reason: 554 5.7.1 Rejected [IP address] SPAM Not Welcome here : 554

May 17, 2008 09:31am pdt

1. jar3817 19,165
2. Nopius 18,975
3. RaulDias 16,875
4. PsiCop 16,575
5. _jesper_ 10,600
6. war1 9,100
7. kieran_b 8,000
8. fgrushevsky 6,290
9. grblades 5,500
10. hielo 5,375
11. mwecompu... 4,500
12. kenfcamp 4,150
13. nplib 4,000
14. Abs_jaipur 3,000
15. Bibliophage 2,800
15. Norush 2,800

1. jlevie 347,626
2. PsiCop 243,064
3. anfi 85,387
4. jar3817 64,574
5. Nopius 64,125
6. kenfcamp 47,413
7. markt9 39,546
8. Sembee 28,311
9. war1 25,775
10. it_alche... 25,390
11. samri 25,291
12. grblades 22,095
13. _jesper_ 20,800
14. HalldorG 18,447
15. ygoutham 17,675

09.14.2004 at 01:35PM PDT, ID: 21131071

	[x] Attachment Details

[x]

The Solution Rating System

With so many solutions, how can you tell which solutions are most likely to help you and which ones are not? To provide you with a tool to use, we rate our solutions based on various elements that most accurately determine if a solution is a quality solution. To explain what factors affect the solution rating, here are the elements we take into consideration when formulating our solution rating.

The Grade of the Solution
The Zone Rank of the Expert Providing the Solution
The Number of Author and Expert Comments
The Number of Experts Contributing
The Feedback of the Community

Your Input Matters
Because of the way the system is set up, the most important variable in this equation is you. As a member of Experts Exchange, you are able to cast your vote on the quality of the solutions in regard to how complete, accurate, helpful and easy to understand each solution is. When you provide your feedback, each rating is adjusted accordingly. So, if you see a solution that has a poor rating that you think is a good solution, let us know by rating it. As you do, the rating will be adjusted and will become more accurate for other members of our site.

If you have any suggestions that you would like to make for our rating system, please ask a question in the Suggestions Zone of Community Support.

Thank you!

8.4

reason: 554 5.7.1 Rejected [IP address] SPAM Not Welcome here

Zone: SendMail Email Server

Tags: 554

I don't know why even some simple text messages are bounced back as SPAMs from our email server?. We installed Spamassassin 2.42-3. Clients are complaining abt keep getting bounced emails. We are not receiving them. I am new to this.

I attached one of the bounced email.
------------------------------------------------------------------------------------------

From: Mail Delivery Subsystem <MAILER-DAEMON@XXX.net>
Date: Tue Sep 14, 2004 10:56:02 AM bla bla
To: <user@domain1.org>
Subject: Returned mail: see transcript for details

The original message was received at Tue, 14 Sep 2004 10:55:56 -0400
from xx.yy.zzz.net [IP Address]

----- The following addresses had permanent fatal errors -----
<abc@domain2.org>
(reason: 554 5.7.1 Rejected [IP address] SPAM Not Welcome here)

----- Transcript of session follows -----
... while talking to mail.domian2.org.:

MAIL From:<user@domain1.org>

<<< 554 5.7.1 Rejected [IP address] SPAM Not Welcome here
554 5.0.0 Service unavailable
Reporting-MTA: dns; xx.yy.zzz.net
Received-From-MTA: DNS; xx.yy.zzz.net
Arrival-Date: Tue, 14 Sep 2004 10:55:56 -0400

Final-Recipient: RFC822; user@domain1.org
Action: failed
Status: 5.7.1
Diagnostic-Code: SMTP; 554 5.7.1 Rejected [IP address] SPAM Not Welcome here
Last-Attempt-Date: Tue, 14 Sep 2004 10:56:02 -0400
-------------------------------------------------------------------------------------------------

Why even simple messages get bounced back? Any way to prevent it?

Thanks

Start your free trial to view this solution

Question Stats

Zone: Networking

Question Asked By: karthikeyanTP

Solution Provided By: jlevie

Participating Experts: 2

Solution Grade: A

Translate:

Loading Advertisement...

