Solved

Email not being delivered by Comcast and Google to some addresses

Posted on 2012-03-23
8
547 Views
Last Modified: 2012-05-29
I have a location served by Comcast.  I have a cable modem with an Apple Airport Extreme router.  The IP address provided by Comcast is 24.61.241.74.  Several computers are on the network.  Most use Mac OSX Lion.  But, we also have OSX Snow Leopard and Windows XP on Parallels.

About a month ago, all OSX Mail clients using smtp.comcast.net and smtp.gmail.com would send email to some addresses and the recipients never received the e-mail.  There are no error messages.  Email to Gmail, comcast, yahoo, etc. are delivered.  Email to users at companies that own their own domain like tfarm.com are not delivered.

Eudora on Windows XP worked perfectly all the time.

If I take a Mac laptop to another location served by Comcast, the email works perfectly.  I even brought a Mac laptop from another location to the "bad" location, and its email did not arrive at the recipient.  So, it is something specific to the IP address at the bad location: 24.61.241.74.  We have had the IP for a long time even though it is a dynamic IP.

This is a normal home that does not send any spam.

What on earth could be going wrong?  Is it an smtp mail spam filter?

Now, here is some extra info.  I removed the router and connected one Mac directly to the cable modem.  This forced a new IP address.  Miraculously, email worked perfectly.  So, I swapped the Airport Extreme with another I had.  This forced a new IP.  Guess what, the email works perfectly.

So, the problem is tied directly to the IP address and I guess Mac email client.  Can anyone explain what might be going on.  Comcast was no help.

It has to be an IP block combined with the Mac email headers I think.
0
Comment
Question by:tfex
  • 4
  • 4
8 Comments
 
LVL 39

Expert Comment

by:noci
Comment Utility
Have you checked the blacklist providers?

This is what comcast has registered for your address block.
http://www.spamhaus.org/pbl/query/PBL1523073 location.
ALL mail needs to be forwarded through the comcast server...

So you may need to check if you resolve mailsending yourself or not.
0
 

Author Comment

by:tfex
Comment Utility
We always use authenticated smtp.  We also use SSL and use the standard ports.

I have Comcast at two other sites that we use smtpauth.earthlink.net to send mail for our own domain.  We have never had a problem there.  We have problems only at this one site and it is using both smtp.comcast.net and smtp.gmail.com.

I took my laptop to the "bad" site and sent mail to all the e-mail addresses that failed using my smtpauth.earthlink.net.  All worked properly.

So, I am not sure what is different about earthlink in this equation.  Or for that matter, Eudora on windows (success) and Mac Email (fail).

Thank you for the insight, but it does not solve the problem.  The bigger issue is if this reoccurs, I want to know how to get this fixed without resorting to changing routers or MAC Address cloning to play IP roulette.
0
 
LVL 39

Expert Comment

by:noci
Comment Utility
The IP address you mentioned is put on a so called blacklist. If the receiver of mail checks that blacklist, it might block the mail.
If it doesn;t use this blacklist it might let mail pass.
0
 

Author Comment

by:tfex
Comment Utility
How do I check the blacklists?
0
6 Surprising Benefits of Threat Intelligence

All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

 
LVL 39

Accepted Solution

by:
noci earned 500 total points
Comment Utility
There are many blacklist organisations, I gave one example before (spamhaus).
Others are DNSBL, SORBS, spamcop etc.
And they all have various lists that are about known or suspected sources of spam.
And some providers subscribe all their uses on dialup lines f.e. to such blacklists because they want users to use their central servers as smarthost.

MXtoolbox.com somewhat indexes on the best known databases so this URL:
http://www.mxtoolbox.com/SuperTool.aspx?action=blacklist%3a24.61.241.74
gives an index of your address and where it is known, as does:
http://www.blacklistmaster.com/

Here is a report about BL's  http://www.sdsc.edu/~jeff/spam/Blacklists_Compared.html or services that can tell when when you enter a blacklist
0
 

Author Closing Comment

by:tfex
Comment Utility
Thank you very much.  Now I have an idea of where to start looking if this happens on the new IP address we got by changing the MAC address for the router.  I guess if it happens again, there is some virus or other malware at work.  We run current anti-virus and spyware filters so that should not be the case.
0
 

Author Comment

by:tfex
Comment Utility
The new IP address has now been flagged as spam.  I simply cannot understand why.  There is nothing spam-like happening from this IP.  Anyway, I have configured a work around for me to receive on my earthlink account.  In the webmail interface, I set the spam preferences to whitelist the address.  I also noticed that the default action for spam is to delete it.  I have changed this to store it in the junk folder.  This will allow me to monitor the spam to see if other senders are having the same problem.

There does not seem to be a well defined method to get off of spam lists.  There is also no good description of why the IP is on the list in the first place.
0
 
LVL 39

Expert Comment

by:noci
Comment Utility
The problem is there is no well defined description of Spam.
The best one is: If the receiver doesn't want it it is spam.

If enough receivers flag it as spam even legitimate mail will become spam.
If too may receivers are with one ISP there is a larger risk of becoming a spam sender because too many mails arrive in too short a time frame, from the same source.

Also the real spammers do their utmost best to look like legitimate mail, at least from the perspective of automated counter-measures.
And in filtering spam is needs to be a balance between avoiding and accepting the existence of false positives [ legit mail assumed to be spam and spam assumed to be legitimate ].
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

If you are using Mac OS X and have a large number of login items set up in accounts, under system preferences, you may find that your computer is sluggish and unresponsive during startup until everything is done launching. Another problem that a…
There was an incident about the POP3 issue for the double read receipts and delivery receipts in Exchange 2013.  There was huge research been done and found solution for the duplicate mails. Especially when the user gets  duplicate mails.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
This video explains how to create simple products associated to Magento configurable product and offers fast way of their generation with Store Manager for Magento tool.

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

15 Experts available now in Live!

Get 1:1 Help Now