• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

System Admins Help! E-Mails being bounced back...

M

Muffin Man

Limp Gawd
Joined
Aug 7, 2002
Messages
315
Hey Guys -

So, I'm working for an organization part-time...and we have recently been getting help desk calls about e-mails being bounced back, and being classified as undeliverable. There was recently a large amount of spam being sent from our domain, and I believe this has caused our domain to become blacklisted on places like Hotmail, Yahoo, Comcast, etc...etc. There are probably 10 or 15 different e-mail providers that are bouncing our messages back.

Our Sys Admin should be doing something about this, but he recently just quit...so our server guys have been overloaded with work (Trying to push out AD)

I was just wondering if there is something that can be done about this, rather than having to contact every provider individually to try and get them to unblock us...because we are a legit institution!
 
go to mxtoolbox or dnsgoodies, run the tests see who you are blocked by.

how is mail being handled? exchange? check the gueue and delete all the bad messages and make sure you are not an open relay.

if you are on the spam lists, some of them have removal but make sure you fix the problem before doing it. others you have to wait time to get off. temporarily you could do a smtp connector till problem is fixed.
 
I'm also curious about this... a lot of companies are blocking my emails because they're coming from my hosted server at a hosting company and yet I'm sending them out via POP3 using my Outlook with a Cablevision Optimum Online CABLE Internet and the IP address of the sender (my Cablevision one) does not match the IP address of the domain.
 
gotta run the mxtoolbox and dnsgoodies see if you have any failures, maybe spf records, reverse dns, yada yada.

easiest thing for you is to use opts mail server to send out the email. mail.optonline.net
 
for htomail and aol, make sure you have reversedns records properly configured as well, go read up on those providers email rules to make sure you abide by them, or you wont ever get unblocked.

You can also contact them directly and ask them why emails got bounces, however those bounced emails SHOULD tell you why so ask the people complaining to forward you the bounced emails with attachments to get your answer.

easiest thing for you is to use opts mail server to send out the email. mail.optonline.net
Click to expand...

Easiest thing is to find the problem and fix it as opposed to ignore it, and you then need to have reverdns records created and such to point to that domain, and what is someone uses that domain name and get it blocked? Do you like using other people's SMTP? who know what they do with your emails and addresses you send through them
 
yep check mxtoolbox, trustedsource.org, make sure you have reverse dns, spf records all that good stuff. if you need to get mail out now you could have it sent out from someone like dyndns thus making it look like from another domain.
 
MrGuvernment said:
for htomail and aol, make sure you have reversedns records properly configured as well, go read up on those providers email rules to make sure you abide by them, or you wont ever get unblocked.

You can also contact them directly and ask them why emails got bounces, however those bounced emails SHOULD tell you why so ask the people complaining to forward you the bounced emails with attachments to get your answer.



Easiest thing is to find the problem and fix it as opposed to ignore it, and you then need to have reverdns records created and such to point to that domain, and what is someone uses that domain name and get it blocked? Do you like using other people's SMTP? who know what they do with your emails and addresses you send through them
Click to expand...

wow wow wow killer, calm down, i simply posted it for a shorttime fix, damn man when you have clients calling you every minute saying their mails are being bounced well a quick temp fix can work till you fix the problem. lay off the pipe dood.
 
being that there was recently a large amount of spam being sent, was that problem fixed?

if not, and you are on an exchange server, go through this: http://www.amset.info/exchange/spam-cleanup.asp
or have someone with access to the exchange server do this
basically you need to enable recipient filtering.

then of course make sure you have rdns and spf records.

some places you do have to contact, but most have forms that you can fill out online.
 
I ran and openrelay check on dnsgoodies and it came back as "test took too long, aborting".

Looking into it, I noticed it said "sender address rejected" every time it tried to do anything.

Why would this happen?
 
Also, the reverse dns lookup gave me an "Non-authoritative answer".

Does this tell me there is a problem with the dns?
 
Muffin Man said:
I ran and openrelay check on dnsgoodies and it came back as "test took too long, aborting".

Looking into it, I noticed it said "sender address rejected" every time it tried to do anything.

Why would this happen?
Click to expand...

because you're a spammer :p You need to contact their ISP or have them do so. Submit to them the IP of the exchange location. I think someone already has stated this. I have dealt with this issue first hand and it can be cumbersome.
 
Also, we are getting e-mails bounced back to us, from everywhere. Including large corporations, and hotmail, yahoo, even the state department bounced it back. We were able to get whitelisted on comcast and a few others, so far.

Oh, and I've checked multiple blacklist sites, and our smtp is not blacklisted anywhere. Could it be DNS issue?
 
Muffin Man said:
Also, we are getting e-mails bounced back to us, from everywhere. Including large corporations, and hotmail, yahoo, even the state department bounced it back. We were able to get whitelisted on comcast and a few others, so far.

Oh, and I've checked multiple blacklist sites, and our smtp is not blacklisted anywhere. Could it be DNS issue?
Click to expand...

depends on what the email error is.
 
Well the message will tell us it has been blocked due to "abuse".

Hotmail said "Namespace/Mining behavior".

Others will say "host xxxxxx refused to talk to me: 550 access denied....."

However, how can all these ISP's (even small ones no one has ever heard of, be blocking us if we are not on any blacklists?) I even checked barracuda's website, and we are not listed as "poor".
 
what are you using for your e-mail server?
do you have an outgoing queue that you can check? its likely full emails going to random domains, many in different countries.
go into your IIS settings and look for your SMTP server and see if you can add recipient filtering. I believe that's where it is, I have only dealt with this problem on exchange servers, but I am sure a quick google search with the name of your mailserver program and "spam relay" will turn up some good resources on getting this fixed.
 
Setup with a good mail Smart SMTP host..such as Google/Postini...or Appriver. That way you don't ever..ever...have to worry about RevDNS/PTR, and all that crap. And you can setup tight ACLs so that port 25 on your mail server is open ONLY to your hosts IP range..instead of the rest of the world...so 99.9% less worry about getting hacked 'n relayed.
 
You must log in or register to reply here.
Back
Top