On 19 May 2017 at 15:22, Ken O'Driscoll <[email protected]> wrote:
> Hi Stefano, > > WatchGuard (http://reputationauthority.org/) are starting to not like the > IP also - "The ip 188.165.188.38 has sent a high ratio of spam (50 > percent)." > At that portal I get 50 percent also for IP that never sent anything and they picture 50 as *green*... I think that my IPs are simply too "low-volume" for that database to "gauge". Are you suggesting that SymantecCloud uses data from ReputationAuthority.org? My guess is that you are seeing the beginning of a reputation problem > developing with your IP. It's not restaurant menu that's causing the > problem. > My IP send mainly italian emails to italian recipient and I found that often this reputation portals do not have a real sample from my IPs to get a correct reputation. That IP returns a 97 on Senderscore and "Good" with a 3.4 magnitudo on Senderbase. To me it soulds like reputantionauthority doesn't see a lot of emails from my IP so it stays on the 50 that it is his default, while senderbase and senderscore collect data from more recipients and they are able to measure my good reputation. I don't have any other problem to other providers.. It's just a couple of message refuses from symanteccloud that I'd like to investigate. Stefano > > Ken. > > -- > Ken O'Driscoll / We Monitor Email > t: +353 1 254 9400 | w: www.wemonitoremail.com > > On Fri, 2017-05-19 at 14:42 +0200, Stefano Bagnara wrote: > > On 19 May 2017 at 13:28, Ken O'Driscoll <[email protected]> wrote: > > > Hi Stefano, > > > > > > That link is only intended for customers. Try using the IP address > > > removal > > > portal at http://ipremoval.sms.symantec.com/lookup/ to request that > > > your IP > > > be de-listed. They will de-list a false positive or tell you what is > > > actually causing the issue. All of their services still share the same > > > reputation data as far as I know. > > > > I should have written that I already tested all of my IPs at that page > > and they are not listed. > > > > > The IP address you submitted, 188.165.188.38, does not have a negative > > reputation and therefore cannot be submitted for investigation. > > > > > The alternative is to find a Symantec customer who is affected and get > > > them > > > to open a service request listing you as an available contact point for > > > troubleshooting. All Symantec products and services come with basic > > > support > > > cover which allows this. > > > > That's what I will do.. but this is a "menu" email from a restaurant to a > > lenovo address (nearby office).. the recipient subscribed to receive the > > menu (sent to other 60 people, 2 in lenovo), but I'm not sure he cares > > enough to open a ticket with his manager at lenovo dealings with the > > symanteccloud configuration. So for my customer it's a fault or mine. I > > hoped I was able to get some sort of hint from symantec or anyone else > > already seen that Message filtered block from symantec when the IP was > > not blocked. > > The same happened to another customer with a vodafone.com address > > (different IP, similar story). > > > > Thank you, > > Stefano > > > > > > > > > > > Ken. > > > > > > -- > > > Ken O'Driscoll / We Monitor Email > > > t: +353 1 254 9400 | w: www.wemonitoremail.com > > > > > > On Fri, 2017-05-19 at 12:56 +0200, Stefano Bagnara wrote: > > > > Hi, > > > > > > > > i'm seeing some reject like this by some of our senders: > > > > > > > > > 553 Message filtered. Refer to the Troubleshooting page at > > > > > http://www.symanteccloud.com/troubleshooting for more information. > > > > (#5.7.1) > > > > > > > > The landing page explanation for the message filtered brings on the > > > table > > > > almost anything (blacklist ip, open relay, duns, urls, mail server > > > > configuration, virus, exploit, opt-out link). > > > > > > > > So the answer is no to everything. If one of my customer spammed > > > Symantec > > > > customers I'd like to identify him. > > > > > > > > I was about to submit the "False positive" here: > > > > https://support.symantec.com/en_US/article.TECH233678.html > > > > > > > > But from the description it's not clear to me if this is only for > > > their > > > > customers or not. > > > > > > > > Is there anyone from Symantec here? > > > > Does anyone have experience with this generic message filtered error > > > and > > > > how to deal with it? > > > > > > > > Stefano > > > > > > > > -- > > > > Stefano Bagnara > > > > Void Labs / VOXmail.it > > > > Apache James/jSPF/jDKIM > > > > > > > > _______________________________________________ > > > > mailop mailing list > > > > [email protected] > > > > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop > > > > > > _______________________________________________ > > > mailop mailing list > > > [email protected] > > > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop > > > > > > > _______________________________________________ > > mailop mailing list > > [email protected] > > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop > > _______________________________________________ > mailop mailing list > [email protected] > https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop >
_______________________________________________ mailop mailing list [email protected] https://chilli.nosignal.org/cgi-bin/mailman/listinfo/mailop
