Hi,
I have the same issue as you have. My completely clean and innocent IPs are listed only in Symantec IP Reputation. And I've been repeating delisting and being listed every day.
I feel Symantec DOESN'T INTEND TO SUPPORT this kind issue at all.
In my case, I got 2 answers from the representative as follows,
"As of this post, this IP is still showing bad in my SMG. You will have to go through the process of IP removal by going to
https://ipremoval.sms.symantec.com/ and request removal from there.
Symantec does use other spam lists to provide data for our global lists. If this happens again, use a tool like MXToolbox's Blacklist checker to see if your IP is on any other blacklists. Some of these, including SORBS, can put your IPs on our list."
And
"I cannot say, as I do not have access, nor have the ability to discuss our procedures even if I had access. If another Symantec customer reports your email as spam to us, that is the most weighted way to get on the bad senders list. Also, appearing on other third-party lists may trigger addition, but not as easily as a spam report from another Symantec customer.
I hope this helps, because I have no way to definitively explain it. My personal best guess is that someone reported your email as spam to us.".
If we could exchange our experience and solutions, I would appreciate it.
Taka
Original Message:
Sent: 09-25-2020 02:38 PM
From: Admin MX
Subject: Removal from blacklist
Hello,
We request to remove our MX server IP from Yours blacklist.
It should be emphasized that we are a local Polish government office.
We do not send spam.
Server statistics and logs are analyzed all the time.
Our MX server is clean, not listed at any blacklists https://mxtoolbox.com/SuperTool.aspx?action=blacklist%3a185.119.210.50&run=toolpage.
IP reputation is good.
The email server is not open relay.
IP has valid PTR (reverse DNS) and SPF records.
No suspicious activity - it's clean machine.
Our IP is only on Your blacklist (https://ipremoval.sms.symantec.com). Why?
We can't send very important e-mails to another government office who use Yours security systems.
Eg. log smtp[26473]: 2A6B82DF9: to=<***********@******>, relay=*******[****.***.***.**]:25, delay=363, delays=363/0.04/0.29/0, dsn=4.7.1, status=deferred (host *******[****.***.***.**] refused to talk to me: 554 5.7.1 You are not allowed to connect.
We have tried several times to ask to remove from Symantec email blacklist at IP Address Investigation Request page - and they are removed it - but after 1 day - IP was added again. I will remind you - in our mx server logs we have not found any suspect activity.
Please remove our MX server IP from Yours blacklist permamently.
Regards
Commune Office Raków
contact: urzad@rakow.pl