Microsoft

Internet Protocols
Applications

Development
OS

Hardware
Windows Security

Apple

Operating Systems
Hardware

Programming
Networking

Software

Internet

Search Engines
File Sharing
WebTrends / Stats
Spy / Ad Blockers

Web Browsers
New Net Users
Web Development
Chat / IM

Anti Spam
Web Servers
Anti-Virus
Email Clients

Gamers

Tips
Online / MMORPG
Puzzle
Emulators

Action / Adventure
Role Playing
Consoles
Game Programming

Strategy
Sports
Misc
Computer Games

Digital Living

Hardware
New Net Users
New Users

Software
Digital Music
Gaming World

Home Security
Apple
Networking Hardware

Virus & Spyware

Vulnerabilities
IDS
Encryption
Anti-Virus

Operating Systems Security
Software Firewalls
WebApplications
Cell Phones

Operating Systems
Internet
Hardware Firewalls

Hardware

Handhelds / PDAs
Displays / Monitors
Components
Networking Hardware

Peripherals
Laptops/Notebooks
Storage
Servers

Desktops
New Users
Misc
Apple

Software

System Utilities
Industry Specific
Network Management
Photos / Graphics
Page Layout
VMWare
Misc
Web Development

OS
CYGWIN
Voice Recognition
Message Queue
Quality Assurance
Security
Firewalls
MultiMedia Applications

Development
Database
Office / Productivity
Business Management
OS/2 Apps
Server Software
Internet / Email

ITPro

OS
Storage
Encryption
Operating Systems Security
Apple Hardware
Laptops & Notebooks
Servers
Networking Hardware
Peripherals

Devices
Displays / Monitors
WebTrends / Stats
Search Engines
Firewalls
WebApplications
IDS
Vulnerabilities
Email Clients

File Sharing
Spy / Ad Blockers
Web Browsers
Web Servers
Networking
Anti-Virus
Chat / IM
Anti Spam

Developer

Web Servers
Web Browsers
Game Programming
Dev Tools
Industry Specific
Office / Productivity

Database
CYGWIN
Web Development
Search Engines
File Sharing
WebTrends / Stats

Programming
Content Management
Application Servers
Protocols

Storage

Removable Backup Media
Storage Technology
Servers

Grid
Remote Access
Backup / Restore

Misc
Hard Drives

Miscellaneous
Security
Development
Linux
VMWare

MainFrame OS
Unix
Apple
OS / 2
AS / 400

BeOS
Microsoft
VMS / OpenVMS

Database

Oracle
Miscellaneous
MySQL
Software
Sybase
Contact Management
PostgreSQL
Data Manipulation
Clarion
InterSystems Cache

Siebel
MUMPS
OLAP
SQLBase
SAS
GIS & GPS
4GL
Berkeley DB
DB2
Informix

Interbase / Firebird
FoxPro
Reporting
LDAP
Filemaker Pro
MS SQL Server
dBase
MS Access

Security

Misc
Web Browsers
Software Firewalls
Operating Systems Security
File Sharing

Spy / Ad Blockers
Vulnerabilities
WebApplications
IDS
Anti-Virus

Encryption
Anti Spam
Email Clients
VPN
Chat / IM

Programming

Editors IDEs
Installation
Handhelds / PDAs
Multimedia Programming
System / Kernel

Algorithms
Game
Signal Processing
Project Management
Open Source

Database
Misc
Languages
Processor Platforms
Theory

Web Development

Scripting
Blogs
Web Servers
Software
Search Engines
Web Graphics
Images

Internet Marketing
Images and Photos
Components
Document Imaging
Web Languages/Standards
Illustration
WebApplications

Fonts
WebTrends / Stats
Authoring
Digital Camera Software
Miscellaneous

Networking

Protocols
Apple Networking
Network Management
Message Queue
Application Servers
Content Management
File Servers
Email Servers
Misc
Java Editors & IDEs

Wireless
Networking Hardware
Backup / Restore
System Utilities
ISPs & Hosting
Web Servers
Storage Technology
Removable Backup Media
Servers
Broadband

Grid
OS / 2
Novell Netware
Unix Networking
Windows Networking
Security
Telecommunications
Operating Systems
Linux Networking

Other

Community Advisor
Lounge
Community Support
New Net Users

Philosophy / Religion
Math / Science
Miscellaneous
URLs

Expert Lounge
Politics
Puzzles / Riddles

Community Support

Suggestions
New to EE
New Topics
Community Advisor

CleanUp
Announcements
General

Feedback
Input
EE Bugs

09.14.2004 at 03:38PM PDT, ID: 12060086

Rank: Wizard

jlevie:

It is hard to say anything intelligent about this without knowing:

o What OS
o Where your copy of SpamAssassin came from
o What xx.yy.zzz.net [IP Address] is
o Whether SpamAssassin is being run stand-alone or from something like MIMEdefang, MailScanner, etc.

