Bogus helo hallmark.com?

We are unable to send email to domains hosted by GoDaddy. The bounce notice we receive is below.

Following this thread, the FQDN is now "mail.lamarcalandry.com" http://www.experts-exchange.com/OS/Microsoft_Operating_Systems/Server/2003_Server/Q_23613515.html

Following this thread, I believe our PTR record is correct. Mail.lamarcalandry.com (64.199.233.178) is our mail server. http://www.experts-exchange.com/Software/Server_Software/Email_Servers/Exchange/Q_24473082.html

Another user had the same bounce message trying to send to another domain. What else could be the problem?
Your message did not reach some or all of the intended recipients.
 
      Subject:	RE: xxx
      Sent:	7/8/2009 7:25 AM
 
The following recipient(s) cannot be reached:
 
      xxx@ip-assure.com on 7/8/2009 7:25 AM
            There was a SMTP communication problem with the recipient's email server.  Please contact your system administrator.
            <lamarcalandry.com #5.5.0 smtp;553 Bogus helo hallmark.com. <http://unblock.secureserver.net/?ip=64.199.233.178>>

Open in new window

pixelchefAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

MesthaCommented:
There is nothing wrong with the DNS setup that I can see.
Have you been through their unblock process?

Simon.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
pixelchefAuthor Commented:
When I googled this error, some people thought it was a suspicious webpage. Should I go ahead and fill out the form?
0
MesthaCommented:
SecureServer is GoDaddy's email system. If you nslookup the server then you will get the IP address, if you whois the IP address you will find it belongs to GoDaddy. The web page is coming off their NDR. I don't know why people think it is suspicious.

Simon.
0
Webinar: What were the top threats in Q2 2018?

Every quarter, the WatchGuard Threat Lab releases an Internet Security Report that describes and analyzes the top threat trends impacting companies around the world. Are you ready to learn more about the top threats of Q2 2018? Register for our Sept. 26th webinar to learn more!

pixelchefAuthor Commented:
I submitted the unblock request.

It seemed suspicious to me because going to secureserver.net gives a 404, GoDaddy's name does not appear on the site, it asks for my contact info (which is legitimate for this type of form, but could be equally bad for a spammer's form).
0
nck534Commented:
Do not fill out this form, it is most likely run by spammers or a malicious person / system.   I have had the same issues with this before.  Contact godaddy about the issue, also sign your domain up with MxTool Box you will be able to see if your domain has been black listed and setup alerts as to your domains status, you will also be able to do lookups on MX Records.    http://www.mxtoolbox.com
0
MesthaCommented:
nck534 - you are wrong. The form is not run by spammers. It is hosted on GoDaddy's servers to facilitate the removal of an IP address from their internal blacklist. It is the address given out by the NDR from their own email servers.

Simon.
0
pixelchefAuthor Commented:
Too late... already submitted the form...

I already monitor our domain with mxtoolbox, and we have a clean bill of health there.

I guess time will tell what happens. :/
0
nck534Commented:
Never go about unblocking your domain online if at all possible.  U should do this over the phone or with direct messaging or e-mail to the reputible hosts or providers technical staff.  Do not give out your networks information, that will make you a target.  This site could very well be from godaddy but it could also be something else.  ether way I would never just give my info to a site ever.
0
MesthaCommented:
Its very easy to verify if the site is genuine or not. Furthermore a lot of companies will not talk to you unless you are a customer - they will tell you to use the form because it is an automated process.

You don't need to add network information to be a target, most IP addresses are scanned regularly. Spammers maintain their own lists of hosts that have email servers.

I am more suspicious of open relay testing sites than these sorts of sites.

Simon.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Email Protocols

From novice to tech pro — start learning today.