Jump to content
Sign in to follow this  
paditur

Blocked email bounced back from SpamCop

Recommended Posts

Hello everyone,

A co-worker of mine having a little trouble sending email and is getting a bounce back related to spamcop and I am not sure why. It's happening to two different people, that he's been attempting to email. I've posted both transcripts for your reference. This problem started last week, no new software or any changes have been done to our PCs. Any help would be greatly appreciated. If you need further information, just ask and I'll do my best to anwer.

Thanks!

FIRST TRANSCRIPT:

----- Transcript of session follows -----

... while talking to custmx.netvision.net.il.:

<<< 500 5.7.1 Blocked - see <http://spamcop.net/bl.shtml?209.239.41.159>

... while talking to mx10.netvision.net.il.:

>>> MAIL From:<XXXX[at]cjrfinearts.com <mailto:XXXX[at]cjrfinearts.com>>

<<< 550 5.7.1 Rejected: 209.239.41.159 listed at bl1.netvision.net.il

554 5.0.0 Service unavailable

SECOND TRANSCRIPT:

----- Transcript of session follows -----

... while talking to mail.acoolrealtor.com.:

>>> MAIL From:<XXXX[at]cjrfinearts.com <mailto:XXXX[at]cjrfinearts.com>> SIZE=13354

<<< 501 5.7.1 <XXXXcjrfinearts.com <mailto:XXXX[at]cjrfinearts.com>>... Sender refused by the DNSBL bl.spamcop.net

Share this post


Link to post
Share on other sites

Did either of you follow the link in the first transcript? It shows that IP address (likely the IP address of the senders mail server, though it looks like it might be his host directly, 209.239.41.159 = host14.apollohosting.com) has sent email to spamtrap addresses recently. It will be delisted in ~11 hours if no new reports are made.

I don't know what the relationship is between this host your co-worker, and yourself, but someone should contact abuse[at]apollohosting.com and ask them to clean up that IP address or to provide a clean address.

That machine is likely sending non-delivery bounces to the spamtraps, as it just did with my test:

C:\&gt;telnet 209.239.41.159 25
220 host14.apollohosting.com ESMTP Sendmail 8.12.11.20060614/8.13.6; Mon, 16 Oct 2006 13:48:24 -0400
250-host14.apollohosting.com Hello kopinproxy.kopin.com [199.79.137.84], pleased to meet you
250-ENHANCEDSTATUSCODES
250-PIPELINING
250-8BITMIME
250-SIZE 10000000
250-DSN
250-ETRN
250-DELIVERBY
250 HELP
250 2.1.0 &lt;underwood[at]spamcop.net&gt;... Sender ok
250 2.1.5 &lt;123456tester7890[at]cjrfinearts.com&gt;... Recipient ok
500 5.5.1 Command unrecognized: "datya"
354 Enter mail, end with "." on a line by itself
250 2.0.0 k9GHmO3b023169 Message accepted for delivery
221 2.0.0 host14.apollohosting.com closing connection


Connection to host lost.

C:\&gt;

With the following result (cancelled report):

http://www.spamcop.net/sc?id=z1106702813z2...f1c0a5abcb780cz

Share this post


Link to post
Share on other sites

I hope you get some help when you contact them as it looks like they know what they are doing and do not care as I get this from a Spamcop lookup:

Parsing input: 209.239.41.159

host 209.239.41.159 = host14.apollohosting.com (cached)

host 209.239.41.159 = host14.apollohosting.com (cached)

ISP does not wish to receive report regarding 209.239.41.159

ISP does not wish to receive reports regarding http://209.239.41.159/ - no date available

Share this post


Link to post
Share on other sites
I hope you get some help when you contact them as it looks like they know what they are doing and do not care as I get this from a Spamcop lookup:

ISP does not wish to receive report regarding 209.239.41.159

ISP does not wish to receive reports regarding

That's a bad sign. It means that they refuse to receive reports of spam coming from their system. To be more specific, the hosting provider involved here is Alabanza, who in turn hosts ApolloHosting.com (Apollo leases multiple dedicated servers from Alabanza...I'm a former Alabanza customer, so I know a bit about all this). Therefore, the owner/admin of "cjrfinearts.com" should contact Apollo Hosting, explaining that the IP address for email transmitted from the server on which their domain lives (host14.apollohosting.com) is listed on multiple blocklists/blacklists, including SpamCop's (and the one http://www.uceprotect.net/en/rblcheck.php) because bounced emails from the server are hitting various "spam trap" addresses around the 'Net.

Unfortunately, I don't think they'll get anywhere, because this is how Alabanza has *always* set up their email delivery errors...they bounce them after the fact, sending them as email messages sent from the nonexistent addresses! I complained bitterly about that when I was on Alabanza dedicated servers, but it didn't do any good. Unless you can get Apollo Hosting to actually turn that lovely "feature" OFF (so that no response is sent in response to mis-addresses messages), then the users of that domain are doomed to getting listed on blocklists again and again.

Send me a PM if you'd like any further info.

DT

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×