Email Security.cloud

 View Only

  • 1.  IP get block again an again

    Posted Mar 31, 2017 06:42 PM

    Hello!

    I'm currently experiencing the situation that the IP of one of my servers gets on your blacklist again and again. (that means that I place an investigation request and a few hours to days later the IP is removed and all queued mail get sent)

    Again a few days later the mails are being blocked again and the server's IP is reported as "The host has been observed sending spam in a format that is similar to snow shoe spamming techniques."

    Yesterday I again submitted a removal request, but this time it was not processed until now:

    The IP address 62.75.169.191 has already been submitted for investigation

    As I don't have any clue why the IP gets on the blacklist again, please advice what I can do to prevent that.
    (the IP is not reported on any other blacklist)

    Thanks in advance!

    Best regards,

    Daniel JM



  • 2.  RE: IP get block again an again

    Posted Apr 03, 2017 02:57 AM

    Hi Daniel,

    The IP 62.75.169.191 is not currently listed on any of the .cloud blacklist. If the IP is still on the blacklist I would be able to investigate with our Anti-Spam team to see why this keeps happening. But as the IP is not currently listed. All I can say is to unsure your mail server is not Compromised and no spam is being sent from the IP in question.

    Kind regards

    Kevin Brosnan

    Tier 2 Senior Technical Support Engineer



  • 3.  RE: IP get block again an again

    Posted Apr 06, 2017 03:17 AM

    Hello Kevin!

    Thanks for your reply!

    At the moment the IP seems to be blacklisted again.

    Mailservers using Symatecs blacklist keep denying our messages:

    host mx.apa.at[194.232.25.1] refused to talk to me: 554 5.7.1 You are not allowed to connect.

    The IP reputation investigation tool states:

    The IP address 62.75.169.191 has already been submitted for investigation.

    Best regards,

    Daniel JM



  • 4.  RE: IP get block again an again

    Posted Apr 08, 2017 05:16 AM

    Hello Kevin!

    Thanks for your reply!

    At the moment the IP seems to be blacklisted again.

    Mailservers using Symatecs blacklist keep denying our messages:

    host mx.apa.at[194.232.25.1] refused to talk to me: 554 5.7.1 You are not allowed to connect.

    After starting a new "investigation", the IP reputation investigation tool states:

    The IP address 62.75.169.191 has already been submitted for investigation.

    Best regards,

    Daniel JM



  • 5.  RE: IP get block again an again
    Best Answer

    Posted Apr 10, 2017 07:41 AM

    Hi Daniel,


    I have checked the IP against the .cloud Blacklist and can confirm that these are not listed with us and we would not be blocking your emails for this reason.


    We will not be blocking your connections when sending emails from any of those IPs to our .cloud customers.

    Should you still have issues sending to Symantec customers, it may be part of the Messaging gateway products to which the .cloud team have no access to. If you do have problems with them, you will need to raise this in their Forum:

    https://www.symantec.com/connect/security/forums/messaging-gateway

    Please set this thread as resolved to ensure others do not add to it.

    Kind regards

    Kevin Brosnan

    Tier 2 Senior technical support engineer