IP has been found on a block list
Hello, I use Exchange 2007 And When a some senders from outside try to send email to my company I get the below error message. I did check if the IP was block and could not find the IP on the edge List. I would like to understand better the below NDR and why it does not go through? It does with *@hotmail.com, *@gmail.com etc...But some others like aol, orange etc are blocked. I would really appreciate your help on that From: "Mail Delivery System" <MAILER-DAEMON@orange.fr> Sent: Friday, September 10, 2010 8:05 PM To: <sender@orange.fr> Subject: Undelivered Mail Returned to Sender > This is the mail system at host mwinf2708.orange.fr. > > I'm sorry to have to inform you that your message could not be > delivered to one or more recipients. It's attached below. > > For further assistance, please send mail to postmaster. > > If you do so, please include this problem report. You can delete your > own text from the attached returned message. > > The mail system > > <recipient@company.com>: host > mail3.company.com[85.14.XXX.225] > said: 550 5.7.1 Recipient not authorized, your IP has been found on > a block > list (in reply to RCPT TO command) > > Received: from me-wanadoo.net (localhost [127.0.0.1]) by > mwinf2708.orange.fr (SMTP Server) with ESMTP id 430801C006F3 for > <recipient@company.com>; Fri, 10 Sep 2010 20:05:22 +0200 > (CEST) > Received: from me-wanadoo.net (localhost [127.0.0.1]) by > mwinf2708.orange.fr (SMTP Server) with ESMTP id 29A741C00DD3 for > <recipient@company.com>; Fri, 10 Sep 2010 20:05:22 +0200 > (CEST) > Received: from PierrePC > (AStrasbourg-752-1-21-220.w90-39.abo.wanadoo.fr > [90.39.192.220]) > by mwinf2708.orange.fr (SMTP Server) with ESMTP id 9BCE61C006F3 for > <recipient@company.com>; Fri, 10 Sep 2010 20:05:02 +0200 > (CEST) > X-ME-UUID: 20100910180502638.9BCE61C006F3@mwinf2708.orange.fr > X-ME-User-Auth: sender > Message-ID: <21A28432CD0C43E7A330C36B697E4613@PierrePC> > From: "SENDER" <sender@orange.fr> > To: "RECIPIENT" <recipient@company.com> > Subject: Meeting report > Date: Fri, 10 Sep 2010 20:04:55 +0200 > MIME-Version: 1.0 > Content-Type: multipart/mixed; > boundary="----=_NextPart_000_0044_01CB5123.702DDC30" > X-Priority: 3 > X-MSMail-Priority: Normal > Importance: Normal > X-Mailer: Microsoft Windows Live Mail 14.0.8089.726 > X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8089.726 >
September 15th, 2010 7:39am

Ur nameserver record has some problem.Plse speak to the people where u hosted ur mx record. -bpara
Free Windows Admin Tool Kit Click here and download it now
September 15th, 2010 8:31am

You could check to see if the IP address of your mail server appears on any blacklists. You need to know the IP address that maps to your mailserver EXTERNAL DNS name. Go to the following website and enter the IP address and hot the button. If it comes back all greens you should be in the clear. http://www.dnsbl.info/dnsbl-database-check.php You can put the domain name of the mailserver into this site too to run a check. http://www.mxtoolbox.com/I.T. Manager International House London
September 15th, 2010 9:01am

Hello, Go to www.mxtoolbox.com and enter your Exchange server's IP address in the RBL (Block List) lookup and see if you are on any of those lists. If you are: 1. Make sure you know how you go there. It's possible that one of your local users got a virus that's sending out SPAM. Check all of your local PC's and make sure they are not infected with adware, virus. 2. If you firewall can accept rules, create a rule that blocks ALL outgoing SMTP traffic from the enrire subnet EXCEPT from the exchange server. This way, if this happens again, the infected PC's virus cannot relay mail because port 25 is blocked. 3. Once you have completed steps 1 and 2, go back to MX toolbox, and each Block List will have a link that takes you to the RBL's removal instructions page and get yourself removed. If you do NOT host your Exchange Server yourself, then have your hosting provider follow the same steps above. MiguelMiguel Fra / Falcon ITS Computer & Network Support, Miami, FL Visit our Knowledgebase Sharepoint Site
Free Windows Admin Tool Kit Click here and download it now
September 15th, 2010 9:08am

Hello, I did try my Exch server on www.mxtoolbox.com and got the below result: Blacklist Status Reason TTL ResponseTime Backscatterer.org LISTED Sorry 85.XX.XX.225 is blacklisted at Detail Return codes were: 127.0.0.2 853 1669 Bu tI am block on only one out of 105. But I did request them to remove mefrom that blackIP list. How come it happens with some provider. What about whilisting the Domain. What would be the consequences??
September 15th, 2010 9:51am

Hello, Please contact your recipient's and find out if he uses backscatter. Personally, I would not use them because backscatter it's a very aggressive for of SPAM control. Also, the NDR you are getting from the recipient's server lacks specificity. Contact their server manager to find out exactly what block list is preventing you from reaching their server. If it's backscatter.org, then you can find removal instructions on their site like from mxtoolbox . Even if you requested a de-listing, you will need to take care of the problem right away or you will wind up re-listed (and it will be increasingly harder to get de-listed after you get re-listed) Miguel Fra / Falcon ITS Computer & Network Support, Miami, FL Visit our Knowledgebase Sharepoint Site
Free Windows Admin Tool Kit Click here and download it now
September 15th, 2010 10:16am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics