godlie
Goto Top

Postfix DMARC,DKIM,SPF Setup landet im Office365 Junk Ordner

Hallo,

ich bin jetzt mit meine Latein am Ende... meine mails vom Postfix landen im Junk bei Office365 Empfängern.
Ich habe folgende Konstelation:

Neuer Server mit einer frischen Postfix Installtion mit DMAR, DKIM, SPF Einträgen:

ServerHostname: mail.meinedomain.at

PTR: mail.meinedomain.at <-- löst zur Hostadresse richtig auf
MX: mail.meinedomain.at
A: mail.meinedomain.at <-- löst zur Hostadresse richtig auf

_dmarc.meinedomain.at 
"v=DMARC1; p=reject; rua=mailto:xxx@meinedomain.at.at; ruf=mailto:xxx@meinedomain.at; fo=0; adkim=s; aspf=s; pct=100; rf=afrf; sp=reject"  

mail._domainkey.meinedomain.at
"v=DKIM1; k=rsa; " 	"p=PUPKEY......."  

SPF record:
"v=spf1 ip4:Hostadresse -all"  
Check gegen div. Blacklist ergibt kein Ergebniss.
Im Log sieht man auch wie outlook die Mail aufnimmt und mit einem 250er quittiert
LogAuszug:
Untrusted TLS connection established to dddddd-com02b.mail.protection.outlook.com[104.47.12.36]:25: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bit
-----------
2021-11-17T13:50:19.856547+00:00 mail postfix/smtp[1305]: 3086A380620E: to=<xxx@ddd-ddd.com>, relay=dddd-com02b.mail.protection.outlook.com[104.47.12.36]:25, delay=1.7, delays=0.33/0.01/0.67/0.73, dsn=2.6.0, status=sent (250 2.6.0 <a05ada55-96dd-dcd3-52e6-63c4e42b3674@meinedomain.at> [InternalId=23081154257926, Hostname=AM9P251MB0254.EURP251.PROD.OUTLOOK.COM] 11496 bytes in 0.075, 148.792 KB/sec Queued mail for delivery)

Was übersehe ich hier?

Dank u Gruß

Content-Key: 1520388700

Url: https://administrator.de/contentid/1520388700

Printed on: May 9, 2024 at 17:05 o'clock

Member: tagol01
tagol01 Nov 17, 2021 updated at 15:12:18 (UTC)
Goto Top
Hallo

Zitat von @godlie:
> **Untrusted TLS connection** established to dddddd-com02b.mail.protection.outlook.com[104.47.12.36]:25: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bit
> -----------
> 2021-11-17T13:50:19.856547+00:00 mail postfix/smtp[1305]: 3086A380620E: to=<xxx@ddd-ddd.com>, relay=dddd-com02b.mail.protection.outlook.com[104.47.12.36]:25, delay=1.7, delays=0.33/0.01/0.67/0.73, dsn=2.6.0, status=sent (250 2.6.0 <a05ada55-96dd-dcd3-52e6-63c4e42b3674@meinedomain.at> [InternalId=23081154257926, Hostname=AM9P251MB0254.EURP251.PROD.OUTLOOK.COM] 11496 bytes in 0.075, 148.792 KB/sec Queued mail for delivery)
> 

Untrusted = Zertifikate ist nicht sauber hinterlegt.
Ist unschön, aber nicht der Grund das deine Mails im Spam landen.

Was übersehe ich hier?

Wie sieht der Email Header aus?

Hast du einen grössen auschnitt aus der Log Datei?
Am besten den kompletten von einer Mail

Danke
Member: Der-Phil
Der-Phil Nov 18, 2021 at 07:20:07 (UTC)
Goto Top
Hallo!

Du lieferst leider die falschen Logs. Du musst im Outlook-365 oder Hotmail-Postfach den Header anschauen. Da findest Du den Grund.

Vermutlich ist es ein Problem mit DKIM. Microsoft hält sich da nicht an alle Standards. Wenn Mails mit ISO statt UTF-Zeichensatz kommen, werden sie teilweise verändert, was die Signatur invalide macht.

https://social.technet.microsoft.com/Forums/en-US/9aeb0b27-1c41-4087-b33 ...
https://www.postmastery.com/proper-mime-prevents-dkim-failures-in-outloo ...

