Email Security.cloud

 View Only
  • 1.  Removal from blacklist

    Posted Sep 27, 2020 08:50 PM
    Hello,
    We request to remove our MX server IP from Yours blacklist.

    It should be emphasized that we are a local Polish government office.
    We do not send spam.
    Server statistics and logs are analyzed all the time.
    Our MX server is clean, not listed at any blacklists https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a185.119.210.50&run=toolpage.
    IP reputation is good.
    The email server is not open relay.
    IP has valid PTR (reverse DNS) and SPF records.
    No suspicious activity - it's clean machine.

    Our IP is only on Your blacklist (https://ipremoval.sms.symantec.com). Why?

    We can't send very important e-mails to another government office who use Yours security systems.
    Eg. log smtp[26473]: 2A6B82DF9: to=<***********@******>, relay=*******[****.***.***.**]:25, delay=363, delays=363/0.04/0.29/0, dsn=4.7.1, status=deferred (host *******[****.***.***.**] refused to talk to me: 554 5.7.1 You are not allowed to connect.

    We have tried several times to ask to remove from Symantec email blacklist at IP Address Investigation Request page - and they are removed it - but after 1 day - IP was added again. I will remind you - in our mx server logs we have not found any suspect activity.

    Please remove our MX server IP from Yours blacklist permamently.

    Regards
    Commune Office Raków
    contact: urzad@rakow.pl


  • 2.  RE: Removal from blacklist

    Broadcom Employee
    Posted Sep 29, 2020 12:54 PM
    Hi, 

    I have checked the IP you provided and we are not blocking this IP.  Can you please ask the recipient to create a case with Symantec so we can further look into this. We will need to see the full logs. 

    Thanks, 

    VS


  • 3.  RE: Removal from blacklist

    Posted Sep 29, 2020 01:18 PM
    Hi,
    I have the same issue as you have. My completely clean and innocent IPs are listed only in Symantec IP Reputation. And I've been repeating delisting and being listed every day.
    I feel Symantec DOESN'T INTEND TO SUPPORT this kind issue at all.

    In my case, I got 2 answers from the representative as follows,
    "As of this post, this IP is still showing bad in my SMG. You will have to go through the process of IP removal by going to https://ipremoval.sms.symantec.com/ and request removal from there.
    Symantec does use other spam lists to provide data for our global lists. If this happens again, use a tool like MXToolbox's Blacklist checker to see if your IP is on any other blacklists. Some of these, including SORBS, can put your IPs on our list."
    And
    "I cannot say, as I do not have access, nor have the ability to discuss our procedures even if I had access. If another Symantec customer reports your email as spam to us, that is the most weighted way to get on the bad senders list. Also, appearing on other third-party lists may trigger addition, but not as easily as a spam report from another Symantec customer.
    I hope this helps, because I have no way to definitively explain it. My personal best guess is that someone reported your email as spam to us.".

    If we could exchange our experience and solutions, I would appreciate it.
    Taka