Email problem again ... Help please

[FaerieB]

Hi guys ... I seem to be having problems with my email account again. A customer contacted me and I responded. My email bounced back with this message and an attachment:

(reason: 554 RBL rejection: http://www.spamhaus.org/query/bl?ip=64.12.207.145)

----- Transcript of session follows -----
... while talking to mx00.1and1.co.uk.:
<<< 554 RBL rejection: http://www.spamhaus.org/query/bl?ip=64.12.207.145
... while talking to mx01.1and1.co.uk.:
<<< 554 RBL rejection: http://www.spamhaus.org/query/bl?ip=64.12.207.145
554 5.0.0 Service unavailable

[FONT=Tahoma, Verdana, Arial, Sans-Serif]I tried to forward it to the customer asking them did they know what it was about and it came back with this message... while talking to mk-inboundfilter-2-a-1.b2b.tiscali.co.uk.:<<< 554-mk-inboundfilter-2-a-1.b2b.uk.tiscali.com<<< 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.... while talking to mk-inboundfilter-4-a-1.b2b.tiscali.co.uk.:<<< 554-mk-inboundfilter-4-a-1.b2b.uk.tiscali.com<<< 554 Your access to this mail system has been rejected due to the sending MTA's poor reputation. If you believe that this failure is in error, please contact the intended recipient via alternate means.... while talking to mk-inboundfilter-3-a-1.b2b.tiscali.co.uk.:<<< 554-mk-inboundfilter-3-a-1.b2b.uk.tiscali.com<<< 554 Sorry, I am not accepting mail from 64.12.207.145 due to its poor reputation or lack of a DNS PTR record.... while talking to mk-inboundfilter-1-a-1.b2b.tiscali.co.uk.:<<< 554-mk-inboundfilter-1-a-1.b2b.uk.tiscali.com<<< 554 Sorry, I am not accepting mail from 64.12.207.145 due to its poor reputation or lack of a DNS PTR record.554 5.0.0 Service unavailable[FONT=Tahoma, Verdana, Arial, Sans-Serif][/FONT]
.AOLWebSuite .AOLPicturesFullSizeLink { height: 1px; width: 1px; overflow: hidden; } .AOLWebSuite a {color:blue; text-decoration: underline; cursor: pointer} .AOLWebSuite a.hsSig {cursor: default}[/FONT]
.AOLWebSuite .AOLPicturesFullSizeLink { height: 1px; width: 1px; overflow: hidden; } .AOLWebSuite a {color:blue; text-decoration: underline; cursor: pointer} .AOLWebSuite a.hsSig {cursor: default}

 

[KM-Tiger]

Is AOL your service provider?

 

[FaerieB]

Yes ........... and it was hacked into last year x

 

[FaerieB]

Should have mentioned I contacted the customer first and they got my first email :| x

 

[bediwin]

Your IP address has appeared on a blacklist because it's thought to be sending spam. As a result, you'll have trouble sending email to anyone who uses these blacklists - not just this one customer.

It could be that your computer is sending out spam as a result of a viral infection (which would explain this), but the address will be allocated dynamically so even if you do find something, that doesn't mean it was your computer caused that IP address to get blacklisted. It could be any AOL customer.

Really your best bet is to contact your ISP - AOL in this case. They're going to be in a much stronger position to resolve the blacklist issue because they risk losing customers if their customers can't send email.

I don't see it being resolved that quickly, so if you need to get in touch with the customer urgently you might be well advised to call them.

 

[FaerieB]

Could somebody have done this maliciously as part of an attempt to ruin my business (something that happened last year). x

 

[bediwin]

I would think it's very unlikely. Far more likely is:

• Your computer (or one using your Internet connection) is infested with malware (viruses and other bad programs of that ilk).
• Someone else who recently had the IP address you now have has a computer infested with malware.

The state of malware on Windows is so bad today that unless you're pretty ruthless with how you manage security on your computer (buy the antivirus, keep it up to date, nail it to the toughest settings and even then treat everything you receive as email attachments or downloads with extreme suspicion), you have an extremely good chance of being affected - it's seldom caused by malice, these things spread semi-automatically.

 

[FaerieB]

Sorry ... being dumb Bediwin ... why would someone else have my IP address :| ... BTW I also have similar problems with my yahoo email x

 

[bediwin]

Addresses are usually allocated for a few hours or days at a time. When they expire, they must be renewed - and when you renew the address, you may get given a different one and someone else gets the address you had. How likely that is to happen depends on your ISP - Virgin's cable customers often get the same address for months on end.

All this is done automatically by your router.

If you PM me, I can take a quick look at your computer remotely to make sure there's nothing nasty on there. That's likely the first thing AOL are going to ask you anyway.

 

[BobbyBoy]

Could somebody have done this maliciously as part of an attempt to ruin my business (something that happened last year). x

If you are a serious business then you shouldn't really be using a free email service like yahoo, AOL or Hotmail because it makes your business look amateurish.

