Mailheader shows internal fd4d-IPv6-IP - problem with spamcop.net submission

ETNyx

Hello, if is possible, please post full headers of this e-mail. I would say, that it’s pretty normal that some of Received headers show local IP.

DerGunni

ETNyx that’s exactly the weird thing with these kind of emails: they do NOT show any external ip in their headers.
Here you will find another example where the email is sent to meine-adresse@gmx.net and then forwarded to meine-mailbox@meinedomain.de.

Return-Path: <meine-adresse@gmx.net> Delivered-To: meine-mailbox@meinedomain.de Received: from mail.meinedomain.de ([fd4d:6169:6c63:6f77::c]) by 6b8c305be537 with LMTP id AJu3NCJDUWjKkhoAhYVPlA (envelope-from <meine-adresse@gmx.net>) for <meine-mailbox@meinedomain.de>; Tue, 17 Jun 2025 12:27:46 +0200 X-Original-To: meine-mailbox@meinedomain.de Received: from mout-xforward.gmx.net (mout-xforward.gmx.net [82.165.159.42]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (prime256v1) server-signature RSA-PSS (4096 bits) server-digest SHA256) (No client certificate requested) by mail.meinedomain.de (Postcow) with ESMTPS id 2BA8E18DA64 for <meine-mailbox@meinedomain.de>; Tue, 17 Jun 2025 12:27:46 +0200 (CEST) Authentication-Results: mail.meinedomain.de; dkim=pass header.d=will.termind.us header.s=default header.b=T60ceC7f; dmarc=none; spf=pass (mail.meinedomain.de: domain of meine-adresse@gmx.net designates 82.165.159.42 as permitted sender) smtp.mailfrom=meine-adresse@gmx.net ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=meinedomain.de; s=email; t=1750156066; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding:dkim-signature; bh=OlLzofsm01Oi/WKExjE0VEnev44Gx1Y4IEO46XAhf0I=; b=CoMOdVMTIwSaStx0DMcrVhQqoQQJ25ESkMUTL3uDUAWTLYhBsmaOQ11IFicEioSMUzRjYn 9dnJq5jlgZJ0d4vzSy7pGF+E49UgSmt4OL5Xl7o5tf9iW8mvKUZu4geRFLxA5Su071JcqM ymWOV4wLrw2M1XKDyy2iBdXMZjTmfd75zAyIIbqVOxt9+yLTjsM/RN1TXvBzIhj7Jbgorh q/PdR2n5cizdk7qn+ueysskNIzLzs78lPO9Suo9qdkC0X4+N2dr+G0zUxyq8TlDG4gDcDz miMyjiVCJ+HFCzSCcdG8nFSQ0Ss/GPEsvbOM90eb7NPYCosUccyknI3CWFAF8g== ARC-Authentication-Results: i=1; mail.meinedomain.de; dkim=pass header.d=will.termind.us header.s=default header.b=T60ceC7f; dmarc=none; spf=pass (mail.meinedomain.de: domain of meine-adresse@gmx.net designates 82.165.159.42 as permitted sender) smtp.mailfrom=meine-adresse@gmx.net ARC-Seal: i=1; s=email; d=meinedomain.de; t=1750156066; a=rsa-sha256; cv=none; b=E/HDVfJ6wwy3XYY78KwqWW76lIuDEiJj87lbRfRDFnwazcwbNKLuyJ2SxqzWTduqubse08 pd7iJYzfG/9lOzu0//jC5SYy7jum3B/U+PaROYBWUPtdgdPs/+41nS5rgZusNGsxnEvZO1 cglLPAxa737Epf3M+njxQHQSMskFTP32y8qlSvNBxeNcbEblKva7HTfVhv9SapqYgo7uVT TUMnDodm0mjOIszvkqU2FfHkska51PGS9femODbOjJYqcoquidiAOL8cb0Lnr/Qc9Opnna 3+LUnqPbsPkn+rACj33I/TpD99EjWc414j9xwuXKaLIwzkGUw6Zp6WspPNfFBA== UI-Loop: V01:POlLc1fWYkk=:xRutLJo3LgNovcXpgJIJ+w== Received: from will.termind.us ([27.255.82.114]) by mx-ha.gmx.net (mxgmx109 [212.227.17.5]) with ESMTPS (Nemesis) id 1Mnnfe-1v81E21mCQ-00mHxG for <meine-adresse@gmx.net>; Tue, 17 Jun 2025 12:27:45 +0200 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; s=default; d=will.termind.us; h=Subject:From:Content-Type:To:Message-ID:MIME-Version: Content-Transfer-Encoding:Date; i=McAfee-Cooperative@will.termind.us; bh=OlLzofsm01Oi/WKExjE0VEnev44Gx1Y4IEO46XAhf0I=; b=T60ceC7fvW18HKE6SajesDReefcB1JacDQY9D6C+zXiMa1OXfGIphXv8/aPD2Wc+nWy2sbJFCKUM Yf2PbQBaQ6SZcpooFfGtPoy2wrgjA40wthibzaGO/cdDxgCu35mcE3I5/EJ52Csb6Z2veT+rNG2+ nyMgUdQJUBzB3w1OuwI5fM+UvRyFm4FURGBIUn0IlI6IWHxm0TXYu8UHz7Crr0D06nb64cHvQC7T Gky9JsDqNW70RLMLDkfJL1zPE8NLJYKU8LcqrLHZmzkspZ3N7/53Y785TyWpXGGMRffhE1A6Ppdp AhhNREWVu7bKtYDS4dbJiIz4p6Skyp5GBdVlpQ== Subject: =?UTF-8?B?U3RheSBzYWZlIHdpdGggTWNBZmVlOiBQcm90ZWN0IHlvdXIgZGV2aWNlcyB0b2RheSE=?= From: McAfee-Cooperative <McAfee-Cooperative@will.termind.us> Content-Type: text/html; charset="utf-8" To: Mein Name <McAfee-Cooperativeservice1@emailswave.com> Message-ID: <abf581ab-ca0b-4d4b-887jcDnilJ8-aa8ba9184e8b@us-east-2.amazonses.com> MIME-Version: 1.0 X-SFMC-Stack: 13 Content-Transfer-Encoding: 8bit Date: Tue, 17 Jun 2025 06:27:41 -0400 Envelope-To: <meine-adresse@gmx.net> UI-OutboundReport: