Email Security.cloud

Hello,

We had emails from one of our servers to your network failing with the below errors, but IP is not listed in any of the major spam databases and while testing at http://ipremoval.sms.symantec.com/ it says not listed as well. Can you please provide a solution?

===

H=cluster1.ap.messagelabs.com [117.120.16.147]: SMTP error from remote mail server after initial connection: 501 Connection rejected by policy [7.7] 6211, please visit www.messagelabs.com/support for more details about this error message.

===

 The IP address you submitted, x.x.x.x, does not have a negative reputation and therefore cannot be submitted for investigation.

Hi Jay

Can you please direct message me your IP and I can check this for you.

Thank you

Ian Tiller

Tier 2 Senior Technical Support Engineer

Hi Ian,

Thank you for reverting back. I have PMed you the IPs in question.

Thank you,

Hi Jay

The IPs that are causing an issue have beem removed from our internal lists. Please allow an hour or 2 for this to fully propagate and after that you should not have any further issues.

Thank you

Ian Tiller

Tier 2 Senior Technical Support Engineer

Hi Ian,

Thank you for your help.

Dear Sir/Madam

I get this e-mail when send an e-mail to some of my friends :

This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its recipients. This is a permanent error. The following address(es) failed:

...@......com

    host cluster1.us.messagelabs.com [216.82.249.179]

    SMTP error from remote mail server after initial connection:

    501 Connection rejected by policy [7.7] 4406, please visit www.messagelabs.com/support for more details about this error message.

This message was created automatically by mail delivery software.

Would you please help on this issue ?

Best Regards

Russell

Hi,

Trying to send an email from my domain vazquezguillen.es (IP: 5.135.24.66) to some clients and came back the error:

host cluster1.eu.messagelabs.com[195.245.230.83]
    refused to talk to me: 501 Connection rejected by policy [7.7] 20805,
    please visit www.messagelabs.com/support for more details about this error
    message.

Is it possible to remove our IP from the block list?

IP: 5.135.24.66

Hello Soporte,

You can submit a removal request by following the instruction found in the below article.

https://support.symantec.com/en_US/article.TECH240145.html

Submit an example of email you are sending, not a bounce back, but the original email (from your sent items for example) and provide the public IP as you provided us here. Allow up to 7 business days for our threat analysist to review.

Regards,
    
Ben Beaulieu
Sr Technical Support Engineer

Hello Ben.

We followed that link days ago a today they answered us that This IP (IP: 5.135.24.66)  has now been cleared and should be OK to send via to our clients.

We cheked our ip reputation in your website http://www.symantec.com/security_response/landing/... and we find that we have bad reputation, we dont send SPAM, so we dont understand why we have bad reputation, this is a new static IP.

We still having some problems with sending emaisl from my domain vazquezguillen.es (IP: 5.135.24.66) and agromolinillo.com (IP: 5.135.24.65) to some clients and came back the error:

host cluster1.eu.messagelabs.com[195.245.230.83]
refused to talk to me: 501 Connection rejected by policy [7.7] 20805,
please visit www.messagelabs.com/support for more details about this error
message.

: host
cluster8.eu.messagelabs.com[85.158.139.19]
refused to talk to me: 501 Connection rejected by policy [7.7] 17812,
please visit www.messagelabs.com/support for more details about this error
message.

I´ve got the same error with diferents host: cluster4.eu.message.labs.com, cluster5.eu.message.labs.com ...

Is it possible to remove our IP from the block list?

IP: 5.135.24.65 and IP: 5.135.24.66

We´ve got these two IP range to add to in our new customers and we wont want to have the same issue when we will use the news IPs:

5.135.24.64/27

5.135.24.96/27

Could you help me with this?

Thanks for your time.

Hello Soporte Texla,

I checked 5.135.24.66 and it has indeed been removed.  The error you encountering as the article state, means it is on an internal blocklist. The IP 5.135.24.65 however is still listed. I cannot remove this IP myself, this must be reviewed by our threat analyst and this is done by reaching out to them through the instructions provided in the article below, as you did previously.

https://support.symantec.com/en_US/article.TECH240145.html

This is necessary as they may need to review emails and full headers before clearing an IP off our internal blocklist for Email Security.Cloud. I would recommend you provide them with the complete list of public IPs used to send email from so that they can help you resolve this completely.

Regards,
    
Ben Beaulieu
Sr Technical Support Engineer

Hello Ben.

Thanks for your quick answer. These are the complete list of public IPs that we have right now:

2001:41d0:1004:2544::/64

5.135.24.64/27

5.135.24.96/27

151.80.77.64/28

176.31.143.64/28

Also I will send an email to  investigation@review.symantec.com