Hi
from few weeks my shared mail server ip as bad reputation.
I monitor daily the server status and is ok and clean.
the ip of the server is [37.59.49.128].
I send many request of investigation every 2 day and the early times your remove the ip from bad reputation list but the last times is in investigation from 5 days.
please help me.
About 5 days ago I requested to investigate my email server (IP 212.83.136.185)
but you keep listing us as "bad reputation". We check every day all inbound and outbound emails to stay out of malicious or junk email. We have checked several DNS black lists and the ip is not listed there.
Please con you take a look at this issue?
Thank you.
Ferran M.
Hello,
A client using my server for emails is having issues sending emails to a client using your service. The errors are:
2017-04-05 19:42:04 1cvpc4-000YoU-Td H=cluster1a.us.messagelabs.com [85.158.139.103]: SMTP error from remote mail server after RCPT TO:<ganesh.shankar@sita.in>: 421 Service Temporarily Unavailable 2017-04-05 19:42:04 1cvpc4-000YoU-Td == ganesh.shankar@sita.in R=dkim_lookuphost T=dkim_remote_smtp defer (-44) H=cluster1a.us.messagelabs.com [85.158.139.103]: SMTP error from remote mail server after RCPT TO:<ganesh.shankar@sita.in>: 421 Service Temporarily Unavailable 2017-04-05 19:42:04 1cvpc4-000YoU-Td == anurag.tiwari@sita.in R=dkim_lookuphost T=dkim_remote_smtp defer (-18) H=cluster1a.us.messagelabs.com [85.158.139.103]: Remote host closed connection in response to pipelined RCPT TO:<anurag.tiwari@sita.in>
SMTP error from remote mail server after RCPT TO:<ganesh.shankar@sita.in>: 421 Service Temporarily Unavailable
Can you see if our IP or their ISP IP has been temporarily blacklisted or why their emails are not getting through please??
server address is 80.172.253.133 and 80.172.253.139.
Sender IP:
62.28.231.222
If it is temporary like your error sugests how long will it take to heal itself?
Thanks in advance for any help/advice it would be much appreciated.
Kind Regards
Mark
Hello,
my smtp server (IP 91.220.44.4) can't send messages to one of our client because:
(lost connection with cluster8.us.messagelabs.com[216.82.251.37] while sending message body).
Plase help me.
Best Regards
Marek
Dear sirs
Our mail server 212.129.54.20 listed in your blacklist with a bad reputation. Each day for a couple od weeks I request an investigation at http://ipremoval.sms.symantec.com/lookup/ and the problem isn't resolved yet.This issue is costing to our company a lot of problems with our customer using Symantec mail security and so rejecting our emails.
Our server is used for regular emails and never used to send spams or illigal emails. Our mail server is not listed in any worldwide blacklist but yours. There is no spam coming out from our mail server, there is no virus on our mail server.
Please help me to solve this problem ?
Regards
Mohamed
Dear Sir,
We're using Postfix on a Linux server to send emails via SMTP. Emails are relayed from our server.
Most emails reach their destination fine, however certain addresses never receive our emails. When I check the mailq I see the following:
Apr 6 04:25:30 srv postfix/smtp[16320]: connect tocluster1.us.messagelabs.com[216.82.249.179]:25: Connection timed out
Apr 6 04:25:30 srv postfix/smtp[16320]: 8271142813674: to=<abc@domain.com>, relay=none, delay=21560, delays=21410/0.02/150/0, dsn=4.4.1, status=deferred (connect to cluster1.us.messagelabs.com[216.82.249.179]:25: Connection timed out)
Apr 6 04:33:30 srv postfix/smtp[16856]: connect tocluster14.us.messagelabs.com[216.82.241.197]:25: Connection timed out
Apr 6 04:33:30 srv postfix/smtp[16857]: connect tocluster14.us.messagelabs.com[216.82.241.197]:25: Connection timed out
Apr 6 04:34:00 srv postfix/smtp[16856]: connect tocluster14.us.messagelabs.com[216.82.248.67]:25: Connection timed out
Apr 6 04:34:00 srv postfix/smtp[16857]: connect tocluster14.us.messagelabs.com[216.82.248.67]:25: Connection timed out
Apr 6 04:34:30 srv postfix/smtp[16856]: connect tocluster14.us.messagelabs.com[216.82.248.67]:25: Connection timed out
Apr 6 04:34:30 srv postfix/smtp[16857]: connect tocluster14.us.messagelabs.com[216.82.241.197]:25: Connection timed out
Apr 6 04:35:00 srv postfix/smtp[16856]: connect tocluster14.us.messagelabs.com[216.82.241.197]:25: Connection timed out
Apr 6 04:35:00 srv postfix/smtp[16857]: connect tocluster14.us.messagelabs.com[216.82.248.67]:25: Connection timed out
Apr 6 04:35:31 srv postfix/smtp[16856]: connect tocluster14.us.messagelabs.com[216.82.248.67]:25: Connection timed out
I have checked the blacklists on mxlookup.com and our domain has all green ticks (nobody is blacklisting us).