junk:10;M01:P0:inR9VMd/HzY=;8eozDgJJz39yT2hnKAPuSucEp2z6q 96GtXgIkc5CD++i9jHB3gVm6yGbtUkScCzzpZRmjq1ICsimpio8BeCpgP2vk5Nm8Lwb7wPwKs 1F361pR0Mxp+1zEGbUSh6h4YNCre7wRqIzmPjg1c6O8fbTZJnsmTXATVEenVx1Tqwr1mtFawh HZMww9LuXal5IGoINyYyfm1kClnFgBLeQYfV1cFe9iAX+WPRoR+Szf6tQ6ux+Nb4usCgrFX+2 c3ogAQ5xc9vCutdcX74Lgl/BUFWG44nWxpJiBUFR6I4fQkvSVjSqo/uS9818xHx150mLrpYBP yiuY3h+IgTavndwki2dIUj/fCjQP4t39ZQX8bl6trd1OMa/CZRYRT2M9LAdv6MbLKpYoWNzcX hZwpkJfPBkUlaSZ8eUpanvFLdGOAIT1nanRbdLHd0D9INBKwtjwv87jVUzZ4wx2UkZ9goLPL+ 2zCPnT8G5nK16eWZLZTqk1TZAXRFyqrC0bE3fU+5pIWRyaP4VyTybAnQuinPUjOlBaubN58KH 4ThB45Kp8G6DRod3giLAd9vl165gclOyQezVGrwobQiPnT5n34uxBBg9iFbrXZjCwGTllmqHq A51x876Da+39UDhsEuCorSbROHsSBzXtrQ8o1nu3aJ1Cm1MM6tweMGDmtMZVJqjoPg/bHZl8w auyhuMx+qA94zpEWLf7axhw0y6ph/Psc8zjXxXtsA3kSmvrFY0lwPCRDXi66D/g9hUmPqZMuF sfeV6ueCiPDFBg6hRB11q78+nOmHjwVM7/cMxQkbprzt9BAphXmeoT6h/g+UDHe0Ix7UTh+Tp +wOmWscOD/U5kgOz5jJgLgTL4oTrbjTIeO1as/TLYu2gHq87U2LGIijXn2aHz45KcyrrGKVJb Vi1ach0t6KDEDYpGcBoyQlBUBcbzYLfDUAmQIncxd1CAAjItIrYuIp1kuNv5LnBB4VlO8IxP4 bbRcuitPxkQnZF059IstyvoVROUednAHb9PfPsogHRITAqlSJRTEb6jyKWqdp4QLYX2Zp0xq6 JrjyHLqW3XFbrn/lm6c9fbW+RpT1xKNaOw0PhF5OOq3mX89eHF3c5ayMKz27gtOul1NyTno3C 602yZYBMSMmRQMiXKIZSsAxLW+RHmXbFlLb+PeKbdSTjICSnPtbyg5TqwWYUp0MhBiQPewCvb eJQclkUeuQOYz2oXMqqKG5WO7stKWyskfpFFlOS2o/XEpciaIPWE4hqgA79rEHTi84Gs/sJPf QpcUFnDJog3KO3q0duxdIB4so/kRnKq4gHvo5RoeqvVy983YyYTLL6RISdRTmjZTlNOQNUJv8 c1ONfzGGPdbAvWLzv7JVxqITFDA4w9m2nptk9vlAxh5LLkRFLw2CplU61qDmgDi68+7k+lTU1 7/27asy6fmeHvzzRBoMEfu0Kocl8M9zEDSrV6bnAMwp6jYJT//+0YzmN7jPFSfgzdSUMdH1c8 agJ5as88Elzlyud1OM7nofQCCm2QrsCD4JliROFhoIgIxJlISv8zAiYaSam3adI6ZI6F1AYz4 sPsENWCGJ7sVlvMZVcWzbA4fxdS1mtyOV2S2nSZl3JVi/6OxTouuNRO4AzNtz/PXhWjf1YFay IkuhQL58gYVYwenKpY8bNWFiXRhAesuu67m+zE4Zh8rFHGu/ieV6L1xiJyh9vcpjWvnrE8W7C KNYUc7LtT3kORij2zKiFl8cDggoRDDtdOl9ArlHls+30vx4Wd+PLDXusgQoHlNOkWY6v5jvVR xaqXInnyxyCo12Cglsv2FGLnayT7YjJfFhpAEPqWb+6IMJfxr27xfPNgqaJdA/axW5RwXzk8n 7K06pFvjJTUFRxKkiEzEJPdnznGT+SaJrT1eQSEj8vHmslMeOX4OFnoRT6z+f32Vqtv2tl07e Vpu+sehcwNIttsrfHOdD6z2s0JYDY8JZs9ip+FkYyFTfDQusjLrYrmKE2ZDQoIQuk8j9YTlps