Spam Problem

Chris Coleman
Chris Coleman used Ask the Experts™
on
Hi Spam Expert,

                           we have an SBS 2008 server, suddenly outgoing emails (not all) are going to the SPAM box of the recepient - IE.  www recipients out side of the domain  .

The only thing thats changed recently is the ISP (we do not use pop3), the isp provide us with broadband services and a static IP address .

Oh and we put the usual updates on the server - SPAM filters etc, but I think this would only effect incoming mail which is not a concern

Any ideas


ChrisColeman.
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
You may have obtained a static IP that formerly belonged to a spammer and are blacklisted or even your ISP is blacklisted with his complete address range.
Apart from that, some necessary DNS adjustments (especially reverse DNS for mail servers) may have been ignored when you switched ISP.
Can you obtain the exact spam criteria that trigger at the receiving side?
Otherwise, can you give the exact new IP you are sending from?

Author

Commented:
Thanks for the prompt response -

Our NEW static IP is -  212.159.16.105.

The specific email addresses are on their ways to me now, although because there are a few (I know of four)  I doubt that this will yield any results.

My client was sending out quotations which did not arrive, or at least went only to Spam Boxes, therefore were not read - So he's none too happy.
 

Many Thanks.
CSIPComputingHead of IT
Commented:
I've just done a reverse DNS lookup on your IP address, and it's being returned as blank.

You need to get your ISP to add a Reverse IP Pointer to DNS for your IP address, and it needs to contain the FQDN of your mail server (i.e. mail.yourdomain.co.uk).

A lot of mail servers will reject mail completely from an IP address with no Reverse DNS Entry
Success in ‘20 With a Profitable Pricing Strategy

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden using our free interactive tool and use it to determine the right price for your IT services. Start calculating Now!

Jeffrey Kane - TechSoEasyPrincipal Consultant
Most Valuable Expert 2016
Top Expert 2014
Commented:
Actually, I see that there is a reverse entry for your IP but it's wrong (it is currently set to rjkflooring.plus.com) and needs to be set to mail.advancejoinery.co.uk.

This is what I found:  http://www.robtex.com/dns/remote.advancejoinery.co.uk.html#records

In addition to having your ISP correct the reverse DNS entry for your new IP  you may also want to add an SPF record to the public DNS (at hfcdns.com) for advancejoinery.co.uk.

Information on how to create an SPF record can be found here: http://www.openspf.org

Jeff
TechSoEasy
CSIPComputingHead of IT

Commented:
212.159.16.105 resolves to
"advancejoi3.pndsl.co.uk"
Top Level Domain: "co.uk"

Seems you reverse records are still replicating around.

However, just a though: are you using plunet's SmartHost to deliver your email for you?
If you are, their mail servers were blacklisted last week, and all sorts of mail delivery problems were apparent. If so, may I suggest you deliver your mail directly using DNS.

Author

Commented:
Hi ,

        Mail is sent through our web server which has an MX record to the static IP of the ISP, who send that IP address to the SBS server. Obviously the IP is used for other things, VPN, OWA, etc, but we will be forced to change it if the problem is not resolved.

I have modified the reverse DNS, the fact that it was pointing at the wrong company is not good, obviously.

I will monitor the situation for a few days before closing the ticket.

Many Thanks - ChrisColeman.

Chris.
CSIPComputingHead of IT

Commented:
Sorry, I was talking about your OUTBOUND mail delivery.

Make sure you are NOT using the plusnet SmartHost relay.plus.net as that currently has problems.

Your inbound mail has no effect on if your outbound mail is delivered or not.
Jeffrey Kane - TechSoEasyPrincipal Consultant
Most Valuable Expert 2016
Top Expert 2014
Commented:
Feel free to use this link to see how the outside world views your reverse DNS entry:
http://mxtoolbox.com/SuperTool.aspx?action=smtp%3amail.advancejoinery.co.uk

Jeff
TechSoEasy

Author

Commented:
Apologies for the delay - I have been waiting for the reverse DNS record to be fixed by Plusnet, but it looks like they're not going to change it - I shall ask again and maybe send them a link to experts-exchange?

Anyway the spam problem seems to have resolved it self, I am grateful for all of the responses to this question - It has been a bit of a learning curve.

Chris.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial