[ale] Blacklisted mail server?

Bob Toxen transam at verysecurelinux.com
Tue Mar 22 21:48:00 EST 2005


On Fri, Mar 18, 2005 at 03:28:28PM -0500, Joe Steele wrote:
> On Friday, March 18, 2005 2:54 PM, Nathan J. Underwood wrote:
> >
> > A client of mine has recently started using Cbeyond as their ISP.  Since
> > the cutover, they've had problems sending emails to random domains.
> > After digging around a bit, I've found that they seem to be blacklisted.
> >     The error messages that the users are getting were pretty generic,
> > so I started digging further.  My first move was to ping the server
> > reported as the primary MX for the recipient (got a response).  I then
> > tried to telnet to the mail server (i.e. telnet mail.server.net 25), and
> > got an immediate connection refused.  I then tried the same exercise
> > from my ip (not blacklisted), and was able to connect.  They're not an
> > open relay, and I've not been able to find any lists that their listed
> > on.  Anyone got any suggestions on where to look next?

> Just a guess:

> I believe Cbeyond doesn't usually have reverse DNS set up for their 
> IP addresses.  Could it be that some mail servers are refusing the 
> connection because of this?  If so, then your client can probably 
> report the problem to Cbeyond and have them set up reverse DNS for 
> their IP(s).
This is a distinct possibility.  The turkeys at Comcast use to have
this foobar (no reverse DNS).

> --Joe

Bob Toxen
bob at verysecurelinux.com               [Please use for email to me]
http://www.verysecurelinux.com        [Network&Linux/Unix security consulting]
http://www.realworldlinuxsecurity.com [My book:"Real World Linux Security 2/e"]
Quality Linux & UNIX security and SysAdmin & software consulting since 1990.

"Microsoft: Unsafe at any clock speed!"
   -- Bob Toxen 10/03/2002



More information about the Ale mailing list