDITY_SAFE_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[34.209.113.130 listed in sa-accredit.habeas.com]
0.0 RCVD_IN_VALIDITY_RPBL_BLOCKED RBL: ADMINISTRATOR NOTICE: The query to
Validity was blocked. See
https://knowledge.validity.com/hc/en-us/articles/20961730681243
for more information.
[34.209.113.130 listed in bl.score.senderscore.com]
-0.0 SPF_HELO_PASS SPF: HELO matches SPF record
-0.0 SPF_PASS SPF: sender matches SPF record
-0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's
domain
-0.1 DKIM_VALID_EF Message has a valid DKIM or DK signature from
envelope-from domain
0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily valid
-0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
SpamTally: Final spam score: -81
This message is an automatic response from Port25's authentication verifier
service at verifier.port25.com. The service allows email senders to perform
a simple check of various sender authentication mechanisms. It is provided
free of charge, in the hope that it is useful to the email community. While
it is not officially supported, we welcome any feedback you may have at
<verifier-feedback@port25.com>.
Thank you for using the verifier,
The Port25 Solutions, Inc. team
==========================================================
Summary of Results
==========================================================
SPF check: pass
"iprev" check: pass
DKIM check: pass
DKIM check: fail
==========================================================
Details:
==========================================================
HELO hostname: relay3-t.mailbaby.net
Source IP: 205.209.127.5
mail-from: admin@kakhelebi.ge
----------------------------------------------------------
SPF check details:
----------------------------------------------------------
Result: pass
ID(s) verified: smtp.mailfrom=admin@kakhelebi.ge
DNS record(s):
kakhelebi.ge. 300 IN TXT "v=spf1 a mx ip4:162.216.114.153 include:spf-c.mailbaby.net ~all"
kakhelebi.ge. 300 IN A 162.216.114.153
kakhelebi.ge. 300 IN MX 10 mail.kakhelebi.ge.
mail.kakhelebi.ge. 300 IN A 162.216.114.153
spf-c.mailbaby.net. 264 IN TXT "v=spf1 include:_spf-c_flat.mailbaby.net ip4:199.231.189.152/29 ip4:64.20.38.24/29 ip4:174.138.190.32/29 ip4:64.20.36.192/29 ip4:199.231.189.96/29 ip4:206.72.200.40/29 ip4:66.45.229.224/28 ip4:174.138.180.168/29 ip4:174.138.180.160/29 ip4:174.138.180.152/29 ip4:162.220.160.0/28 ip4:68.168.211.160/28 ip4:66.45.233.16/29 ip4:209.159.153.232/29 ip4:208.73.205.248/29 ip4:67.217.63.248/29 ~all"
_spf-c_flat.mailbaby.net. 300 IN TXT "v=spf1 ip4:67.217.53.0/24 ip4:205.209.127.0/24 ip4:68.168.210.0/24 ip4:205.209.124.0/24 ip4:173.214.160.53 ip4:162.220.160.196 ~all"
----------------------------------------------------------
"iprev" check details:
----------------------------------------------------------
Result: pass (matches relay3-t.mailbaby.net)
ID(s) verified: policy.iprev=205.209.127.5
DNS record(s):
5.127.209.205.in-addr.arpa. 300 IN PTR relay3-t.mailbaby.net.
relay3-t.mailbaby.net. 300 IN A 205.209.127.5
----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: pass (signature verifies; identity doesn't match any headers)
ID(s) verified: header.d=mailbaby.net
Canonicalized Headers:
from:admin@kakhelebi.ge'0D''0A'
subject:hi'0D''0A'
date:Mon,'20'14'20'Oct'20'2024'20'08:33:29'20'-0400'0D''0A'
message-id:<cdbac0a5b10e362c9fe95082e5046810@kakhelebi.ge>'0D''0A'
to:Check'20'Auth'20'<check-auth@verifier.port25.com>'0D''0A'
mime-version:1.0'0D''0A'
content-type:text/plain;'20'charset=US-ASCII;'20'format=flowed'0D''0A'
content-transfer-encoding:7bit'0D''0A'
dkim-signature:v=1;'20'a=rsa-sha256;'20'c=relaxed/relaxed;'20'd=mailbaby.net;'20'q=dns/txt;'20's=bambino;'20'bh=RHI91NDg1Go8f6isolS2HCe2tXiflhd+gsgHAECfFTU=;'20'h=from:subject:date:message-id:to:mime-version:content-type:content-transfer-encoding;'20'b=
Canonicalized Body:
hi'0D''0A'
DNS record(s):
bambino._domainkey.mailbaby.net. 300 IN TXT "v=DKIM1; k=rsa; p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCVSQlrxsWwZsCzWbPDn44UlfzxfZStibXK16d1YG8Yh8uVXFPddWeo4HL8bg3W5SJpeXMTqc3IOyY+QV5mQFDV7v707/W/ZOmnLf4iPhiKND0JubE585m9zVI0CK52Hu35Vu9UaLufvmz4M/3wotgrBZX/525nw2Swsc8B9/qjOwIDAQAB"
Public key used for verification: bambino._domainkey.mailbaby.net (1024 bits)
NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions. If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.