ZKvvAiDOOmexCsv0kL6Gw2ZCeQuBk3tAG9MygbmsTMsNOn+HI3qiMOBLMne4I7zZSUvB5x4kt vfH88ikCbOMTV8g2GLFKj1QLQ6Q87yPFZ+jlNjzEfCEvVZtf0JJPiyoKUZtF5WT2jOZN9SK4Z Ee16nkUr8P+za+BzzD5r6nJwcsyCgcfPxtYK1gHHQIEcx+hQoKtxkGpdjwq8DZe+Qc+LMEK44 JDAUBCERqGdFSWte4/B9CMHdPUe7DPxUIGGiltiKViuBSNG5m3U0BfBiyaa2qVt3W9vo1dN4e HB2VS670fHwU3bPqGYH2Z7XALwYJCXXtWuaFJ0PWliIktNBISeC0JAKVfU4fOj0Snt+hhjspK vJZB79W5fMinFpBdP6N3fsT1KFbPk+2DxZNPCRiO9HyaCv0W5lDlwcpkWTH7Y/pQ/dI7MU0Cc Ta2jk7Oo9iZoPeoXoqPQNhFT4XXdl4FYi8nlLh41gZLHK1ie5h2O63YQajv8isR4KXhy7I5Ah YUzokYzRwxfpdiaSbmsoMVpbI2FMAgln9r51J9xxSaa8A1ZCAM7AGDVhvhIURoicgdjIM9+HK z13CBQvm0/4M3o75+d47OlEoaSd4r6oqdVEnS8ME1aUBMg8I37hBFAmDAjY8k8avMUefvburE trUmHT9x+RbPBmIfZ0jSxCXBwm99EkkekeDK6JVC++rrYIKN4KKEsdSHJHntdJx6ovWyeVkRS shhg18aVgcvtK0sV6Kp2xuTW1d4PsOpx7htkV4diG4rEuVEnRkJWSFBXdj5YzcH45pJ4UzROh jdUE33QvpKX6Z/KdyJTp2acABonV48q9egSPh+qwi3DD3/T0RKxngy3bWlGW3DsIHo0eMA8do 9ietLdNFFQsvgz7PbVbZL2tqr2kKJM0Gdb1nlGGpxsspwFc05MjWNTzaYVp1JseaxhgoR+7K/ xHQqPP0JT+RVRw02zLZbHQBexsff6SX0Tjwg8K08GC1CJ4PvYK8Uo2K+O+0/D98iOA27G9xPC gaqkRmoHsADUD2szcr09oZAB2LJLF08thYbQfbFlahJXhtoBw03n9KYzrtH66mDEnYzFMpkEX sK24lr1tUN3Bnjqwjhdj+NN/ORtP1IHcrhbUTnXXjosVmwxe9Nk1pN8mnEIt2r7WDLgVv/rOM DDK5a4CHWrB1AdtaE/v4o5198hWl7W4GMCFONo9a/dsPHgQg7poRGrsSgAhGhamCLLsuWZP7x 81mRxurZxsjWXJkcRUsopGqXnjjzJjoCv6THZk+KmvYciqvhK1JbvTLU8/1J+TJ6k0fDCsS3j Cz9a5AQY0FXMUY1JlIlMptzhQRomwyB1XtKcmK90Z5uPWUjvYFO8KtwckzJV46uTEJScOJiSu 6kDTGOEjA5fvvrYRRqrE3j2LTsvYxx5g/nRk3FeHWpOzpqz5F/9l+3bJnj/3a833uss3i6cDG 4BIOKeZhUTcIQA+GTExWjsX1xXzrAz9wVSVGvPNrprT4xsSiBg8jfF/clJqT+4Y4FSuAClMqT 1W0G/U2dFEtpxen8Ni7lQVkRNOUK80EKxLac9rRrrd2f0R5OqMdDzMZHPgkD0cK0lp22ROkR8 occYv4aslf/Ng/kJUTCnvmZq/MQ2npO1dncugTfBXcUn8sJ+Zu4YXnFZ8wp6SzIpgynlBzw1S MSUukt7ZC3Kzkc5+0hKmrbP0qcoCGpLOvjvPJX9cIsduMIVE6JxjeP0DFTXO6r6mL1jobAmkR +EzORkNUBL3o6g7dmj35IYBqz1Nl7Bg6kyF3eamNsOW30g680jvYPvszUwfaGB+NgXVFXUwu+ w8piNDrPDnnxz0aASzpXkhN+EQ0SXTCfgJKTLRZaJkYsJRtEfjYFnBfo4g6Urggw6HqQpAyrZ 6U09QpaEAwNzfjW075JpJHqMGQNuXcm8qqa6O0O0iB991h3rX3+jCSzMY6rlbd40l0Cdnf9ag bgnLl1DGgyO9HtU+uT/Hsa6Zo46XCWlVDf9ODUpNzg9XS0M7DwlLplzGxA8BTlB+p0/pVCxVK