Author Topic: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.  (Read 1584 times)

0 Members and 1 Guest are viewing this topic.

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 7358
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« on: February 05, 2019, 11:44:06 AM »
While we're not the naughty ones doing spam, the common email egress servers for 1and1 shared hosting appear to be on the blacklist from Spamhaus today
Quote
Checking 82.165.159.132 on lists
132.159.165.82.dnsbl.dronebl.org is NOT Listed
132.159.165.82.dnsbl.sorbs.net is NOT Listed
132.159.165.82.zen.spamhaus.org IS LISTED

Checking 82.165.159.133 on lists
133.159.165.82.dnsbl.dronebl.org is NOT Listed
133.159.165.82.dnsbl.sorbs.net IS LISTED
133.159.165.82.zen.spamhaus.org IS LISTED

Checking 82.165.159.134 on lists
134.159.165.82.dnsbl.dronebl.org is NOT Listed
134.159.165.82.dnsbl.sorbs.net is NOT Listed
134.159.165.82.zen.spamhaus.org IS LISTED

So... notification emails, new member validation emails, etc. are all being rejected EVEN for hotmail.com and gmail.com addresses.

I'm contacting 1and1 tech support this morning.

Sigh, the sometime perils of being on a shared hosting webserver when they use a common email egress platform.
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Boltek-PCI/NexStorm, microSferics ToA, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge/hub
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 7358
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« Reply #1 on: February 05, 2019, 12:55:53 PM »
Just got off the phone with 1and1 techsupport.

GRRRRRR.

The problem appears to be caused by 1and1 itself with an over-agressive internal spam filter that is classifying most of the emails emitted by the SMF forum as 'Junk:10' so is rejecting them.  They claim there is no way to 'whitelist' specific senders and that certain keywords/phrases are used (so 1990's) in the classification.  IMHO, they added some keywords last night and that's causing the issue today.. lots of bounce messages today.  The spamhaus.org blacklist says
Quote
Ref: SBL254215
82.165.159.132/31 is listed on the Spamhaus Block List - SBL
2017-02-09 23:20:33 GMT | courtesy.spamhaus.org
mout-xforward.perfora.net

The IP addresses listed in this SBL are used by 1&1 solely for delivering emails that have been internally (by 1&1) classified as SPAM.
so it's an internal blacklist that is causing the issue.

1and1 techsupport has escalated the issue to their 3rd level with a 24/48hr response limit.

If they can't fix it in 2 days, we'll be porting the forum to a different hosting provider .. this is UNACCEPTABLE!

</rant>
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Boltek-PCI/NexStorm, microSferics ToA, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge/hub
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline ConligWX

  • Forecaster
  • *****
  • Posts: 393
  • #conligwx
    • conligwx.org
Re: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« Reply #2 on: February 05, 2019, 01:39:00 PM »
Sounds like they have no clue...

Sent from my ONEPLUS A6003 using Tapatalk


Online PaulMy

  • Forecaster
  • *****
  • Posts: 4460
    • KomokaWeather
Re: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« Reply #3 on: February 05, 2019, 01:55:11 PM »
Your GRRRRRR is louder than mine Ken, and hope they cooperate to get it resolved.

I have somewhat similar issue with GoDaddy as they say my IP address has poor email reputation and I can't login to my GoDaddy hosted email accounts from my home.  This happened within days after my ISP assigned a new IP address for me.  GoDaddy says to get my ISP to issue a new IP; my ISP says the IP address is assigned randomly and they can't change it; and neither has any sympathy for my situation and won't do anything.  I have reached out to the organizations that have listed the offending IP but no response yet.

