Email Security.cloud

Hello,

a new public IP network class has been recently (Mar 2018) assigned to our company but now we are experiencing problems due to messagelabs.com filtering policy.

Our network is: 62.173.161.0/28
16 ips from 62.173.161.0 to 62.173.161.15

The error trace:

host cluster5.eu.messagelabs.com[85.158.136.83] refused to talk to me: 501 Connection rejected by policy [7.7] 3604, please visit www.messagelabs.com/support for more details about this error message.

I know that those IP could have been used in the past (not from us) for sending spam, but now they are clean.
Could you remove us from you black list or make a new evaluation to this IP group?

Please soon. Our customers start complaining about the undeliverability of their messages.

Thanks for your time and help, please let me know if you need something else.

Gabriele

Hi Gabriele,

Check the TN below and try getting hold of investigation@review.symantec.com for more help:

https://support.symantec.com/en_US/article.TECH82881.html

Thanks!

Submit a sample of the email that's blocked to:

investigation@review.symantec.com 

reference link: http://www.symantec.com/docs/TECH82881

Thank you @Craig and @Brian but the problem is not the message...

Typing telnet cluster5.eu.messagelabs.com 25 is enough to receive the error:

Trying 193.109.255.99...
Connected to cluster5.eu.messagelabs.com.
Escape character is '^]'.
501 Connection rejected by policy [7.7] 4815, please visit www.messagelabs.com/support for more details about this error message.
Connection to cluster5.eu.messagelabs.com closed by foreign host.

Anyway, i'll try to write to the address above...

ML is dropping the connection from your server. It have been that your IP was on a blacklist in the past. ML will need to identify and remove it so the connection is allowed.

Is there anyone to contact in order to clean-up the blocks? I wrote to the suggested address (and filled also an online form) but i haven't received any reply yet!
Sorry but the situation is unsustainable, our customers are getting tired.

Thanks, Gabriele

Hi Gabriele,

I have the same situation and no solution:

https://www.symantec.com/connect/forums/my-all-ips-blocked?list_context_id=1711&list_context_type=sc_forum

I tried to contact a Symantec Customer, but there is an unwillingness on the part of the client to understand and contact symantec asking for a solution.

Hello Gabriele,

I apologize for the issue you are experiencing and I am currently looking into this issue.  I will PM you once my investigation has been completed.

Thanks

I can confirm that now i was able to perform telnet succesfully, messagelabs servers don't drop my connection anymore.

Thank you all for the support.

Hello Gabriele,

Thank you for your reply,

I was able to determine that the range of IP addresses were on our blacklist.  This is most likely due to the previous owners of the IPs being compromised or relaying spammy content.

I have removed the range of IP address.

Thanks