SpamCop
Author
Discussion

SGirl

Original Poster:

7,922 posts

285 months

Tuesday 12th May 2009
quotequote all
Hiya!

Can anyone help me out, please??! Desperation is setting in.

Last Friday, I discovered that my Register 1 IP address has been blacklisted by SpamCop. I contacted Reg1 then and asked for help. Then I promptly forgot about it, because they said they were sorting it.

Anyway, today I'm getting quite a few mail returns - all because the IP address is still blacklisted on SpamCop. I can't remember my BT authentication details to use the BT SMTP server (and that wouldn't work with webmail anyway), and I really need to get off this blacklist quickly because it's costing me business. frown

I've asked the guys at Reg1 to help out again, but in the meantime can anyone tell me where I can find an SMTP server I can use? Pretty please??

Beer for everyone who can help! beersmile

Plotloss

67,280 posts

294 months

Tuesday 12th May 2009
quotequote all
http://oit.osu.edu/networking/openrelay/smtpserver...

List of open SMTP relays.

Careful with it though, so may do odd things to your messages.

Looks like you're on the same box as me, I got hit with this this morning.

Reg1 guys straight on it though, as ever.

Gaffer

7,156 posts

301 months

Tuesday 12th May 2009
quotequote all
Same here...

buggalugs

9,269 posts

261 months

Tuesday 12th May 2009
quotequote all
Authsmtp Is fairly cheap and quick to set up, I've used them myself.

Podie

46,649 posts

299 months

Tuesday 12th May 2009
quotequote all
Will point Beeston in this direction... yes

Plotloss

67,280 posts

294 months

Tuesday 12th May 2009
quotequote all
Podie said:
Will point Beeston in this direction... yes
No need, he already knows and has fixed it.

The problem is now with SpamCop who are a bit dim.

Pigeon

18,535 posts

270 months

Tuesday 12th May 2009
quotequote all
Be thankful it's not SORBS, they are not just "dim", they are actively tts.

JamieBeeston

9,294 posts

289 months

Tuesday 12th May 2009
quotequote all
Pigeon said:
Be thankful it's not SORBS, they are not just "dim", they are actively tts.
You say that, sorbs and a few others have ambled on to the scene now.. one even wants €50 to delist!

This is extremely annoying.

The IP is related to one of our VDS servers, anyone hosted on that same VDS Server will be impacted by this, it will be resolved by tomorrow, however we are pushing to have this erroneous entry removed before then.

The issue relates to a single account which was sending out spam for a few hours on the 8th of May, this account was investigated and cleansed / secured for the client immediately and the issue was resolved, however it appears that users who have only read their mail today have again reported the 8th May mail as spam, and spamcop appear to have mistakenly relisted the IP, even though no spam was sent since the 8th, and only for an hour or so then.

It's a pain as SpamCop wouldnt let us express delist as 'we'd previously delisted at some time in the past' iirc in 2007, as it stayed on there for the default 24 hours, other tertiary / non tier1 RBLs (like sorbs) picked it up.. and they default to 7 days :/

My guys have been chasing all day to get this express delisted, alas the RBL world isnt in the least interested in service providers or protecting against false positives ;(

It'll be auto-delisted overnight again.

SGirl

Original Poster:

7,922 posts

285 months

Tuesday 12th May 2009
quotequote all
Thanks everybody! And thanks Jamie for the detailed explanation, I'm happier knowing that it's not going to persist for a long time. wink

Ruddy Spamcop interfering! No beer for them. irked


JamieBeeston

9,294 posts

289 months

Tuesday 12th May 2009
quotequote all
SGirl said:
Thanks everybody! And thanks Jamie for the detailed explanation, I'm happier knowing that it's not going to persist for a long time. wink

Ruddy Spamcop interfering! No beer for them. irked
No worries, I'm just annoyed for our customers who're affected by this policy of theirs.. frown

J

Podie

46,649 posts

299 months

Wednesday 13th May 2009
quotequote all
SGirl said:
And thanks Jamie for the detailed explanation, I'm happier knowing that it's not going to persist for a long time. wink
yes Nice to know that (as usual) R1 are on the case, but also makes interesting reading.

