Email Security.cloud

Good morning,

I’m Christian Francischiello member of IT Team of MultiMedica Goup, an Italian Company.

I’m writing you because we have some problems with email delivery to some domains managed by messaglabs.com service provider.

Our investigation results is that:

the servers below, linked to sodexo.com and nutricia.com domains are dropping connection to our smtp servers

sodexo.com

cluster4.us.messagelabs.com     internet address = 216.82.242.179

cluster4.us.messagelabs.com     internet address = 216.82.251.33

cluster4.us.messagelabs.com     internet address = 216.82.242.33

cluster4.us.messagelabs.com     internet address = 216.82.251.34

cluster4out.us.messagelabs.com  internet address = 216.82.251.33

cluster4out.us.messagelabs.com  internet address = 216.82.242.33

cluster4out.us.messagelabs.com  internet address = 216.82.242.179

cluster4out.us.messagelabs.com  internet address = 216.82.251.34

nutricia.com

cluster5.eu.messagelabs.com     internet address = 85.158.142.193

cluster5.eu.messagelabs.com     internet address = 193.109.254.3

cluster5.eu.messagelabs.com     internet address = 193.109.255.99

cluster5.eu.messagelabs.com     internet address = 85.158.136.83

cluster5.eu.messagelabs.com     internet address = 85.158.139.163

cluster5.eu.messagelabs.com     internet address = 85.158.142.101

cluster5a.eu.messagelabs.com    internet address = 85.158.139.103

our servers (multimedica.it)

212.239.122.242         smtp2.multimedica.it

212.239.122.243         smtp3.multimedica.it

Could you please check if source IP of our infrastructure are banned by your systems?

Thanks in advance for your cooperation and best regards,

Christian Francischiello.

Just an update:

the source IP results not banned by your reputation investigation tool

http://ipremoval.sms.symantec.com/lookup/

Please help!

No one can help me?

Submit a sample of the email that's blocked to:

investigation@review.symantec.com 

reference link: http://www.symantec.com/docs/TECH82881

I attached a screenshot of log.

I sent an email to investigation@review.symantec.com with description of problem.

Hi

I've reviewed the information provided and I see no issues with the .243 IP however the .242 Ip address was being heavily throttled which I believe to be the cause of this issue.

I have now removed the throttling on this IP so I do not think you should see any further issues moving forwards.

Regards

Ian Tiller

Tier 2 Senior Technical Support Engineer

Hello,

Another case with Message labs filters. As per your advice I have sent email to investigation@review.symantec.com before 2 days and still no answer.

The IP address range that can not sent emails to messagelabs is 69.162.78.66 to 69.162.78.78.

If there is IP level block on port 25 (impossible mail handshake) - why do you require sample of the mail that is sent?

Why there is no simple web form to check if particular IP is blocked by Messagelabs or not. And if it is blocked just simple request form for delisting and/or investigation? 

I'm pretty sure that in my case previous owner of the IP range is responsible for this black listing (as we are new owners of that range), but why it is so hard to acvhive fast solution for delisting?

regards

Nikolay Kabaivanov

Hi Nikolay

I took a look at your IPs and can see some of them were being throttled by our services causing the issues you've been seeing.

I've now removed the throttling on these so you should not see further issues going forwards.

Regards

Ian Tiller

Tier 2 Senior Product Support Engineer