Results 1 to 6 of 6

Thread: [SOLVED] Spam

  1. #1
    fsoares is offline Intermediate Member
    Join Date
    Jan 2008
    Posts
    23
    Rep Power
    7

    Default [SOLVED] Spam

    Recently my server was listed in some Blacklists. I've requested them to delist it. But there are many companies blocking us yet and I donīt know how to find their blacklist system. I've searched spamhaus.org, proofpoint.com, mxtoolbox.com, spamcop.net, and many others.

    The messages I receive are the following:

    Aug 25 10:37:50 webmail2 postfix/smtp[6139]: 19406C538876: host mix.company.com[IP ADRESS HERE] refused to talk to me: 554-hou150mix1.company.com 554 200.189.106.129 rejected based on reputation.

    Aug 25 17:28:41 webmail2 postfix/smtp[6610]: E63AEC538830: to=<Email@email.com.>, relay=mail4.company.com.br[IP ADDRESS HERE]:25, delay=0.62, delays=0.03/0/0.58/0, dsn=4.0.0, status=deferred (host mail4.company.com.br[IP ADRESS HERE] refused to talk to me: 554 mail.company.com.br)

    5.7.1 Recipient not authorized, your IP has been found on a block list (in
    reply to RCPT TO command)


    Does anyone knows how to discover these RBLs?
    Thank you!

  2. #2
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,505
    Rep Power
    57

    Default

    You'll have to ask the administrators of those mail server which RBLs they're using and why you've been blacklisted, there's no way to determine that from outside their server. Obviously you'll have to mail them from a non-blacklisted IP (or via a mail relay).
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    ewilen's Avatar
    ewilen is offline Moderator
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

  4. #4
    fsoares is offline Intermediate Member
    Join Date
    Jan 2008
    Posts
    23
    Rep Power
    7

    Default

    Thank you all for the reply.

    My server is under SPAM attack. Do you have some tips to find which account is infected? I trying to find something in /var/log/zimbra.log |grep smtpd

    I've found something strange here, please see:
    Aug 27 17:13:48 webmail2 postfix/smtpd[24140]: connect from unknown[190.193.230.222]


    Do I have to block this IP address?
    Thank you!

  5. #5
    ewilen's Avatar
    ewilen is offline Moderator
    Join Date
    Jun 2008
    Location
    Berkeley, CA
    Posts
    1,474
    Rep Power
    9

    Default

    I've seen some threads about looking for infected/compromised accounts. Try doing a search on the keywords spammer account.

  6. #6
    fsoares is offline Intermediate Member
    Join Date
    Jan 2008
    Posts
    23
    Rep Power
    7

    Default

    Gentlemen,

    In the beggining I tried to change my firewall's IP, it worked for a while, then I requested the administrators to remove my IP from blacklists. Problem solved. thank you all!!

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. spam training account
    By getridoff in forum Installation
    Replies: 8
    Last Post: 07-27-2010, 10:34 PM
  2. Most of mails showing SPAM & discarded
    By siw919 in forum Administrators
    Replies: 27
    Last Post: 01-12-2010, 01:53 PM
  3. Weird behaviors and LOTS of spam.
    By zwvpadmin in forum Administrators
    Replies: 7
    Last Post: 01-02-2009, 10:26 AM
  4. spam - ham training
    By Viking0 in forum Administrators
    Replies: 6
    Last Post: 12-02-2008, 01:07 PM
  5. Major SPAM to one account
    By CarputerTech in forum Administrators
    Replies: 4
    Last Post: 09-04-2008, 10:54 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •