IP Blacklisted: External emails not sending :(

[TomHD]

Hello All,

 

Seems our external IP is on a blacklist --> Network Tools: DNS,IP,Email

 

What are my options? Virus scan the network?

 

Thanks, TomHD

[Gatt]

You would need to contact whoever blacklisted you and work to meeting the necessary criteria to be un-blacklisted.

 

EG: How do I get an IP address removed from a blacklist?

[andydis]

send all mail via a SMTP gateway/smarthost ( your isp or domain provider or spam provider could help with this)

[win]

Is it a locally hosted exchange server?

[TomHD]

Server is locally hosted. Seems we are only blocked by BARRACUDA now --> Network Tools: DNS,IP,Email

 

I have no idea where to go from here? Any help would be great.

 

Thanks, TomHD

[andydis]

TOMHD , who does your anti spam filtering? do you have an office 365 account? who is your ISP? who is your domain registrar?

 

you could try a removal request here : BarracudaCentral.org - Technical Insight for Security Pros

 

but if you are an open relay or on a block of IP's that spammers are using you will get relisted.

[TomHD]

@andydis, No Office 365, Internet is provided by E2BN and they are the Domain Registrar. Not sure who does the anti spam, how would I find that?

 

Regarding the removal request, I have that form open but I'm not sure what to put for "Reason for Removal"

 

Now looking into the open relay part

 

Thanks, TomHD

[andydis]

Reason for Removal = accidentaly listed

 

you may need to look into getting some extra anti spam solution, gone are the days when having an exchange server directly exposed to the internet with direct MX to it was ok.

 

my setup looks like this if you email me.

 

EMAIL ME ------> office 365 online protection -------> onsite exchange server

 

I email out ------> onsite exchange server------> office 365 online protection ----> external recipient

 

the onsite exchange server is only setup to "talk to" office 365 by IP blocks.

 

you could ask e2bn if they have a similar solution.or looks into office 365 exchange protrotection or any other third party company

[TomHD]

I have emailed E2BN asking for some support.

 

Regarding the open relay, MailRadar says that port 25 is closed at our IP. Does this mean no open relay?

 

Thanks, TomHD

[andydis]

YOU MIGHT BE SURFINg OUT ON A DIFFERENT IP that your mail server is using .

 

if you want to pm me your domain name and ip's i can check for you

[win]

If you're hosting it locally, make sure port 25 is only open for your exchange server. Block it for everyone else incase someone else is spamming out emails from your domain. Otherwise you'll just get blacklisted again until the problem is sorted.

[Sylv3r]

Are you running up-to-date AV software on all your machines? It sounds to me like someone has received one of the dodgy e-mail attachments doing the rounds at the minute and a PC within your organisation is sending out rubbish which is resulting in the backlisting. The issue is, if you request to be removed from the Blacklist you only get a limited of opportunities if you are blackisted again otherwise they may be a little less accommodating / charge for removal.

[TomHD]

It seems that there are no more blocks on the IP I will be having a good look at AV and doing a full scan to make sure. Thanks everyone for the input, very helpful as always.

[TomHD]

Blocked again I will be looking for malware now.