Email Security.cloud

I own a small hosting comapny and I have noticed that our sending ip is constantly being blacklisted at http://ipremoval.sms.symantec.com

Apparently because of a showshoe attack. We are extremely strict on our mail policies and monitor all of the major RBL, mail is throttled and we react instantly on any spam report which is very rare.

I have investigated thoroughly and there is no spam coming from our sending IP, in fact there is less than a few 100 e-mails a day most times, and those do not contain anything malicious. Now upon further investigation I see that all the IPs in the range are also being blacklisted. Many of these IPs are not even active and CANNOT be used to send anything at all, the ones that are active are not used for mail.

I have tried to contact Symantec direct over the phone about this but I just go around in circles, nobody knows where to send me or how to answer me.

I hope there is somebody here who can put me in touch with the correct people. If Symantec insists on listing my IPs than I would like some further information if possible such as offending sender address and time.

I have just went through and asked for all these IPs to be unblocked again.

IPs

Thanks,

Chuck

Hi Chuck,

I have checked all 21 IPs against the .cloud Blacklist and can confirm that these are not listed with us and we would not be blocking your emails for this reason..

We will not be blocking your connections when sending emails from any of those IPs to our .cloud customers.

Should you still have issues sending to Symantec customers, it may be part of the Messaging gateway products to which the .cloud team have no access to. If you do have problems with them, you will need to raise this in their Forum:

https://www.symantec.com/connect/security/forums/messaging-gateway

Please set this thread as resolved to ensure others do not add to it.

Kind regards

Kevin Brosnan

Tier 2 Senior technical support engineer

Hi,

Could you check now please. Before I had posted I requested investigation on them all and they were removed. I just checked now and they are listed again.

This is getting a bit ridiculous. I shut off mail completely for 24 hours, still get blacklisted at the same time each and everyday. If you can put me in contact with somebody that i can speak to on the phone it would be appreciated.

Hi Chuck,

Again these IP's are not listed on the .cloud infrastructure. As mentioned above, can you please raise this on the Forum below as I do not see any of these IP's listed on our Blacklist.

https://www.symantec.com/connect/security/forums/messaging-gateway

Kind regards

Kevin Brosnan

Kevin,

Thanks for checking. I have created a thread there.