It looks much better if you use your domain for sending/receiving email, furthermore AUTHSMTP is a great way to send email using your domain, and has high deliverability rates.

Hope this helps
Bobby

 

[FaerieB]

I use 3G mobile broadband ... I hate to say this Bediwin but I don't know who you are and after the hassle I had on the net last year I wouldn't want anyone looking at my PC remotely ... sorry ... hope you understand.

One of the people that started all of the trouble last year ... (in fact possibly the ringleader of the bully ring) has a "friend" who's a computer expert and works from the back of their shop.

I am wondering what else they may have done. I have already had an offer from a local Bobby (whose Dad is into PC's as his business) offer to take a look at it. I'm thinking I might take that route :| x

 

[bediwin]

I run a business providing IT maintenance, so messing someone's computer up is probably about the worst thing I could do! But I quite understand that you don't know me from Adam.

BobbyBoy's right, you'd certainly look a lot better with your own domain - and you could get that set up in a few minutes - but your IP address is still going to wind up in the headers of email you send out so there's a good chance this won't solve the problem.

 

[BobbyBoy]

but your IP address is still going to wind up in the headers of email you send out so there's a good chance this won't solve the problem.

You IP address will NOT be shown in the header of your email if you use AUTHSMTP as the email originates from their servers.

Bobby

 

[bediwin]

You IP address will NOT be shown in the header of your email if you use AUTHSMTP as the email originates from their servers.

Bobby

Not quite sure what you're getting at - if you mean an authenticated SMTP connection via a smarthost provided by your mail provider, I have a whole lot of email which was sent in exactly this fashion and that certainly does show the originating IP address.

Are we talking at cross-purposes here?

 

[Gillie]

Is it not just a simple case that as per yahoo - as they are throw away email address - I know that they have been blacklisted recently and for instance, my personal email addy is a bt one - which uses yahoo to send, and a dear friend who in the past has had no issues - his ISP has blacklisted my once ok email addy and it gets bounced back to me, however, when I use one of my domain email addy's not a problem. I therefore take it AOL are having the same thing done to them as well!

 

[andygambles]

AOL mail server IPs are on the CBL blacklist. This is nothing to do with your IP of your Internet connection.

You will need AOL to get themselves delisted. Most likely an AOL customer has been sending spam via the AOL mail servers. You are sharing your outgoing mail IP with millions of other users.

Either get your own mail server that only you use or use a service which manages IP reputation better than AOL.

 

[bediwin]

Just done a reverse lookup of that IP (which I should have done in the first place, teach me to try and do techie stuff on a Saturday afternoon!) and it comes back as:

ims-m12.mx.aol.com.

Now, "mx" implies it's a dedicated mailserver. Not the OP's IP address. So Andy's right - you'll have to raise this with AOL.

(This is a losing battle in the long term - get yourself a proper domain.)

 

[FaerieB]

I already have and I've tried sending one out on that too ... it bounced back again :| x

 

[KM-Tiger]

I already have and I've tried sending one out on that too ... it bounced back again :| x

I already have ... what?

 

[FaerieB]

Sorry ... already have an email addy from my own website domain x

 

[bediwin]

Sorry ... already have an email addy from my own website domain x

How did you send the email from that address?

 

[FaerieB]

Just went into the mail@ and sent an email :| x

 

[bediwin]

Just went into the mail@ and sent an email :| x

Did you use AOL's mail program, some other mail program or a webmail system you got when you bought the domain?

 

[FaerieB]

I don't actually an account with aol any more just a free email addy ... yes I would have used that for setting up the Mr Site one :| x

 

[KM-Tiger]

Just went into the mail@ and sent an email :| x

So you are still routing your email via AOL, and as we have now established it is AOL's mailserver that is blacklisted, your mail may bounce irrespective of the 'From' address. I say 'may bounce' as it's the recipient that decides which blacklists to check, so some might be delivered.

You need to change from using AOL to send email. If you have domain services from a provider, can they provide an outgoing mailserver? If they can you will need to enter the new details into your email client.

 

[bediwin]

I don't actually an account with aol any more just a free email addy ... yes I would have used that for setting up the Mr Site one :| x

Okay... but I thought you said you had a separate address associated with the domain, you sent an email from that and it bounced back? Was that the bounce you first posted? If not, could you post it?

 

[FaerieB]

Okay... but I thought you said you had a separate address associated with the domain, you sent an email from that and it bounced back? Was that the bounce you first posted? If not, could you post it?

