Here is what one of my clients received today – just two weeks after he was getting other SPAM rejection emails:
-----Original Message-----
From: MAILER-DAEMON@@ [mailto:MAILER-DAEMON@@]
Sent: Wednesday, November 01, 2006 2:11 PM
To: [email protected]
Subject: failure notice
Hi. This is the qmail-send program at @.
I’m afraid I wasn’t able to deliver your message to the following addresses.
This is a permanent error; I’ve given up. Sorry it didn’t work out.
Just a note – SPAMCOP says the offending IP is not listed.
I also asked UCDavis to give me an indication of where they are getting their spam list from, or how they determine SPAM.
timruns, there are 1000+ different listing services out there. Many companies have their own listing critieria.
We ensure our mail servers are not listed on the major blacklists which 99% of ISPs use. I understand, sometimes and email may not go through to a particular ISP because of a private blacklist or an unknown list.
Reporting it via ticket will ensure we can communicate with the ISP and have the block removed.
That said, I have sent an email to their mail admin. Hopefully they’ll remove us shortly
bummer – i just got notified that this client’s email is getting bounced by the ISP Comcast, using Symantec’s tools.
I will submit a ticket.
-----Original Message-----
From: MAILER-DAEMON@@ [mailto:MAILER-DAEMON@@]
Sent: Wednesday, November 01, 2006 2:59 PM
To: [email protected]
Subject: failure notice
Hi. This is the qmail-send program at @.
I’m afraid I wasn’t able to deliver your message to the following addresses.
This is a permanent error; I’ve given up. Sorry it didn’t work out.
<[email protected]>:
Connected to 216.148.227.126 but sender was rejected.
Remote host said: 550 64.187.103.252 blocked by ldap:ou=rblmx,dc=comcast,dc=net → BL004 Blocked for spam. Please see Discovery Hub - News & Technology
— Enclosed are the original headers of the message.
This happen to my client the other night at comcast, this is suppose to be fixed and taken care of as of Monday. I told my client to… grrrrrrrrrrrrrrrr I was told Comcast contacted you guys and things were fixed..
comcast refuses to send us anything instead telling us to find it on our mail server ourselves.
What we(and customers) send many thousaands of 100% legit email from our servers each hour, and we are supposed to archive them so comcast can know what we sent? (griping out loud about their reply) we are still working with them.
Just thinking/wondering out loud as well, then… I read in another forum that Jodo put in place a 100 email per address per day limit (barring a waiver). IF Jodo is able to monitor volume as this rule implies, then wouldn’t this be a decent avenue to explore to find eliminate (and PREVENT) spam propagators?
It takes a single spam report to get listed at comcast as it seems.
The problem of almost 95% of our listings is due to forwards. Antispam solutions can differentiate between a forwarded and a direct email.
Brightmail(used by hotmail and Comcast) says about this here: http://service1.symantec.com/SUPPORT/ent-brightmailkb.nsf/docid/2006083014184063
(Section - “My email-forward service messages, are rejected”)
To make it worse some clients rely on their ISP’s antispam service and keep anti-spam turned off completely here, thus allowing spam to be relayed to their ISP.
Unknowingly when they click on “This is spam” (or “Mark as spam” or whatever) they are causing us to get blacklisted.
I’m looking forward for a solution to disable forwards completely for all users or a possibility to blacklist domains that can appear in forward.
We will also be working with clients to remove forwards to AOL, bellsouth, hotmail and comcast.
It was corrected and this is relisting. I’m sending them a mail again.
After reading the Symantec information, it apears to me that they are referring to an “email forward service” – a relay – that seems a bit more ominous than someone forwarding an email to a client or friend. Is that something whick Jodo is allowing their mail servers to do?
This is the “forward” the hsphere can setup, basically it send mail to [email protected] to [email protected]
So if spam comes to the domain here, it gets forwarded as the user wishes, but their filtering is not checking the headers fully and sees us as the source, therefore listing as spam.
When was this – i just tested (10AM Pacific Standard Time)?
Hi. This is the qmail-send program at @.
I’m afraid I wasn’t able to deliver your message to the following addresses.
This is a permanent error; I’ve given up. Sorry it didn’t work out.
<[email protected]>:
Connected to 206.18.177.26 but sender was rejected.
Remote host said: 550 64.187.103.252 blocked by ldap:ou=rblmx,dc=comcast,dc=net → BL004 Blocked for spam. Please see Discovery Hub - News & Technology
— Enclosed are the original headers of the message.
Again!!! Both Comcast and UCDavis are blocking right now (I assume they use the same software). Headers for both are below…
I will create a ticket, but the reality is my client is getting very frustrated. I just gave a slew of clients a month’s credit this morning because of these continuing problems…
+++++++++++++++++++
Hi. This is the qmail-send program at @.
I’m afraid I wasn’t able to deliver your message to the following addresses.
This is a permanent error; I’ve given up. Sorry it didn’t work out.
<[email protected]>:
Connected to 204.127.198.26 but sender was rejected.
Remote host said: 550 64.187.103.252 blocked by ldap:ou=rblmx,dc=comcast,dc=net → BL004 Blocked for spam. Please see Discovery Hub - News & Technology
— Enclosed are the original headers of the message.
-----Original Message-----
From: MAILER-DAEMON@@ [mailto:MAILER-DAEMON@@]
Sent: Thursday, November 02, 2006 3:32 PM
To: [email protected]
Subject: failure notice
Hi. This is the qmail-send program at @.
I’m afraid I wasn’t able to deliver your message to the following addresses.
This is a permanent error; I’ve given up. Sorry it didn’t work out.