Hello,
We are in the process of preparing the following ranges for legitimate clients and noticed a number of IPs in the ranges are currently blacklisted:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Can we have these blocks mitigated as soon as possible?
Thanks!
Hello,
we are receiving errors like the ones listed below:
Could not deliver message to the following recipient(s):
Failed Recipient: ------
Reason: Remote host said: 501 Connection rejected by policy [7.7] 9616, please visit www.messagelabs.com/support for more details about this error message.
-- The header and top 20 lines of the message follows --
Received: from Iego.vaisulweb.com (collaboration.eu.enterprisehost.biz [31.187.78.23]) by xorth.vaisulweb.com with SMTP;
Mon, 30 Jan 2017 10:09:45 +0100
X-SmarterMail-Authenticated-As:
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=vaisulweb.com; s=vswsigned;
h=from:content-language:thread-index:x-mailer:content-type
:mime-version:message-id:date:subject:in-reply-to:references:to;
bh=tnxZNs2M7nkLONoWPajm1ePgr23pqtXlZj3SS+jVl7A=;
b=JPl8S3sf9Zi4DubkmR172tUZ+9QJCrC2JA8x08QSKRl1wyop0i7EALEDxV8xcbDV6
wwsZOhvmvlMccapnwOzFCt8kEJacej5ik57lh86/4rA1DJyjLxR90mrUZg+6fO/O/
9H6SxQ3c5bIXtSiPIN4JtVGzBbF7v/P+QjTYYjVVV8veFAIsDRWl1T2C4J4i6xYWC
uLl1SZz+RAkx1iJkHZMAzHTx4xrku8tsFQcccgPTiuXv9FAzZZeEHg2HYlM3h37+R
XA9/HEYPSdrtJ8WekHDvlsswOh6+8fs2Cs7ZLfcxpFzwRCDTCEuwz9agZT4R5jtV0
+Dl1FD89z0O8QGEAQ==
To:
References: <9CC34C013108C14489DE01AFFC3277582E304A92@mSRV-MB61.valueteam.com>
In-Reply-To: <9CC34C013108C14489DE01AFFC3277582E304A92@mSRV-MB61.valueteam.com>
Subject: R: Info
Date: Mon, 30 Jan 2017 10:15:27 +0100
Message-ID: <004201d27ad9$65e69d70$31b3d850$@vaisulweb.com>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0043_01D27AE1.C7AD4F60"
X-Mailer: Microsoft Outlook 16.0
Thread-Index: AQJyno53P4aLmLYjWH8MV5btsPUB7aAQdV2Q
Content-Language: it
From:
It seems that your servers are blocking some of our IP addresses. Is it possible to understand why or, at least, to unblock IP subnet 31.187.78.0/24 ?
If not, is it possible to at least unblock IPs:
31.187.78.23
31.187.78.31
Is it also possible to get more information about WHY this block happened ? Those IPs have been checked with Symantec IP reputation service at:
http://ipremoval.sms.symantec.com/lookup/
and have been found not to have a bad reputation so WHY are they being blocked ?
Thanks.
Often my ip address is blocked by symantec antispam.I have already seen and seen again I do not have any reported abuse.For several times, some on the same day, I have to enter http://ipremoval.sms.symantec.com/lookup/ to request the removal of my ip address.My question is: how to make this permanent? since I am not a spammer.
Thank´s for solution.
My Ip: 164.132.49.180
Need the following ip removed. It is not listed on any blacklists.
64.191.166.62
Hi,
We have a problem with our mail server.We can not send on a certain domain and we receive the following message.
SMTP error from remote mail server after initial connection: 501 Connection rejected by policy [7.7] 20614, please visit www.messagelabs.com/support for more details about this error message.
I read on the internet that symantec protection blocking my email.
The ip of my mail server is : 188.165.116.225
The mail server is not black listed, implements DKIM, and on http://ipremoval.sms.symantec.com/lookup/ it reports:
The IP address you submitted, 188.165.116.225, does not have a negative reputation and therefore cannot be submitted for investigation.
Can you fix it?
Thanks,
Nikos Kapetanakis
Hello Symantec Tech support,
our mail server for our domain "alucomp.com.au" has the IP address 101.187.40.124
It is having smtp timeout issues when trying to communicate with "cluster5.us.messagelabs.com" and with cluster5a.us.messagelabs.com
on "cluster5a" it can talk to 85.158.139.103 but not to 216.82.251.230
on "cluster5" it can occasionally talk to 216.82.242.34 but none of the other IP's listed from an nslookup
our IP is not blacklisted on any of the 95 sites checked by MXtoolbox.com
we are not listed on http://ipremoval.sms.symantec.com/lookup/ either
can you please help us with this connection problem to the messagelabs servers
best regards,
David Whytcross
Alucomp Pty Ltd
Often my ip address is blocked by symantec antispam.I have already seen and seen again I do not have any reported abuse.For several times, some on the same day, I have to enter http://ipremoval.sms.symantec.com/lookup/ to request the removal of my ip address.My question is: how to make this permanent? since I am not a spammer.