VKZ6ZuFGmdxfSQPlG2XPPYHl1XQfbo002yU9H8L6M5Y03IR9hGxJrIRToxZZotM/w0WtZ4IM3 Ed0yu1085iN8P3eueDYMMUmkRSzwe2OpCF9ziPI6sDZzdeOVp3QX/AspW1NEfxf7yIQatkPf+ +gSgNArsj7x/ycruwAPIPSz1cChn1n1SxBD1bhDv/fsNzSrX5MR6K7UK0EKdgt2DR15J0cYYH L4xVovMCUmZ+EXPAW7hykYzNvhr+OS8RNEu5JeTNaKUxg5Wjw6F7ZVGLupI3cfEqn8/qJ90bi SZ/FJiFhBGSaR22yABD7Pe7rFM+bXOiduYKFqdICXHUKJWhEvAoxX0biO6GoKsp6eMcJkld40 3pRfk2NBklrgOsZ0cCj+52zSIaKXucBDbFMf5G2rUVO/bGQ4WAlDtXgmU5kNZj8csn3KgxQON gIkjwQoGlgvdprqeC7byV+GErE91y31EICXcsSFN/Hos+SisXuC2EqskRulw8zekEhsNX1EPL +aEVOYKP+u7AthBvqT8SGIHi9tx0A64wdMNJSHwkYp+40xj+5arOvtreaXg+4KzAZGL236wYF WsAnNuKFmasTNK4fUslcLow2vbEUu9P9f4/Y+Y7rbuTNuXZcxiQ8qXRytDi4UkcT5gjDAAhIz mPepbg3MHwlGvufw2YOJvusyohE/E+NfJX7edRh//fc6Mbm2S0F5BzE9JUQMZe3VQFrRy6D9F GzYgcWPp4clwAc6fOK4JUkruCVRo0uR5qyJPjcVJ0P6fZDU5mLJR9REU4qeEWDCX2aLy9v7SR TUUFCEoXDGOd49fMPrH0AQkMAr2YXXmmYDDo/XLE7s5gqIs4NUHn9kX7lo+6na4nNTcOV3mEI e/6Yt+ywWJHpMKhtxwoSdh23aiYp/DLI0gddi4f4xn8HMTuxttBUclP5Kf74b4Egeb7H/W7Yv NdleG11uKaVmlzvifkBcAltjLH2mic/ikbyDWECBmSAmbjt67bcDj5943ELu5gROu5LgzbBJj 1Ak+d44gN98NVPwFDqZQJ5SWGQs+rMecNWOg+4Kv9jtMiLJW1AWgPcClSfmcSDjFdxDrj0KrM AcX/BiAi60URoQm6ICsEp3i3s5RYtxNAWHT4cu9AJXQ35FOmtqG/vjFMyuQ43n6dTGJc3kj99 vAvNVc5cdjmlCuxTBMN+8DhcQPbq/NnNfYzUAmHtCi64iQWILpkP7eOeWNzFo8SsV0r6wptAf ouTBoNcPEkBDiN89E9JopJt7ya5vYzVuP4vmySdhoESOYLGQkaRImDv7yOGTpiigB3lPeKXw6 akhrpoHVbWEUXByca8KS3TPojM7KTw6qtAnb0m3ILgVTdOXlvDTrierFQSLizCwWAqRdnkjRN kKMTLrFIvArwzTvJg76JvnKW9ce5bt3IAqJZsCIIl81+frPVfjIYbk7+3fH6qkBn+22z3NDVf 0GNWKfIhHXClZgtVjd9ZZwZWQTvKD2nvqI3P2H2NPwtJGwiutyRzSLI+ZS9mR2I/0JS7IK+/Z CHbSS6PDtzwdfgpn28ZohPPnLtTsOrbQhdU95xB0nVSoTBWsUNQ8X4k+xAAT+5T1eGxOl58+5 OmNXNuflZnhHFDT1MTyfVWVovE1yQ3SKfLss+tKw5omNjeHxwt8+S26j6AAOCK5l7/jKcldCi frBMfRhOPkR2eUFeznIlWdBSM0bPjafrfxlhRUWotIPqa6EO65hFgLlYC/ecnsfLHO6c7X6ZI Jx/ML710wptgMTk17E83oGrwqGpPqMlZao0b3TwKDwuaK+KuYCPhYkTBGL5HLmBZ1XuZDtuAE HNioMGWJZiiCGeHuPC/wJcZBMQ+cP3I3Ymfh0mrZLu98SHpwGHNVIi5FFmVLOa+ga1HAYxzGe qc7StHw2F60PRGGimpV+OcwCyqii0MVYZNn99GZ1tquYEweoLdFPB2XeBYTRSI15q9xDGTvvI XWILFjJEWVipP/aejNApikOfxgfLvRdDcXbTAAUimIOSTJTPePl5WEjWrpTTdRDhru/ZGkK/3 