----------------------------------------------------------
DKIM check details:
----------------------------------------------------------
Result: fail (signature doesn't verify)
ID(s) verified:
Canonicalized Headers:
content-transfer-encoding:7bit'0D''0A'
content-type:text/plain;'20'charset=US-ASCII;'20'format=flowed'0D''0A'
message-id:<cdbac0a5b10e362c9fe95082e5046810@kakhelebi.ge>'0D''0A'
subject:hi'0D''0A'
to:Check'20'Auth'20'<check-auth@verifier.port25.com>'0D''0A'
from:admin@kakhelebi.ge'0D''0A'
date:Mon,'20'14'20'Oct'20'2024'20'08:33:29'20'-0400'0D''0A'
mime-version:1.0'0D''0A'
dkim-signature:v=1;'20'a=rsa-sha256;'20'q=dns/txt;'20'c=relaxed/relaxed;'20'd=kakhelebi.ge;'20's=x;'20'h=Content-Transfer-Encoding:Content-Type:Message-ID:'20'Subject:To:From:Date:MIME-Version:Sender:Reply-To:Cc:Content-ID:'20'Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc'20':Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:'20'List-Subscribe:List-Post:List-Owner:List-Archive;'20'bh=RHI91NDg1Go8f6isolS2HCe2tXiflhd+gsgHAECfFTU=;'20'b=;
Canonicalized Body:
hi'0D''0A'
DNS record(s):
x._domainkey.kakhelebi.ge. 300 IN TXT "v=DKIM1; k=rsa; p=MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3AvEoBrh1r7W/TgozDUBfkP3MFkfxMceETZr5zGlu80FGy96IM19lPRsHYPrP9452kR5tGB2hSlK5sYyVLdPVF1zrfgvayZyDFy7MnZKZ7tl3Rc2VB+e371aGJWN+E9pISYPB8Zw5i3IXzzWfZms1nkhtHaqe7qLUg5WDz91otbwPnc1YSTEsTvWToLx0TFiAOmHt0ezQomqatDeYvDEiih7SZ3gl5G3dAgs6MA9VcVqe2iCdnd2nBOxInMyDOi/gs55IVltkbxIXtHhYDIq3c9RfMJaquUr/uVbV3AMnU65WCfKCuShCgqCDqoDvq9NRQW5Aoi4KpUuPsVKJZ/TSQIDAQAB"
Public key used for verification: x._domainkey.kakhelebi.ge (2048 bits)
NOTE: DKIM checking has been performed based on the latest DKIM specs
(RFC 4871 or draft-ietf-dkim-base-10) and verification may fail for
older versions. If you are using Port25's PowerMTA, you need to use
version 3.2r11 or later to get a compatible version of DKIM.
==============================================================
Explanation of the possible results (based on RFCs 7601, 7208)
==============================================================
DKIM Results
============
none: The message was not signed.
pass: The message was signed, the signature or signatures were
acceptable to the ADMD, and the signature(s) passed verification
tests.
fail: The message was signed and the signature or signatures were
acceptable to the ADMD, but they failed the verification test(s).
policy: The message was signed, but some aspect of the signature or
signatures was not acceptable to the ADMD.
neutral: The message was signed, but the signature or signatures
contained syntax errors or were not otherwise able to be
processed. This result is also used for other failures not
covered elsewhere in this list.
temperror: The message could not be verified due to some error that
is likely transient in nature, such as a temporary inability to
retrieve a public key. A later attempt may produce a final
result.
permerror: The message could not be verified due to some error that
is unrecoverable, such as a required header field being absent. A
later attempt is unlikely to produce a final result.
SPF Results
===========
none: Either (a) no syntactically valid DNS domain name was extracted from
the SMTP session that could be used as the one to be authorized, or
(b) no SPF records were retrieved from the DNS.
neutral: The ADMD has explicitly stated that it is not asserting whether
the IP address is authorized.
pass: An explicit statement that the client is authorized to inject mail
with the given identity.
fail: An explicit statement that the client is not authorized to use the
domain in the given identity.
softfail: A weak statement by the publishing ADMD that the host is probably
not authorized. It has not published a stronger, more definitive policy
that results in a "fail".
temperror: The SPF verifier encountered a transient (generally DNS) error
while performing the check. A later retry may succeed without further
DNS operator action.
permerror: The domain's published records could not be correctly interpreted.
This signals an error condition that definitely requires DNS operator
intervention to be resolved.
"iprev" Results
===============
pass: The DNS evaluation succeeded, i.e., the "reverse" and
"forward" lookup results were returned and were in agreement.
fail: The DNS evaluation failed. In particular, the "reverse" and
"forward" lookups each produced results, but they were not in
agreement, or the "forward" query completed but produced no
result, e.g., a DNS RCODE of 3, commonly known as NXDOMAIN, or an
RCODE of 0 (NOERROR) in a reply containing no answers, was
returned.
temperror: The DNS evaluation could not be completed due to some
error that is likely transient in nature, such as a temporary DNS
error, e.g., a DNS RCODE of 2, commonly known as SERVFAIL, or
other error condition resulted. A later attempt may produce a
final result.
permerror: The DNS evaluation could not be completed because no PTR
data are published for the connecting IP address, e.g., a DNS
RCODE of 3, commonly known as NXDOMAIN, or an RCODE of 0 (NOERROR)
in a reply containing no answers, was returned. This prevented
completion of the evaluation. A later attempt is unlikely to
produce a final result.
==========================================================
Original Email
==========================================================
Return-Path: <admin@kakhelebi.ge>
Received: from relay3-t.mailbaby.net (205.209.127.5) by verifier.port25.com id h1k7pq2p2tos for <check-auth@verifier.port25.com>; Mon, 14 Oct 2024 12:33:33 +0000 (envelope-from <admin@kakhelebi.ge>)
Authentication-Results: verifier.port25.com; spf=pass smtp.mailfrom=admin@kakhelebi.ge;
iprev=pass (matches relay3-t.mailbaby.net) policy.iprev=205.209.127.5;
dkim=pass (signature verifies; identity doesn't match any headers) header.d=mailbaby.net;
dkim=fail reason="signature doesn't verify"
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=mailbaby.net;
q=dns/txt; s=bambino; bh=RHI91NDg1Go8f6isolS2HCe2tXiflhd+gsgHAECfFTU=;
h=from:subject:date:message-id:to:mime-version:content-type:content-transfer-encoding;
b=PdVciL4LQvG9Qr52SEHBO5ErbPlc1+BlnjzY+jXjewJH+Ax4EE9SUATTdWWKm9ufcXM4Q7RDi
1LxXz+asSTQN8p2AzJRwMEjq+MYBU5NLc+XNn5A6mUXeEQrCJGqyU6B9goQlqZ0EyelWgfqKlSP
c17YR+4AObl05XxtadIctfQ=
Received: from kakhelebi.rst.ge ([162.216.114.153] kakhelebi.rst.ge)
(Authenticated sender: mb71416)
by relay3-t.mailbaby.net (MailBabyMTA) with ESMTPSA id 1928b04f078000dda7.001
for <check-auth@verifier.port25.com>
(version=TLSv1.3 cipher=TLS_AES_256_GCM_SHA384);
Mon, 14 Oct 2024 12:33:29 +0000
X-Zone-Loop: 115fb67e529216e076e655ade87b6772d24d3e2b5757
X-MB-ID: mb71416|admin@kakhelebi.ge
X-SPF: pass
X-NS-SCAN: PASS
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=kakhelebi.ge; s=x; h=Content-Transfer-Encoding:Content-Type:Message-ID:
Subject:To:From:Date:MIME-Version:Sender:Reply-To:Cc:Content-ID:
Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc
:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=RHI91NDg1Go8f6isolS2HCe2tXiflhd+gsgHAECfFTU=; b=HeMlH2LigIibkh0cZYxgDmlO3K
EsaggdJ1TiEasl3vv56evPDqlvydABwFiEBEj3TVjNtLuc9adSk17rec5J4BiHIwi8kMFJoRf4N/Y
u4u0vuf78mfakQLUadt0Kua9V8Osso8YvpI1mad0iQwBr9eVEaluUkZ11XXpna/DywVKCMxZgF12c
Yl63ZPZvD5DRxuyEkofbsRiU/5BJjT3hJsJVe5kUKtqliClCgP2o7wWdVF+PAtKRjEeaxcQQpKW4i
h+IV+Bu/uvcOJVVMl9h3hzVyea1U2vIvnH8+9L8FHCQU+DTYGbVk984A4wtl9ZUBMRM0rjQ8J/Pls
fh2EiPOg==;
Received: from localhost ([127.0.0.1] helo=server-162-216-114-153.da.direct)
by kakhelebi.rst.ge with esmtpa (Exim 4.98)
(envelope-from <admin@kakhelebi.ge>)
id 1t0KGP-00000009TaR-1llR
for check-auth@verifier.port25.com;
Mon, 14 Oct 2024 08:33:29 -0400
MIME-Version: 1.0
Date: Mon, 14 Oct 2024 08:33:29 -0400
From: admin@kakhelebi.ge
To: Check Auth <check-auth@verifier.port25.com>
Subject: hi
Message-ID: <cdbac0a5b10e362c9fe95082e5046810@kakhelebi.ge>
X-Sender: admin@kakhelebi.ge
Content-Type: text/plain; charset=US-ASCII;
format=flowed
Content-Transfer-Encoding: 7bit
X-AuthUser: admin@kakhelebi.ge
hi