Thank´s for solution.
My Ip: 164.132.49.180
Often my ip address is blocked by symantec antispam.I have already seen and seen again I do not have any reported abuse.For several times, some on the same day, I have to enter http://ipremoval.sms.symantec.com/lookup/ to request the removal of my ip address.My question is: how to make this permanent? since I am not a spammer.
Thank´s for solution.
My Ip: 164.132.49.180
Hello,
We are in the process of preparing the following ranges for legitimate clients and noticed a number of IPs in the ranges are currently blacklisted:
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
IP:198.49.69.16:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.16
IP:198.49.69.17:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.17
IP:198.49.69.18:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.18
IP:198.49.69.19:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.19
IP:198.49.69.20:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.20
IP:198.49.69.21:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.21
IP:198.49.69.22:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.22
IP:198.49.69.23:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.23
IP:198.49.69.24:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.24
IP:198.49.69.25:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.25
IP:198.49.69.26:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.26
IP:198.49.69.27:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.27
IP:198.49.69.28:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.28
IP:198.49.69.29:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.29
IP:198.49.69.30:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.30
IP:198.49.69.31:RBL:Symantec:reputation:Bad:Link:http://investigate.brightmail.com/lookup/?currentIP=198.49.69.31
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Can we have these blocks mitigated as soon as possible?
Thanks!
Hi Sirs,
I need a help to unlist my IP mail server from Symantec blocked list. I enter with IP on the lookup Symantec page, the IP are listed, sometimes as negative other as poor, I ask for removal, but after few hours, my server are listed again with the message below. I did this many times during last two weeks.
The IP address ***.***.***.*** was found to have a negative reputation. Reasons for this assessment include:
The host has been observed sending spam in a format that is similar to snow shoe spamming techniques.
My server is not listed on any blacklist, is setting with all RBL that cPanel has, use SpamAssassin, use Barracuda list, SPF and DKIM functions, and finally, cPanel and IPage technical support team confirmed that there are any spam activity from the server.
My clients are loosing important emails and after 2 weeks looking for a solution, after open cPanel and IPage support, anyone knows how to solve the problem. And more important there aren't any instruction to implement some kind os configuration to avoid being listed.
Please, what I have to do to avoid being listed?
Thanks in advance for any help and best regards,
Ronaldo Luiz
Hello
One of our contractors need the ability, from his web application, to send and recieve emails under our company account.
(1) We do not want him to access our internal network (Exchange Server & Active Directory).
(2) We do want all relevant email traffic to be protected through the Email Security.cloud solution we have.
Any idea how can we do it?
We can limit him to access from a spcific IP.
Thank you
Haggai
Dear Symantec Team,
I host an uncompromised mailserver on 62.75.185.51 for a small animal welfare organization. IP lookup on the Symantec page shows that our IP has a negative reputation: "The host has been observed sending spam in a format that is similar to snow shoe spamming techniques." Obviously, the whole IP range 62.75.185.0/24 is blocked. Removal via web form or by contacting our ISP only resulted in temporary unblocking.
Our IP is not listed on any blacklist, SPF, DKIM, DMARC are setup correctly and no spam activity shows up in our mail logs.
Please let me know what we can do to clear the reputation for our IP permanently.
Kind regards,
Richard
hi we migrated to a new server with new IP's all with good reputation and NOT blacklisted anywhere, but yet all my clients trying to send emails that are handled by messagelabs.com gets a timeout message. even the ones that are in a conversation back and forth for a while.
one example:
LOG: MAIN
cwd=/usr/local/cpanel/whostmgr/docroot 6 args: /usr/sbin/exim -C /etc/exim_outgoing.conf -v -M 1cZxGa-00014g-6j
delivering 1cZxGa-00014g-6j
Connecting to cluster8.eu.messagelabs.com [85.158.140.211]:25 ... failed: Connection timed out (timeout=5m)
LOG: MAIN
H=cluster8.eu.messagelabs.com [85.158.140.211] Connection timed out
Connecting to cluster8.eu.messagelabs.com [85.158.139.19]:25 ... failed: Connection timed out (timeout=5m)
LOG: MAIN
H=cluster8.eu.messagelabs.com [85.158.139.19] Connection timed out
Connecting to cluster8.eu.messagelabs.com [85.158.140.195]:25 ... failed: Connection timed out (timeout=5m)
LOG: MAIN
H=cluster8.eu.messagelabs.com [85.158.140.195] Connection timed out
Connecting to cluster8.eu.messagelabs.com [85.158.139.51]:25 ... failed: Connection timed out (timeout=5m)
LOG: MAIN
H=cluster8.eu.messagelabs.com [85.158.139.51] Connection timed out
Connecting to cluster8.eu.messagelabs.com [85.158.137.19]:25 ... failed: Connection timed out (timeout=5m)
LOG: MAIN
H=cluster8.eu.messagelabs.com [85.158.137.19] Connection timed out
Connecting to cluster8a.eu.messagelabs.com [216.82.251.230]:25 ... failed: Connection timed out (timeout=5m)
LOG: MAIN
H=cluster8a.eu.messagelabs.com [216.82.251.230] Connection timed out
LOG: MAIN
== ffredericks@slrconsulting.com R=dkim_lookuphost T=dkim_remote_smtp defer (110): Connection timed out
our mail IP address is: 75.102.22.82
some did go through after a day or so, but now they still sitting in our mail queue for a few days now.