6SMMV0qTKbsuS0I9eBzQ33ncoI/rpb4N3MlVC3mRtRDjTDtAhxe5jKh1Mffj7kFjcMQQTw8RC A8+M/ExM/IgyGPqnKuQzfIN/ek3rWA3+BwqX5fG1CCtbzEB1bfpujw4jYidNHmBMFIWTo0bML kZi7iLxjbsM5n5ob1F1IuS189zx8oNQOGLARc0Uy+/z8U1MAq3ivWO4LfWa1S9eE7pXMXuBZR Qs3n4zebQ+o8s4cnQhN1TJXy2Ahs6woW7hKigBmNdUaVciNvdTE94wr3qgYH7YkU6KoRIQnCN aHgPK6BhPcU09t1RpDKiTspT69EzUnr2DYBfhd6xcn0sQxU1glgcIGrcrFcc8oUCe7aqmtuBG QFBTmXHpLBPd8unGrU2VySsBlFhQhssgL8+j6y6v+8PvP1tlhl6p0Ij0lsOYSzIBVQqcZgeuS fwEQO+u52P8fB93bv+MA2aFSt/wjPxPLkpGpI2W1DjfLrj4NK1MkDFT1SyKKkGnC9OUabRbCn 5tSwTRRoUBjeTqw2RKWapDztn0GYjIENW3oxvO9aG+VFUSKfGYBP+L/3fNTXgaPHcIDF+moOc /F0P4yVze9M0OiP9oXHCnKkBOfTFHhlmzXQtpLbSsk0bvL7RRthZbIyLfC9Osb5B1DoZEWHrf +87fClr/VnShEFMyTftOdN4CI/epr4PEHT8fQRy7WtJpaHHHJ3Z2/MB+Ajv13QOTL+lbAi2/3 sfr9qouYwPELUC5umB0qzi8n6t5enGeNbEDS9IOQsaQDVigB8LemvWFXr3ORd9W65Efydl0cQ ob3kzBBb8hgDAwQP35sG9anhY2OY6a9bvynjE/A44vooo8InSB7X97H7doLPN695jhz/raOVb UhzaJjBThSLDR6V/4SuC+17Zqz95EWrSL4znwUcV9qoaZDL7un8zcuDr2teCqcVYMawx1ZFCu l+1AtkICEPxmhPEL0H1NTgNz1aRSTvpjt4geZrDxUZYACScDMf86EVCFV/kEZsN6fUR3Iswga bv22L+zyAKSmQp6WLQsjQRn32Yut9jLbqJjkToTF3Vdgra9z351P9RnGqx9PkkP7N2kxYbDro J4nz8NnpSu0O3AZA1KkVZi31noIRGUmtTh6Uzf3OMAtL+q8Ncc1itYovFzWc6d8VeVfrbepcf YMhGoIMk0QnUffAt5KjR3M3D9ZHYM4nBwnpxME+yFbYxvwahDmK28upGiCvwrvLzKZTr4Ajgq CgrX/5Cakr5OW4pylo6GpHj7/ySSeiCuoCbc+khH5sI2+Z47fYizejTqVOYH26VNdChsFaLDq t7HtEDe/ueudsZPWaEOWHaZh+vPh9+3ae42ynF32Ot5xuyMCxVAGTA1Y+ql5NwB9hpbA9yoRn UzOaSG/XyI4lyJw6okUfFMbJClSQredOBUc8rs4zscONeU43kiKmalBIMtHSPA/NYQtKIpYic qB5NXqcQDkiCNoaPf11KFdNZ0/LnzVnBEJQ6cA4IG2ZpSCPuGS/1sqGNCdnFJJd9ELAPDNYko s5G7EOn9YeaK6o3aTGi8A6pF8M49EiOoNdiYipgPFHI0h3uezKNrGCHb67B+4G1gyQ76LxN7C DvufNPkdgcJ7k8ZcWHOvbmbMLOEbgmWH3GclvXWbUdah/5huIyrY1NRJQd7GZSpjihnKr3zb8 a8bSBDVQXKr47rAM23O4aJ76TkbDF3H11HYXpZ0yfE2iT9yU1WYdaqYH8+wdFnPyn9SDZIqKX rWOkdN+31WTq8FzXS7BeL6Bbt+ZK8TAiI7gt7qrCS7y1BiKcBc998uDxy9pR+pAVgPBpdsKqU n5wimgue9Eh+FYtwJII2HQ4tmx8bc+smubNiaSgXTpa2sASIXp3KpQJEBz5/jlG0Ezh3IhDFg tyZT15JgQA8kpXquxkmlLcjmO2O98CIKPrZfB9F8WwsiF6hCAsDLvgfc24LWvLghJ6Jc2iGl4 /m9oencsZeZw0va2EDMeHz0Cu7ilA6B2uLM5mPIIQRaGE+WBimdSsosB2X5RfRRTKvJRvP3TU