Messaging Gateway

I know this was been discussed a lot here, but I can't seem to find something to help me.

My mail server is on the symantec blocklist. Can't email hotmail (on occasion some do go through though) and anybody using a brightmail mail filter. I am on no other blacklist that I know of. Have checked against 97 known blacklist. Have filled about the main blacklist removal list at least a dozen times. Have even called twice to no avail.

I have proper reverse DNS, it's a dedicated server, not an open relay, has a static dedicated IP.

Where do I go from here?

Does anybody know of a way of the blacklist?

If you keep ending up on the blacklist, then you are doing something to cause that. When you request removal, it tells you why you are listed. You need to review your company's outgoing mail policy and make sure that the recipients are all willing to receive your emails and that you are sending to addresses that still exist.

Hello JDavis, it does say we are spamming. But I really can't figure out how, the mail server sends out a few hundred messages a day. I can actually scan through them and see the messages. They are really not spam. Most are replies to inquires even. Is there any other way to see more information about what is the spam?

What is the time-table to get unlisted? I don't think we keep getting blacklisted, we are on the blacklist and as far as I know, have remained on it.

When you request removal, the first few times at least, we immediately remove you. If we continue to see whatever we saw to list you, we'll put you back on.

You may want to look at any other servers whose IP get NATed to the IP being blocked, not just your mail server. They may be sending out tons of spam without you realizing. You should also make sure that whatever is accepting mail before it hits your mail server is not accidentally set up to be an open relay. You may need to set up a packet capture on your firewall and look for anything suspicious.

Here is a knowledgebase document with a bit more information and an email address to request more information:

http://www.symantec.com/business/support/index?page=content&id=TECH82881

There are no other servers that share this IP, nat or otherwise. I will try to dig deeper to find if it's sending out more email than I think. I doubt it as it's on no other blacklist, but I will try to find something.