Dear Justin, 

We have a weird issue. On my system there are several lists. 
As normal they use all the same bounce-system. 

Somehow bounce/return-messages are mixed up. One list-admin (VNR) receives mail what should go to another admin (dennisdeals) (and asks me to get rid of this “spam”). 

I cannot find any clue on how this may happen. 

Could surely need some help here. 

Regards, Eef 

Here some lines from a mail they received: (please look at the bold lines)   

Received: from SRVEXCH01.stadswerk.local (127.0.0.1) by  SRVEXCH01.stadswerk.local (127.0.0.1) with Microsoft SMTP Server id 14.3.319.2; Thu, 10 Aug 2017 19:25:02 +0200

Return-Path: <admin@PROTECTED>

Envelope-to: info@PROTECTED   ----à>> This is the list address of VNR

Delivery-date: Thu, 10 Aug 2017 19:24:18 +0200

Received: from spamexpert2.aristo-internet.nl ([185.112.64.247])  by sv01.aristo-webdesign.nl with esmtps (TLSv1:DHE-RSA-AES256-SHA:256)              (Exim 4.88)          (envelope-from <admin@PROTECTED>)        id 1dfrBy-0001OU-Iw

                for info@PROTECTED; Thu, 10 Aug 2017 19:24:18 +0200

Received: from spamexpert2.aristo-internet.nl ([185.112.64.247])  by

spamexpert2.aristo-internet.nl with esmtps

(TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)   (Exim 4.86)          (envelope-from

<admin@PROTECTED>)     id 1dfrCB-0004js-1i            for

info@PROTECTED; Thu, 10 Aug 2017 19:24:33 +0200

Received: from mailer.aristo-webdesign.nl ([185.58.56.65])               by

spamexpert2.aristo-internet.nl with esmtps

(TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256)   (Exim 4.86)          (envelope-from

<admin@PROTECTED>)     id 1dfrC7-0004G3-Lj          for

info@PROTECTED; Thu, 10 Aug 2017 19:24:28 +0200

Received: from admin by mailer.aristo-webdesign.nl with local (Exim 4.85)

                (envelope-from <admin@PROTECTED>)        id 1dfrC4-0001l7-4x           for

info@PROTECTED; Thu, 10 Aug 2017 19:24:24 +0200

Date: Thu, 10 Aug 2017 19:24:23 +0200

From: <redactie@PROTECTED>

To: <info@PROTECTED>

In-Reply-To: 20170804220455.55313945@PROTECTED à>> And this is the domain of the other list “dennisdeals”. 

References: <20170804220455.55313945@PROTECTED>

Precedence: list

List: VNRgemeenten

List-ID: <VNRgemeenten.mailer.aristo-webdesign.nl>

List-Owner: <info@PROTECTED>

List-Post: NO

X-Beenthere: “Bounce Handler” <bounces@PROTECTED>

Message-ID: <E1dfrBV-0006yI-US@PROTECTED>

X-Mailer: Pro Dada 10.5.4 Stable 05/16/17

Content-Type: text/plain; charset=”UTF-8”

Content-Transfer-Encoding: 8bit

Subject: Autoreply: “Extra arting op onze Best Sellers  + Gratis verzending”   -à Text of mail from list “dennisdeals”. 

Sender: <admin@PROTECTED>

X-Originating-IP: 185.58.56.65

X-SpamExpertAristo-Domain: mailer.aristo-webdesign.nl

X-SpamExpertAristo-Username: 185.58.56.65

Authentication-Results: aristo-internet.nl; auth=pass smtp.auth=185.58.56.65@PROTECTED

X-SpamExpertAristo-Outgoing-Class: ham

X-SpamExpertAristo-Outgoing-Evidence: Combined (0.28)