IP address is blacklisted

Hello,

According to MXToolbox, my IP address is blacklisted by JUNKMAILFILTER.  When I go to their site per MXToolbox http://ipadmin.junkemailfilter.com/remove.php, I check to see if the address is blacklisted and it says it is not.  My Exchange server SMTPSend log states:

"554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means."

Also, I suspect there is one account that is sending out spam.  Any suggestions on what to use to find out?

There are a few messages stuck in the queue.

Please advise.

Have a great day,

Don
GEMCCAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Simon Butler (Sembee)ConsultantCommented:
If you had a compromised account, you wouldn't have a few messages in the queues, you would have 1000s. A few in the queues is to be expected, most sites will have those, NDRs or OOTO from the spam that has got through.

Have you checked any of the major reputation sites? The one you have flagged isn't a major player (first I have heard of it and I have been working with email systems for over 10 years).

If you have a machine sending out spam, which is more likely, then blocking port 25 outbound for everything but your Exchange server will soon find them. The machine will fill up the logs very quickly.

Simon.
0
Bill WoodCommented:
You might also be in a block of blacklisted addresses. Sometimes a whole block will be blacklisted even if only one ip address is responsible. You can get more information by contacting the organization that is blacklisting you.
0
GEMCCAuthor Commented:
Hello,

I disabled the suspicious account and then a few hours later the "stuck" messages were sent.

Have a great day,

Don
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
GEMCCAuthor Commented:
Appears to have resolved the problem.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.