How to read ARF report?

We receive daily ARF reports from hotmail/outlook.com however i dont really understand it. I tried to look for ARF parsers or tolls, but none really work or exist.

Daily we send out 3000 emails to our news subscribers and have almost no issues with it. We follow DMARC, SPF, DKIM, .... regulations and have it all set up.

here is the report, please let me know if you can see the issue.

We send to '[email protected]' from '[email protected]' (changed). The IPv6 with xxxx.xxx is our SMTP, all other IPS do not belong to us. the reported sender IP: 65.55.111.149 IS NOT OURs. we dont send through it at all. that makes me even more confused as its a MS IP

regards Tibor

--478CD70E-10F9-443B-AA9F-98654ACAC7FC Content-Type: text/plain; charset="US-ASCII" Content-Transfer-Encoding: 7bit  This is an email abuse report for an email message received from IP 65.55.111.149 on Thu, 28 Jul 2016 20:34:48 -0700. The message below did not meet the sending domain's authentication policy. For more information about this format please see http://www.ietf.org/rfc/rfc5965.txt.  --478CD70E-10F9-443B-AA9F-98654ACAC7FC Content-Type: message/feedback-report  Feedback-Type: auth-failure User-Agent: XMR/2.2 Version: 1.0 Original-Mail-From: <[email protected]> Arrival-Date: Thu, 28 Jul 2016 20:34:48 -0700 Message-ID: <[email protected]> Authentication-Results: hotmail.com; spf=softfail (sender IP is 65.55.111.149; identity alignment result is pass and alignment mode is relaxed) [email protected]; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=ourdomain.com; x-hmca=fail [email protected] Source-IP: 65.55.111.149 Auth-Failure: spf Reported-Domain: ourdomain.com DKIM-Domain: ourdomain.com  --478CD70E-10F9-443B-AA9F-98654ACAC7FC Content-Type: message/rfc822 Content-Disposition: inline  Authentication-Results: hotmail.com; spf=softfail (sender IP is 65.55.111.149; identity alignment result is pass and alignment mode is relaxed) [email protected]; dkim=none (identity alignment result is pass and alignment mode is relaxed) header.d=ourdomain.com; x-hmca=fail [email protected] X-Envelope-Sender: [email protected] X-SID-PRA: [email protected] X-AUTH-Result: FAIL X-SID-Result: FAIL Received: from BLU004-OMC4S10.hotmail.com ([65.55.111.149]) by BAY004-MC3F6.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23143);      Thu, 28 Jul 2016 20:34:48 -0700 Received: from EUR01-DB5-obe.outbound.protection.outlook.com ([65.55.111.137]) by BLU004-OMC4S10.hotmail.com over TLS secured channel with Microsoft SMTPSVC(7.5.7601.23008);      Thu, 28 Jul 2016 20:34:48 -0700 Received: from VE1EUR01FT025.eop-EUR01.prod.protection.outlook.com  (10.152.2.56) by VE1EUR01HT150.eop-EUR01.prod.protection.outlook.com  (10.152.3.243) with Microsoft SMTP Server (version=TLS1_2,  cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id 15.1.549.5; Fri, 29 Jul  2016 03:34:45 +0000 Received: from DB5PR0501MB1974.eurprd05.prod.outlook.com (10.152.2.55) by  VE1EUR01FT025.mail.protection.outlook.com (10.152.2.232) with Microsoft SMTP  Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id  15.1.549.5 via Frontend Transport; Fri, 29 Jul 2016 03:34:42 +0000 Received: from DB5PR0501MB1974.eurprd05.prod.outlook.com ([127.0.0.1]) by  DB5PR0501MB1974.eurprd05.prod.outlook.com ([10.166.174.9]) with Microsoft  SMTP Server id 15.01.0549.016; Fri, 29 Jul 2016 03:34:37 +0000 From: Newsportal ZEITUNG <[email protected]> To: "REDACTED" <[email protected]> Subject: =?utf-8?B?RnJlaXRhZywgMjkuMDcuMjAxNiAtwqDigItGYWhyZGllbnN0dmVybWl0dGxl?=  =?utf-8?B?ciDigJ5HbyBCaWtl4oCdIGluIEJhbmdrb2sgZ2VzdGFydGV0?= Thread-Topic: =?utf-8?B?RnJlaXRhZywgMjkuMDcuMjAxNiAtwqDigItGYWhyZGllbnN0dmVybWl0dGxl?=  =?utf-8?B?ciDigJ5HbyBCaWtl4oCdIGluIEJhbmdrb2sgZ2VzdGFydGV0?= Thread-Index: AQHR6Uoh4sWMDWq6c0KTTMl5EFOiPA== Date: Fri, 29 Jul 2016 03:35:24 +0000 Message-ID: <[email protected]> Reply-To: Newsportal ZEITUNG <[email protected]> X-MS-Has-Attach: X-MS-Exchange-Inbox-Rules-Loop: [email protected] X-MS-TNEF-Correlator: dkim-signature: v=1; a=rsa-sha256; c=relaxed/simple; d=elasticemail.com;  h=MIME-Version:Subject:Date:From:Reply-To:To:Message-ID:Content-Type;  q=dns/txt; s=api; t=1469763258;  bh=L+kfMYMfkjvKDbPmSU/Go+KKTXcbXKrM6sbIFkvC6S0=; b=  Mzq+oR4n6jH0LFVz/qfYkNtlDBmeOJEbnCqiWWAyhGaZHvM+YPxLPFV4hBmESjALDU8pPq40Hz1/lbxlU03dnRayQr7IqWXxo71j1fikL/WXRaZOuJ61wrJlekJQVSh16YgLQ9k7k/Two4NggXOWixARHHRV3B9Yo/TUEyGJFN4= x-mailer: tracking.ourdomain.com x-msg-eid: v7ELszx6sUQ2yvYZ-wfMxg2 x-originalarrivaltime: 29 Jul 2016 03:34:27.0445 (UTC)  FILETIME=[1BD80A50:01D1E94A] x-eopattributedmessage: 1 x-eoptenantattributedmessage: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa:0 cmm-sender-ip: 176.31.140.93 cmm-sending-ip: 176.31.140.93 cmm-authentication-results: hotmail.com; spf=pass (sender IP is 176.31.140.93;  identity alignment result is pass and alignment mode is relaxed)  [email protected]; dkim=pass (identity alignment  result is pass and alignment mode is relaxed) header.d=ourdomain.com;  x-hmca=pass [email protected] cmm-x-sid-pra: [email protected] cmm-x-auth-result: PASS cmm-x-sid-result: PASS cmm-x-message-status: n:n cmm-x-message-delivery: Vj0xLjE7dXM9MDtsPTE7YT0wO0Q9MTtHRD0xO1NDTD0w cmm-x-message-info: NhFq/7gR1vQEZ+40E6sQ5OdbRsHa7+FDE3MaA+Y9Uhh0h5XSkmQYhvopI6Vq1WNB1MT/gZUxUUcfamvIY5RyUsHcm+TaEi55VaMlkTfYQSD/i8tkm2Sz1aYi2q73p6GDBcq5kTBkUmD0q5LUcz1N/h3UxIuaHu0J+KRasrUfgla+Wa2zy3gX30+C4EiyDY2gjyC4znEMPo68e1IV0MMGhKaXUYvAlWNJnuLXaQ6AnkxtjsSazK+4Vw== x-microsoft-exchange-diagnostics: 1;VE1EUR01HT150;6:MVEPmVM9gRm5KtLeh4gjX0Eo1CTHipG7KZlgtcKn8xzCovVOrTaT0SUmzT9MGVYn6EUZ+sxNEoTM6aImoZcUc9yikbPIHIWrJiX7hvyrViF3dZ9NgDeLWDC/UgWn+umHNJEfIopomFR8ZTAgXgj+C4SiE+s288ljguTqmQmOrQKwnPKH/232bm7kfmwHufQCA9UKBA+7pYMwSVa+HPuWZXjtwXZ/QbgxVdTKIMv4yXJmrtZYf1RmjmBxl0kbJ7Kl1uWp3lZiAko0HX2sliOhGMVN411OQw+0qvYksZJrBFGS8bPsjfZ1XviJGsVvqgV/;5:AF61Y3wRCMQpaYxQhfR5tLo2FXBNj1tNTVL8JqRxTveYJiGdHZKPaDS2mh2IdlKgrFZG1uI4v15sgskzI024XyQs6kgCPSERGoZplB8DtfOzAZKDVDnFGMBuT8zXU42kSjS89mK6NkO+5J8qJzrsWA==;24:t+FAoEUnEAGATZfZkBZ3eaVS1MPaYyW2cZ4nEr+BNoB3oA4/Lut03lBhRop/YzDMIReRKtPh5bhuoYF7yxf95cPJBJ3x9HYCReYbwwu06zY=;7:sOvNlphoMkOcpU3Y5zRo3NQhpSY8z8JwANkMqM9PebH+HyhDblLqNB6RXn0uPMxKkOzMpWgSuj/6hxzinoSEZZg+cTh71JKeRf08ACh3IHyLdQXDeNlWASKNqn6q4NIZEYV2ikwb9nus36w2AFEVAmkvqtNR4MdgfMVzOvOTYpvTaeC+9wO3D69kZX/ievrinnuBfxEIUGm2wC3hQJF5tnANYugBWZTPDYi/QcZE86KHIqzVP+FU5Xc8O9ZVzeqw x-forefront-antispam-report: CIP:10.152.2.55;IPV:NLI;CTRY:;EFV:NLI;SFV:NSPM;SFS:(10019020)(98900003);DIR:OUT;SFP:1102;SCL:1;SRVR:VE1EUR01HT150;H:DB5PR0501MB1974.eurprd05.prod.outlook.com;FPR:;SPF:None;LANG:de; x-ms-office365-filtering-correlation-id: 