Mail Server IP address is getting blocked by Spamhause

Question

I have use my mail server public IP address for years. But now it is blocked by spamhause. But no special no illegal activities happened on my network. We have very good monitoring solutions and no any suspicious activity is detected.

We have exchange and 0365 environment. When i contact them, they don't provide answers but we were able to unblock by requesting this issue. How can i find exact reason of this issue.

Have you found **which** Spamhaus list you were on? That would likely help guide the direction to look in. — davidgo, Jun 06 '20 at 07:42
`We have exchange and 0365 environment` - Where are your mailboxes? Where does your outbound email go out from, Exchange or Office 365? — joeqwerty, Jun 06 '20 at 12:29
What does it say when you put your IP into https://www.spamhaus.org/lookup/ — davidgo, Jun 07 '20 at 10:52
@davidgo now it is not blocked. We requested to unblocked. But our IP address was blocked multiple times in this month — serverAdmin123, Jun 07 '20 at 13:56

score 0 · Answer 1 · edited Jun 11 '20 at 10:02

According to the Spamhaus documentation "Spamhaus Frequently Asked Questions(My mail server is listed on the SBL as a phish spam source, what should I do ?)", if your mail server was listed on the SBL, maybe the blacklist issue was caused by the following common reasons:

The spam was sent as authenticated mail, injected from an external IP using a valid username and password...
The spam was sent from an internal PC which has malware.
The spam was not authenticated and it came from a web server in your LAN, and the spammers injected the message via HTTP using a security hole on the web server...
The spam was not authenticated and it was injected via SMTP from outside("open relay" configuration)...

Besides, you could use the message trace to see if there were some "Failed" emails, if so, you could open the entries to check the reasons why the email deliveries were failed, maybe these reasons made your server be added in the SBL.

Mail Server IP address is getting blocked by Spamhause

1 Answers1