Forum Moderators: phranque

Message Too Old, No Replies

mail servers blocks my emails(sending and recieving)

abuse report from data center

         

hamids54

11:25 pm on Apr 30, 2010 (gmt 0)

10+ Year Member



3 weeks ago my data center reported we are sending spam
and warned to suspend my dedicated server.I don`t know
about server managing but my server manager said he fixed
the problem. there are only 2 sites on my server and not me nor
server manager don`t send spam and I don`t know what is the
source of the spams.

after that I rarely receive emails and also rarely can
send emails. it seems mail servers blocks any email send to
my server and don`t let me to send email also.how I can fix this
problem ?

lammert

11:14 pm on May 1, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



If your server was sending out a large number of spam messages, the IP address of your server may have been listed in one or more of the block lists. Removal is automatic if your server doesn't send any spam messages for some time, and with some spam lists you can also request a speedy IP removal.

Just a friendly reminder that not only deliberate spam messages can be marked as spam by people, but also emails you have sent without the intention to spam. In many countries bulk emails without the prior approval of the receiver are now legally considered as spam. It could therefore be that the newsletters you mentioned in this previous thread [webmasterworld.com] caused some receivers to complain to your hosting company, and caused your server IP to end up in one of more block lists.

tangor

11:21 pm on May 1, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Sometimes the complaint (re: newletters/email lists) are made to the user's ISP and they forward your mail server to the spam lists.

In most cases this lasts about 48 hours. What you want to do is determine who turned you in, then determine if you want to keep them on the list! (Been there, done that, nuked a few idiots along the way)

MEANWHILE, you need to ask your datacenter if they have an OPEN RELAY and if they do SHUT IT DOWN. Makes for a more secure mail environment.

hamids54

3:28 am on May 2, 2010 (gmt 0)

10+ Year Member



at that time I created the topic you mentioned I just asked about some informations for sending newsletters but I have not sent any emails as yet .I am wondering what is the cause of the spams ? my server manager did not found out also. I believe there are two possibilities 1- as you said someone who doesn`t like me and my site reported my ip`s as spam 2- one time I opened one section of my vbulletin that collects all emails of registered users and then clicked it... may be it sent for all users one email undeliberately but it was at least 3 weeks before i recieved email about abuse report from data center

by one big spam list checker I found out two of my IP`S (from 10 IP`s) are listed by
bl.spamcannibal.org and
spam.dnsbl.sorbs.net

I tried to asked them to remove my ip`s from their list but i couldn`t. do you think it is better to wait or doing other thing?

lammert

8:04 am on May 2, 2010 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member Top Contributors Of The Month



Some block lists require manual intervention from the list operators to process removal requests. In the weekend that service may be unavailable.

The best thing you can do is wait for the removal to be processed by the block lists, and at the same time try to identify the problem which caused the listing. The abuse department of the ISP should be able to provide you with a copy of the spam messages that were sent to them as proof that your server was sending out spam. The headers of that message could give you more information about the root of the problem.

Some previous threads you started mention a large increase in data traffic from your server and a possible hack attempt. I would double check if these problems are fixed now. If your server continues to send spam without you knowing it, requests for removal from block lists won't have effect, and it may eventually put your account at your hosting provider at risk.

hamids54

3:36 pm on May 2, 2010 (gmt 0)

10+ Year Member



yes best thing for me is finding out what is the cause of sending spams.the large traffic was bc of one software was backing up my whole server on another server daily that was working badly.I asked my data center to remove it.now I don`t have the problem.it happened four months before i received abuse report from data center.when I was asking one of spam list websites they sent me some causes of these problems.I am looking which one is mine.I asked my server manger to look at it also.

There are a number of reasons your IP address may have been listed as "poor", including:

1. The email server at this IP address contains a virus and has been sending out spam
2. The email server at this IP address may be configured incorrectly
3. The PC at this IP address may be infected with a virus or botnet software program
4. An individual in the organization at this IP address may have a PC infected with a virus or botnet program
5. This IP address may be a dynamic IP address which was previously utilized by a known spammer
6. The marketing department of a company at this IP address may be sending out bulk emails that do not comply with the CAN-SPAM Act
7. This IP address may have a insecure wireless network attached to it which could allow unknown users to use it's network connection to send out bulk email
8. In some rare cases, your recipients' Barracuda Spam Firewall may be misconfigured

phranque

5:43 am on May 3, 2010 (gmt 0)

WebmasterWorld Administrator 10+ Year Member Top Contributors Of The Month



i would look for relief at the source of the blocklists that are commonly used.
this would be a good place to start:
The Spamhaus Project - Blocklist Removal Center:
http://www.spamhaus.org/lookup.lasso [spamhaus.org]

hamids54

7:57 am on May 3, 2010 (gmt 0)

10+ Year Member



thanks

on site you showed me it says my ip`s are not listed

but here [magic-net.nl...]

it says 2 IP`S are listed?! I confuse!