Good luck,
Paul
Davis Vantage Pro 2 Plus 24-FARS Wireless
Envoy/USB DataLogger/Cumulus v.1.9.4   -   Vue Console/WiFiLogger/CumulusMX
Komoka, ON  Canada
www.komokaweather.ca   www.komokaweather.com   www.komokaweather.com/weather28/  
www.komokaweather.com/pws/index.php
Blitzortung Station #1076 www.lightningmaps.org/blitzortung7/america/index.php?bo_page=statistics&bo_show=network&lang=en&bo_station_id=969


Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 7358
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« Reply #4 on: February 05, 2019, 01:55:37 PM »
Methinks that some bozo added a bunch of keywords to the 1and1 filter yesterday and that's causing the bounces.  Their filter automatically categorizes each message and inserts some X- headers in the mail which then triggers the destination email ingress server to bounce it.   Previously, our messages from SMF were categorized as bulk, but not junk.. now it's almost always junk.

Meanwhile.. folks may not receive forum notification messages until this is resolved..  Lots of hotmail.com/gmail.com bounces this morning (in addition to various other domains).
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Boltek-PCI/NexStorm, microSferics ToA, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge/hub
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline pfletch101

  • Senior Contributor
  • ****
  • Posts: 279
    • Personal Website
Re: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« Reply #5 on: February 05, 2019, 04:00:21 PM »
IMHO, 1and1's service and support has been deteriorating for some years. They used to be pretty good, and I hosted a number of sites (my own, and those of charities for which I provided IT support) with them until about three years back, when I finally lost patience with them. I moved all the sites that I managed to Midphase.com. The cost is similar (though the pricing structure is rather different), and the level of support is night and day better. Something to consider, perhaps.
Vantage Pro 2+ with WeatherLink - data incorporated in domestic energy production (PV) and use monitoring system.

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 7358
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« Reply #6 on: February 06, 2019, 12:26:51 PM »
Well, perhaps my call and insistence to escalate my ticket to 3rd level email support at 1and1 has worked a bit this morning.

I'm now seeing wxforum.net messages in my inbox with
Code: [Select]
X-Spam-Flag: NO
X-UI-Out-Filterresults: notjunk:1;...
instead of the previous
Code: [Select]
X-Spam-Flag: YES
X-UI-Out-Filterresults: junk:10;...
headers in the bounced messages. 

So far, there were 197 messages bounced, and no new bounces since the last one at 8:07am Pacific time.

More when the official ticket is closed, but it looks like they've configured the outbound filters to not classify all the forum emails as Junk/Spam anymore.

BTW.. the outbound email servers are still in spamhaus and sorbs lists
Quote
Checking 82.165.159.132 on lists
132.159.165.82.dnsbl.dronebl.org is NOT Listed
132.159.165.82.dnsbl.sorbs.net is NOT Listed
132.159.165.82.zen.spamhaus.org IS LISTED

Checking 82.165.159.133 on lists
133.159.165.82.dnsbl.dronebl.org is NOT Listed
133.159.165.82.dnsbl.sorbs.net IS LISTED
133.159.165.82.zen.spamhaus.org IS LISTED

Checking 82.165.159.134 on lists
134.159.165.82.dnsbl.dronebl.org is NOT Listed
134.159.165.82.dnsbl.sorbs.net IS LISTED
134.159.165.82.zen.spamhaus.org IS LISTED

Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Boltek-PCI/NexStorm, microSferics ToA, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge/hub
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 7358
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« Reply #7 on: February 06, 2019, 07:00:37 PM »
I received the official 'we've fixed your issue' email.

And... no more bounces today .. woohoo!

Nothing more to see here.. please move along :)
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Boltek-PCI/NexStorm, microSferics ToA, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge/hub
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

Offline saratogaWX

  • Administrator
  • Forecaster
  • *****
  • Posts: 7358
  • Saratoga, CA, USA Weather - free PHP scripts
    • Saratoga-Weather.org
Re: 05-Feb-2019 - email servers for WXForum.net blacklisted... grrr.
« Reply #8 on: February 07, 2019, 04:41:40 PM »
Another day.. no more bounces received.  Looks like they've fixed the issue (I hope permanently).
Ken True/Saratoga, CA, USA main site: saratoga-weather.org
Davis VP1+ FARS, Boltek-PCI/NexStorm, microSferics ToA, Blitzortung RED, GRLevel3, WD, WL, VWS, Cumulus, Meteobridge/hub
Free weather PHP scripts/website templates - update notifications on Twitter saratogaWXPHP

 

anything