blocked emails

  • 1
  • Problem
  • Updated 11 months ago
  • In Progress
Sent a friend that uses outlook.com for her emails a message and got this note back 

550 OU-001Mail rejected by Outlook.com for policy reasons. If you are not an email/network admin please contact your Email/Internet Service Provider for help. For more information about this block and to request removal please go to: http://www.spamhaus.org.

 What is going on? 
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes

Posted 11 months ago

  • 1
Photo of Bev

Bev, Champion

  • 3006 Posts
  • 1249 Reply Likes
Here is the troubleshooting page for that problem. Check things on your end and, have your friend check on her end as well. 
http://mail.live.com/mail/troubleshooting.aspx
If that doesn't help, send your account and contact information as well as a link to this thread, so they know who you are and what you have done to exedelistens@viasat.com and ask them for help.
(Edited)
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Thanks, I looked at that. That is where I came up with the info on the 550 OU-001. I am trying to reach the other person now with other addresses. This just started so not sure what changed. Hope to hear something from her today. Seems that others are getting mail but no one else is using Outlook. 
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Just had another one this time with this code
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
If I send to myself I receive it. I sent it to a second address that I have and it came through. 
I checked my IP number through http://whatismyipaddress.com/blacklist-check and it has 12 APEWS.org   with a red exclamation. 
Photo of Old Labs

Old Labs

  • 3298 Posts
  • 3277 Reply Likes
The host at this IP address (69.168.102.197) is emitting spam mails. That's the Zimbra mail server (or Synacor).

See:

https://www.spamhaus.org/sbl/query/SBL357316

And refer it to exedelistens - note their DNS record doesn't look to healthy either (really DirecTV???)
(Edited)
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Went through the phone for escalation and Exede says that there is an outage? So now we wait? Does this sound right? 
Photo of Old Labs

Old Labs

  • 3298 Posts
  • 3277 Reply Likes
No, that does not compute. An outage has absolutely nothing to do with your issue -  unless an outage is affecting escalation.

Hopefully, a moderator will jump in and forward the information to the appropriate parties - everything they need to know is posted above, I can only lead them to water not make them drink.

     
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
it did not sound right to me either. This was escalation team via phone call. Hope a moderator will respond here. 
Photo of Bev

Bev, Champion

  • 3006 Posts
  • 1249 Reply Likes
The easy solution is to get an alternate email account, like gmail.com for use with that recipient. It may be a while before Zimba gets it fixed since DirecTv spam really does go through that server and, lots of people mark those emails as junk or spam, so it keeps getting reported as a spam server.
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Bev, thanks, I am trying to keep in touch with them through another email address. We shall see how that goes. I can get email from them. Just can't get my mail through to them. 
(Edited)
Photo of Bev

Bev, Champion

  • 3006 Posts
  • 1249 Reply Likes
Well, you aren't alone, same issue just bit me too - sending to an outlook address again. LOL
Photo of Bev

Bev, Champion

  • 3006 Posts
  • 1249 Reply Likes
That is the server, if you follow the link, enter that IP address, then follow the next link given, it explains what happened to blacklist the server IP address.


Exede staff are aware of it, so I'm sure it will be dealt with as quickly as possible. It was fine 2 weeks ago, now bouncing emails to someone I was able to email 2 weeks ago without issue. It will be fixed soon.
(Edited)
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
I do not understand what I am suppose to do.   This is the note. So is Exede working through this link? 
Removal Procedure

To have record SBL357316 (69.168.102.197/32) removed from the SBL, the Abuse/Security representative of synacor.com (or the Internet Service Provider responsible for supplying connectivity to 69.168.102.197/32) needs to contact the SBL Team by email (use this link) to explain how the abuse problem has been terminated (we need to know exactly how the issue has been dealt with and that this abuse problem is fully terminated). If the abuse problem that caused this listing has been terminated we will normally remove the listing from the SBL without delay.It is essential that emails to the SBL Team about this SBL listing include this exact ticket information in the email Subject:

Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
so I assume I just have to wait for who knows how long. 
Photo of Bev

Bev, Champion

  • 3006 Posts
  • 1249 Reply Likes
Pretty much, yes but, that shouldn't take too long. Just need the right people to verify that the problem has been dealt with, that that spam won't be sent again and, time for Spamhuas to get the server off the blacklist. I've seen that happen inside a week, but might be two weeks if it's a bit harder to stop the problem.


Oh by the way, I found a really big and really strong 2x4 and, put it on autosmack - it will get the job done. :)
(Edited)
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Lord, I hope so. Seems that someone does not have very good security. 
Photo of Kenneth Anderson

Kenneth Anderson

  • 13 Posts
  • 2 Reply Likes
Probably why we are getting so much SPAM, this needs Exede's attention now. Not later, or weeks, this is the kind of thing that really is frustrating. To just say "well go get a free temporary email for now" is not a great solution. Emails today are kind of embedded in all we do. Do something right now as a priority. It is enough to deal with all the outages all the time, fix the email issue Exede. If I have to change my email again; which is a task now as much as that email is used for everything from our banking to our college. Embarrassing that I am getting these messages. I do not want to wait weeks.

