Email Security.cloud

Bonjour,

j'ai un tout nouveau serveur de courriel et je recois ce message d'erreur suivant :

connect to cluster5.us.messagelabs.com[216.82.242.131]:25: Connection refused

mon IP  est : 198.50.185.21

Suis-je bloqué de votre coté?

Stéphane
Net Communications

Hi Stephane,

Apologies, but I do not speak French. I hope you can read or translate this:

The IP 198.50.185.21 is listed on our internal Blacklist and I will start steps to remove this. Once this has been completed I will let you know.

Kind regards

Kevin Brosnan

Tier 2 Senior Technical Support Engineer.

Hi Stephane,

I can now confirm that I have now removed the IP 198.50.185.21 from our internal Blacklist and I have also reset the confidence of that IP accross all our towers.

This will fix the issue and you will no longer get issues sending emails from that IP to our customers.

If your happy. Please set this thread as resolved to prevent other people adding to it.

Kind regards

Kevin Brosnan

Tier 2 Senior Technical Support Engineer

Hi Stephane,

If your happy that ths is now fixed. Please can you set this thread as resolved to prevent other people adding to it.

Kind regards

Kevin Brosnan

Tier 2 Senior Technical Support Engineer

Hi Kevin

I have the same problem, as you can see on the log below. My server has, SPF, DKIM, DMARC, authentication, antivírus, spamassassin and not listet on any blacklist. The file attached has all transaction log information.

Could you help me?

Thanks in advance and best regards,

Ronaldo Luiz

===< Return Messagelabs error log >===

2017-03-06 15:16:20 1ckxBC-0004Dm-5V H=cluster5.us.messagelabs.com [216.82.250.51] Connection refused
 

Attachment(s)

messagelabs.txt   1 KB 1 version

Hi Ronaldo,

Your IP 179.198.34.67 is listed on a blacklist Spamhaus ZEN, you can confirm this by checking on https://mxtoolbox.com/blacklists.aspx you need to take steps to get your IP removed from there.

You are not listed on our internal blacklist and your reputation of that IP is fine.

Once you have resolved the issue and propagation time has passed you will have no issues sending emails to our customers.

Please set this thread to resolved to ensure others do not add to it.

Kind regards

Kevin Brosnan

Kevin

Thanks for your answer, but this IP aren't from my server, it's from the network provider internet/pop/smtp service, used by the client email outlook that make an authorization smtp login on the server, thats is really the sender email and aren't listed on any blacklist.

The client doesn't have any control over the IP that he receive from the internet service provider to make his connection.

Please, could you check the reason for rejection, as the email was sent from another IP?

Thanks and best regards,

Ronaldo Luiz

Hi Ronaldo Luiz

I have managed to find the log for that email and found the error code 553. The most common of these errors is "553 Message Filtered" which means the Symantec Email Sceurity.Cloud service detected the message as spam. If this is not spam, we can certainly review these messages and remove the incorrect signature that is blocking the email, but a sample is required.

To analyze a false positive sample, Symantec must receive the original false positive email:

• As an "message/rfc822" email attachment*
• One email attachment per submission**

Send the false positive sample as an email attachment to the following address:

CLOUDfeedback@feedback-87.brightmail.com

For more detailed information on how to submit, please take a moment to review the below article.

https://support.symantec.com/en_US/article.TECH233...

If you would like me to follow up on your submission, please let me know when a sample has been submitted and what email address it was sent from. Keep in mind that analysis will occur regardless if you would like me to follow up or not.

Regards,

Kevin Brosnan

Hi Kevin

I just sent the email following your instruction

Email Sender: ronaldo@rc9.net.br

Destination: Luciana.porto@level3.com

Sending Date: qua 08/03/2017 12:56

Thanks for your help and best regards,

Ronaldo Luiz

Hi Ronaldo,

I have raised an internal case and sent all relevant details to our Anti-spam team to amend the signature. I will update you once their investigation is complete.

Kind regards

Kevin Brosnan

Hi Ronaldo.

The sending IP was listed on one of our internal analysers. However, our anti-spam team have reviewed the message you sent in and the logs I provided and they confirm that this has been removed. Please retest, and send in further samples if there are any further issues.

However this should now be resolved and if so, please can you set this thread as resolved to ensure others do not add to it.

Kind regards

Kevin Brosnan

Hi Kevin

Many thanks for your help.

After your intervention the emails are not being rejected and the recipients are receiving normally.

Thanks again and best regards

Ronaldo Luiz

PS: I don't know how to set as "SOLVED" and I'm not the owner of this thread

Hi Stephane,

Please can you set this thread as resolved to prevent other people adding to it. Or if you do need additional help please let me know.

Kind regards

Kevin Brosnan

Tier 2 Senior Technical Support Engineer

Hi Stephane,

Please can you set this thread as resolved to prevent other people adding to it. Or if you do need additional help please let me know.

Kind regards

Kevin Brosnan

Tier 2 Senior Technical Support Engineer

Hi Stephane,

Do you require any further assistance concerning the .cloud service.

If not please set this thread as resolved to ensure others do not add to it.

Kind regards

Kevin Brosnan

Tier 2 Senior technical support engineer