No it wasn't ... here it is but I've removed the email addy's

Return-path: <[email protected]>
Received: from mk-filter-2.b2b.uk.tiscali.com ([212.139.137.145] helo=mk-filter-10.mail.uk.tiscali.com)
by mk-delivery-3.b2b.uk.tiscali.com with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QSujG-000PpP-CR
for @homecall.co.uk; Sat, 04 Jun 2011 18:33:42 +0100
X-Trace: 325354934/mk-filter-10.mail.uk.tiscali.com/FROMC4/$ACCEPT/RELAYLIST/212.139.137.153/None/[email protected]
X-Iron-C4-Loop: yes
X-IronPort-Anti-Spam-Filtered: true
X-IronPort-Anti-Spam-Result: AucIALhr6k3Ui4mZ/2dsb2JhbABTgmKBaJNdjTFud6lRjiaQDYMqgW2BCgSQeY87
X-IronPort-AV: E=Sophos;i="4.65,320,1304290800";
d="scan'208";a="325354934"
Received: from mk-delivery-2.b2b.uk.tiscali.com ([212.139.137.153])
by mk-filter-10.mail.uk.tiscali.com with ESMTP; 04 Jun 2011 18:33:42 +0100
Received: from mk-filter-5.mail.uk.tiscali.com ([212.139.137.132])
by mk-delivery-2.b2b.uk.tiscali.com with esmtp (Exim 4.69)
(envelope-from <[email protected]>)
id 1QSujG-000Nmj-8r
for @homecall.co.uk; Sat, 04 Jun 2011 18:33:42 +0100
Authentication-Results: mk-inboundfilter-1-a-1.b2b.uk.tiscali.com; dkim=neutral (message not signed) header.i=none
Received-SPF: None identity=pra; client-ip=193.227.106.212;
receiver=mk-inboundfilter-1-a-1.b2b.uk.tiscali.com;
envelope-from="[email protected]";
x-sender="[email protected]";
x-conformance=sidf_compatible
Received-SPF: Pass identity=mailfrom; client-ip=193.227.106.212;
receiver=mk-inboundfilter-1-a-1.b2b.uk.tiscali.com;
envelope-from="[email protected]";
x-sender="[email protected]";
x-conformance=sidf_compatible;
x-record-type="v=spf1"
Received-SPF: None identity=helo; client-ip=193.227.106.212;
receiver=mk-inboundfilter-1-a-1.b2b.uk.tiscali.com;
envelope-from="[email protected]";
x-sender="[email protected]";
x-conformance=sidf_compatible
X-Trace: 115071116/mk-filter-5.mail.uk.tiscali.com/ListenerSBRS/$ACCEPTED/UNKNOWNLIST/193.227.106.212/5.3/[email protected]
X-SBRS: 5.3
Received: from mail.mrsite.co.uk ([193.227.106.212])
by mk-inboundfilter-1-a-1.b2b.uk.tiscali.com with ESMTP; 04 Jun 2011 18:33:41 +0100
Received: from ([92.40.42.47]) by mrsite.co.uk with MailEnable WebMail; Sat, 4 Jun 2011 18:35:12 +0100
To: <homecall.co.uk>
From: <[email protected]>
Subject:
Date: Sat, 4 Jun 2011 18:35:12 +0100
Message-ID: <[email protected]>
MIME-Version: 1.0
X-Mailer: MailEnable WebMail.NET
X-MimeOLE: Produced By MailEnable WebMail.NET V4.26.0.0
X-Read: 0
Content-Type: multipart/mixed;
boundary="--=_Part_D4889DF314AC4AD69191B376349F92CE"
X-Priority: 3
X-MSMail-Priority: Medium
X-Filter-Req: d

This is a multi-part message in MIME format.

----=_Part_D4889DF314AC4AD69191B376349F92CE
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

 

[andygambles]

Hiding stuff makes it difficult to trouble shoot anything. What are yu trying to see ithis header message? Everything looks ok in this.

Who are yu sending from too? Are you using a remote SMTP server? If sending via port 25 AOL intercepts and sends via it's own mail servers.

 

[FaerieB]

The only thing I'm hiding is the identifying to and from full email addy ... at the moment I don't want anything about my business posting on an open forum. The people who wrecked my business and my life last year still use this forum and still watch it ... they stalked me across the net and set up several accounts on several forums pretending to be me and posting rubbish!!! x

 

[FaerieB]

Something else wierd has just happened ... I have emails in the aol addy with links to the admin panel on my wordpress blog ... these links appear to have been disabled and I can't seem to access my wordpress admin panel ... could be me but it's never happened before :| x

 

[FaerieB]

I have also had 2 emails today where people have thought they have responded to my aol addy but I haven't received the emails ... this happened last year as though someone else was receiving my emails. After a week 300 emails were dumped in my in box :| x

 

[dagaul101]

It could simply be that the server for your recipient has blacklisted ip ranges from your server

 

[astutiumRob]

I have also had 2 emails today where people have thought they have responded to my aol addy but I haven't received the emails

Does anyone take you seriously if you're sending to/from an @aol email ?
Anything @aol and @hotmail get's auto-deleted/auto-junked by most people ..

 

[FaerieB]

I've had that addy for about 8 years ... I only use it with existing customers x