Ich hatte das Problem auch und bin komplett auf UTF-8 gegangen. Seitdem ist Ruhe...

Phil
Member: godlie
godlie Nov 18, 2021 updated at 09:10:09 (UTC)
Goto Top
Hallo,

danke erstmal für die Hilfestellung, nachdem ich gestern einmal im O365 Interface auf "Ist kein Junk" geklickt habe werden sie jetzt im Posteingang zugestellt, anbei der Header einer Mail

Received: from AM9P251MB0384.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:3de::16)

 by AM9P251MB0174.EURP251.PROD.OUTLOOK.COM with HTTPS; Thu, 18 Nov 2021

 08:40:17 +0000

Received: from AS9PR06CA0322.eurprd06.prod.outlook.com (2603:10a6:20b:45b::6)

 by AM9P251MB0384.EURP251.PROD.OUTLOOK.COM (2603:10a6:20b:3de::16) with

 Microsoft SMTP Server (version=TLS1_2,

 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4713.19; Thu, 18 Nov

 2021 08:40:16 +0000

Received: from VI1EUR04FT019.eop-eur04.prod.protection.outlook.com

 (2603:10a6:20b:45b:cafe::88) by AS9PR06CA0322.outlook.office365.com

 (2603:10a6:20b:45b::6) with Microsoft SMTP Server (version=TLS1_2,

 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4713.21 via Frontend

 Transport; Thu, 18 Nov 2021 08:40:16 +0000

Authentication-Results: spf=pass (sender IP is PULIC_IP)

 smtp.mailfrom=meinedomain.at; dkim=pass (signature was verified)

 header.d=meinedomain.at;dmarc=pass action=none

 header.from=meinedomain.at;compauth=pass reason=100

Received-SPF: Pass (protection.outlook.com: domain of meinedomain.at

 designates PUBLIC_IP as permitted sender)

 receiver=protection.outlook.com; client-ip=PUBLIC_IP;

 helo=mail.meinedomain.at;

Received: from mail.meinedomain.at (PUBLIC_IP) by

 VI1EUR04FT019.mail.protection.outlook.com (10.152.28.251) with Microsoft SMTP

 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id

 15.20.4713.19 via Frontend Transport; Thu, 18 Nov 2021 08:40:15 +0000

Received: from authenticated-user (mail.meinedomain.at [127.0.0.1])

	(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))

	(No client certificate requested)

	by mail.meinedomain.at (Postfix) with ESMTPSA id 586C63803EBE

	for <ms@xxxx.com>; Thu, 18 Nov 2021 08:40:14 +0000 (UTC)

DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=meinedomain.at;

	s=mail; t=1637224814;

	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

	 to:to:cc:mime-version:mime-version:content-type:content-type:

	 content-transfer-encoding:content-transfer-encoding;

	bh=OLZYXvKpFwcq4OGFPgcfgV20gIMyonIiULJ9BTQQCwQ=;

	b=dJcifel9rQ9Rnc0tbvO3ykTn6HIZp14xMvvUZ8rywF59tX40hTqDsHE9QCnrS0h2H95UbL

	6B+Tv2jf+DPMR97wtkv8x8QYTrj10HtqpC9DNEepfNY0+N2xy6QHRkUWNeXOhd5XCsNDKy

	SuZGeEx0sbyWfkV6KkVz51hp1qFUlAU=

Message-ID: <4428f38e-7602-2669-4e58-d83bdc141741@meinedomain.at>

Date: Thu, 18 Nov 2021 09:40:13 +0100

MIME-Version: 1.0

To: dddd@dddd.com

From: xxxx <xxxx.xxxx@meinedomain.at>

Subject: Testmai

Content-Type: text/plain; charset=UTF-8; format=flowed

Content-Transfer-Encoding: 8bit

ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=meinedomain.at;

	s=mail; t=1637224814;

	h=from:from:reply-to:subject:subject:date:date:message-id:message-id:

	 to:to:cc:mime-version:mime-version:content-type:content-type:

	 content-transfer-encoding:content-transfer-encoding;

	bh=OLZYXvKpFwcq4OGFPgcfgV20gIMyonIiULJ9BTQQCwQ=;

	b=tCFY2iN7rgSVm6p/UyWX9C4cksPVfT3eBWSX3qqcMMquS4kphqQID6UQ2EWtG5eZXIlkEi

	g+CkPymwhvz/n7YrdwVbVLSJI3s3/3lm6tFk6UvKhw4fJDIVK0XJ9rLodHquNnvWoy5QkI

	SFIdZnndzdYzGZodF3ub0wdFP4gkIII=

ARC-Seal: i=1; s=mail; d=meinedomain.at; t=1637224814; a=rsa-sha256;

	cv=none;

	b=BqHhXpIho6L3YwwoA9VNGr14MjEaf79CzPbAQ7W/HfgGjNC/vlLwRwWjlOsxJi9W92Oanm

	H9ha2ISP+tovdab8yVCSzeJyjVMq1/TgjPi31EY0y1OwsCY3hfsGHU7iv4QkKqvBuoz0FR

	lTtjpcfgXJeGIk4J9uNaeOeaKbjbbbo=

ARC-Authentication-Results: i=1;

	mail.meinedomain.at;

	auth=pass smtp.mailfrom=xxxx.xxxx@meinedomain.at

Return-Path: xxxx@meinedomain.at

X-MS-Exchange-Organization-ExpirationStartTime: 18 Nov 2021 08:40:15.5911

 (UTC)

X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit

X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000

X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit

X-MS-Exchange-Organization-Network-Message-Id:

 ed238b18-d2de-4514-7639-08d9aa6f0b37

X-EOPAttributedMessage: 0

X-EOPTenantAttributedMessage: 061b6757-8e11-4ca3-9760-5ab3caf545fb:0

X-MS-Exchange-Organization-MessageDirectionality: Incoming

X-MS-PublicTrafficType: Email

X-MS-Exchange-Organization-AuthSource:

 VI1EUR04FT019.eop-eur04.prod.protection.outlook.com

X-MS-Exchange-Organization-AuthAs: Anonymous

X-MS-Office365-Filtering-Correlation-Id: ed238b18-d2de-4514-7639-08d9aa6f0b37

X-MS-TrafficTypeDiagnostic: AM9P251MB0384:

X-MS-Oob-TLC-OOBClassifiers: OLM:773;

X-MS-Exchange-Organization-SCL: -1

X-Microsoft-Antispam: BCL:0;

X-Forefront-Antispam-Report:

 CIP:PUBLIC_IP;CTRY:DE;LANG:de;SCL:-1;SRV:;IPV:NLI;SFV:SFE;H:mail.meinedomain.at;PTR:mail.meinedomain.at;CAT:NONE;SFS:;DIR:INB;

X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Nov 2021 08:40:15.5232

 (UTC)

X-MS-Exchange-CrossTenant-Network-Message-Id: ed238b18-d2de-4514-7639-08d9aa6f0b37

X-MS-Exchange-CrossTenant-Id: 061b6757-8e11-4ca3-9760-5ab3caf545fb

X-MS-Exchange-CrossTenant-AuthSource:

 VI1EUR04FT019.eop-eur04.prod.protection.outlook.com

X-MS-Exchange-CrossTenant-AuthAs: Anonymous

X-MS-Exchange-CrossTenant-FromEntityHeader: Internet

X-MS-Exchange-Transport-CrossTenantHeadersStamped: AM9P251MB0384

X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.8564956

X-MS-Exchange-Processed-By-BccFoldering: 15.20.4713.019

X-Microsoft-Antispam-Mailbox-Delivery:

	wl:1;pcwl:1;ucf:0;jmr:0;auth:0;dest:I;ENG:(910001)(944506458)(944626604)(920097)(810001)(250001)(410001)(930097);

X-Microsoft-Antispam-Message-Info:
	HASH.....

