Leo mail being blocked as spam by many domains

BillSamuel · 12-26-2009, 08:27 PM

I sent a mailing to a list today from the Leo mail server, and it bounced from 19 different domains on the basis of the IP being identified with spam. Among the services blocking Leo as a spam server are Spamhaus and Barracuda.

buteverde · 12-26-2009, 09:17 PM

Also for us. Mail from myself to Marjorie has always worked with no problem. Today it was blocked as Bill says.

This would be from Horde at bytebackonline on Leo (Delta) to her address at earthlink.

There was a "blockedbyearthlink" email address in the blocked data which I sent a query to. This resulted in an automatic reply. In the body of that reply was some interesting stuff about plugging my IP into several links given to see if I am identified as a spammer.

Then there was some info about SMTP authorization being turned on. This led me to search for a way to do that in Plesk or in Horde. Couldn't find it.

I think my IP may be dynamically assigned by Comcast. How can I be sure of this?

And WHAT changed?

BillSamuel · 12-26-2009, 09:44 PM

This is the message I got from HN Support to the ticket I put in:

Quote:

We have located the spam originating account and disabled the vulnerable scripts.

We have issued a black list removal request to all known black listing, server IP would be delisted from all the RBLs within 24 hours.

buteverde · 12-26-2009, 09:56 PM

Thank you, Bill.

Still leaves me wondering about IP addresses. What you quote implies (I think) that there was someone spamming from an account on LEO. That would mean that it wasn't my own IP address that was being blocked. (?)

I did find my own IP address listed on the PBL191964 database.

What is the server IP?

BillSamuel · 12-27-2009, 06:22 AM

The IP being blacklisted, according to some of the bounces I received, is 69.72.158.34

buteverde · 12-27-2009, 08:50 AM

Yep, that's our server.

BillSamuel · 12-27-2009, 03:41 PM

Everyone on Leo uses the same mail server

buteverde · 12-27-2009, 09:23 PM

Well, thanks to HN Support and to you Bill. The emails to Marjorie at earthlink are no longer being blocked.

Bill, have you tried resending to those that were bounced to you?

BillSamuel · 12-27-2009, 09:34 PM

No, this was to a list using Dada Mail. So I can't really send selectively.

**NexDog** · 12-28-2009, 04:15 AM

A client got hit with a Gumblar style virus and about 10 domains were hacked and spam sent out. We have changed the mail IP so shouldn't be listed now.