snork.ca: Welcome to the brown age of computing! Partly Cloudy, 21.1°C [H: 29°C] - No precip

Seriously, Fuck Off Sendgrid 2024-02-21


It's not like Sendgrid being spammers is a new thing. They just send out whatever shit spammers are willing to pay for and shift IP addresses, ruining IP address reputation on all the blocks they control. Right now I am seeing their garbage spewing servers trying to deliver a message from [supposedly] a cantax.ca email address. They [cantax] got my address when I signed up years ago for an account so I could do my tax return. Now the cantax.ca web site redirects to 401.ca and they clearly do not have any reason to be emailing me. The snork.ca address you see below was deleted long ago, but I am sure spammers will scrape it and try sending to it anyways. The problem is, my mail server keeps giving them 554 return codes and they keep trying to deliver the message. Uhhhm, no... that's not how it is supposed to work. 5xx is a hard fail, and people who run a mail delivery service (like Sendgrid) know it. The fact that they don't care is what makes them twats.

Spongebob Squarepants interrupting someone Uhhhm, you guys suck.
Greetings,

At what point does your mail server realize that my mail server doesn't want this cantax.ca spam? 500 series returns codes (such as 554) are permanent failures, and the delivery should not be retried as described in RFC 5321.

https://datatracker.ietf.org/doc/html/rfc5321

Times are -05:00 Eastern.

s.

Feb 21 10:30:30 lily postfix/smtpd[23238]: connect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]
Feb 21 10:30:30 lily postfix/smtpd[23238]: Anonymous TLS connection established from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 10:30:31 lily postfix/smtpd[23238]: NOQUEUE: reject: RCPT from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wfbtzhsq.outbound-mail.sendgrid.net>
Feb 21 10:30:31 lily postfix/smtpd[23238]: disconnect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Feb 21 10:31:02 lily postfix/smtpd[23238]: connect from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]
Feb 21 10:31:02 lily postfix/smtpd[23238]: Anonymous TLS connection established from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 10:31:03 lily postfix/smtpd[23238]: NOQUEUE: reject: RCPT from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wfbtzhsc.outbound-mail.sendgrid.net>
Feb 21 10:31:03 lily postfix/smtpd[23238]: disconnect from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Feb 21 10:32:04 lily postfix/smtpd[23238]: connect from s.wrqvtpvr.outbound-mail.sendgrid.net[149.72.115.133]
Feb 21 10:32:04 lily postfix/smtpd[23238]: Anonymous TLS connection established from s.wrqvtpvr.outbound-mail.sendgrid.net[149.72.115.133]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 10:32:05 lily postfix/smtpd[23238]: NOQUEUE: reject: RCPT from s.wrqvtpvr.outbound-mail.sendgrid.net[149.72.115.133]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wrqvtpvr.outbound-mail.sendgrid.net>
Feb 21 10:32:05 lily postfix/smtpd[23238]: disconnect from s.wrqvtpvr.outbound-mail.sendgrid.net[149.72.115.133] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Feb 21 10:33:36 lily postfix/smtpd[23238]: connect from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]
Feb 21 10:33:36 lily postfix/smtpd[23238]: Anonymous TLS connection established from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 10:33:37 lily postfix/smtpd[23238]: NOQUEUE: reject: RCPT from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wfbtzhsc.outbound-mail.sendgrid.net>
Feb 21 10:33:37 lily postfix/smtpd[23238]: disconnect from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Feb 21 10:35:38 lily postfix/smtpd[23372]: connect from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]
Feb 21 10:35:38 lily postfix/smtpd[23372]: Anonymous TLS connection established from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 10:35:39 lily postfix/smtpd[23372]: NOQUEUE: reject: RCPT from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wfbtzhsc.outbound-mail.sendgrid.net>
Feb 21 10:35:39 lily postfix/smtpd[23372]: disconnect from s.wfbtzhsc.outbound-mail.sendgrid.net[159.183.224.108] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Feb 21 10:39:39 lily postfix/smtpd[23431]: connect from s.wrqvtpvr.outbound-mail.sendgrid.net[149.72.115.133]
Feb 21 10:39:40 lily postfix/smtpd[23431]: Anonymous TLS connection established from s.wrqvtpvr.outbound-mail.sendgrid.net[149.72.115.133]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 10:39:40 lily postfix/smtpd[23431]: NOQUEUE: reject: RCPT from s.wrqvtpvr.outbound-mail.sendgrid.net[149.72.115.133]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wrqvtpvr.outbound-mail.sendgrid.net>
Feb 21 10:39:41 lily postfix/smtpd[23431]: disconnect from s.wrqvtpvr.outbound-mail.sendgrid.net[149.72.115.133] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Feb 21 10:48:01 lily postfix/smtpd[24100]: connect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]
Feb 21 10:48:02 lily postfix/smtpd[24100]: Anonymous TLS connection established from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 10:48:02 lily postfix/smtpd[24100]: NOQUEUE: reject: RCPT from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wfbtzhsq.outbound-mail.sendgrid.net>
Feb 21 10:48:02 lily postfix/smtpd[24100]: disconnect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Feb 21 11:03:03 lily postfix/smtpd[24802]: connect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]
Feb 21 11:03:04 lily postfix/smtpd[24802]: Anonymous TLS connection established from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 11:03:04 lily postfix/smtpd[24802]: NOQUEUE: reject: RCPT from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wfbtzhsq.outbound-mail.sendgrid.net>
Feb 21 11:03:04 lily postfix/smtpd[24802]: disconnect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
Feb 21 11:33:06 lily postfix/smtpd[26228]: connect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]
Feb 21 11:33:06 lily postfix/smtpd[26228]: Anonymous TLS connection established from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 21 11:33:07 lily postfix/smtpd[26228]: NOQUEUE: reject: RCPT from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wfbtzhsq.outbound-mail.sendgrid.net>
Feb 21 11:33:07 lily postfix/smtpd[26228]: disconnect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6

People who use Sendgrid for mail delivery are contributing to the problem.

Update: Seriously, Fuck Off Sendgrid 2024-02-24


The abuse was obviously happening on February 21st, and I obviously notified them that same day. The good news is that at 12:57pm I got an automated email back from Sendgrid saying:

Hello Snork,

You're receiving this email from Twilio in response to your report of unwanted activity to the Twilio SendGrid Compliance Team. We appreciate your proactive efforts in bringing this matter to our attention.

Upon reviewing the information you provided, we have successfully identified the account from which the unwanted email appears to have originated. We want to assure you that we have launched an immediate investigation into their sending practices and use of our services. Our team is committed to taking appropriate actions to address the issue and prevent any further instances of spam, suspicious, or unwanted emails.

As part of our security and privacy guidelines, we are unable to provide specific updates regarding punitive or enforcement measures taken on the sender's account. However, please know that your report has triggered a thorough investigation, and we are dedicated to maintaining the integrity of our platform and protecting our users.

We sincerely appreciate your ongoing support in submitting reports when necessary. Your active involvement and partnership are instrumental in helping us swiftly identify and cease this type of activity from our platform. Together, we can create a safer and more secure environment for all our users.

If you encounter any similar incidents in the future, please do not hesitate to reach out to the Twilio SendGrid Abuse Team. We are here to assist you and uphold the integrity of our services.

Sincerely,
Onboarding & Compliance Operations

Thanks a shitload for "taking appropriate actions to address the issue and prevent any further instances of spam, suspicious, or unwanted emails" wankers. I can see you clearly value the cantax.ca spammers (because they are paying you) and have no plans to stop trying to deliver this same fucking message three days later.

Feb 24 09:36:25 lily postfix/smtpd[13020]: connect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]
Feb 24 09:36:26 lily postfix/smtpd[13020]: Anonymous TLS connection established from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits) key-exchange X25519 server-signature RSA-PSS (4096 bits) server-digest SHA256
Feb 24 09:36:26 lily postfix/smtpd[13020]: NOQUEUE: reject: RCPT from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100]: 554 5.7.1 <bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca>: Sender address rejected: Bad Sender 005; from=<bounces+15421306-a193-poofile=snork.ca@em3897.cloudtax.ca> to=<poofile@snork.ca> proto=ESMTP helo=<s.wfbtzhsq.outbound-mail.sendgrid.net>
Feb 24 09:36:26 lily postfix/smtpd[13020]: disconnect from s.wfbtzhsq.outbound-mail.sendgrid.net[159.183.224.100] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6

Jackasses.

Made with Notepad++ & FastStone, without javascript, cookies, or the help of Clippy or ai. Hosted on Devuan with nginx & powered by NK shrooms.