@Der-Phil
ich gehe eig. davon aus das Thunderbird in der Kombi mit Postfix eig. alles als UTF-8 liefert, bei mir wird alles als rein Text gesendet
Member: godlie
godlie Nov 18, 2021 at 09:12:59 (UTC)
Goto Top
Sodala jetzt hab ich noch die Headers von eine Postfach, wo selbige Mail als Spam eingestuft wird, auf die schnelle seh ich da nicht wirklich was

Received: from DB9P251MB0274.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:2c0::14)
 by PAXP251MB0602.EURP251.PROD.OUTLOOK.COM with HTTPS; Thu, 18 Nov 2021
 08:49:09 +0000
Received: from DB6PR0402CA0015.eurprd04.prod.outlook.com (2603:10a6:4:91::25)
 by DB9P251MB0274.EURP251.PROD.OUTLOOK.COM (2603:10a6:10:2c0::14) with
 Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4713.19; Thu, 18 Nov
 2021 08:49:07 +0000
Received: from DB3EUR04FT059.eop-eur04.prod.protection.outlook.com
 (2603:10a6:4:91:cafe::96) by DB6PR0402CA0015.outlook.office365.com
 (2603:10a6:4:91::25) with Microsoft SMTP Server (version=TLS1_2,
 cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.4713.20 via Frontend
 Transport; Thu, 18 Nov 2021 08:49:07 +0000
Authentication-Results: spf=pass (sender IP is PULIC IP)
 smtp.mailfrom=meinedomain.at; dkim=pass (signature was verified)
 header.d=meinedomain.at;dmarc=pass action=none
 header.from=meinedomain.at;compauth=pass reason=100
Received-SPF: Pass (protection.outlook.com: domain of meinedomain.at
 designates PULIC_IP as permitted sender)
 receiver=protection.outlook.com; client-ip=PULIC_IP;
 helo=mail.meinedomain.at;
Received: from mail.meinedomain.at (PULIC_IP) by
 DB3EUR04FT059.mail.protection.outlook.com (10.152.24.234) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id
 15.20.4713.19 via Frontend Transport; Thu, 18 Nov 2021 08:49:07 +0000
Received: from authenticated-user (mail.meinedomain.at [127.0.0.1])
    (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
    (No client certificate requested)
    by mail.meinedomain.at (Postfix) with ESMTPSA id 6C78D3803EBE
    for <bp@xxxx.com>; Thu, 18 Nov 2021 08:49:06 +0000 (UTC)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=meinedomain.at;
    s=mail; t=1637225346;
    h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
     to:to:cc:mime-version:mime-version:content-type:content-type:
     content-transfer-encoding:content-transfer-encoding;
    bh=5PTvjJpaTUTHb83cpVxxhC4+7aCROcqn2sRVGyKV8Xo=;
    b=4mxUYaQRPnm5imKX74/v/AMsYMzMOLLtrOdgBgdEvYAS5jVMRyGbC1mLAgmA8UzbTFAGbg
    nTC7uU5QXUnUEi3i1oLAsAxKbOgWWibUymrk4zyj4DDngnZ2X+0HJd9Ft73YJ/Py10HZVD
    r8mV1yStSuJ/QcxQ+EBx6xvBtXdQ1Pc=
Message-ID: <1c6cf740-748c-1f52-a4d7-b4b56cd15158@meinedomain.at>
Date: Thu, 18 Nov 2021 09:49:05 +0100
MIME-Version: 1.0
To: bp@xxxx.com
From: Marco Salcher <xxxx@meinedomain.at>
Subject: Testmail
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=meinedomain.at;
    s=mail; t=1637225346;
    h=from:from:reply-to:subject:subject:date:date:message-id:message-id:
     to:to:cc:mime-version:mime-version:content-type:content-type:
     content-transfer-encoding:content-transfer-encoding;
    bh=5PTvjJpaTUTHb83cpVxxhC4+7aCROcqn2sRVGyKV8Xo=;
