Search the Community

Hi, We are currently having issues sending messages from our domain to all Google addresses. We have checked our SPF, DKIM & DMARC records are setup correctly. We get a bounce back message that says : host gmail-smtp-in.l.google.com [2607:f8b0:4004:c06::1b] SMTP error from remote mail server after end of data: 550-5.7.1 [2001:978:2a01:0:6:0:1089:1091 7] Our system has detected that 550-5.7.1 this message is likely unsolicited mail. To reduce the amount of spam 550-5.7.1 sent to Gmail, this message has been blocked. Please visit 550-5.7.1 https://support.google.com/mail/?p=UnsolicitedMessageError for more 550 5.7.1 information. w26-20020a05620a0e9a00b00773ae74632asi1246387qkm.604 - gsmtp Google are not being helpful & blaming Microsoft even though the same thing happens when messages are sent from Sendgrid. Does anyone know a solution to this or how we can contact someone useful at Google to help?

Hi I am interested in hearing from other schools, in particular Birmingham schools to see whether they have seen an increase in SPAM over the last few weeks/months. I have been getting a lot of SPAM over the last few weeks as well as a significant number of staff in our school. BGFL recently sent an email regarding problems with SPAM. A lot of the SPAM would get blocked and be filtered with the PMM filtering system that BGFL introduced a year or two ago but now it seems to be bypassing that and coming straight through our inboxes. In particular lots of banking ones are coming through most trying to be HSBC or Natwest. Have other schools experienced the same problem? I be interested in hearing how other schools tackle problems with SPAM. We are using Exchange 2007 and know we could look into Forefront but am worried about the extra administration this could potentially cause and potentially the more expensive licensing we would have to consider for our schools agreement as we would need to buy the enterprise desktop CALs... At a recent training session I went to another colleague said he recommended mailmarshall (is quite cheap and works very well in blocking lots of SPAM) but said he becomes a daily chore to ensure nothing legitemate email is being blocked. Apparantly can cause more calls to IT because some emails will get blocked. I am going to have to do something about this as it's getting worse. Any advice would be most appreciated. Thanks

Hi, We currently have a spam filter in place which doesn't seem to be doing the job so we was wondering what software everyone uses. Also, what do you think of the software? I've looked into: Iomart - http://www.iomartcloud.com/mail-filtering Altman - http://www.altman.co.uk/email-security/email-filtering/email-filtering-for-education Censornet - http://www.censornet.com/en/products/mailsafe They all seem fairly good. Suggestions please? Thanks

Hi Everyone, We have received a few emails recently, where the return address that is normally in the email header has been changed to appear to have come from an internal email address. Is there anyway of being able to trace this back to the true originating email address we use Office 365 for our email system. I have been able to locate the senders IP address which resolves to 45-161-238-34.giganet.net.py which looks to be an ISP based in Latin America according to some whois tools. Or is someone able to confirm that its untraceable it would save me some time ! Thanks

we have an email server that is getting blacklisted all the time. I have checked the logs and it aint sending any spam out, nor can someone use an open relay was wondering what over steps or diagnostics I could use to determine where the problem lies. this is what the company has sent me to check which I have and all come back clear. Thank you for contacting Barracuda Networks regarding your issue. Your issue is important to us. We have assigned a confirmation number: to this case. We apologize for any inconvenience that this may have caused you. We have removed (Please wait 24-48 hours) from our blocklist for 30 days, at which time it will be re-evaluated. There are a number of reasons your IP address may have been listed as "poor", including: The email server at this IP address contains a virus and has been sending out spam The email server at this IP address may be configured incorrectly The PC at this IP address may be infected with a virus or botnet software program An individual in the organization at this IP address may have a PC infected with a virus or botnet program This IP address may be a dynamic IP address which was previously utilized by a known spammer The marketing department of a company at this IP address may be sending out bulk emails that do not comply with the CAN-SPAM Act This IP address may have a insecure wireless network attached to it which could allow unknown users to use it's network connection to send out bulk email In some rare cases, your recipients' Barracuda Spam Firewall may be misconfigured If you do not think any of the above apply, please also contact the person who manages this IP address, as they may be better able to investigate this issue. Thank you for your time and understanding. Barracuda Central by Barracuda Networks BarracudaCentral.org - Technical Insight for Security Pros [email protected]

Just wondering if anyone can give me some suggestions on SPAM filtering and content filtering. We currently use GFI Mail Essentials for our SPAM filter, and Netsweeper for our Content Filtering. What do other people use, what do people suggest? We also use Securus for SafeGuarding and monitoring. We have been having issues with GFI, its letting through far too much SPAM. Thanks Edd

A colleague went on holiday to China, whilst they were there they signed into a public computer to check their college emails. (facepalm) When they got home their college email account had been spammed. (you can see where I'm going with this) The account had 900,000 emails in the inbox of failed delivery receipts from the spam trying to send emails from the account and failing. Since then the spam has stopped coming into the mailbox however I need to now remove the emails that are already on the account! I've added the mailbox to Outlook 2013 and created several rules to filter the emails from the inbox and move them into the deleted items folder - the rule has constantly been running day and night for the past 2 weeks. I'm now on 65,9572 emails, it's deleted 27k in the last 24 hours. Since we're on Office365 for Education is there any other way we can have removed or remove the emails faster? Abandoning the mailbox is a no go as well.

Hi everyone We've recently got onboard the office365 train but have run into a problem sending mail to btinternet/openworld, virgin/blueyonder, aol.com/aol.co.uk email addresses. I've endured the torture of MS support for a few days who assure me that SPF is fine, DKIM is fine, Headers are fine, their IP's and reverse are fine. The email content is text nothing else, no fancy HTML, no fancy graphics, nothing. I've even sent a test message with MS support watching via screen sharing. I've checked our sending reputation which comes up neutral or good with services and I've checked us against block lists of which we don't appear on any. So I turn to you wonderful people. Firstly and rather unfortunately, for reasons unknown we receive no bouncebacks whatsoever, from any mail provider. The MS engineer seems as baffled at this as I am. Using message trace in exchange admin shows that our email fails to virgin/BY and aol and is being stopped for a number of reasons "null sender to multiple recipients" and variants of the phrase are most common. Other messages will simply tell us that the external mail server is treating our mail as spam. Emails to BT addresses sit 'Pending' in message trace with a 'defer' message saying we've sent too much spam. I've been in touch with postmasters at BT and AOL who both requested bounceback message and headers despite the fact I've told them the sending account receives no bouncebacks, I've sent both all the info I can but neither has come back to me thus far. We're sitting here thinking surely we cant be the only office365 school that's had this issue. Can anyone shed any light on this situation? Thanks!

Hi We had reports of a user PM spamming users so I have taken steps to verify the user was not intentially spamming. If you receive a PM you did not expect please PM me or contact us using the link at the bottom of the page and we will investigate. Cheers

Hi all If you get an email in to your Junk folder in Outlook, and you mark it as Not Junk and have it moved to your inbox, does that also tell Office 365 (where that's your email service) that that email isn't Junk, or do you still need to add that senders email address to your Allowed list in Office 365? Olly

This is a quick note to remind companies that sending 'spam' private messages is strictly forbidden. Anybody found to be doing this will be banned immediately and EduGeek will contact your employer asking for you to explain your actions. Members are reminded that there is a 'report this message' button to the left of all PMs. If a PM is suspected to be spam, please click the warning triangle icon and report the message. Other measures are soon to be introduced to further catch people doing this.

We've had a wave of spam emails go around and some of them have got a hold of our student distribution lists which has been fun. I'm looking at setting up some mail flow rules to redirect any external emails sent to a DL to a generic mailbox called Spam. However I've been playing around with the rules this morning and can't get it working. Has anyone else had any experience with this? Currently my rules are like this; If the sender is located Outside the organisation and If the recipient address matches TestDL@domain Then redirect and generate report etc, Cheers!

I almost missed this email alert triggered by the rule. Oct 9, 2019 4:44:18 PM DLP rule Stop processing more rules. DLP rule: '', ID: ('xxxxxxxxxxxxxxxxxxxxxxxxx'), DLP policy: '', ID: (xxxxxxxxxxxxxxxxxxxxx). Oct 9, 2019 4:44:18 PM Spam Use high risk delivery pool. No detail information available. Oct 9, 2019 4:44:18 PM Transport rule Apply HTML disclaimer. Transport rule: 'Disclaimer', ID: ('xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'), DLP policy: '', ID: (xxxxxxxxxxxxxxxxxxxxxxxxxxx). Oct 9, 2019 4:44:18 PM Spam Diagnostics Oct 9, 2019 4:44:18 PM Spam Diagnostics Oct 9, 2019 4:44:27 PM Resolve The message was resolved to [email protected]. Oct 9, 2019 4:44:27 PM Deliver The message was delivered to the Junk Email fold How do I stop this, as you can see the DLP rule was triggered and sent it to the admin email , that resolved it to me and promptly dumped it into spam? Not sure how to solve this one. (this happened btw whilst the domain was excepted

Back in the early days, you could forward spam to [email protected]. Every time my users get one worth reporting (eg valid headers, legitimately came from that ISP) it is harder and harder to find out how to report it. This week my users have been receiving spam from an AOL user. Headers show that it is definitely coming from an AOL user through AOL's SMTP servers. If the user is doing it on purpose then I would like to see his account closed; and (more likely) if his account is compromised then he probably doesn't even know. All evidence shows that [email protected] is not monitored. Who do I send this to?

Morning/Afternoon Folks, Any ever tried to filter spam through a linux server? Currently trialing Stop spam with the Anti-Spam-SMTP-Proxy (ASSP) (A decent free alternative), and can't quite get my head around the configuration. Firewall - Redirecting P25 traffic to 10.0.0.1 ASSP: 10.0.0.1 Port 25 Exchange 10.0.0.2 Port 26 on the SMTP connector, allowing only 10.0.0.1 to relay/connect Some wiki examples show the server running as: Internet > Assp > Exchange > Client [inbound] Client > Assp > Exchange > Internet [outbound] And the majority show MTA examples, i.e. Internet > Assp > Exchange > Client Client > Assp > Exchange > MTA > Internet My questions; Will exchange act as a MTA when sending out emails, and how would a client outlook know to connect to ASSP outbound rather than exchange. The product is packed with features, and is very regarded however the documentation is very poor, and examples are very vague. Hopefully someone has a few ideas