LinuxQuestions.org
Download your favorite Linux distribution at LQ ISO.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices


Reply
  Search this Thread
Old 03-21-2012, 06:16 PM   #1
L1nuxn00b703
Member
 
Registered: Sep 2009
Posts: 117

Rep: Reputation: 15
SPAM and mxtoolbox.com


Hi all,
What determines when your mail server is blacklisted on mxtoolbox.com? Do users or admins report your IP? Your ISP? Is there some kind of network scan that occurs?
 
Old 03-22-2012, 03:02 PM   #2
Noway2
Senior Member
 
Registered: Jul 2007
Distribution: Gentoo
Posts: 2,125

Rep: Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781Reputation: 781
There are several things that can get you listed as a SPAM relay on MXToolbox. One important thing to keep in mind is that MXToolbox queries several RBLs, it isn't in and of itself the blocking service, so you need to look at which ones are blocking you. One of the most common is running a mail server from a "residential" internet service. Often times residential accounts are assigned by a dynamic IP, which is pretty much an automatic flag, but even if they are static if they are still considered assigned from a residential block you will probably be flagged. Otherwise, IP addresses are usually blocked because of some form of reporting. I know that spamcop.net allows users to submit SPAM which becomes a statistical 'tick' with enough ticks causing you to be listed. Other systems have different methods and algorithms that they use, some of which are kept private so as to make it more difficult for spammers to get around them.

If you have been listed and you are not running from a residential service, you can try contacting the organization and ask to be delisted. They may also be able to tell you why you have been listed. If you have a problem with you system, such as a compromise of your web stack that causes you to send SPAM (btw, this does NOT require root level access) or operate an open relay and get re-listed it may become more difficult for you to get de-listed. MXToolbox should help by providing some good diagnostics regarding the status of your mail system.
 
Old 03-22-2012, 05:57 PM   #3
wulfsburg
LQ Newbie
 
Registered: Mar 2012
Posts: 15

Rep: Reputation: Disabled
Quote:
Originally Posted by L1nuxn00b703 View Post
Hi all,
What determines when your mail server is blacklisted on mxtoolbox.com? Do users or admins report your IP? Your ISP? Is there some kind of network scan that occurs?

As stated above there are many determining factors. One thing to keep in mind if you are using a business class IP address (usually static assigned to you by your ISP), and you are using it for outgoing mail only, be sure to contact your ISP to implement a PTR (aka reverse DNS) record resolving your IP to the domain you are sending for. If the MX record for your domain points to the incoming mail server (hosted elsewhere) , and you are sending out from a different IP address (other than the incoming), you want the reverse DNS record to point to the domain you are sending from. If you do not have this, the receiving party will notice and report that the forward and reverse paths do not have matching domains, thus flagging that domain or IP as potential spam.

I work at a telecom and deal with business customers every day who frequently get black listed because their sending mail server IP has no PTR/Reverse DNS record. (only in instances where they have a different incoming mail server hosted elsewhere)

Also, if you are mass mailing to multiple recipients, and they are clicking the "spam" button on their mail clients, it will flag your domain as "spam". If enough people click this, it is reported to blacklisting agencies who will ultimately black list you.

If you are already blacklisted, reach out to the blacklisting host and ask why you were blacklisted. That should lead you in the right direction. There are just too many factors that involve blacklisting to sum up every one.
 
Old 03-22-2012, 07:29 PM   #4
Tinkster
Moderator
 
Registered: Apr 2002
Location: earth
Distribution: slackware by choice, others too :} ... android.
Posts: 23,067
Blog Entries: 11

Rep: Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928Reputation: 928
Moved: This thread is more suitable in <NETWORKING> and has been moved accordingly to help your thread/question get the exposure it deserves.
 
Old 03-23-2012, 06:34 PM   #5
L1nuxn00b703
Member
 
Registered: Sep 2009
Posts: 117

Original Poster
Rep: Reputation: 15
Wow thanks for the replies, you guyz rock!
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Auto deleting spam assasins spam box via cronjob and Roundcube Junk Folder osmy Linux - Newbie 8 01-23-2012 04:22 PM
Move SA Marked Spam to Junk/Spam Folder Using Procmail, Postfix, and Virtual Users alden_pease Linux - Server 0 01-05-2012 12:29 AM
postfix spam. someone is using my server to send spam and it's not open relay bob808 Linux - Server 6 03-23-2010 09:44 AM
spam filter that puts spam into spam folder? paul_mat Linux - Software 3 03-31-2009 04:18 AM
procmail and spam -- do not send out of office auto replay to spam draix Linux - Software 0 12-30-2004 08:35 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking

All times are GMT -5. The time now is 09:51 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration