Email Security.cloud

 View Only
  • 1.  Please delist our server from bad reputation ip list.

    Posted Feb 13, 2024 09:36 AM

    Hello,

    Our email server is not listed on your "bad reputation ip list.", can you please check it because our customers are having trouble sending emails to some partners. The email server is being used to send a large number of subscription emails that are not spam, also there are no malware accounts and the server is clean. We are getting this error:


    This is the mail delivery agent at Symantec Email Security.cloud.

    I was unable to deliver your message to the following addresses:

    P*****ta@play.pl

    Reason: 521 5.2.1 Error: True Source IP has bad reputation

    The message subject was: test maila
    The message date was: Mon, 12 Feb 2024 13:14:28 +0100
    The message identifier was: 5D/64-26242-6AB0AC56
    The message reference was: server-13.tower-731.messagelabs.com!1707740069!285!1

    Please do not reply to this email as it is sent from an unattended mailbox.
    Contact your email administrator if you need more information, or
    instructions for resolving this issue.


    Arrival-Date: Mon, 12 Feb 2024 12:14:30 +0000
    Reporting-MTA: dns; server-2.bemta.az-a.eu-north-1.aws.ess.symcld.net

    Action: failed
    Final-Recipient: rfc822; P*****ta@play.pl
    Status: 5.2.1
    Diagnostic-Code: smtp; 521 5.2.1 Error: True Source IP has bad reputation
    Last-Attempt-Date: Mon, 12 Feb 2024 12:14:36 +0000