    b=lIvSzFS4MTph2DdxIV76fHFk/HJKJkhYyxt3DKRo8oOY0SmkDDuHkynJnNKi7qHQWkAyzZ
    BqOp7yHdVsxRz0cAHRwDUPUsdAXxslQ79QvL3/r3HdKD4cUdMAKpHR51cDEvo1wfnUVgFY
    kCxnINnVbvdDSFbfBu/kMaHGW2ZCQ0Q=
ARC-Seal: i=1; s=mail; d=meinedomain.at; t=1637225346; a=rsa-sha256;
    cv=none;
    b=cHNwTITkEDBrMNbbJYDiGLZM6s1heOvf/lF7fWrFL6Hvn1fPMMws6GQ6cOW47uYKIsOATO
    SPgF2zKHEyNdc/ViZvN1cUZz/J9S7ubikgIQYk/zEvBPFk/EqnhBghxYBiZE2QXaxoNzml
    LPW3vBVGGcrZ5EZfbY80RgfaR2T9eyI=
ARC-Authentication-Results: i=1;
    mail.meinedomain.at;
    auth=pass smtp.mailfrom=xxxx@meinedomain.at
Return-Path: xxxx@meinedomain.at
X-MS-Exchange-Organization-ExpirationStartTime: 18 Nov 2021 08:49:07.3924
 (UTC)
X-MS-Exchange-Organization-ExpirationStartTimeReason: OriginalSubmit
X-MS-Exchange-Organization-ExpirationInterval: 1:00:00:00.0000000
X-MS-Exchange-Organization-ExpirationIntervalReason: OriginalSubmit
X-MS-Exchange-Organization-Network-Message-Id:
 9e6c0f1c-0950-4672-e475-08d9aa704831
X-EOPAttributedMessage: 0
X-EOPTenantAttributedMessage: 061b6757-8e11-4ca3-9760-5ab3caf545fb:0
X-MS-Exchange-Organization-MessageDirectionality: Incoming
X-MS-PublicTrafficType: Email
X-MS-Exchange-Organization-AuthSource:
 DB3EUR04FT059.eop-eur04.prod.protection.outlook.com
X-MS-Exchange-Organization-AuthAs: Anonymous
X-MS-Office365-Filtering-Correlation-Id: 9e6c0f1c-0950-4672-e475-08d9aa704831
X-MS-TrafficTypeDiagnostic: DB9P251MB0274:
X-MS-Oob-TLC-OOBClassifiers: OLM:773;
X-MS-Exchange-Organization-SCL: 5
X-Forefront-Antispam-Report:
 CIP:PULIC_IP;CTRY:DE;LANG:de;SCL:5;SRV:;IPV:NLI;SFV:SPM;H:mail.meinedomain.at;PTR:mail.meinedomain.at;CAT:SPM;SFS:(426003)(7696005)(26005)(7116003)(86362001)(31696002)(336012)(31686004)(2616005)(7126003)(5660300002)(6916009)(8676002)(22186003)(58800400005)(1096003)(7596003)(7636003)(6966003)(36756003)(3480700007)(558084003)(6266002)(44832011)(356005)(18100200005)(43540500002);DIR:INB;
X-Microsoft-Antispam: BCL:0;
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 18 Nov 2021 08:49:07.2994
 (UTC)
X-MS-Exchange-CrossTenant-Network-Message-Id: 9e6c0f1c-0950-4672-e475-08d9aa704831
X-MS-Exchange-CrossTenant-Id: 061b6757-8e11-4ca3-9760-5ab3caf545fb
X-MS-Exchange-CrossTenant-AuthSource:
 DB3EUR04FT059.eop-eur04.prod.protection.outlook.com
X-MS-Exchange-CrossTenant-AuthAs: Anonymous
X-MS-Exchange-CrossTenant-FromEntityHeader: Internet
X-MS-Exchange-Transport-CrossTenantHeadersStamped: DB9P251MB0274
X-MS-Exchange-Transport-EndToEndLatency: 00:00:01.7378385
X-MS-Exchange-Processed-By-BccFoldering: 15.20.4690.027
X-Microsoft-Antispam-Mailbox-Delivery:
    ucf:0;jmr:0;auth:0;dest:J;OFR:SpamFilterAuthJ;ENG:(910001)(944506458)(944626604)(920097)(930097)(3100021);RF:JunkEmail;
X-Microsoft-Antispam-Message-Info:
   HASH
Member: godlie
godlie Nov 18, 2021 at 09:16:57 (UTC)
Goto Top
@Der-Phil
Hab mir das grad im Header angeschaut, sollte UTF-8 sein

Content-Type: text/plain; charset=UTF-8; format=flowed
Member: godlie
godlie Nov 18, 2021 at 12:50:10 (UTC)
Goto Top
@tagol01
Hier is noch der Log vom MailServer an die o365 Logs komm ich nicht ran ...

