Contact BarracudaCentral.org email bounce back

[juddy]

Out of the blue emails I am sending have started to bounce back, some of these worked up until yesterday.

It seems my IP is blocked, but when I go in and check it its all clear, this company say they can register your IP address for a fee and this will resolve the problem.

Never had anything like this happen in all the time I have used email why would it start now, a number of other people I have spoken to are also having this problem

any ideas.

[disco gazza]

Have you rang your service provider.
Maybe something on there end that is causing the problem.
Hope you get it fixed asap. :D

cheers

[shining]

Its the latest scam. You have probably picked up a "virus". The company will remove the bug for a fee (probably). Are you running an anti virus program? Try AVG or similar for a good free service. If you are not confident take it to your nearest geek! :-)

[jonesy63]

Out of the blue emails I am sending...

Well, there's your problem! Stop sending blue emails! :wasntme::D

[jboot51]

Wow, impressive legit scam.
Why didn't I think of it ?.
Read here.
In the Parlance of our Times: Biggest. Spam Scam. Ever. (http://zacharyozer.blogspot.com.au/2008/10/worst-engineers-ever.html)

[Distortion]

Yep there are a few of these out there

UCE protect is another that is a scam, demands payment for "express" delisting

[juddy]

Bid scam

question is, why now, and how to get round it?

[jboot51]

I've got a dynamic IP address which is standard through bigpond.

Don't know if this will help, but I reset my modem and I get issued a new IP address.

just found this.
EmailReg.org (http://www.emailreg.org/index.cgi?p=news&id=4)


then this might be worth a try
BarracudaCentral.org - Technical Insight for Security Pros (http://www.barracudacentral.org/rbl/removal-request)

[Judo]

juddy, if you're talking about in your office and work email, I would suggest running a virus/spyware scan of all PC's.

The idea of paying them to be white listed is a bit scammy and could also be a band-aid fix that doesn't address the real problem. The root cause of receiving the bounce back from Barracuda could be because there is spam originating from your domain name or email server. Stop the spam and your email will start working again (some time later. Eg 24 hours). I.E. Find the virus or spyware on your network that is spamming.

If I'm right, it's weird their site says your IP is clear. Maybe it's originating from another IP but still your domain name? Do you have more than 1 office? People working from home?

Does this all make sense?

[juddy]

According to the Network people we have 2 IP address.. for the one network connection.

[Distortion]

I would expect you to have an IP address for your internet connection, this is unlikely to be listed(if dynamic it may be listed deliberately but if your trying to run a local mail server from a dynamic you have bigger issues)

Your mail and website is then likely be run through 1 or more IPs completely unrelated to the IP of your internet connection most small businesses will off load the mail to a hosting company so I assume that is what you've done and one of their mail server IP addresses has been listed.

If you look at the bounce messages coming back you should be able to workout what address has actually been listed.


Regards,

[juddy]

Thanks Distortion

I am running MAC mail, it goes via the company who provide our Internet connection, PIVIT, I am thinking its got alot to do with there end.

Never had it when we were with Telstra.

I am not tech savy, but I cant understand why its working then all of a sudden we get this. But only on some emails,

and today, I got a different one from some other mob.


554 Your access to this mail system has been rejected because your IP has a poor reputation in Senderbase. For more information please see SenderBase (http://www.senderbase.org/)

[Distortion]

Ok Senderbase is Ciscos Ironports(Very rare that senderbase is wrong), that means the spam is legitimately coming from the IP address your email came from, the ISP mailserver isn't configured correctly or most likely mail volume from those IP address has changed signifcantly(usually as a result of compromised machines/email accounts)

Feel free to pm me the full email headers and I can take a look for you.

[Distortion]

A quick glance at

Look Up - SenderBase (http://www.senderbase.org/lookup/ip'search_string=123.100.128.23)

shows mail.pivit.net.au as a poor repuations and a 14% increase in mail from last month this increase is likely spam from compromised users

At poor reputation I can guarentee iiNet(whom I work for) and any of their brands will be bouncing email from your ISP. I believe Optus also use ironports but short story Poor rep on senderbase is a pain.

This is part of the advantage of using a larger ISP a few compromised users won't sigifcantly change the volume of mail leaving the network they'll also often have a large number of outbound IP addresses that share the load(If 1 gets listed you can move customers who aren't spamming away from it etc)

[juddy]

Good work Rob, I wondered why PIVIT had not got back to me sooner.

How can I take this forward ( they did say use gmail more ) but I would rather stick with MAC mail... GMail is fine for when we are off shore...

[Distortion]

In terms of the ISP mailserver there isn't much you can do. They need to clean up whatever has caused it (they may have already in which case the reputation will come back up but this can take time)

I don't use it myself but I believe google allows you point your mail client at their servers and use smtp auth

A quick search found this, which is what I would try first(you can ignore everything but the smtp section and it may work)

https://support.google.com/mail/troubleshooter/1668960?hl=en&ref_topic=3026306

This looks even more relevant to you(You're a gmail user sending from an external address(what ever email address you want to use))
http://support.google.com/mail/bin/answer.py?hl=en&ctx=mail&answer=22370