Quantcast
Channel: Symantec Connect - Products - Discussions
Viewing all 997 articles
Browse latest View live

how to register symantec.cloud account


False Positive: Someone tried to send you a potential virus or unauthorized code

$
0
0
I need a solution

Hello, we are sending ZIP attachment with PDF files to our clients. Some of them get warning messages like below with incoming emails blocked:

---------------------------------------------------------------------------

Sending server IP address: 209.85.215.XXX

Subject: Your documents attached - online order 129426
Date: Tue, 24 Jul 2018 22:45:53 -0700 (PDT) Message ID: <5b580e91.1c69fb81.339b5.3a5f@mx.google.com>
Virus/Unauthorized code: >>> Possible MalWare 'Exploit/Link-5c05' found in '2074_8X_AZ_PA2__Company=20Minutes.pdf::URI-70e75f93c16be498e70e798c232c4207'. Heuristics score: 200

Email quarantined on mail server server-10.tower-426.messagelabs.com (Pen ID 20676_1532497563)

Please contact your IT Helpdesk or System Administrator for further assistance.

This inbound email has been scanned by MessageLabs

This outbound email has been scanned by MessageLabs

---------------------------------------------------------------------------

We have scanned the attachment with our anti-virus tool, no issues found. By searching through the email body and attachments, they don't contain the following text or keywords:

2074_8X_AZ_PA2__Company=20Minutes.pdf::URI-70e75f93c16be498e70e798c232c4207

Please let us know how to solve this issue.

The PDF files are confidential, but if required, we can send a sample to your appointed email address.

Thank you.

0

Messages sent to Messagelabs Expiring

$
0
0
I need a solution

Hi All,

We have an issue where emails sent to aprox 30 different domains which use Symantec Message labs are expiring.

Information:

Sending Domain: epicassist.org

Sending IP: 60.240.155.109

Our mail server appears to keep an active connection to message labs for all the messages that it is sending then it eventually times out and expires. As this is the only mail system that we are having problems sending to it appears to be a message lab issue.

0

i cant send email to *.messagelabs.com

$
0
0
I need a solution

Hi.

I need your help... i cant send mails to *.messagelabs.com.

Our domain is MCC.CL and we cant send mails to domains: btgpactual.com and cl.engie.com.

Our MX and SPF are fine....

We always get the message:

#< #5.0.0 smtp; 553-SPF (Sender Policy Framework) domain authentication> #SMTP#

I'll be waiting for your response

Regards.

0

Email timeouts sending to messagelab customers.

$
0
0
I need a solution

Customer is having issues sending to companies using messagelabs. Their external ip address is 24.154.120.163

Did symnatec ip address reputation and said the ip address doesnt have a negative reputation.

The email message  expires because it tried for so many days.

I even tried to use telent. I connect then when I say helo it disconnects the session. Any help would be appreciated.

0

I can't send email to messagelabs.com

$
0
0
I need a solution

Hello

Our domain (idemitsu.com.tw) can't sent email to some domain seen 7/30, and I reviced error below 

Remote-MTA: dns; cluster9.us.messagelabs.com
Diagnostic-Code: smtp; 450 Requested action aborted [7.1] 42618, please visit
    www.messagelabs.com/support for more details about this error message.

Or like

09:33:03: > cluster1.us.messagelabs.com[67.219.247.48]: 450 Requested action aborted [7.1] 42033, please visit www.messagelabs.com/support for more details 

But some domain we can send (like gmail)

And I check by https://mxtoolbox.com/

It says 

Checking 61.218.238.171 against 93 known blacklists... 
Listed 0 times with 1 timeouts 

Please help me.

0

I can not send email to domain protected messagelabs.com

$
0
0
I need a solution

I send messages to domain ford.com, nutricia.com, mazdaeur.com, uta.com etc.

Each domain reply back "Remote Server at cluster8a.eu.messagelabs.com (85.158.139.103) returned '550 4.4.7 QUEUE.Expired; message expired'" or " Remote Server at cluster8a.eu.messagelabs.com (85.158.139.103) returned '441 4.4.1 Error encountered while communicating with primary target IP address: "421 4.4.2 Connection dropped due to ConnectionReset." Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts. The last endpoint attempted was 85.158.139.103:25'

When I try list MX record for e.g ford.com DNS returns 

cluster4a.us.messagelabs.com    internet address = 216.82.251.230
cluster4.us.messagelabs.com     internet address = 67.219.247.49
cluster4.us.messagelabs.com     internet address = 67.219.246.97
cluster4.us.messagelabs.com     internet address = 67.219.251.49
cluster4.us.messagelabs.com     internet address = 67.219.250.193
cluster4.us.messagelabs.com     internet address = 67.219.250.97
cluster4.us.messagelabs.com     internet address = 67.219.246.193

I have 10 mailserver in one subnet 80.188.242.x  Any address is not on blacklist http://ipremoval.sms.symantec.com/lookup/

If I try to connect via telnet on port 25 to messagelabs.com from subnet 80.188.242.x I get answer "connection abort" or something similar.

SMTPDiag from one of the servers

Searching for Exchange external DNS settings.
Computer name is MFX.
VSI 1 has the following external DNS servers:
There are no external DNS servers configured.

Checking SOA for ford.com.
Checking external DNS servers.
Checking internal DNS servers.
SOA serial number match: Passed.

Checking local domain records.
Checking MX records using TCP: mf.cz.
Checking MX records using UDP: mf.cz.
Both TCP and UDP queries succeeded. Local DNS test passed.

Checking remote domain records.
Checking MX records using TCP: ford.com.
Checking MX records using UDP: ford.com.
Both TCP and UDP queries succeeded. Remote DNS test passed.

Checking MX servers listed for info@ford.com.
Connecting to cluster4.us.messagelabs.com [67.219.251.49] on port 25.
Error: Expected "250". Server rejected the recipient address.
Failed to submit mail to cluster4.us.messagelabs.com.
Connecting to cluster4.us.messagelabs.com [67.219.250.97] on port 25.
Error: Expected "250". Server rejected the recipient address.
Failed to submit mail to cluster4.us.messagelabs.com.
Connecting to cluster4.us.messagelabs.com [67.219.250.193] on port 25.
Error: Expected "250". Server rejected the recipient address.
Failed to submit mail to cluster4.us.messagelabs.com.
Connecting to cluster4.us.messagelabs.com [67.219.247.49] on port 25.
Error: Expected "250". Server rejected the recipient address.
Failed to submit mail to cluster4.us.messagelabs.com.
Connecting to cluster4.us.messagelabs.com [67.219.246.97] on port 25.
Error: Expected "250". Server rejected the recipient address.
Failed to submit mail to cluster4.us.messagelabs.com.
Connecting to cluster4.us.messagelabs.com [67.219.246.193] on port 25.
Error: Expected "250". Server rejected the recipient address.
Failed to submit mail to cluster4.us.messagelabs.com.
Connecting to cluster4a.us.messagelabs.com [216.82.251.230] on port 25.
Error: Expected "250". Server rejected the recipient address.
Failed to submit mail to cluster4a.us.messagelabs.com.

0

Error Sending emails to Symantec

$
0
0
I need a solution

Hi All, 

Need help, recently after onboarding Symantec CDS to our Enforce infrastructure, we are noticing, below error for any outbound emails sent to Symantec: 

Error Details

Reported error:

550 5.0.350 Remote server returned an error -> 553 Message filtered. Refer to the Troubleshooting page at;http://www.symanteccloud.com/troubleshooting for more;information. (#5.7.1)

DSN generated by:

VI1P122MB0079.EURP122.PROD.OUTLOOK.COM

Remote server:

server-15.tower-381.messagelabs.com

Any help in this direction is appreciated, i don't see any header related information in error. 

0

Error: "421 Service Temporarily Unavailable"

$
0
0
I need a solution

Hi,

One of my clients who's on premise exchange server is receiving Error: "421 Service Temporarily Unavailable" bounce backs when sending to multiple domain which have messagelabs.com filtering services.

I have emailed investigation@review.symantec.com with example bounce and message and listed domains affected. This was on the 20th July and I have had no response....

Is the IP address 203.122.243.50 listed on any of your internal list's as I can't find it listed anywhere on any blacklists.

Thanks

 

0

Problems with inbound email from *.messagelabs.com

$
0
0
I need a solution

Hello

One of our clients have got an issue with incoming mail from leaseplan.ru. Mails sent from leaseplan.ru to carsar.su rarely reach their destination. However mails from leaseplan.ru to other mail services gets almost instantly.

I've checked logs and found out that there are not even a try to connect to our server (main.mxdev.ru - carsar.su hosted there). In most cases mails just get lost, or reach recepient after a huge delay.

Worth to mention that mails sent from carsar.su to leaseplan.ru reach almost instantly. 

Any help?

