FalconTwo
asked on
Blacklisted on Backscatter
Using exchange 2003
Incoming mail is router via a hosting company baracuda to my exchange
Hello for some reason some of my e-mails are being rejected wit the following <webmail.mydomain.com #5.5.0 smtp;550 550
Dynamic/zombied/spam IPs blocked. Write
blockedbyearthlink@abuse.e
Reporting-MTA: dns; my-email-server.fwd.local
Final-Recipient: RFC822; outsideuser@domain.com
Action: failed
Status: 5.5.0
X-Supplementary-Info: <webmail.mydomain.com #5.5.0 smtp;550 550 Dynamic/zombied/spam IPs blocked. Write blockedbyearthlink@abuse.e
X-Display-Name: oking@stonehurst.net
form backscatter.org I get this
This IP IS CURRENTLY LISTED in our Database.
Please note that this listing does not mean you are a spammer, it means your mailsystem is either poorly configured or it is using abusive techniques.
This kind of abuse is known as BACKSCATTER (Misdirected Bounces or Misdirected Autoresponders or Sender Callouts). Click the links above to get clue how and why to stop that kind of abuse.
To track down what happened investigate your smtplogs near 09.02.2011 22:23 CET +/-1 minute.
You will either find that your system tried to send misdirected bounces or misdirected autoresponders to claimed but in reality faked senders, or your system tried sender verify callouts against our members near that time.
So you should look for outgoing emails that have a NULL SENDER or POSTMASTER in MAIL FROM.
Reading your logs carefully it shouldn't be a big deal to figure out what caused or renewed your listing.
History:
23.06.2007 23:01 CEST listed
22.07.2007 02:15 CEST expired
23.07.2007 11:11 CEST listed
21.12.2007 23:30 CET expired
19.06.2009 18:06 CEST listed
17.07.2009 18:25 CEST expired
18.12.2009 14:49 CET listed
15.01.2010 15:25 CET expired
28.01.2011 10:29 CET listed
Incoming mail is router via a hosting company baracuda to my exchange
Hello for some reason some of my e-mails are being rejected wit the following <webmail.mydomain.com #5.5.0 smtp;550 550
Dynamic/zombied/spam IPs blocked. Write
blockedbyearthlink@abuse.e
Reporting-MTA: dns; my-email-server.fwd.local
Final-Recipient: RFC822; outsideuser@domain.com
Action: failed
Status: 5.5.0
X-Supplementary-Info: <webmail.mydomain.com #5.5.0 smtp;550 550 Dynamic/zombied/spam IPs blocked. Write blockedbyearthlink@abuse.e
X-Display-Name: oking@stonehurst.net
form backscatter.org I get this
This IP IS CURRENTLY LISTED in our Database.
Please note that this listing does not mean you are a spammer, it means your mailsystem is either poorly configured or it is using abusive techniques.
This kind of abuse is known as BACKSCATTER (Misdirected Bounces or Misdirected Autoresponders or Sender Callouts). Click the links above to get clue how and why to stop that kind of abuse.
To track down what happened investigate your smtplogs near 09.02.2011 22:23 CET +/-1 minute.
You will either find that your system tried to send misdirected bounces or misdirected autoresponders to claimed but in reality faked senders, or your system tried sender verify callouts against our members near that time.
So you should look for outgoing emails that have a NULL SENDER or POSTMASTER in MAIL FROM.
Reading your logs carefully it shouldn't be a big deal to figure out what caused or renewed your listing.
History:
23.06.2007 23:01 CEST listed
22.07.2007 02:15 CEST expired
23.07.2007 11:11 CEST listed
21.12.2007 23:30 CET expired
19.06.2009 18:06 CEST listed
17.07.2009 18:25 CEST expired
18.12.2009 14:49 CET listed
15.01.2010 15:25 CET expired
28.01.2011 10:29 CET listed
ASKER
I have recipient filtering enabled
ASKER
I also saw the link you suggested, I have all the correct settings in place hence the reason why I am stumped
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Yes I will contact them now
ASKER
Yes we are, I just sent an e-mail explaining the situation to them.
Please enable Recipient Filtering to cure the problem:
http://www.msexchange.org/tutorials/Sender-Recipient-Filtering.html