TT992 ERROR

[rautospoon]

Hi. I sent an email (from my Tiscali email account) to a neighbour to her AOL email address. She replied to it but (she came round and told me) it did not send and she recived (via Mailer-Daemon@aol.com) a TT992 error message "Content rejected" .  She also sent me an email and the same thing happened. Any idea what is causing this and how it can be fixed ? Many thanks.

[Gondola]

No worries. Just to say this is a member to member team effort as the initial heads up and further feedback was initiated by member @rautospoon and thanks to you also for confirming that AoL mail is reaching TalkTalk mailboxes.

[Mal469]

My friend has successfully sent to me from AoL both yesterday and today, so it seems to be clear as far as we are concerned. Thanks, Gondola, for keeping us up to date with the technicals.

Mal469

[Gondola]

Understood. Let us know so we can keep track of the issue. I don't think AoL are totally out of the woods yet unless they actually stop the spam but the sending IP address change does mean that TalkTalk were blocking the AoL IP address previously detected by spam traps as sending spam. .

[Mal469]

Hi Gondola,

Quick answer is I don’t know yet. I do know that my regular correspondent forgot to use Gmail this morning and his message didn’t get through. I’ll ask him to try again.

Mal469 

[Gondola]

Hi @Mal469 

Are you receiving AoL mail once more. Thanks to member @rautospoon I've alerted another member and they're now receiving AoL mail once more after AoL have changed their sending IP address.

[Gondola]

Hi @rautospoon 

grateful thanks for the heads up. I've just tested here and mail received from a different AoL IP address 66.163.189.31 and whilst still listed by SORBS SPAM is not listed by 0SPAM. Looks like the hard block had had the desired result of forcing AoL to suppress the previous IP address that triggered a spam trap listing.

Thanks again.

[rautospoon]

Sucessfully received an AOL email from my neighbour this afternoon !

[rautospoon]

Cheers Gondola !

[Gondola]

As Ady didn't pick up this topic today from Workflow I guess it'll be some time next week before we see some action. The TT992 block is still in place at present. 

[rautospoon]

Hi. As this problem continues, just wondered if there is any news / developments?

Thank you.

[Gondola]

Hi @Mal469 Agreed.

I've just sent another AoL webmail to Yahoo Mail and the mail sender in use then was a Yahoo.com sender IP 66.163.184.147 that is listed on SORBS SPAM and 0SPAM that uses spam traps to detect spammers. TalkTalk's Proofpoint CloudMark spam protection does refer to Spam Blacklist agencies as part of its intelligence gathering. So, I think it's confirmed that AoL has been detected as sending spam.

Until those spam listings expire, usually two weeks after the last spam trap got triggered or until TalkTalk manually delist from CloudMark then the workaround is to use another mail service to send to TalkTalk Mail.

[Mal469]

Sorry Gondola, didn't notice your response sent while I was concocting my post. Hopefully we'll be back to normal tomorrow. Meanwhile I have told my friend to use my Gmail address.

Mal469

[rautospoon]

Many thanks Gondola. Have "copied" your post to my neighbour.

[Mal469]

Hello,

Sounds like a TT/AOL issue.

I have just encountered exactly the same problem. A regular correspondent with an @aol.com address has just tried to send me a perfectly bland email without any other addressees to my @dsl.pipex.com address. At my suggestion he tried my @dial.pipex.com address, which also failed. Both have been rejected with the same '552: 5.2.0 Content rejected (TT992)' error.

An email from him sent yesterday afternoon to me (and some other addressees) succeeded.  So this issue has arisen in the last 24 hours.

We may all be suffering from TT's reaction to some AOL spam.

Mal469

[Gondola]

Hi @rautospoon 

I checked earlier and there was no issue sending from AoL Mail but I've just carried out another check from AoL and have got an immediate TT992 bounceback. So, that looks like TalkTalk are network spam blocking some AoL mail senders.

I've also checked the sending from Yahoo Mail as Yahoo and AoL are both part of the Verizon Media Group. The Yahoo Mail send went though OK just as my earlier test with AoL did. 

I'll flag this up to TalkTalk Support and they'll need to clear the spam blocking on AoL and try to identify which IP address / addresses are being spam blocked.  I expect some AoL user has been hacked and is sending spam. Not necessarily your neighbour though but I would just ask them to check their email devices for the reassurance that the devices are free of virus / malware. 

[rautospoon]

Thanks for that Gondola. Before I (or my neighbour) does anything why, if what you say is correct (and there was nothing in the email except text, no "content" attachments or pictures etc.) why has it only startred this afternoon after "years" of us exhanging emails with no problems whatsoever ? Also the fact that another "poster" (Freddy1821) is experiencing the same problem today, "hints" possibly at a wider issue ?

[Freddy1821]

I had the same experience with my neighbour this afternoon who knocked on my door to say he could not reach my talktalk.net mailbox. He tried several times, could reach me using a different (non TalkTalk ) email address. A second neighbour had phoned earlier to report  she had sent an email that hadn't come through to me, I discounted this because she is elderly and not a reliable user. However in the light of my second neighbour it may have been the same issue.

A few other emails have arrived although it has been unusually quiet and I wonder if other senders might be having the same problem.

[Gondola]

TT992 suggests that the TalkTalk network filters have detected the sending of unauthenticated mail / spam, or virus or malware in the content. The mail from your neighbour is being rejected.

I recommend that your neighbour carry out anti-virus and anti-malware scans to remove any suspect software / malware. Reboot the devices and router and power up again in 30 minutes. The 30 minute power down is to get a new public IP address / session just in case the IP address is on a blacklist.

Then ask her to send from AoL webmail.

[rautospoon]

PS. This problem has only started today, I've exchanged numerous emails with my neighbour previously with never a hitch.