locked
IP is blacklisted RRS feed

  • Question

  • Dears ,
    the previous post that I ask how to reject the spam , because I recieve alot
    but now the problem is that one of my two EDGE IP is blacklisted in two of the blacklist provider .
    how something like this is happening , and I scan for virus in the edge but no any virus , what is the problem , I do a search for it and it says that maybe a virus or something like that , but the servers are cleaned , any way i will send to this blacklist provider to remove the IP from spam
    but I would like to know how this is happening !!
    I appreciate your efforts
    Regards,

    Saturday, November 7, 2009 5:58 PM

Answers

  • Hi Ramos,

    Use the following tool to test the blacklisted IP:
    http://www.dnsbl.info/


    What you need to find out is if the IP is only blacklisted in one RBL or in multiple RBLs. If you are only listed in one RBL there is some chance that the RBL is wrong. This depends on the list quality that varies from one provider to another.

    If you are listed in multiple RBLs you almost certainly have a problem.

    The next step is to investigate why you are listed.
    Some RBL providers are very informative. If you are listed in multiple lists you can check what each one of these says as reason for listing and you will have a very clear indication what to look for.

    At the end its a matter of cleaning up your network and this is something that has to be dealt with onsight. It is very hard for anyone to give you definitive advise through a forum.


    IMF Tune - Unleash the Full Intelligent Message Filter Power - http://www.windeveloper.com/imftune/
    • Marked as answer by Wael Schakaki Monday, November 9, 2009 7:07 PM
    Sunday, November 8, 2009 9:59 AM
  • Hi,

    Well, run a check of where you are blacklisted at http://whatismyipaddress.com/staticpages/index.php/is-my-ip-address-blacklisted if you are listed any where then you can contact them directly with the links provided there, also there these RBL lists are dependants on each other, means if you will be unlisted from one list then most probably you will also be delisteed from some other RBL's.

    Once you send request to delist your IP, then make sure to run a thorough Virus/Spyware/Malware deep scan and finally create a rule in your firewall to block port 25 for all machines on your network except your mail server.

    Regards,
    Faraz H. Khan
    • Marked as answer by Wael Schakaki Monday, November 9, 2009 7:07 PM
    Sunday, November 8, 2009 6:22 PM

All replies

  • Again, as there were too much of spam coming from your IP, so its there in the black list. They will keep an eye on ur IP and based on the outcoming email quality, it will be remobed. Its not only server, but any of your client machine might be infected and sending spam outside.

    Might be open for relay or back scatter spam can also send huge spams outside. make sure SPF and reverse PTR are in configured.
    Raj
    Saturday, November 7, 2009 6:20 PM
  • Hi Ramos,

    Use the following tool to test the blacklisted IP:
    http://www.dnsbl.info/


    What you need to find out is if the IP is only blacklisted in one RBL or in multiple RBLs. If you are only listed in one RBL there is some chance that the RBL is wrong. This depends on the list quality that varies from one provider to another.

    If you are listed in multiple RBLs you almost certainly have a problem.

    The next step is to investigate why you are listed.
    Some RBL providers are very informative. If you are listed in multiple lists you can check what each one of these says as reason for listing and you will have a very clear indication what to look for.

    At the end its a matter of cleaning up your network and this is something that has to be dealt with onsight. It is very hard for anyone to give you definitive advise through a forum.


    IMF Tune - Unleash the Full Intelligent Message Filter Power - http://www.windeveloper.com/imftune/
    • Marked as answer by Wael Schakaki Monday, November 9, 2009 7:07 PM
    Sunday, November 8, 2009 9:59 AM
  • Hi,

    Well, run a check of where you are blacklisted at http://whatismyipaddress.com/staticpages/index.php/is-my-ip-address-blacklisted if you are listed any where then you can contact them directly with the links provided there, also there these RBL lists are dependants on each other, means if you will be unlisted from one list then most probably you will also be delisteed from some other RBL's.

    Once you send request to delist your IP, then make sure to run a thorough Virus/Spyware/Malware deep scan and finally create a rule in your firewall to block port 25 for all machines on your network except your mail server.

    Regards,
    Faraz H. Khan
    • Marked as answer by Wael Schakaki Monday, November 9, 2009 7:07 PM
    Sunday, November 8, 2009 6:22 PM