Arrival-Date: Tue, 25 Jul 2017 08:05:52 -0400
Reporting-MTA: dns; smtp02.viasat.aga.synacor.com

Last-Attempt-Date: Tue, 25 Jul 2017 08:05:52 -0400
Final-Recipient: rfc822; Paula.Barber@esc.edu
Action: failed
Remote-MTA: dns; esc-edu.mail.protection.outlook.com
Diagnostic-Code: smtp; 550 5.7.1 Service unavailable, Client host [69.168.102.197] blocked using Spamhaus. To request removal from this list see http://www.spamhaus.org/lookup.lasso (AS16012611) [BL2FFO11OLC001.protection.gbl]
Status: 5.7.1
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
I can receive emails. That has not been affected. I just can't send them without them being blocked and bouncing back. 
Photo of Bev

Bev, Champion

  • 3006 Posts
  • 1249 Reply Likes
Kenneth, I know using Gmail or another free service to email those contacts isn't a great solution, it's a workaround until Exede and Zimba get the host off that blacklist. It isn't the reason we get SPAM, it's because SPAM was sent from someone that uses the same host server.

Exede knows about it and, it will be dealt with ASAP but, it can take time to get it removed from the blacklist so, an alternate email service might be needed in the meantime. 

I don't like sending email to companies I have my Exede email registered with form my GMail account, but, I have had to do just that because of this - you're not alone is not liking the workaround but, having to use it anyway.
Photo of Steve Frederick

Steve Frederick, Champion

  • 2573 Posts
  • 1583 Reply Likes
I access my email directly through the webpage for my Wildblue.net email.

I haven't been having any problems with blocked emails until yesterday, when I had emails sent to @hotmail.com addresses and Time Warner @stny.rr.com addresses bounce back. These reference the spamhaus.org blacklist.

I guess Zimbra has a very bad reputation for promoting spammers.
(Edited)
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Kind of looking that way. Hope they are really working hard on it. 
Photo of Old Labs

Old Labs

  • 3298 Posts
  • 3277 Reply Likes
The bigger question for Zimbra/Synacor is why does email sent from an Exede or Wildblue account identify itself as being sent from DirecTV? All email headers shown here and elsewhere (like the other forum) show that to be the case.

In and of itself that's a red flag for spam detection (frequently an indication of email open relay used by SPAMMERS).

Fix that configuration error and you probably fix the problem immediately for Exede/Wildblue users - DirecTV users are on their own.

The IP addresses for mail.exede.net and mail.wildblue.net don't currently show as being on any blacklists - which is where email should be originating for Exede/Wildblue users respectively, not from mail.directv.net.      
(Edited)
Photo of Bev

Bev, Champion

  • 3006 Posts
  • 1249 Reply Likes
Follow the link in the bounce notice, enter the host IP, follow that link; it only identifies it as the same host as DirecTV, in the report is the email address the spam was sent from - it isn't DirecTv.
Photo of Old Labs

Old Labs

  • 3298 Posts
  • 3277 Reply Likes
Exactly! The origin domains are supposed to match!

It doesn't matter that they are on the same physical server (or host as you've put it) - they are different domains (or possibly sub domains which should be isolated).

You should not be able to send email via DirecTV (unless having an actual email account with them) - that's called open relay and is frowned upon by most reputable email systems. It's that type of error that results in a server IP being blacklisted - we're not talking about client IP addresses being blocked here.

This issue only applies to outgoing email not incoming, but maybe Zimbra/Synacor should be using Spamhaus to check for incoming SPAM to address that constant complaint. Seems to be working great for others ;)
(Edited)
Photo of Bev

Bev, Champion

  • 3006 Posts
  • 1249 Reply Likes
Actually, glad it wasn't the email domain of the sender of the spam that was blocked specifically. Had that happened, we might not be able to send email to ANYONE until it is fixed. Seems mostly MSN hosted email addresses are bouncing us right now, that beats everyone.
Photo of Brad

Brad, Viasat Employee

  • 2884 Posts
  • 962 Reply Likes
We're still getting it resolved there's a server issue with our email host. 
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Seems that my emails are working now at least the ones I know about. Thank you.......
Photo of Brad

Brad, Viasat Employee

  • 2884 Posts
  • 962 Reply Likes
Yep it seems the fix worked. It's being monitored but so far so good! Thanks for confirming Nancy!
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Just got word that my emails to outlook are not being delivered again. None are coming back though. 
Photo of Bev

Bev, Champion

  • 3000 Posts
  • 1246 Reply Likes
Just sent one to an address that bounced for me, asking her to confirm receipt. She got my email straight away. I don't think it's a Viasat problem anymore. Mail to MSN powered addresses seems fine now.

If you have a second wildblue/exed.net address try sending form that one and see if it's just one address it isn't getting through from. May be something going on with that one address and outlook.
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
So far it is only one address that I know about and it is to Outlook.com. I have always been able to get my exede.net  mail to and from so that has not been an issue.
I am thinking since I am not getting the mail to outlook.com notice  bounced back may be something else? 
Photo of Old Labs

Old Labs

  • 3287 Posts
  • 3252 Reply Likes
The email could have been temporarily un-deliverable and would go into a hold queue for retrying at a later time. In that case you don't receive a non-delivery notice until all retries have been exhausted - time between retires (and number of retires) is largely dependent on how the outgoing server is configured.

A co-worker of mine in the office next to mine used to have this problem, he'd send email to me and never get a response from me - of course I was just trying to make him get up off his butt and step next door to ask if I got his email ;)

         
Photo of Nancy P

Nancy P

  • 121 Posts
  • 18 Reply Likes
Thanks, seems to be delivering again so that may be exactly what happened. Thanks Bev and Old Labs.