Von: Lindenberg Email Test Service <*********@lindenberg.one>
Gesendet: 14.07.2023 14:03
An: <*********@lindenberg.one>
Cc: <*********@lindenberg.one>
Betreff: Test result for arbeitsagentur.de (arbeitsagentur.de)
Connection History:
2023-07-14 13:27:01 - 13:27:06 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, plain text, Connect):
From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:27:06 - 13:27:12 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, plain text, Connect):
From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:28:00 - 13:28:10 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 7, plain text, Connect):
From: <N***e@arbeitsagentur.de> To: <n@ut.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:33:29 - 13:33:34 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 7, plain text, Connect):
From: <N***e@arbeitsagentur.de> To: <n@ut.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:33:29 - 13:33:34 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, plain text, Connect):
From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:33:34 - 13:33:35 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, encrypted with TLS 1.3, Mail):
From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:43:29 - 13:43:34 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 7, encrypted with TLS 1.3, Mail):
From: <N***e@arbeitsagentur.de> To: <n@ut.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:43:29 - 13:43:34 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, encrypted with TLS 1.3, Acked):
From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 14:03:29 - 14:03:29 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 7, encrypted with TLS 1.3, Acked):
From: <N***e@arbeitsagentur.de> To: <n@ut.lindenberg.one> Spf:Pass Signatures:Dkim
Analysis Sending of Email
Your mailserver does not use SNI, hence does not support RFC 7672 nor RFC 8461, and likely accepts any certificate when sending (bad).
Your mailserver was sending a mail (FROM/RCPT/DATA) without using STARTTLS first. Even though it may support RFC 7672 or RFC 8461, it does not enforce encryption (bad, but kind of normal).
Analysis Reception of Email
| Mail Server (Preference) | Address(es) | Root Certificate Issuer | DNSSEC | STARTTLS | TLS Version | Certificate | Matches TLSA | MTA-STS | |
| mail1.arbeitsagentur.de (10) | 195.88.117.15 | USERTrust RSA Certification Authority | — | Success | 1.3 | Trusted | None | Ok | |
| mail2.arbeitsagentur.de (10) | 195.88.117.138 | USERTrust RSA Certification Authority | — | Success | 1.3 | Trusted | None | Ok | |
| ✗ | Qualified Transport Encryption | ✗ | ✓ | ✓ | |||||
| ✗ | RFC 7672 SMTP-DANE | ✗ | ✓ | ✓ | ✗ | ||||
| ✓ | RFC 8461 MTA-STS | ✓ | ✓ | ✓ | ✓ | ||||
| Summary | ✗ | ✓ | ✓ | ✓ | ✗ | ✓ | |||
| Networks | |||||||||
| BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany : 195.88.117.15, 195.88.117.138, 195.88.117.212 | |||||||||