MRhELEdZgG/TlTknEZmkk3bWDPArzWqdHvzuviIit3pYnsH4JJYmjKvfm8j+Tmd2xm4mNH5GD zckbsUOwWJecUklwyc4yo5uht2/A3avO61W4G6kGogc9E7LJfrLtEzlMjUbHIpuP3kISIsX0Y BHBn7CosSMqhPRvfo8urwhr9a3r52q6a1CXf9wf0SIh+47rwZz3Mu9mcZ0PidV3BpA5JVYjE5 SccjjpUqno1KKLPMvcf/jxjgZYRsS7wzHGf1p3jNIsq9ANw0pjaQs5XcXXz44YtQUXQrQUi/4 sPMMwLRRK7oxzKWwUKvWYq0Y00LVkMt6b8RTvcYulGp+h+rwlhSVyCpwHpdRcYyyH4v7NcJAH b6ZWDsMLATLphy95CZqdYyMef+pCmiDGmJBGN/SiWY8HIVFKRplpRc8svsQN2gOUA/FDQZXdp aRKiqzKkx6c76tcy7V3vtWmfXwudg3VVlGA3QU1b45eislvqDhSOv9Yv0Q2Dwx1Q4s6T5UgJp +DWdbqnh+Skc3Fwsk6hc9WIcoxF/Rc9rVmEG+w/yrRwXCVp+kndTO1ABBuuyi X-Last-TLS-Session-Version: TLSv1.3 X-Spamd-Result: default: False [6.51 / 15.00]; IP_REPUTATION_SPAM(2.36)[asn: 8560(-0.40), country: DE(-0.01), ip: 82.165.159.42(1.00)]; BAD_REP_POLICIES(2.00)[]; SUBJ_EXCESS_BASE64(1.50)[]; BAYES_SPAM(0.26)[70.15%]; ONCE_RECEIVED(0.20)[]; MIME_HTML_ONLY(0.20)[]; MX_GOOD(-0.01)[]; DMARC_NA(0.00)[termind.us: no valid DMARC record]; UPSTREAM_CHECKS_EXCLUDE_FWD_HOST(0.00)[]; FORGED_RECIPIENTS(0.00)[m:McAfee-Cooperativeservice1@emailswave.com,s:meine-mailbox@meinedomain.de]; RCPT_MAILCOW_DOMAIN(0.00)[meinedomain.de]; WL_FWD_HOST(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; SUBJECT_ENDS_EXCLAIM(0.00)[]; FREEMAIL_ENVFROM(0.00)[gmx.net]; BCC(0.00)[]; MIME_TRACE(0.00)[0:~]; FORGED_SENDER(0.00)[McAfee-Cooperative@will.termind.us,meine-adresse@gmx.net]; FORWARDED(0.00)[meine-adresse@gmx.net]; R_DKIM_ALLOW(0.00)[will.termind.us:s=default]; DKIM_TRACE(0.00)[will.termind.us:+]; ARC_SIGNED(0.00)[meinedomain.de:s=email:i=1]; FORGED_RECIPIENTS_FORWARDING(0.00)[]; R_SPF_ALLOW(0.00)[+a:mout-xforward.gmx.net]; FORGED_SENDER_FORWARDING(0.00)[]; FROM_HAS_DN(0.00)[]; FROM_NEQ_ENVFROM(0.00)[McAfee-Cooperative@will.termind.us,meine-adresse@gmx.net]; TO_DN_ALL(0.00)[]; ASN(0.00)[asn:8560, ipnet:82.165.0.0/16, country:DE]; MISSING_XM_UA(0.00)[]; RCVD_TLS_ALL(0.00)[]; RCVD_COUNT_ONE(0.00)[1]; RBL_SENDERSCORE_REPUT_8(0.00)[82.165.159.42:from]; WHITELISTED_FWD_HOST(0.00)[82.165.159.42]; ARC_NA(0.00)[] X-Rspamd-Queue-Id: 2BA8E18DA64

