1
Major Mail Rejected Problems
Question asked by Francis Gibbons - 4/3/2016 at 7:27 PM
Unanswered
Hello All,
 
I am currently running Smartermail 9,x on Windows 2008 Server.
 
I have been having a lot of problems with Email being rejected that my customers are sending out on different businesses, domains and accounts. I have them sending me the rejection and they don't really provide any real detail as to why it was rejected. I checked mxtoolbox for blacklisting and I was listed on Sorbs, Protected Sky and Spamhaus this past Friday and I requested to be removed. Now when I go to mxtoolbox.com and check all my IP's they come up clean. Can someone please give me a hand as to why these emails from multiple customers are being rejected?
 
Here is a copy of the rejected email and this is pretty standard for all emails that have been rejected:
 
FromSystem Administrator
Sent: Sunday, April 03, 2016 9:18 PM
To: frank@abc123.com
SubjectDelivery Failure

Could not deliver message to the following recipient(s):
Failed Recipient: ralph@aol.com

-- The header and top 20 lines of the message follows --

Received: by 369473-www2.gdisinc.com via HTTP;
Sun, 3 Apr 2016 21:01:01 -0400
From: "Frank" <frank@abc123.com>
To: "Ralph" <ralph@aol.com>
Subject: re: Approval for Use...
Date: Sun, 3 Apr 2016 21:01:01 -0400
Reply-To: frank@abc123.com
Message-ID: <73a8b8f8$5ce8f9d3$189005c5$@com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0001_269AA644.9DC4896"
X-Originating-IP: [69.125.40.216]

This is a multipart message in MIME format.

------=_NextPart_000_0001_269AA644.9DC4896
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
 
I also checked to log file to see if I could find something and just lets me know it was bounced:
 
14:21:03 [47596] Delivery started for ralph@aol.com at 2:21:03 PM
14:21:33 [47596] Message exceeds maximum scanning size, skipping content based checks.
14:21:34 [47596] Spam check results: [_SPF: None], [BARRACUDA - BRBL: passed], [FIVE-TEN: passed], [HOSTKARMA - BLACKLIST: passed], [HOSTKARMA - BROWNLIST: passed], [HOSTKARMA - WHITELIST: passed], [MAILSPIKE Z: passed], [NOABUSE: passed], [NOPOSTMASTER: passed], [RHSBL: passed], [SORBS - ABUSE: passed], [SORBS - DYNAMIC IP: passed], [SORBS - PROXY: passed], [SORBS - SOCKS: passed], [SORBS 02 - HTTP: passed], [SORBS 03 - SOCKS: passed], [SORBS 04 - MISC: passed], [SORBS 05 - SMTP: passed], [SORBS 06 - RECENT: passed], [SORBS 07 - WEB: passed], [SORBS 09 - BLOCK: passed], [SORBS 09 - ZOMBIE: passed], [SORBS 10 - DYNAMIC IP: passed], [SORBS 11 - BAD CONFIG: passed], [SORBS 12 - NOAAIL: passed], [SORBS 13 - NO SERVER: passed], [SPAMHAUS - PBL 1: passed], [SPAMHAUS - PBL 2: passed], [SPAMHAUS - SBL 1: passed], [SPAMHAUS - SBL 2: passed], [SPAMHAUS - XBL 1: passed], [SPAMHAUS - XBL 2: passed], [SPAMHAUS - XBL 3: passed], [SPAMHAUS - XBL 4: passed], [SPAMHAUS - ZEN: passed], [SPAMRATS: passed], [UCEPROTECT LEVEL 1: passed], [UCEPROTECT LEVEL 2: passed], [UCEPROTECT LEVEL 3: passed], [VIRUS RBL - MSRBL: passed], [_REVERSEDNSLOOKUP: passed], [_DKIM: None], [SPAMCOP: passed]
14:21:36 [47596] Starting local delivery to frank@abc123.com
14:21:36 [47596] Delivery for ralph@aol.com to frank@abc123.com has completed (Delivered) Filter: None
14:21:36 [47596] End delivery to frank@abc123.com
14:21:36 [47596] Delivery finished for ralph@aol.com at 2:21:36 PM         [id:231147596]
21:01:02 [67047] Delivery started for frank@abc123.com at 9:01:02 PM
21:01:29 [67047] Skipping spam checks: No local recipients
21:01:32 [67047] Sending remote mail for frank@abc123.com
21:17:21 [67047] Sending remote mail for frank@abc123.com
21:18:09 [67047] Bounce email written to 269867063.eml
21:18:09 [67047] Delivery for frank@abc123.com to ralph@aol.com has completed (Bounced)
21:18:10 [67047] Delivery finished for frank@abc123.com at 9:18:10 PM        [id:269867047]
 
The IP Address my Mail is using are:
1. 72.3.225.17
2. 174.143.136.121
3, 174.143.136.119
 
These are just some IP's having problems.
 
Please can anyone HELP ME!!! My back is against the wall my customers are screaming and I don't know what to do or tell them at this point.
 
Thank you,
 
Frank G.    
 

6 Replies

Reply to Thread
0
Bruce Barnes Replied
DKIM, DMARC, rDNS, Feedback loops? There's a lot to be vetted in a situation like this, and it requires an in-depth analysis of every aspect of your server, the domain configuration, the sending domain's reputation, the reputation of the FQDN of you server, the IP address from which you are sending, etc.
Bruce Barnes ChicagoNetTech Inc brucecnt@comcast.net Phonr: (773) 491-9019 Phone: (224) 444-0169 E-Mail and DNS Security Specialist Network Security Specialist Customer Service Portal: https://portal.chicagonettech.com Website: https://www.ChicagoNetTech.com Security Blog: http://networkbastion.blogspot.com/ Web and E-Mail Hosting, E-Mail Security and Consulting
0
Francis Gibbons Replied
Hello Bruce,

I've had this mail running fine for the last 10 years. I had your general hick-ups but over all never seen this kind of problem. I don't even know where to start!
0
Bruce Barnes Replied
Best thing to do is open a ticket or contact a tech to vet your server and domains completely.
 
I suspect this might take a couple of hours - depending on the number of domains you host and other aspects of your server's configuration.
Bruce Barnes ChicagoNetTech Inc brucecnt@comcast.net Phonr: (773) 491-9019 Phone: (224) 444-0169 E-Mail and DNS Security Specialist Network Security Specialist Customer Service Portal: https://portal.chicagonettech.com Website: https://www.ChicagoNetTech.com Security Blog: http://networkbastion.blogspot.com/ Web and E-Mail Hosting, E-Mail Security and Consulting
0
Merle Wait Replied
Maybe too late now... but do you know WHY you were on those back-list to start with ??   Was as a spammer or ????
All things being equal, as far as your "server/email settings" ... would have to be some one or something is going through your server and sending huge amounts of emails....   Increase in volume...  on a domain??
- that is where i start... I am sure you have done all of things... but I always look as to why I on their list, and then work backwards... as you say = its a pain when your back is against the wall
0
Francis Gibbons Replied
Yes someone compromised a word press account and spammed off of the contact us form. By time I figured it out it was to late. I think I figured it out. It appears that I am being rejected because when my customers would email out of Outlook from there local PC such as comcast then receiving servers would reject me because the comcast ip was blacklisted even tho my servers ip's are fine.
0
DJ Won Replied
For temporarily solution, you may change your customer outbound IP to another Public IP as you can sending out the email message.
 

Reply to Thread