mail server blacklisted

Discussion in 'Mail Server Support' started by snowflake, Sep 13, 2014.

  1. snowflake

    snowflake Valued Member

    Joined:
    Nov 18, 2013
    Messages:
    11
    Likes Received:
    0
    I got an email from my host saying one of my web sites was sending spam.. we are now blacklisted… what do i do?
     


  2. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    8,983
    Likes Received:
    120
    First you'll need to fix the source of the problem and make sure the spam doesn't restart. Make sure your server updates are done, and probably more importantly make sure any 3rd party applications such as Wordpress and it's plugins, drupal, phpmyadmin, etc are all updated. Check your apache logs for lots of POST lines, sometimes that will help you find the problem. Then wait until Monday for the spam reports to stop, they'll keep coming in over the weekend as people check their email and report the spams that had been sent. Then after the spam reports stop it should be safe to request delisting from blacklists as needed. It's best if you can be sure you found the source of the problem and have fixed it before submitting the delisting requests.
     

  3. snowflake

    snowflake Valued Member

    Joined:
    Nov 18, 2013
    Messages:
    11
    Likes Received:
    0
    A couple clients saying they get a 554 error when sending emails. Plesk says its a permissions issue.
     
  4. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    8,983
    Likes Received:
    120
    What is the exact error message? If it's only a couple clients i'd expect broken smtp-auth from the upgrades, or a bounce message back after sending related to last weeks spamming.
     
  5. snowflake

    snowflake Valued Member

    Joined:
    Nov 18, 2013
    Messages:
    11
    Likes Received:
    0
    208.65.145.3 failed after I sent the message.
    Remote host said: 554 Denied
    [142f6145.0.5883286.00-2158.8661129.p02c12m011.mxlogic.net] (Mode: normal)
     
  6. popowich

    popowich EQ Forum Admin Staff Member

    Joined:
    Aug 12, 2008
    Messages:
    8,983
    Likes Received:
    120
    Yes, that's the mxlogic mail scrubbing service blocking you as a spam source
    Nothing on your server needs to be fixed if the source of the spam is fixed. You only need to do the delistings, and maybe send in an abuse ticket to a couple places such as mxlogic if they don't detect the problem is fixed in their own. A blacklist check of your IP at MX Toolbox looks good, and your sender score looks good too:

    MX Toolbox Blacklist Check.JPG Sender Score.JPG
     

Want to reply or ask your own question?

It only takes a minute to sign up (and it's free!). Click the orange sign up button to choose a username and then you can ask your own questions on the forum.
Loading...