[Snap] SMTP Server Blacklisted

Forums › 2degrees (including Slingshot, Orcon, Flip, Stuff Fibre, MyRepublic, 2talk and Vocus) › [Snap] SMTP Server Blacklisted

Dynamic

4015 posts

Uber Geek
+1 received by user: 1851

ID Verified

Trusted

Lifetime subscriber

#143020 1-Apr-2014 12:00

I've just sent an email through to support@snap advising that unit0.ironport.snap.net.nz [202.37.100.104] is currently on a blacklist and asking them to resolve the issue. (Note I have just checked and unit1.ironport.snap.net.nz is also listed)

Checking URL (with the IP listed)
http://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a202.37.100.104&run=toolpage

Our bounceback messages:

Your message did not reach some or all of the intended recipients.

Subject: RE: 1987 Camaro

Sent: 4/1/2014 7:35 AM

The following recipient(s) could not be reached:

user@hiddendomain.co.nz on 4/1/2014 7:36 AM

The e-mail address could not be found. Perhaps the recipient moved to a different e-mail organization, or there was a mistake in the address. Check the address and try again.

< unit0.ironport.snap.net.nz #5.1.0 smtp; 5.1.0 - Unknown address error 554-'5.7.1 This message has been blocked because it is from a FortiGuard - AntiSpam black IP address.(connection black ip 202.37.100.104)' (delivery attempts: 0)>

The URL for requesting delisting is here: http://www.fortiguard.com/static/ip_lookup.html (I have NOT done so)

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

Demeter

709 posts

Ultimate Geek
+1 received by user: 391

Trusted

One NZ

#1016495 1-Apr-2014 12:11

Weird for an Ironport server to be listed. Reputation server with bad reputation is like dividing by zero.

Lias

5655 posts

Uber Geek
+1 received by user: 3978

ID Verified

Trusted

Lifetime subscriber

#1016534 1-Apr-2014 13:02

It doesn't appear to have telnet open, but it's OS version is vulnerable to this: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20120126-ironport

Possibly related?

Also FWIW does it really need to have a HTTPS login page exposed to the internet? that seem's.. inappropriate..

https://202.37.100.104/login

I'm a geek, a gamer, a dad, a Quic user, and an IT Professional. I have a full rack home lab, size 15 feet, an epic beard and Asperger's. I'm a bit of a Cypherpunk, who believes information wants to be free and the Net interprets censorship as damage and routes around it. If you use my Quic signup you can also use the code R570394EKGIZ8 for free setup. Opinions are my own and not the views of my employer.

Dynamic

4015 posts

Uber Geek
+1 received by user: 1851

ID Verified

Trusted

Lifetime subscriber

#1016985 2-Apr-2014 09:01

I got an email last night indicating they were working on it.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams

gehenna

8667 posts

Uber Geek
+1 received by user: 3883

Moderator

Trusted

Lifetime subscriber

#1016986 2-Apr-2014 09:02

You can put your own requests into the blocking services to be whitelisted, that might save you some time waiting for your ISP to do it.

Dynamic

4015 posts

Uber Geek
+1 received by user: 1851

ID Verified

Trusted

Lifetime subscriber

#1016989 2-Apr-2014 09:10

Absolutely you can and I have done so before on occasions. IHUG and Clear mail servers have been listed frequently in the past.

Some of the anti-spam services will unblock an IP easily, but if you get relisted in a short time the unblocking becomes much harder. In this case I felt it better that Snap have the opportunity to be sure that any potential issue at their end is resolved before the delisting request is submitted.

Also in this case there are multiple listings, so someone else can jump through the hoops to get it sorted.

“Don't believe anything you read on the net. Except this. Well, including this, I suppose.” Douglas Adams