2021-11-18T12:40:55.086456+00:00 mail postfix/submission/smtpd[4508]: warning: hostname mynet-94-198-142-134.mynet.at does not resolve to address IP
2021-11-18T12:40:55.086470+00:00 mail postfix/submission/smtpd[4508]: connect from unknown[IP]
2021-11-18T12:40:55.221200+00:00 mail postfix/submission/smtpd[4508]: Anonymous TLS connection established from unknown[IP]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
2021-11-18T12:40:55.375070+00:00 mail postfix/submission/smtpd[4508]: 5B8B63800F61: client=unknown[IP], sasl_method=PLAIN, sasl_username=xxx@meinedomain.at
2021-11-18T12:40:55.428160+00:00 mail postfix/authclean/cleanup[4513]: 5B8B63800F61: replace: header Received: from [192.168.73.124] (unknown [IP])??(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))??(No client certificate requested)??by mail.meinedomain.at (Postfix)  from unknown[IP]; from=<xxx@meinedomain.at> to=<xxx@dddd.com> proto=ESMTP helo=<[192.168.73.124]>: Received: from authenticated-user (mail.meinedomain.at [127.0.0.1])??(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))??(No client certificate requested)??by mail.meinedomain.at (Postfix) with ESMTPSA id 5B8B63800F61??for <xxxx@ddd.com>; Thu, 18 Nov 2021 12:40:55 +0000 (UTC)
2021-11-18T12:40:55.428178+00:00 mail postfix/authclean/cleanup[4513]: 5B8B63800F61: message-id=<1e818083-90be-d1fe-6cd1-6323c3b12a4e@meinedomain.at>
2021-11-18T12:40:55.447543+00:00 mail clamd[601]: SelfCheck: Database status OK.
2021-11-18T12:40:55.614683+00:00 mail postfix/qmgr[681]: 5B8B63800F61: from=<xxx@meinedomain.at>, size=845, nrcpt=1 (queue active)
2021-11-18T12:40:55.696277+00:00 mail postfix/submission/smtpd[4508]: disconnect from unknown[IP] ehlo=2 starttls=1 auth=1 mail=1 rcpt=1 data=1 quit=1 commands=8
2021-11-18T12:40:56.407395+00:00 mail postfix/smtp[4515]: Untrusted TLS connection established to ddd-com02b.mail.protection.outlook.com[104.47.14.36]:25: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
2021-11-18T12:40:56.757852+00:00 mail dovecot: imap(xxx@meinedomain.at): Connection closed (IDLE running for 0.001 + waiting input for 0.004 secs, 2 B in + 10+0 B out, state=wait-input) in=26005 out=113634
2021-11-18T12:40:56.918607+00:00 mail dovecot: imap-login: Login: user=<xxx@meinedomain.at>, method=PLAIN, rip=IP, lip=172.20.0.8, mpid=4433, TLS, session=<w7dReA/RUgVexo6G>
2021-11-18T12:40:57.493260+00:00 mail postfix/smtp[4515]: 5B8B63800F61: to=<xx@dddd.com>, relay=ddd-com02b.mail.protection.outlook.com[104.47.14.36]:25, delay=2.2, delays=0.3/0.01/0.8/1.1, dsn=2.6.0, status=sent (250 2.6.0 <1e818083-90be-d1fe-6cd1-6323c3b12a4e@meinedomain.at> [InternalId=2396591758938, Hostname=DU0P251MB0573.EURP251.PROD.OUTLOOK.COM] 11577 bytes in 0.122, 92.267 KB/sec Queued mail for delivery)
2021-11-18T12:40:57.493765+00:00 mail postfix/qmgr[681]: 5B8B63800F61: removed