Von: Lindenberg Email Test Service <*********@lindenberg.one>
Gesendet: 14.07.2023 14:03
An: <*********@lindenberg.one>
Cc: <*********@lindenberg.one>
Betreff: Test result for arbeitsagentur.de (arbeitsagentur.de)

 

Connection History:
2023-07-14 13:27:01 - 13:27:06 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, plain text, Connect):
    From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:27:06 - 13:27:12 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, plain text, Connect):
    From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:28:00 - 13:28:10 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 7, plain text, Connect):
    From: <N***e@arbeitsagentur.de> To: <n@ut.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:33:29 - 13:33:34 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 7, plain text, Connect):
    From: <N***e@arbeitsagentur.de> To: <n@ut.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:33:29 - 13:33:34 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, plain text, Connect):
    From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:33:34 - 13:33:35 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, encrypted with TLS 1.3, Mail):
    From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:43:29 - 13:43:34 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 7, encrypted with TLS 1.3, Mail):
    From: <N***e@arbeitsagentur.de> To: <n@ut.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 13:43:29 - 13:43:34 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 2, encrypted with TLS 1.3, Acked):
    From: <N***e@arbeitsagentur.de> To: <nr@et.lindenberg.one> Spf:Pass Signatures:Dkim
2023-07-14 14:03:29 - 14:03:29 (relay203.arbeitsagentur.de/relay203.arbeitsagentur.de/195.88.117.212/BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany -> Server 7, encrypted with TLS 1.3, Acked):
    From: <N***e@arbeitsagentur.de> To: <n@ut.lindenberg.one> Spf:Pass Signatures:Dkim

Analysis Sending of Email
Your mailserver does not use SNI, hence does not support RFC 7672 nor RFC 8461, and likely accepts any certificate when sending (bad).
Your mailserver was sending a mail (FROM/RCPT/DATA) without using STARTTLS first. Even though it may support RFC 7672 or RFC 8461, it does not enforce encryption (bad, but kind of normal).

Analysis Reception of Email
Mail Server (Preference)Address(es)Root Certificate IssuerDNSSECSTARTTLSTLS VersionCertificateMatches TLSAMTA-STS
mail1.arbeitsagentur.de (10)195.88.117.15USERTrust RSA Certification AuthoritySuccessOptional1.3TrustedNoneOk
mail2.arbeitsagentur.de (10)195.88.117.138USERTrust RSA Certification AuthoritySuccessOptional1.3TrustedNoneOk
Obligatory Transport Encryption    
Qualified Transport Encryption   
RFC 7672 SMTP-DANE  
RFC 8461 MTA-STS  
 Summary
Networks
 BA-PI-NET, CERT der Bundesagentur fuer Arbeit, Germany : 195.88.117.15, 195.88.117.138, 195.88.117.212