Hello Symantec team!
Since July 4, 2016, we changed our server provider and we did the installation server from scratch and migrated our services to the newly adquired server/IP.
We are asking you the posibility to make a new evaluation to this IP group, because our mails clients are being rejected.
The IP /29 are:
198.50.185.56
198.50.185.57
198.50.185.58
198.50.185.59
198.50.185.60
198.50.185.61
198.50.185.62
198.50.185.63
Log:
Feb 6 09:42:40 tzfat postfix/smtp[28507]: 9F0062A4D0: host cluster4.us.messagelabs.com[216.82.242.179] refused to talk to me: 501 Connection rejected by policy [7.7] 8602, please visit www.messagelabs.com/support for more details about this error message.
Feb 6 09:42:43 tzfat postfix/smtp[28507]: 9F0062A4D0: to=<customerserviceeast@timken.com>, relay=cluster4a.us.messagelabs.com[216.82.251.230]:25, delay=3.4, delays=0/0.02/3.3/0.09, dsn=4.0.0, status=deferred (host cluster4a.us.messagelabs.com[216.82.251.230] said: 421 Service Temporarily Unavailable (in reply to RCPT TO command))
Thanks for your time and help, please let me know if you need something else.
Hello,
We have some IPs blocked in the Messagelabs and we do not found the process to remove it. Can you help us, please?
The error message is: 501 Connection rejected by policy [7.7] 18007
Follow the IPs:
198.136.59.163
198.136.59.171
198.136.59.195
198.136.59.206
198.136.59.208
198.136.59.217
198.136.59.218
198.136.59.226
198.136.59.233
198.136.59.234
198.136.59.239
Best Regards,
Lucas V.
Hi,
We have been trying to send emails to clients and it keeps returning this error msg:
host cluster8.eu.messagelabs.com[85.158.137.3]
refused to talk to me: 501 Connection rejected by policy [7.7] 3807, please
visit www.messagelabs.com/support for more details about this error
message.
Could you please remove our IP from the block list?
We even ran the removal tool and says the ip is ok:
The IP address you submitted, 62.109.2.147, does not have a negative reputation and therefore cannot be submitted for investigation.
62.109.2.147 it is our IP.
Thanks for providing the new status system at https://status.symantec.com/
I see you now have email notification.
--- very good; that should work well for us
When I subscribed to email notifications, I expected an email sent to that address, to verify it was a valid address, and it was indeed me that subscribed.
"verification email".
I did receive the Notification Subscription Confirmation email.
...which is similar to what I described; but not exactly.
Thanks for the new status process.
================
Can please see if our mail server can be delisted ?
Your Ip Investigation Query say:
The IP address you submitted, 109.237.160.67, does not have a negative reputation and therefore cannot be submitted for investigation.
Our server ip: 109.237.160.67
Error message I see on my smtp server is this:
connect to cluster1.eu.messagelabs.com[193.109.254.67]:25: connection timed out
Regards
Mirko
Hi,
Need help, our email server is getting this message:
Remote host said: 501 Connection rejected by policy [7.7] 9616, please visit www.messagelabs.com/support for more details about this error message.
The IP is : 176.111.104.196, and Testing in Symantec Portal the is not listed.
Is it possible to see why this is happening?
Can this IP set as valid?
Thanks,
Sandro Silva
Hi,
we daily send thousands of mails to our clients with pdf attachment, and some of them receipt that answer :
The Symantec Email Security.cloud service detected a potential virus or unauthorized code (such as a Trojan or Phish) in an email sent to you.
This email will be quarantined for up to 30 days, and will then be destroyed.
Email Details:
Sending server IP address: 91.212.205.133
Subject: RA_14013000235201,_BC_:_LAP_-_Analyses_santé_animale,_date_rcpt_:_30/01/14
Date: Fri, 27 Jan 2017 10:51:50 +0100
Message ID: <588B1836.8020106@labofarm.com>
Virus/Unauthorized code: >>> Possible MalWare 'Exploit/IFrame-0e1f' found in '5248624_2X_PM4_EM8_MH__message.htm'. Heuristics score: 200
Email quarantined on mail server server-16.tower-188.messagelabs.com (Pen ID 78438_1485510729)
Please contact your IT Helpdesk or System Administrator for further assistance.
How can we be removed from your blocklist or recover a good reputation ? Our posts are strictly the same from years, and never contains any malware or trojan...
Can you help us ? Must I send you one of our attachments for analysis ?
Thanks.
