Hi,
I have set up to auto forward emails to gmail.com, but only one email that is always rejected by gmail citing this error message:
550-5.7.1 This message is not RFC 5322 compliant. There are multiple
Message-ID 550-5.7.1 headers. To reduce the amount of spam sent to Gmail,
this message has 550-5.7.1 been blocked. For more information, go to
550-5.7.1 https://support.google.com/mail/?p=RfcMessageNonCompliant and
review 550 5.7.1 RFC 5322 specifications.
How do I troubleshoot it? Thank you
Here is the header of the offending email.
Return-Path: <sg@ABC.com>
Delivered-To: henry@ABC.com
Received: from mail.XYZ.com ([172.22.1.253])
by e30164bc1e36 with LMTP
id 26IYEvc1LmfB3iYABWKfCg
(envelope-from <sg@ABC.com>)
for <henry@ABC.com>; Fri, 08 Nov 2024 23:01:59 +0700
Received: from sieve (sieve [172.22.1.250]) by mail.XYZ.com (Postcow) with ESMTP id 02B4248CE57
for <henry@ABC.com>; Fri, 8 Nov 2024 23:01:59 +0700 (WIB)
Authentication-Results: mail.XYZ.com;
none
X-Sieve: Pigeonhole Sieve 0.5.19 (4eae2f79)
X-Sieve-Redirected-From: sg@ABC.com
Message-ID: <dovecot-sieve-1731081717-675032-3@e30164bc1e36>
Delivered-To: sg@ABC.com
Received: from mail.XYZ.com ([172.22.1.253])
by e30164bc1e36 with LMTP
id GK0xJ/U1LmcV2SYABWKfCg
(envelope-from <bouncetracking.mdis@sc.com>)
for <sg@ABC.com>; Fri, 08 Nov 2024 23:01:57 +0700
Received: from mg.XYZ.com (mg.XYZ.com [149.28.147.58])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)
key-exchange X25519 server-signature RSA-PSS (2048 bits))
(No client certificate requested)
by mail.XYZ.com (Postcow) with ESMTPS id 98A53487E68
for <sg@ABC.com>; Fri, 8 Nov 2024 23:01:57 +0700 (WIB)
Received: from mg.XYZ.com (localhost.localdomain [127.0.0.1])
by mg.XYZ.com (Proxmox) with ESMTP id 2535E460B78
for <sg@ABC.com>; Fri, 8 Nov 2024 23:01:57 +0700 (WIB)
Received: from mx08-001ac206.pphosted.com (mx08-001ac206.pphosted.com [66.159.234.156])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
by mg.XYZ.com (Proxmox) with ESMTPS id 87496460B69
for <sg@ABC.com>; Fri, 8 Nov 2024 23:01:55 +0700 (WIB)
Received: from pps.filterd (m0378864.ppops.net [127.0.0.1])
by mx08-001ac206.pphosted.com (8.18.1.2/8.18.1.2) with ESMTP id 4A8Fopgd006465
for <sg@ABC.com>; Fri, 8 Nov 2024 16:01:53 GMT
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=sc.com; h=
content-type:date:from:message-id:mime-version:subject:to; s=
k05k24gbledmsc; bh=m77cah0gGgrIhijJn/8I/eG88Dw3TZ9gxwZpbvsTstc=; b=
XWY/lA9dMfaOCtWqjwz7xkDKheu86DvYd8bcjGMMMfaO83oFkrFNvjnzjH1WhuQT
EYbIyYeWvk93AHyhe3RKraWKyx+dLC13jLFEUgVJSCQDMpovc1cZSwNpi9uLtbEA
JNpBcRZoT34cDnhFf5kBjwJKJiq4ruehGKFLiVh+dvZDOKQnj9aWp4r39dWmrnQM
6AUk6Cbp0qEHsOOn89nnmElYE6ylCF04kivOPnW67PS2Ua3zGHljpVdgt0hA/Vp5
MVIsI1pRCtiBmWA3q+PN+Q5+GmNq44jToWBKrDTtm6Q8uEwY5B4RqqPgRT6yQLaJ
8PpTeAG2SHbMiW3dcn5Y8Q==
Received: from smtp-eu.ser.proofpoint.com (pmta-euc.ser.proofpoint.com [3.78.107.200])
by mx08-001ac206.pphosted.com (PPS) with ESMTPS id 42p136sxe4-75
(version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=NOT)
for <sg@ABC.com>; Fri, 08 Nov 2024 16:01:53 +0000 (GMT)
Received: from HKWPISEDG006.sc.com ([203.191.3.233])
by cmsmtp with ESMTPSA
id 9RQhtn9EAc7kS9RQmtcHSM; Fri, 08 Nov 2024 16:01:53 +0000
