Link to home
Start Free TrialLog in
Avatar of creativenetworks
creativenetworksFlag for United States of America

asked on

AHBL Blocklist error

I just started having email send issues.  I went to Exchange Remote Connectivity Analyzer and ran tests on SMTP on my exchange server IP.  It returned the following error which, upon further research, indicates that some sort of change was made effective Jan. 1 2015?

Test Steps
       
      Attempting reverse DNS lookup for IP address 76.79.248.169.
       The Microsoft Connectivity Analyzer successfully resolved IP address 76.79.248.169 via reverse DNS lookup.
       
      Additional Details
      Performing Real-Time Black Hole List (RBL) Test
       The RBL test failed. Your IP address was found on one or more block lists.
       
      Additional Details
       
      Test Steps
       
      Checking Block List "SpamHaus Block List (SBL)"
       The address isn't on the block list.
       
      Additional Details
      Checking Block List "SpamHaus Exploits Block List (XBL)"
       The address isn't on the block list.
       
      Additional Details
      Checking Block List "SpamHaus Policy Block List (PBL)"
       The address isn't on the block list.
       
      Additional Details
      Checking Block List "SpamCop Block List"
       The address isn't on the block list.
       
      Additional Details
      Checking Block List "NJABL.ORG Block List"
       The address isn't on the block list.
       
      Additional Details
      Checking Block List "SORBS Block List"
       The address isn't on the block list.
       
      Additional Details
      Checking Block List "MSRBL Combined Block List"
       The address isn't on the block list.
       
      Additional Details
      Checking Block List "UCEPROTECT Level 1 Block List"
       The address isn't on the block list.
       
      Additional Details
      Checking Block List "AHBL Block List"
       The IP address was found on block list.
       
      Additional Details


***Need some help on what/how to get removed as when I go to their website it says you can no longer be removed?

Thx,
Avatar of John
John
Flag of Canada image

You need to find out what machines you have that are sending out spam. These exist or you would not be on a blacklist. Once found and removed, contact AHBL support, state your case with proof and ask to be removed.
Avatar of creativenetworks

ASKER

It's my internal mail server.  When I go to the website of the blocking entity, it says they made changes on Jan. 1 2015 and they can no longer "unblock" any Black Lists I'm on.  First time I've ever seen this.  I'm going here:  http://www.ahbl.org/ then enter the main site, then I go to the dropdown of Lookup/Removal and there's a hyperlink basically saying there's nothing that can be done anymore.  Pretty stumped by it all.
They must have a support page you can contact for assistance.
It further states:

As promised in April, on Jan 1st, 2015, i'll be wildcarding all zones no longer in operation - this includes rhsbl.ahbl.org, dnsbl.ahbl.org, and ircbl.ahbl.org.  This means that these services will return positive responses for any queries.

If you are still using these services, this may cause you to incorrectly tag e-mail as spam, or create other unintended consequences.  Fix and maintain your servers, now.  Do not contact us about 'removing' your domain or IP address from our lists, as there is nothing we can do for you.
What's funny is that it appears I have two customers who are rejecting my emails, however I'm not getting any NDR's.  And one that is rejecting is msn.

Oh and no support page that I can see.
I've searched their site hi and low and there is no solution for getting removed.  Dangdest thing I've ever seen.
SOLUTION
Avatar of John
John
Flag of Canada image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
From my research, it seems like effective Jan. 1st 2015, they are gone.  So that means that any Mail Servers that are using them are going to get False Positives.  NOT good!  I'm having a customer call their ISP and ask them to make SURE they are not using that specific blacklist and if they are, to please remove it, then I will retest.
Avatar of VB ITS
Look at creating a custom Send Connector on your Exchange server which will send emails to the problematic domain(s) through your iSP's smart host to get around this problem.
Can you clarify what a 'Smart Host' is?  I'm not familiar with this term or idea.

Thanks!
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
From what I could find, there is/was a blacklisting company that has closed it's doors.  It appears they had somewhat of an attitude as well (probably a 9 year old that didn't get that one extra Oreo).  In any event, when they closed shop, anything that was checked by their blacklist site was denied.  So if you purchased their blacklists, and didn't make any changes, it would check any and all emails coming in.  Because the response was 'not available' it failed.  Think of it like this.  abc.com sends an email to def.com.  def.com has been using the blacklists from this company.  def.com's email server sends a request asking if abc.com is listed as a blacklisted site.  The response is 'nothing'.  Assume that def.com's mail server assumes that if a request is not answered by the blacklisting company (in other words, def.com is asking for an approval of abc.com's email) and the approval does not come, def.com's mail server assumes it is blacklisted and kicks the email back.  And from what I can tell, there are MANY that used this companies blacklist site too.  Some....big phone and web companies.