2018-07-10 15:57:11 1fcsCb-00A7nR-5k H=mail1.bemta26.messagelabs.com [85.158.142.4]:54777 Warning: "SpamAssassin as carsar detected message as NOT spam (-1.9)"2018-07-10 15:57:11 1fcsCb-00A7nR-5k <= operations@leaseplan.ru H=mail1.bemta26.messagelabs.com [85.158.142.4]:54777 P=esmtps X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=8485 id=9fbe51ebb5714d0e87aea9c75bf32e5e@LPGPEXMBX0003.emea.leaseplancorp.net T="Read: \353\301\322\323\301\322_\301\313\324 \323\327\305\322\313\311" for tatyana.orlova@carsar.su2018-07-10 15:57:12 1fcsCb-00A7nR-5k => tatyana.orlova <tatyana.orlova@carsar.su> R=virtual_user T=dovecot_virtual_delivery C="250 2.0.0 <tatyana.orlova@carsar.su> QMeUNietRFsZ0yQA+Fp5eA Saved"2018-07-10 15:57:12 1fcsCb-00A7nR-5k Completed2018-08-07 14:07:19 1fmzpW-001VKa-TZ => operations@leaseplan.ru R=dkim_lookuphost T=dkim_remote_smtp H=cluster3.eu.messagelabs.com [85.158.142.198] X=TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 ok 1533640039 qp 6696 server-11.tower-243.messagelabs.com!1533640038!3587666!1"2018-08-09 12:50:05 1fnhZw-003GbT-J5 => operations@leaseplan.ru R=dkim_lookuphost T=dkim_remote_smtp H=cluster3.eu.messagelabs.com [85.158.142.99] X=TLSv1.2:DHE-RSA-AES256-GCM-SHA384:256 CV=yes C="250 ok 1533808206 qp 7417 server-11.tower-224.messagelabs.com!1533808204!3260644!1"2018-07-10 15:56:28 SMTP connection from [85.158.142.4]:54777 (TCP/IP connection count = 1)2018-07-10 15:57:11 1fcsCb-00A7nR-5k H=mail1.bemta26.messagelabs.com [85.158.142.4]:54777 Warning: "SpamAssassin as carsar detected message as NOT spam (-1.9)"2018-07-10 15:57:11 1fcsCb-00A7nR-5k <= operations@leaseplan.ru H=mail1.bemta26.messagelabs.com [85.158.142.4]:54777 P=esmtps X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=8485 id=9fbe51ebb5714d0e87aea9c75bf32e5e@LPGPEXMBX0003.emea.leaseplancorp.net T="Read: \353\301\322\323\301\322_\301\313\324 \323\327\305\322\313\311" for tatyana.orlova@carsar.su2018-07-10 15:57:16 SMTP connection from mail1.bemta26.messagelabs.com [85.158.142.4]:54777 closed by QUIT
0

Mails are blocking to most of our prospects

$
0
0
I need a solution

Team,

I am karthik,  Mail administrator of egmonitoring.com. We are sending mails using the following IP's which is blocking by symantec cloud.

34.211.27.91, 34.211.27.129, 34.211.27.24, 34.211.27.84.

We are sending all legal E-Mails but the mails are blocking and marking as SPAM source.

Request you to whitelist the IP's and our domain. This is impacting our business and need your help.

IP reputation is not showing any errors.

Your earliest response is appreciated.

Regards

karthik

0

Remote Server at cluster5a.us.messagelabs.com (216.82.251.230) returned '400 4.4.7 Message delayed'

$
0
0
I need a solution

One of our clients is receiving this message when sending to email addresses using messagelabs services.  Can you investigate and point me in the right direction?

I can PM you the rest of the information as needed.

Thank you.

0

Connection throttling

$
0
0
I need a solution

Hi,

It would appear that connections to clusterX.XX.messagelabs.com are throttled\limited. First time we connect to a given clusterX its instant (as you would expect), subsequent times its 20-25 seconds (Eventually resets - not sure if after X attempts or X minutes).. 

This is starting to cause problems for us and our customers as a every increasing volumne of email is failed to deliver (even after 9 retries which are exponential back offs). 

Can you confirm there is such a limit and how do we get rid of it (Do you keep a whitelist) 

The sender IP will be 195.188.254.41 and 87.117.243.10

Kind Regards

Keith 

0

Spam emails

$
0
0
I need a solution

Hi we are getting bound backs from sending to long time customers. The followiing is what the bounce back contains. 

Remote Server returned '<cluster5.eu.messagelabs.com #5.0.0 smtp; 553-Message filtered. Refer to the Troubleshooting page at 553-http://www.symanteccloud.com/troubleshooting for more 553 information. (#5.7.1)>'

I have no clue where to even start looking. This happens when we try to froward a message to her. If we create a new message it goes theough ok. I created a new message and copied the message to it and attempted to send it. Same thing happened. I removed all the hyperlinks from the message but still nothing.  Please help. 

0

Unable to send email to messagelabs client

$
0
0
I need a solution

Hello,

We're unable to send email to mesagelabs customer. Our server IP is  51.68.146.235

Our customer MXs are:

play.pl mail is handled by 10 cluster1.eu.messagelabs.com.
play.pl mail is handled by 20 cluster1a.eu.messagelabs.com.