X-Mailer: SER-dfad3d9f3da710d2734f8a010a9df8d15e32e48fd37309da1ee83d59c41053df
X-Cloudmark-MID: 9RQhtn9EAc7kS9RQmtcHSM
X-Proofpoint-CID: 6c2e44a9-1797-66f5-3afb-27d831bb30b7
Received: from HKLVASAPP409 (10.23.38.129) by HKWPISEDG006.sc.com
(10.23.38.195) with Microsoft SMTP Server id 15.1.2507.39; Sat, 9 Nov 2024
00:01:26 +0800
Date: Sat, 9 Nov 2024 00:01:26 +0800
From: Standard Chartered Private Bank <PortfolioViewAlerts.SG@sc.com>
To: <SG@WIJAYAS.COM>
Message-ID: ddfaca92-888a-4fdf-bcf8-d4f1ff78701e
Subject: Your eAdvice is available for viewing
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_Part_11018417_565128611.1731081686565"
X-Proofpoint-ORIG-GUID: nImRTBQFrjuYR0z7JB504hwDIpXgx-KC
X-Proofpoint-GUID: nImRTBQFrjuYR0z7JB504hwDIpXgx-KC
X-Proofpoint-Virus-Version: vendor=baseguard
engine=ICAP:2.0.293,Aquarius:18.0.1051,Hydra:6.0.680,FMLib:17.12.62.30
definitions=2024-10-04_16,2024-10-04_01,2024-09-30_01
X-Proofpoint-Spam-Details: rule=notspam policy=default score=0 adultscore=0 phishscore=0 spamscore=0
mlxscore=0 suspectscore=0 malwarescore=0 bulkscore=0 mlxlogscore=841
classifier=spam adjust=0 reason=mlx scancount=1 engine=8.19.0-2409260000
definitions=main-2411080133
X-SPAM-LEVEL: Spam detection results: 2
AWL 1.752 Adjusted score from AWL reputation of From: address
DKIMWL_WL_HIGH -0.34 DKIMwl.org - High trust sender
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
DMARC_PASS -0.1 DMARC pass policy
HTML_IMAGE_RATIO_06 0.001 HTML has a low ratio of text to image area
HTML_MESSAGE 0.001 HTML included in message
INVALID_MSGID 1.167 Message-Id is not valid, according to RFC 2822
MIME_HTML_ONLY 0.1 Message only has text/html MIME parts
RCVD_IN_DNSWL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to DNSWL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#DnsBlocklists-dnsbl-block for more information.
RCVD_IN_MSPIKE_H4 0.001 Very Good reputation (+4)
RCVD_IN_MSPIKE_WL 0.001 Mailspike good senders
RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to Validity was blocked. See https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more information.
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record
URIBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. [sc.com]
X-Rspamd-Pre-Result: action=no action;
module=Unknown lua;
ip matched with forward hosts
X-Last-TLS-Session-Version: None
X-Spam-Flag: YES
X-Spamd-Result: default: False [9.69 / 15.00];
MULTIPLE_UNIQUE_HEADERS(4.90)[Message-ID];
BAYES_SPAM(4.09)[98.80%];
MID_RHS_NOT_FQDN(0.50)[];
MIME_HTML_ONLY(0.20)[];
RCVD_NO_TLS_LAST(0.10)[];
MIME_GOOD(-0.10)[multipart/mixed];
FORWARDED(0.00)[sg@ABC.com];
RCPT_COUNT_ONE(0.00)[1];
FROM_HAS_DN(0.00)[];
FORGED_SENDER(0.00)[PortfolioViewAlerts.SG@sc.com,sg@ABC.com];
MIME_TRACE(0.00)[0:+,1:~];
CTYPE_MIXED_BOGUS(0.00)[];
ARC_NA(0.00)[];
SIEVE_HOST(0.00)[172.22.1.250];
BCC(0.00)[];
FORGED_SENDER_FORWARDING(0.00)[];
FROM_NEQ_ENVFROM(0.00)[PortfolioViewAlerts.SG@sc.com,sg@ABC.com];
RCVD_VIA_SMTP_AUTH(0.00)[];
TO_DN_NONE(0.00)[];
RCPT_MAILCOW_DOMAIN(0.00)[ABC.com];
PREVIOUSLY_DELIVERED(0.00)[sg@ABC.com];
RCVD_COUNT_SEVEN(0.00)[8]
X-Rspamd-Queue-Id: 02B4248CE57
X-Spam: Yes