Also I have checked our IP address here: http://ipremoval.sms.symantec.com/lookup/ and it says The IP address you submitted, xxx.xxx.xxx.xxx, does not have a negative reputation and therefore cannot be submitted for investigation.
I can give you our IP or hostname in a private message if you need it.
Kindly helps us to resolve this issue.
Regards
Mahadev
Hello,
We have put in several requests for removal of our IP from having been blocked for email to customers of yours. We had an outbreak that was corrected and the issue resolved and have been removed off all other blacklists but yours. Please de-list us. Our IP is 50.200.60.78 Thank you!
Hello,
A client is having issues sending emails to a client using your service. The errors are:
Last Error: 421 Service Temporarily Unavailable
Can you see if their IP has been temporarily blacklisted or let me know why their emails are not getting through?
Their email server's IP address is 172.126.72.233.
If it is temporary like your error sugests how long will it take to heal itself?
Thanks in advance for any help/advice it would be much appreciated.
Sincerely,
Dean
Hello,
I noticed last week that we were not able to get any emails from one of our companies servers IP addresses 91.109.242.124
I raised the IP address in the http://investigate.brightmail.com/lookup/ on the 4th April and it is still under investigation. This is severely impacting our workstream and other than this forum, there was no where to chase for an update. There is also the fear that it could get flagged again.
The IP is not reported as being bad on any other blacklist, please advise how we can remove it from the blaclist asap and ensure it is kept off
Thanks in advance
Shauna
Hello,
unfortunately we have two IP addresses used by our customers blocked by Symantec BL. Those are normal and uncompromised servers. I would like to ask for removal of such IPs from your BL.
Affected IPs:
31.187.78.51
31.187.78.53
As said, those are uncompromised mail servers. If there is a specific reason why they are listed, please do let us know.
Evidence:
Failed Recipient: [edited]@tin.it
Reason: Remote host said: 550 mail not accepted from blacklisted IP address
[31.187.78.51]
-- The header and top 20 lines of the message follows --
Received: from PALUMBO (host50-180-static.21-80-b.business.telecomitalia.it
[80.21.180.50]) by mail.saframotor.it with SMTP;
Fri, 31 Mar 2017 10:33:45 +0200
Message-ID:
From:
To:
Subject: prova
Date: Fri, 31 Mar 2017 10:48:07 +0200
MIME-Version: 1.0
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0023_01D2AA0C.481CC460"
X-Priority: 3
X-MSMail-Priority: Normal
Importance: Normal
X-Mailer: Microsoft Windows Live Mail 16.4.3528.331
Disposition-Notification-To:
X-MimeOLE: Produced By Microsoft MimeOLE V16.4.3528.331
AND
Could not deliver message to the following recipient(s):
Failed Recipient: [edited]@tin.it
Reason: Remote host said: 550 mail not accepted from blacklisted IP
address [31.187.78.53]
-- The header and top 20 lines of the message follows --
Received: from UtentePC (net-5-89-41-74.cust.vodafonedsl.it [5.89.41.74])
by mail1.craftybit.it with SMTP;
Thu, 6 Apr 2017 10:08:00 +0200
From: "HozonLift"<[edited]@hozonlift.it>
To: <[edited]@tin.it>
Subject: msg di prova
Date: Thu, 6 Apr 2017 10:19:32 +0200
Message-ID: <004901d2aeae$854d64b0$8fe82e10$@hozonlift.it>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_004A_01D2AEBF.48D634B0"
X-Mailer: Microsoft Outlook 15.0
Thread-Index: AdKuroUIzKJIfn9FQmG/tKfzCjYF1w==
Content-Language: it
please, let us know if we need to provide more evidence.