Part of me is happy that you have to do some work though Jamie wink

anonymous-user

78 months

Wednesday 13th May 2009
quotequote all
Jamie, we are hosted on a VDS pro package with it's own IP, does that mean we would be immune from these problems unless OUR IP was blacklisted?

SGirl

Original Poster:

7,922 posts

285 months

Wednesday 13th May 2009
quotequote all
Dave_ST220 said:
Jamie, we are hosted on a VDS pro package with it's own IP, does that mean we would be immune from these problems unless OUR IP was blacklisted?
I suspect that might be a No. Plotters, Gaffer and I all had the same problem because we're presumably all hosted on the same box, yet as far as I'm aware none of us was "responsible" (not the right word, but you know what I mean) for the listing in Spamcop. I don't know what the other two have, but I have a VDS Pro package as well.

But that said, this is only the first time I remember this happening in all the years I've been with Reg1. And generally these guys do move pretty quickly to get things fixed.

Plotloss

67,280 posts

294 months

Wednesday 13th May 2009
quotequote all
It wasnt Reg1's fault essentially.

Someone on the box we use had a script on their site which had become compromised and used to send out spam emails.

This in turn meant that the IP address of the box we use was highlighted as a spam source in turn leading to the issues.

The support guys at Reg1 have gone about reversing this process.

JamieBeeston

9,294 posts

289 months

Wednesday 13th May 2009
quotequote all
Dave_ST220 said:
Jamie, we are hosted on a VDS pro package with it's own IP, does that mean we would be immune from these problems unless OUR IP was blacklisted?
Whilst all incoming mail will go direct to your Dedicated IP, and this be unaffected, any outgoing mail will carry the servers main IP in it's headers (as part of the hostname) so even with a Dedicated IP, the main IP of the server will show in the headers and thus get flagged.

I've no problems with Spam Blacklists, we use them ourselves, my problem here is that we were listed due to an account spamming.. ok.. I can live with that.. even though we did stop it ASAP.. I then try to express unlist us, but it seems you're only allowed to do this once, ever! nice!

So we need to wait 24 hours.. which we do.. it's then removed as expected.. all fine and dandy.. then 3 days later, it's relisted again for the SAME spam it was listed for last time.. not new spam, not a continually infected server, but the same spam..

That's what gets my goat! frown

Still, we're out now!

evenflow

8,855 posts

306 months

Wednesday 10th March 2010
quotequote all
Jamie, anyone,

Can I point you in the diirection of this thread please?
http://www.pistonheads.com/xforums/topic.asp?h=0&a...

I'm having some SpamCop problems with a Reg1 domain...

SGirl

Original Poster:

7,922 posts

285 months

Thursday 11th March 2010
quotequote all
evenflow said:
I'm having some SpamCop problems with a Reg1 domain...
I had this last week, too. I mailed the chaps at Reg1 and they appear to have fixed it. I hope. smile

JamieBeeston

9,294 posts

289 months

Thursday 11th March 2010
quotequote all
SGirl said:
evenflow said:
I'm having some SpamCop problems with a Reg1 domain...
I had this last week, too. I mailed the chaps at Reg1 and they appear to have fixed it. I hope. smile
There appears to have been a relatively largescale spam attack over the last few weeks, we implement very stringent anti-spam policies and lock down the mailservers very tightly, alas it doesnt stop the devious ones signing up for a legitimate paid for account, keeping it quiet for a day or so, and then battering out tens of thousands of emails overnight..

We receive notifications from the major Webmail providers virtually immediately, and my staff then investigate, neuter and clean the issue.

There has also been a big change in policy by BT of recent which has resulted in alot of innocent end users systems being blocked by BT.