I listed gmx.net’s mailservers as forward-mailhosts, spamfilter on.

ETNyx

Not sure if I overreaching my knowledge, but I would think this last (first in headers) Received is due to internal routing message from smtpd (message pickup) to internals like rspamd and than lmtp (final - local delivery). And it’s ok.

Maybe someone more experienced should provide more explanation @esackbauer (?)

If you send message from your system to spamcop.net headers will be different. Or you are getting headers and c&p to some form?

DerGunni

ETNyx thanks for your reply.
I copy&pase headers or forward original spam-emails as .eml-attachement, so they do not get modified.
It must be some internal routing, as you suggest, that corrupts the header and lists an internal instead of an external ipv6-ip.

DerGunni

Idea: I use Mailcow behind an nginx proxy, which also provides the Letsencrypt certificates.
The br-mailcow interface only has internal IP addresses; does that play a role in my problem? I suspect not, but I wanted to mention it anyway.

ip addr show br-mailcow 395: br-mailcow: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default link/ether be:03:xx:xx:c4:73 brd ff:ff:ff:ff:ff:ff inet 172.22.1.1/24 brd 172.22.1.255 scope global br-mailcow valid_lft forever preferred_lft forever inet6 fd4d:6169:6c63:6f77::1/64 scope global nodad valid_lft forever preferred_lft forever inet6 fe80::bc03:xxxx:feb0:c473/64 scope link valid_lft forever preferred_lft forever

ETNyx

Well did you setup Nginix proxy using –with-mail to route SMTP, IMAP, POP3?

If so, please made some tutorial to pin here in forum, sometimes could be useful.

DerGunni

ETNyx Unfortunately not, only http(s) is routed through nginx.

ETNyx

Than to your idea,.. no this should not affect IP(s) in headers of your e-mail.

DerGunni

ETNyx I found out that sometimes this happens with IPv4 too and I see RFC1918-addresses from the 172.22.1.x-range like
mail.myserver.com ([172.22.1.253])

Spamcop is so clever to filter this out. Still it would be good to have at least one real, external/internet-routed ip-address from my server in the header, don’t you think so?

DerGunni

Is there a way to force the communication between postfix and other mailcow containers like rspamd to ipv4 only?
Maybe this could be a workaround for my problem.

ETNyx

Well you could disable ipv6, but it is not a best idea, what about contacting Spamcom if they are smart to work out private IPv4 they could update their part on IPv6?

DerGunni

ETNyx i cannot whitelist the internal ipv6-ip, because spamcop’s testmail doesn’t trigger it.
Disabling IPv6 for the internal network shouldn’t have negative consequences. I will follow that approach.

DerGunni

I still couldn’t fix the problem.
I now tried to replace the headers using postfix header-checks in order to remove the ULA-space and show the external ipv6-IP. Unfortunately it doesn’t work.

data/conf/postfix/extra.cf

#rewrite headers to replace container's ipv6-ULA by external ip
header_checks = pcre:/opt/postfix/conf/header_checks

data/conf/postfix/header_checks
/^Received: from (mail\.meinedomain\.de) $\[fd4d:6169:6c63:6f77::[a-fA-F0-9]+\]$/ REPLACE Received: from $1 ([1234:1234:1234:1234::1])

My email still shows the internal ip, here’s the header:
Received: from mail.meinedomain.de ([fd4d:6169:6c63:6f77::f]) by 9e2d86a731c7 with LMTP id QIaGDYuY32iaAAAAQuOugQ (envelope-from <ich@meinedomain.de>) for <ich@meinedomain.de>; Fri, 03 Oct 2025 11:34:03 +0200 X-Original-To: ich@meinedomain.de Received: from [127.0.0.1] (localhost [127.0.0.1]) by localhost (Mailerdaemon) with ESMTPA id D075818CF30

Any idea how to get a CLEAN header that shows the mailserver’s external ipv6 address instead of the ula from the mailcow internal network?