Best regards,
VaiSulWeb Support Team
Hello,
We have an IP that has been submitted for investigation over 14 days now, without any updates.
##########################
##########################
This IP was blacklisted as a result of compromised and spamming users found on our network. The spamming was addressed shortly after we discovered the abuse and is currently still blacklisted. Our team has attempted to use the various IP reputation lookup tools after requesting delisting, but to no avail.
Please assist us in either removing the blacklist against this IP or providing additional information that may help us resolve this issue.
Thank you.
I have a pair of client MTAs having issues sending subscriber emails to their clients who use Symantec for Spam detection. I have checked both IP addresses using the "IP Reputation Investigation" and neither has a negative reputation. Both are regularly producing the "The server response was: 501 Connection rejected by policy [7.7]" result on attempted delivery.
Are you able to check the two following IP addresses please
104.243.65.124
104.243.65.103
My users are looking for an "always allow" or "block" as action options in their quarantine reports. It would mean impelenting user level allow/deny lists as well I'm sure. Is this something that can be added?
Or am I missing something?
Thomas
Hi,
We have been recently granted with a new /24 IP block from our provider which seems already blacklisted by your services.
Our company provide third party SaaS antispam service to our customers and we are having issues while deliverying email to some mail servers using your blacklist. Customers using the new range see their mails rejected by thoses mails servers with the follwing message :
554 5.7.1 You are not allowed to connect. Your SMTP gateway is in the Symantec Global Bad Sender list. Please check your IP at www.symantec.com/security_response/landing/spam and http://ipremoval.sms.symantec.com/lookup/
The current block range is 154.59.34.0/24. Our others long date /24 blocks are them not subject to the blacklist. The previous owner of the IP block may have been an ISP or a spam source but this is not the case anymore.
We already tried to ask for removal manually from http://ipremoval.sms.symantec.com/lookup/ but it doesn't seems to be taken in consideration.
Could you please remove this block from your bad reputation list ? We can provide legitimate example if needed.
Best regards,
Antony SPERA.
Hi
The ip 85.25.210.167 (smtp.infomedslis.com) is under investigation for a week now!
Since we are not spammers and not blacklisted in every other list, can you please remove us asap cause we are having problems communicating?
Thank you
Hello,
a month ago I added our ip for investigate. But it's still under investigating.
Our web site works perfectly, no virus or spam now. (Last year we was hacked),
We create all new web site and changed hosting. Now we are clean. no where we are on spam lists
please remove us from blacklist, and give us our reputation back pls
IP Adress : 185.153.221.108
sometimes we got this error mail
---------------------------------------
reservationbelek@regnumhotels.com
host smtp.regnumhotels.com [212.174.254.8]
SMTP error from remote mail server after initial connection:
554 5.7.1 You are not allowed to connect.
----------------------------------------
thank you for your help
Dear Supports Engineers, connections from our IP addresses 84.54.97.55 are blocked, but IP not have a negative reputation.
How can I unblock/delist my IP?
Thanks!
Hi,
Trying to send an email from my domain vazquezguillen.es (IP: 5.135.24.66) and agromolinillo.com (IP: 5.135.24.65) to some clients and came back the error:
host cluster1.eu.messagelabs.com[195.245.230.83] refused to talk to me: 501 Connection rejected by policy [7.7] 20805, please visit www.messagelabs.com/support for more details about this error message.
I´ve got the same error with diferents host: cluster4.eu.message.labs.com, cluster5.eu.message.labs.com ...
Is it possible to remove our IP from the block list?
IP: 5.135.24.65 and IP: 5.135.24.66
We´ve got these two IP range to add to in our new customers and we wont have to have the same issue when we will use the news IPs:
5.135.24.64/27
5.135.24.96/27
Could you help me with this?
Thanks.
I could help because I have a problem with my client, when receiving an email from this address some if you deliver them and another not, they could help me, it marks the following error450 4.4.1 [internal] Connection Timed Out
