Hi Benoît

We still get lots of mail via 13.111.14.63 from this domain. Did not see any other IP in the last days.

Regaards

  Matthias

On 01/09/2023 10:30, Benoît Panizzon via swinog wrote:
Hi

According to NZZ we are rejecting all emails with sender domain
@bounce.email.nzz.ch with "Receiving email server is temporarily
overwhelmed with delivery attempts, from you and other
senders". Unfortunately their feedback is very vague, no logs or
exact times of issue from their side.

I can't find any such emails in our log, but I see some are SRS
forwarded from bluewin, VTX, Hostpoint etc. and do reach us.
Unfortunately I have no access (without customer permission) to the
content and therefore can not glimpse at the email headers to find the
true origin.

Could somebody do me a favour: From which IP Address do you see emails
with envelope domain @bounce.email.nzz.ch being delivered?

It used to be salesforce: 13.111.14.63 until 17. August, but I fear
this changed, which causes the issue, as I have seen at least one email
delivered with this domain, failing SPF from an IP belonging to Liberty
Global Austria if this was not some broken forwarding attempt.

-- 
Matthias Cramer / mc322-ripe   Senior Network & Security Engineer
iway AG	                       Phone +41 43 500 1111
Badenerstrasse 569             Fax   +41 44 271 3535
CH-8048 Zurich                 http://www.iway.ch/
GnuPG 1024D/2D208250 = DBC6 65B6 7083 1029 781E  3959 B62F DF1C 2D20 8250