Hi
Thanks for the replies.
We got an email reply back from CBL/Spamhaus. Does anyone know how I can check
this, or what to do?
"Note: 217.172.xxx appeared to be suspicious because it was using thefollowing
name to identify itself during email (port 25) connections
via the SMTP HELO/EHLO commands:
217.172.xxx
This is USUALLY spamware, but in some rare circumstances, it can be a
misconfiguration in your mail server. The CBL attempts to distinguish
real mail server software from malware SMTP clients by expecting users
to name their mail server[s] to indicate who _they_ are, not their
provider and be consistent with Internet protocol standards.
Use of a bare IP address in the HELO is a violation of
RFC2821 section 4.1.1.1, which says that the HELO value MUST
be either a fully qualified domain name (such as "mail01.example.com")
or an IP address enclosed in square brackets (such as "[217.172.xxx]")."
> From: [email protected]
> To: [email protected]
> Subject: AW: Urgent Spamhaus Help Needed - james 2.3.2 [unsigned]
> Date: Wed, 17 Sep 2014 11:12:34 +0000
>
> Hi,
>
> this may not be a matter of james, but it need to get fixed.
>
> Maybe check this:
>
> Do your server accept mails from extern addressed "from:
> [email protected]" to "[email protected]"?
> So the Reply may be the spam.
>
> Do your server accept mails from extern addressed "from: <null>" (means no
> from) to "[email protected]"?
> It seems to me that not all mailets in james handle the From==null.
>
> Could everybody subscribe to your service, with a wrong e-mail address?
> In the past we had an "subscribe newsletter" on our webpage, even with
> captcha, and had a lot of "fake" subscriptions.
> The used e-mail address got the "thank your for subscribing", and some users
> marked this as spam.
> So it may be a matter of a third system, not the mail system directly.
>
> Mfg
> Bernd
>
> -----Ursprüngliche Nachricht-----
> Von: Pete Williams [mailto:[email protected]]
> Gesendet: Mittwoch, 17. September 2014 11:50
> An: [email protected]
> Betreff: Urgent Spamhaus Help Needed - james 2.3.2
>
> Hi
>
> I have been successfully running a James email server for about the last 3
> years. It is not an open relay. It checks clean with things like MX toolbox.
>
> Our fixed IP address keeps getting listed on Spamhaus. I am certain that we
> are not infected, and that James is configured OK.
>
> Our cloud based service sends emails that subscribers have asked for. It runs
> reports and emails them, and sends email notifications. They pay for this
> service, so this is stuff they want to see.
>
> I need to find out why we are being listed, and if these emails are being
> seen as spam by 'a trusted third party' as the spamhaus website puts it.
>
> If you can help at all, please do. I don't know how to proceed.
>
> Thanks Pete.
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>
