Author Topic: Getting blacklisted  (Read 10384 times)

0 Members and 1 Guest are viewing this topic.

Getting blacklisted
« on: July 09, 2016, 11:27:34 PM »
I am getting repeatadly blacklisted on Protected Sky.
I have valid spf, dmarc and rdns set up.
My mail score is 10/10. No OPen Relays..
Checked mail loggs no un authorized mail is being sent.
I have noticed messages where some spammers are pretending to be from my domain, mail server is responding with IP is not from authorized sender and sender not authorized in domain. SPF failed, DMARC failed etc.
Which is what I would expect it to reply. But am still getting lsited.

is there a solution to this?

« Last Edit: July 09, 2016, 11:34:41 PM by idc »

Re: Getting blacklisted
« Reply #1 on: July 09, 2016, 11:46:36 PM »
spf should do this job I think
How your spf looks like in zone file?

Re: Getting blacklisted
« Reply #2 on: July 10, 2016, 12:26:18 AM »

I get a score 10/10

When using mxtoolbox spf checker.

v    version    spf1       The SPF record version
+    mx       Pass    Match if IP is one of the
MX hosts for given domain name
+    a       Pass    Match if IP has a DNS 'A' record in given domain
+    ip4    Pass    Match if IP is in the given range
~    all       SoftFail    Always matches. It goes at the end of your record.
   Test    Result
   SPF Record Published    Record found
   SPF Syntax Check    The record is valid
   SPF Multiple Records    Less than two records found
   SPF Record Deprecated    No deprecated records found
   SPF Included Lookups    Number of included lookups is OK

Hopefully thats the info you require

Re: Getting blacklisted
« Reply #3 on: July 10, 2016, 11:25:21 AM »
try to move from softfail to fail cos this emails will be only marked with softfail, but accepted on some servers and delivered to the user...
I used this simple site to generate spf:

« Last Edit: July 10, 2016, 11:31:13 AM by zakrpa »

Re: Getting blacklisted
« Reply #4 on: July 11, 2016, 09:11:30 AM »
When Protected Sky list your IP, that mean your server with corresponding ip was really sending spam....  nothing to do with spf, dmarc oti dkim

Re: Getting blacklisted
« Reply #5 on: July 20, 2016, 10:09:11 AM »
Hi Jae,

Thanks for your comment.
I have run every check I can think of, including rootkit checks on server and nothing is showing.
I have also shut my server down for 48 hrs (shutdown and powered off in hosting control panel), and during this I got blacklisted again.

I also have got dmarc report; which states that over 3100 emails were detected as possibly coming from my domain; but only 30 had fully passed the dmarc and spf checks as valid emails ( which after checking were the 30 I had sent).
Thats means that over 99% of emails dmarc had notices were not from my domain.

This is really anoyhing, and takes a lot of daily checking and delisting.

ANy other ideas?

Re: Getting blacklisted
« Reply #6 on: July 22, 2016, 08:13:08 AM »
so you are saying even server is offline turned off sends emails from your domain  :o

My friend had similar problem but mail server was not secured and its open relay active.

Do you have any bounce back messages with ip's logs to show us or send me pm with that... to check out.