Messaging Gateway

 View Only
  • 1.  Snow Shoe Spamming Issue

    Posted Jun 09, 2017 03:46 PM
      |   view attached

    Hi,

    we have a new spam filter we are trying to put into production, but for some reason the IP address it is on has a reputation with Symantec Cloud Security for "snow shoe spamming" which isn't something I'd heard of until this issue came up.

    It seems that Symantec is the ONLY spam filter that lists our IP address with this negative reputation, I've checked literally hundreds of other spam filters and they all show us as having a clean reputation, or listing us as whitelisted!  I've put in many requests to have our IP reputation investigated and cleared but nothing ever seems to come of it.  When I try to call Symantec they say they can't help since I'm not a customer, and getting our customers to get their clients to talk to Symantec to fix the issue has not gotten us anywhere.

    The IP address in question is 173.239.120.245, if you can please have this IP reputation investigated and cleared.  There shouldn't be anything that still causes this reputation to occur, though if you see something we need to clear up I'm certainly happy to do that; I just need to know what that is.

    If you could help me resolve this soon it would be very much appreciated!



  • 2.  RE: Snow Shoe Spamming Issue

    Posted Jun 14, 2017 11:11 AM

    I haven't ever received a reply on this issue.  Is this something we can get addressed in the near future please?



  • 3.  RE: Snow Shoe Spamming Issue

    Posted Jun 15, 2017 01:04 PM

    In checking further into this issue it seems there is a HUGE range of IPs that are blacklisted by Symantec and we happen to fall into that range.

    It seems every one of our public IP addresses is blacklisted with Symantec for "Snow shoe spamming".
    I checked all our neighboring public IP addresses, well outside our own subnet, and they are also blacklisted.  It seems Symantec has decided to blacklist a huge range of IP Addresses and we happen to be in the middle of it.

    I checked 250 some other blacklists using this tool:  http://multirbl.valli.org/lookup
    and all of the IP addresses I have checked with this are showing as clean for every other blacklist out there.  It is *only* Symantec that is blacklisting this range of IP Addresses and causing us major problems emailing to some clients.

    Our IP addresses affected are 173.239.120.225 through 173.239.120.254.  

    I have checked IP Addresses 173.239.115.1 through 173.239.121.254 and ALL of them are blacklisted with Symantec, but show as clean on every other blacklist on the internet I can check.

    At this point I don't know the full extent of the range of IPs affected but it is quite large.  So the issue is definitely not with us individually, but with Symantec deciding to blacklist a massive range of IP addresses for an unknown reason and apparently leaving us no way to investigate or resolve this!

    Please let me know what you find with this, and if you're able to be of assistance!



  • 4.  RE: Snow Shoe Spamming Issue

    Posted Jun 19, 2017 07:35 PM

    Exact same issue here

    Their customers are losing important and legitimate email and they could care less.