I'd hazard a guess, and it is only that at this point, that xx.yy.zzz.net is black listed somewhere and SpamAssassin is doing RBL checks.

09.14.2004 at 03:43PM PDT, ID: 12060120

karthikeyanTP:

o What OS

Redhat Linux 7.1

o Where your copy of SpamAssassin came from

the client emailed to us and I just posted here

o What xx.yy.zzz.net [IP Address] is

I put xx.yy.zz.net and [IP address] to protect web address and actual IP address.

o Whether SpamAssassin is being run stand-alone or from something like MIMEdefang, MailScanner, etc.

It is run with sendmail and SpamAssassin is run as Mail scanner.

Does it help?

09.14.2004 at 05:37PM PDT, ID: 12060572

Rank: Wizard

jlevie:

> the client emailed to us and I just posted here

I presume you mean the message. I'm interested in where you downloaded the SpamAssassin package from.

> I put xx.yy.zz.net and [IP address] to protect web address and actual IP address.

I realize that's why you hid the data, but do do any checking on why SpamAssassin rejected the message we have to know what the real data is for the source of the message. Note that releasing that data doesn't expose the client's email address, only the IP of the system they are sending the email from. So there's no real risk.

09.15.2004 at 05:56AM PDT, ID: 12063972

karthikeyanTP:

Hai jlevie,

>I'm interested in where you downloaded the SpamAssassin package from.

The person who worked before me did all the installation. I don't know from where he downloaded. I very much hope that he got it from reliable source - spamassassin.org. It is working good. Only thing is, some geniune messages are returned back as SPAMs.

>I realize that's why you hid the data, but do do any checking ......................

See if the following data help you. I used clientDomain and ourDomain for more readability. Let me know if you need anything.

From: Mail Delivery Subsystem <MAILER-DAEMON@mxsf26.cluster1.charter.net>
Date: Tue Sep 14, 2004 10:56:02 AM America/Detroit
To: <client@clientDomain.org>
Subject: Returned mail: see transcript for details

The original message was received at Tue, 14 Sep 2004 10:55:56 -0400
from mxip06a.cluster1.charter.net [209.225.28.136]

----- The following addresses had permanent fatal errors -----
<ourEmail@ourDomain.org>
(reason: 554 5.7.1 Rejected 209.225.28.226 SPAM Not Welcome here)

----- Transcript of session follows -----
... while talking to mail.ourDomain.org.:

MAIL From:<client@clientDomain.org>

<<< 554 5.7.1 Rejected 209.225.28.226 SPAM Not Welcome here
554 5.0.0 Service unavailable
Reporting-MTA: dns; mxsf26.cluster1.charter.net
Received-From-MTA: DNS; mxip06a.cluster1.charter.net
Arrival-Date: Tue, 14 Sep 2004 10:55:56 -0400

Final-Recipient: RFC822; ourEmail@ourDomain.org
Action: failed
Status: 5.7.1
Diagnostic-Code: SMTP; 554 5.7.1 Rejected 209.225.28.226 SPAM Not Welcome here
Last-Attempt-Date: Tue, 14 Sep 2004 10:56:02 -0400

Thanks,

09.15.2004 at 08:59AM PDT, ID: 12066319

Rank: Wizard

jlevie:

I'm sorry, but without full disclosure I can't tell where this message was from or to. All I can say from the above is that a mail server at charter.net objected to the message. It isn't possible from that bounce to tell why.

09.15.2004 at 09:15AM PDT, ID: 12066514

karthikeyanTP:

Hai jlevie,

Thanks.

I agreed that mail server at charter.net objected to the message. Some clients (who tried to sent email to us) from Italy said that their email returned back to them. Is there anything that I need to configure from my side so that geniune messages (not SPAMS) gets through Spamassassin?

09.15.2004 at 10:10AM PDT, ID: 12067245

Rank: Wizard

jlevie:

Since it was Charter's servers that blocked the message before they made it to your mail server, there's nothing that you could do with your config to affect that other than arrainging for mail to be delivered directly to your server and bypass Charter.

Accepted Solution

09.15.2004 at 10:12AM PDT, ID: 12067266

cgrey:

Is SpamAssassin running as a milter? If not, I don't believe it's being rejected by Spam Assassin. This looks like something in access.db or another milter or even a dnsrbl configured within sendmail.mc. Have you looked in your access file and sendmail.mc to see what other controls are being used?

09.15.2004 at 03:47PM PDT, ID: 12070418

karthikeyanTP:

Thanks jlevie

20080236-EE-VQP-29