Emails are received by messagelabs servers, but few seconds later I receive error: 

Reason: 521 5.2.1 Error: True Source IP has bad reputation

I've written to investigation@review.symantec.com , but nobody is responding. Who should I contact to be able to send emails? We have set SPF, DKIM, DMARC and all others customers receive emails without problem.

0

Dmarc Compliance Failed After Fowarded by Message Labs

$
0
0
I need a solution

We use Mxtoolbox as my dmarc analysis and the only time we got false positive is when it pass thru (fowarded by) Message Labs. When it happened, SPF and DMARC failed while forwarded by other don't.

We are with Gmail but many of our clients are with Message Labs.

Here's an example of an error message:

Reason: 550-5.7.1 Unauthenticated email from reptile.tech is not accepted due to
550-5.7.1 domain's DMARC policy. Please contact the administrator of
550-5.7.1 reptile.tech domain if this was a legitimate mail. Please visit
550-5.7.1  https://support.google.com/mail/answer/2451690 to learn about the
550 5.7.1 DMARC initiative. r30-v6si2953643pgk.87 - gsmtp

The message subject was: Statut de cette semaine
The message date was: Fri, 24 Aug 2018 10:17:41 -0400
The message identifier was: 56/3C-18738-983108B5
The message reference was: server-9.tower-320.messagelabs.com!1535120263!24804!1

We have the highest dmarc setting (reject 100%).

If anybody could help it would be appreciated,
Thanks

0

Receiving Connection Timeout From MessageLabs.com

$
0
0
I need a solution

We cannot send email to our partner!  We keep getting the following error:

Remote Server at cluster5a.eu.messagelabs.com (85.158.139.103) returned '550 4.4.7 QUEUE.Expired; message expired'
Remote Server at cluster5a.eu.messagelabs.com (85.158.139.103) returned '441 4.4.1 Error encountered while communicating with primary target IP address: "421 4.4.2 Connection dropped due to ConnectionReset." Attempted failover to alternate host, but that did not succeed. Either there are no alternate hosts, or delivery failed to all alternate hosts. The last endpoint attempted was 85.158.139.103:25'

I have check the symantec blacklist and it says we do not have a negative reputation.

Our mail servers ip address are:
82.85.144.121
88.35.52.221

Please can you help me?

Regards

Fabio

0

lost connection with cluster8.eu.messagelabs.com[46.226.52.194] while performing the EHLO handshake

$
0
0
I need a solution

Hi,

we cannot send emails (several users are experiencing this) to any server under clusterXX.eu.messagelabs.com

Our IPs are not blacklisted, but still getting our mail hold in the queue with message:
(lost connection with cluster8.eu.messagelabs.com[46.226.52.98] while performing the EHLO handshake)
or
(lost connection with cluster3.eu.messagelabs.com[85.158.142.99] while performing the EHLO handshake)

Can you please give a look?

Thanks,

F:

0

IP Blacklist Removal

$
0
0
I need a solution

Hello,

We have recently acquired a new server with a new IP address.

Our emails to MessageLabs mail servers are being blocked... they are stuck in our outbound queue.

Here's an example of a domain we cannot mail to:

% host fix.net
fix.net has address 207.154.66.53
fix.net mail is handled by 10 cluster5.us.messagelabs.com.
fix.net mail is handled by 15 cluster5a.us.messagelabs.com.

Our IP is:  (will send via private message)

Please delist our IP address.  We are not spammers.  We are using SPF, DKIM, DMARC, and rDNS.  We are running opt-in email lists with subscription confirmation, and opt-out at the bottom of all emails.  We have re-registered for feedback loops with the major providers.

thanks,
JC

0

Receiving Connection Timeout From MessageLabs.com when sending email

$
0
0
I need a solution

Hi, my company could not send emails to our customers from our web system.

Our web system is used to send emails to a fixed number of contracted company

employees to inform them of system notices, but we kept getting the error below.

This is what we got from our SMTP server log.

---- mail server log
Sep 10 09:02:29 localhost postfix/smtp[2399]: C6C2D2A1147: to=<xxxx@xxxxxx.co.jp>, relay=none, delay=150, delays=0.01/0.01/150/0, dsn=4.4.1, status=deferred (connect to cluster1.us.messagelabs.com[67.219.246.192]:25: Connection timed out)
-----

I tried to go through older posts regarding this but its like all entries had the same final post,

which is the problem is unresolved.

Can anyone help? Thank you. Do let me know if more information is needed

to resolve this.

0
Viewing all 997 articles
Browse latest View live




Latest Images