6751f402-4dc3-4c78-7e4e-08d3b761490d x-microsoft-antispam: UriScan:;BCL:0;PCL:0;RULEID:(3002016);SRVR:VE1EUR01HT150; x-exchange-antispam-report-cfa-test: BCL:0;PCL:0;RULEID:(82015046);SRVR:DB5EUR01HT151;BCL:0;PCL:0;RULEID:;SRVR:DB5EUR01HT151;BCL:0;PCL:0;RULEID:(432015012)(82015046);SRVR:VE1EUR01HT150;BCL:0;PCL:0;RULEID:;SRVR:VE1EUR01HT150; spamdiagnosticoutput: 1:99 spamdiagnosticmetadata: NSPM x-ms-exchange-crosstenant-originalarrivaltime: 29 Jul 2016 03:34:34.3800 (UTC) x-ms-exchange-crosstenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa x-ms-exchange-crosstenant-fromentityheader: Internet x-ms-exchange-transport-crosstenantheadersstamped: DB5EUR01HT151 x-ms-exchange-transport-endtoendlatency: 00:00:02.7741401 authentication-results: spf=permerror (sender IP is 10.152.2.55)  smtp.mailfrom=ourdomain.com; live.de; dkim=fail (signature did not verify)  header.d=elasticemail.com;live.de; dmarc=fail action=none  header.from=ourdomain.com; received-spf: PermError (protection.outlook.com: domain of ourdomain.com used  an invalid SPF mechanism) Resent-From: <[email protected]> x-microsoft-exchange-diagnostics-untrusted: 1;DB5EUR01HT151;6:VxEESZ9hVhOExwVeml3H2rhqGKh//H71prT5k5ePzLzBne+2/VwiWHD+P4zIoEb2SROzYs1Qm3ZlJBTNH5WCJ/KlxNDeMSul4IpOjb5rUoMw8wQcA577z6+iLp2G9A1+DtWXZY6U6GE/kycYH7DhTY70U2/eRKAWzMvyma0avKf1uyA7QHGfpWmNqeHzz+7+IqPhB8PSxUL7CtwN7bHvFZeMDrX0MWyV8/1sgm3KtFH6TLWXjSiqGQwq1R5XixP94EPgHK7nsM7dssIdlGdSONE1Uoad/nBgzpMEDNwF2cKTIGaEB6o+MJWDfmM2CxUI;5:QQ5/6M9ihVPbLifGWzgPJqSzRn3yXmelvd3bZIxPD48N3AHfCn8lf+e6cYZ0uGObEn4I2TI2V5e1amwO68kXQ9sLe+7Ygvi5bFPyFLnozptqEKXcpw8Drg0mpiPEwvDXb5ThQF5IfjzgLCQBCsA0bA==;24:9UtpUP3y3xy29f3njJfJyWSvei2BoFpze6F+g7LNNOYtVW5NEVUDEUio5huOHmakILO4tH6Ng9G+Inj7nxoo5f4RBZ5wRyu8xsr4q+hDTho=;7:wUGOCXvbczOq/1GZb8IrxMxgpVPa8cS7xi1fXOWevVwJ2BF3iRUCh/i6cGYtsIm9RpNQFRnb/0gOn7MIbi2nY1gFB8AOgoKewVSB0H3BvawMsKRgbxgSJqxI7r4Ij2EOnNKu/US3Gma/o/aIryO9Th6j0TJIlMjkpTUE0DDDGHPpcVKnuOCX7MMJXdvagzBLPGIEVhTlzup7klwyXUXhsNd9D53iLN1cwUzsSquoQHC3jMQFM8dW65G0fr/7fM46sQMWUL77dNHWUj00VDuKTg== x-forefront-antispam-report-untrusted: EFV:NLI;SFV:NSPM;SFS:(98900003);DIR:INB;SFP:;SCL:1;SRVR:DB5EUR01HT151;H:BAY004-MC1F10.hotmail.com;FPR:;SPF:None;LANG:de; x-microsoft-antispam-untrusted: BCL:0;PCL:0;RULEID:(8291501002);SRVR:DB5EUR01HT151; x-ms-exchange-transport-crosstenantheadersstripped: VE1EUR01FT025.eop-EUR01.prod.protection.outlook.com x-dkimresult-test: Failed x-forefront-prvs: 0018A2705B MIME-Version: 1.0 X-OriginatorOrg: outlook.com X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jul 2016 03:34:37.6345  (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Internet X-MS-Exchange-CrossTenant-id: 84df9e7f-e9f6-40af-b435-aaaaaaaaaaaa X-MS-Exchange-Transport-CrossTenantHeadersStamped: VE1EUR01HT150 Return-Path: [email protected] 

Replay

Category: email Time: 2016-07-30 Views: 4

Related post

iOS development

Android development

Python development

JAVA development

Development language

PHP development

Ruby development

search

Front-end development

Database

development tools

Open Platform

Javascript development

.NET development

cloud computing

server

Copyright (C) avrocks.com, All Rights Reserved.

processed in 0.103 (s). 12 q(s)