    Authentication-Results: mx.messagelabs.com; spf=pass 
      (server-13.tower-731.messagelabs.com: domain of golemo.pl designates 
      87.204.151.212 as permitted sender) smtp.mailfrom=golemo.pl; dkim=pass 
      (good signature) header.i=@golemo.pl 
      header.s=07105430-D1C3-11EB-B0AA-766C0D30AF24; dmarc=pass (p=reject 
      adkim=r aspf=r) header.from=golemo.pl
    X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrNIsWRWlGSWpSXmKPExsUSfmb6Fd1l3Kd
      SDeZnWWy6dpndgdFjwZfpTAGMUayZeUn5FQmsGZ0vm5gL1jNW/Jm6iqmBcSZjFyMXh5DAGkaJ
      SZvWsUI45xglJt/ZwdbFyAmRudqeDmKzCDhKrP3eCtbBIrCfRWJ/43HmLkYODgkBFYm5PzIg6
      oGafz/MhLA3MUq8++MIYvMK2Eg8XQtSDjJHVeLOrCNsEHFBiZMzn7CA2KIC8hL3b81gB7GZBU
      QkbjxqYQSxRQQkJHYdOMwEYrMJKEoc3zIdLC4sICyxZeZJVoh6M4murV2MELa2xLKFr5knMAr
      NQrJiFpKxs5C0zELSsoCRZRWjWXFqUVlqka6pXlJRZnpGSW5iZo5eYpVuol5qqW5eflFJhq6h
      XmJ5sV5qcbFecWVuck6KXl5qySZGYAykFKfM3sG4Zk+j/iFGSQ4mJVFes4vHU4X4kvJTKjMSi
      zPii0pzUosPMcpwcChJ8JqwnUoVEixKTU+tSMvMAcYjTFqCg0dJhNfvy8lUId7igsTc4sx0iN
      QpRmOODQv37mXmWLNr/15mIZa8/LxUKXHeEC6gSQIgpRmleXCDYGniEqOslDAvIwMDgxBPQWp
      RbmYJqvwrRnEORiVh3haQKTyZeSVw+14BncIEdMpVhxMgp5QkIqSkGpjyGf8aOl6sclt6ZBPj
      U58fkYw+3O7Pf5xm2rqV82VIqk7kKo4c2V+BhyMF/zQYH2h/PLOq8VNy8vvY08vEYucFFQTtK
      q1UlHmbWzGjcxXj/tld6hcFxERZnWeITZhj+dF0YmLDy5mGxy/cPKtwdscGxcQdTww3RXwor7
      h49/7fK/U3tls9XxQq1Mpm7Hh+Wu3vuQ+cJ3iuXqa/Ksi9R3RBaV1pRD1bco1LVf5+8Sbm1be
      19muWfZyl9u9gK8ON7kV8W//cETz8NJjvyOL24g0q4eErF75N+HN5tkH/Fes/paZTLmTbb69Y
      6Fi2272lUnW6xfqQZZ2+XnHr66x8sq3LZi24l/X7v/KzDUKmt0SUWIozEg21mIuKEwHNuRBfj
      gMAAA==
    X-Env-Sender: l*****n@golemo.pl
    X-Msg-Ref: server-13.tower-731.messagelabs.com!1707740069!285!1
    X-Originating-IP: [87.204.151.212]
    X-StarScan-Received:
    X-StarScan-Version: 9.110.2; banners=-,-,-
    Received: (qmail 10518 invoked from network); 12 Feb 2024 12:14:29 -0000
    Received: from unknown (HELO poczta.golemo.pl) (87.204.151.212)
      by server-13.tower-731.messagelabs.com with ECDHE-RSA-AES256-GCM-SHA384 encrypted SMTP; 12 Feb 2024 12:14:29 -0000
    Received: from localhost (localhost [127.0.0.1])
        by poczta.golemo.pl (Postfix) with ESMTP id 5EF3ECC14B7
        for <P*****ta@play.pl>; Mon, 12 Feb 2024 13:14:29 +0100 (CET)
    Received: from poczta.golemo.pl ([127.0.0.1])
     by localhost (poczta.golemo.pl [127.0.0.1]) (amavis, port 10032) with ESMTP
     id t96KGPE72mTI for <P*****ta@play.pl>;
     Mon, 12 Feb 2024 13:14:29 +0100 (CET)
    Received: from localhost (localhost [127.0.0.1])
        by poczta.golemo.pl (Postfix) with ESMTP id 35916CC14C3
        for <P*****ta@play.pl>; Mon, 12 Feb 2024 13:14:29 +0100 (CET)
    DKIM-Filter: OpenDKIM Filter v2.10.3 poczta.golemo.pl 35916CC14C3
    DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=golemo.pl;
        s=07105430-D1C3-11EB-B0AA-766C0D30AF24; t=1707740069;
        bh=A3Puu/7kDQsnllLUMTaFEjBBA4sZ4CXZQPLc53YqDN0=;
        h=Message-ID:Date:MIME-Version:To:From;
        b=cSV+EgoXbzCALkzw8QI8XkoOgXT2o9eknX/p27PTEqE10wIe4Xz0Z+H2qBfhAag1h
         UcnsbJoI1fELQNnPAO9+vxb5sWSbc9MonnpWWUMjeYmda2ECf/wZiIxQqfisZg3CUo
         nJfGWTtBuCUKLa6WZmyge4ebPn0JRWNvLbMsf7wjaHCHzpSWiZtZrtDmMv+m+1nY+g
         T5q55E4NTRg9CWV2RyAfCH9CvNfLPW/vRSO8fiwtND/P1bk2PgvOBl0OqxyY45HGYU
         8P/HZdoa6c4f11XuEFv1ZbaThRxidKm1jOlkUY6RmjsmevP75S66vHZJNPhxey2/nl
         uUqnJ2FqpDCWA==
    X-Virus-Scanned: amavis at golemo.pl
    Received: from poczta.golemo.pl ([127.0.0.1])
     by localhost (poczta.golemo.pl [127.0.0.1]) (amavis, port 10026) with ESMTP
     id zMw6j2zercWF for <P*****ta@play.pl>;
     Mon, 12 Feb 2024 13:14:29 +0100 (CET)
    Received: from [172.20.0.2] (unknown [217.8.114.60])
        by poczta.golemo.pl (Postfix) with ESMTPSA id 17F50CC14B7
        for <P*****ta@play.pl>; Mon, 12 Feb 2024 13:14:29 +0100 (CET)
    Message-ID: <3d4eda61-5c00-4329-afd9-6c57f6fbbfd5@golemo.pl>
    Date: Mon, 12 Feb 2024 13:14:28 +0100
    MIME-Version: 1.0
    User-Agent: Mozilla Thunderbird
    Content-Language: pl
    To: P*****ta@play.pl
    From: L******n <L******n@golemo.pl>
    Subject: test maila
    Content-Type: text/plain; charset=UTF-8; format=flowed
    Content-Transfer-Encoding: quoted-printable

    The email server is poczta.golemo.pl and the IP is 87.204.151.212. If possible, make it delist?

    Best regards,

    Andrzej



  • 2.  RE: Please delist our server from bad reputation ip list.

    Broadcom Employee
    Posted Feb 14, 2024 03:03 AM

    Hello,

    As you noted, your IP is not any on any bad list of ours.  We have accepted and processed your mail.  However, when we try to deliver it on to the next hop, that server is rejecting the message.  What you are seeing is us notifying you that the recipient server has rejected the message.  Therefore you will need to contact them to discuss delisting.

    I'm just guessing at this point, but from the sound of the message "True Source IP has bad reputation" it seems like they may be analysing the message headers to find the IP address which sent the message to us (yours, presumably), and is rejecting that.  But it's possible that logic is broken, depending how far back in the headers they look; eg I see a lot of 127.0.0.1 Received headers.