2
Yahoo/AOL/Verizon Blocking Traffic
Question asked by Ryan Wittenauer - 10/12/2020 at 12:09 PM
Answered
Hello All,

We've been blocked by them in the past, it usually lasts at most 2-3 days. This has lasted nearly a week.
Anyone have any luck getting through to someone to get delisted?

Before you ask we:
1. Use MX toolbox to check multiple times a day if we are on any public blacklists, and I have used other services, we are not.
2. Have reached out to Yahoo/Verizon postmaster, they refuse to offer anything other than their guidelines that we are following.
3. Swapped to different servers with different IP's, they must block entire ranges because they immediately block any new IP's we swap to.
4. Dug through all outgoing traffic, nothing is being sent without being authenticated and no one has pinged as being compromised.



Any advice would be appreciated.

5 Replies

Reply to Thread
1
Sébastien Riccio Replied
Marked As Answer
Your best bet is to trigger the attention from someone from Yahoo on the mail operators mailing list.
https://www.mailop.org/

It worked for me sometimes to reach someone at MS and yahoo, but can't guarantee this will always work.

Sébastien Riccio System & Network Admin https://swisscenter.com
0
Ryan Wittenauer Replied
Sebastien, thanks for the info, I'll try that.

Ronald, this is the specific line back we get:
Error: 421 4.7.0 [TSS04] Messages from xxx.xxx.xxx.xxx temporarily deferred due to user complaints - 4.16.55.1; see https://postmaster.verizonmedia.com/error-codes
0
Ryan Wittenauer Replied
Ronald,

No email blasts allowed, we have user limits set pretty strictly to enforce this, mostly user-to-user

Yes

Most, 300 or so domains, and we don't control DNS for all of them so getting DKIM and SPF correctly configured for them all isn't easy. All of our big senders have it configured.

Yes, we occasionally get them, but it almost feels like they need one setup for every single domain you host for it to work properly.
1
Scarab Replied
Ryan,

We haven't had this problem with AOL/Yahoo!/Verizon but we have had this problem with OpenSRS recently and it was a nightmare. Apparently there are a half dozen new RBLs that are all forks of UCEPROTECT (or at least built upon an outdated version of their database). Unlike UCEPROTECT that warned admins repeatedly not to use their L2 and L3 lists to Block because they contain entire ASNs, these new RBLs aren't giving the same warning and they are being used like a normal RBL for blocking purposes instead of just adding a score to a weight. (I don't have a list of them with me at the moment, but last I checked they weren't included on MXToolBox's RBL Checker, were all European, and two of the six didn't even have websites and two of them required that you pay to get delisted. They all seemed kind of sketchy, IMHO.). Alas, OpenSRS is using them and all of a sudden in 2020 we were listed on these half dozen RBLs for a single email sent to a Spamtrap in June 2007, which was over 13 years ago (and originating from a neighboring Class C on the same ASN)! Apparently Constant Contact is blocked by them for the same reason.

We thankfully have a Class B and 3 different Class C's that all are from entirely different ASNs so we were ultimately able to use an Outgoing IP in a different IP Range, but changing IPs in the same Class B (/22) wasn't enough to get email accepted. They were clearly blocking the entire ASN.

Best of luck to you. Best advice I have would be to give Sebastien's advice a try. It might not work but it's probably the best way to get someone's attention who might be able to help.
2
Ryan Wittenauer Replied
Everyones info has been helpful, got in touch with some postmasters at Verizon Media on that list and they revealed a little more info.

Thanks!

Reply to Thread