ip reputation investigation doesn't work

[Walter Russo]

Hi Community,

I want to know how to delist my entire subnet 2.59.168.0/24 from **** because I have switched to new subnet last August but there is no way to delist entire subnet or also single ip from ip reputation investigation portal. I think reputation data is not update because my entire infrastructure is clean. My colocation provider Worldstream has tried to delist entire subnet without success.

I have worked for Symantec in Italy for some years but my contacts don't work anymore in Broadcom and it is difficult to solve the situation.

Unfortunately I'm not a customer but I'm a service provider.

Can you help me?

Thanks in advance.

Best regards

Walter

[Walter Russo]

Someone can make a request to delist my entire subnet 2.59.168.0/24 from Brightmail interface?

Thanks in advance.

Best regards

Walter

[alexander-smg]

Nope. Only Broadcom can.

[Indra Susanto]

We also experiencing this issue.

We are on 2 weeks straight, and no update with the Investigations as our IP Address still listed here.
Any Updates?

[alexander smg]

Call

[Art_P]

See my response to the original post.

------------------------------
---------------------------------------------
Support Engineer
* Integrated Cyber Defense Exchange
* Messaging Gateway
* Packet Shaper
Symantec Enterprise Division
Broadcom Software
------------------------------

[Thomas Anderson]

Are you a customer?  If you had a case open for 2 weeks straight and didn't get any response, please let me know.
Note that posting a quest/request in a forum is NOT the same as opening a case with customer support.

This whole IP reputation thing really should be an FAQ item (if this forum has such a thing):
If you are NOT a customer and your IP, or IPs, are getting a reputation verdict, then you MUST find someone who IS a customer that wants to receive your email and have them open a case with support.

[alexander smg]

Well I’m a customer. Please remove the range block list please.

[Art_P]

As I said, the range is not blocked. Please refrain from further posting to the forums where the issue is not the one you are reporting and/or you do not have factual, evidence based responses - it would be very much appreciated. Thank you.

------------------------------
---------------------------------------------
Support Engineer
* Integrated Cyber Defense Exchange
* Messaging Gateway
* Packet Shaper
Symantec Enterprise Division
Broadcom Software
------------------------------

[Art_P]

Your whole subnet is not on the Global Bad Sender list. For instance, if I look up 2.59.168.150, it has no bad reputation. However, if I look up 2.59.168.20 it shows:

• The host has been observed sending spam in a format that is similar to snow shoe spamming techniques.
• The host is unauthorized to send email directly to email servers.

Which typically means that the IP has had detections associated with it in the past and it is very likely not a static IP, so does not have confidence. You can request removal of IPs with the above detections and they will be removed, but they often get re-listed quickly due to being associated with a block of IPs that problematic activity is detected from (snowshoe spam attacks). The best recourse is to use a business class static IP (to get rid of the low confidence "The host is unauthorized to send email directly to email servers."), or otherwise continue requesting delisting.

------------------------------
---------------------------------------------
Support Engineer
* Integrated Cyber Defense Exchange
* Messaging Gateway
* Packet Shaper
Symantec Enterprise Division
Broadcom Software
------------------------------

[alexander smg]

Please remove the range from bad list in Symantec

[DANTE WILLIAMS]

Hi. I've got 4 IP's blocked by Symantec and this seems not working for at least 6 weeks: https://ipremoval.sms.symantec.com/lookup

@alexander smg I wonder if you get removed from the Symantec ****.

Thanks

[alexander smg]

U want me to try?