Re: anyone recognize these headers? From SA or are they from another spam product?

[Axb <ax...@gmail.com>]

On 04/25/2018 02:10 AM, L A Walsh wrote:
> 
> 
> These headers (not these values) are in most or all of my emails.
> 
> In one email on the net they were adjacent to SA's headers (but they
> aren't in my emails).  I was wondering if anyone knew what
> product might be inserting these headers:
> 
> X-CSC: 0
> X-CHA: v=1.1 cv=6jkfEoj2u7Yj9etNrzOg8LH7MfGxzbc6Xn0EJkmycus= c=1 sm=1
> a=nDghuxUhq_wA:10 a=CxQU8S3nryls5r8B3V4N1Q==:17 a=3Y9Ew-73vc-33Fzs_NIA:9
> a=wPNLvfGTeEIA:10 a=z11Dn8fxQD8A:10 a=Pmo6RyrIMpYA:10 a=zoqau9DHoPcA:10
> a=zE7RolXeqPMA:10 a=CxQU8S3nryls5r8B3V4N1Q==:117
> X-CTCH-Spam: Unknown
> X-CTCH-RefID: 
> str=0001.0A020207.521CE122.0254,ss=1,re=0.000,recu=0.000,reip=0.000,cl=1,cld=1,fgs=0 
> 
> X-WHL: SLR
> 
> I don't know  if it is related, but some evidence of scanning by something
> called 'ironport', as well as by Semantec.
> 
> I'm trying to track down what is scanning my email at an upstream mail host
> as they've rejected random emails on initial rcpt of the msg -- without
> accepting the message and bouncing it, but just not accepting it
> with the message:
> 
>     User and password not set, continuing without authentication.
>     <email_addr> 64.29.145.41 failed after I sent the message.
>     Remote host said: 550 5.7.1 vB73jgO3003858 This message has been
>     blocked for containing SPAM-like characteristics.
> 
> 
> What email SW censors things by rejecting them before accepting them?
> 
> 
> 
> Any ideas would really be helpful.

Why not ask the right place: whoever is rejecting your msgs.
Doesn't seems like SA is involved or relevant in any way.

X-CTCH-* headers are added by Commtouch / Cyren
Google will probably help you further..

Axb