21-09-2021 06:36 AM - edited 21-09-2021 06:38 AM
yesterday I tried to send a warning to some friends about a very credible phishing email I had received. I'm getting a
"Message Delivery Failure"
Reason: There was an error while attempting to deliver your message with [Subject: "Skillbank client list: CAUTION: SCAM "talktalk" EMAIL"] to (hidden)
MTA p3plwbeout26-03.prod.phx3.secureserver.net received this response from the destination host IP - 220.127.116.11 - 550 , 550 5.7.1 Unfortunately, messages from [18.104.22.168] weren't sent. Please contact your Internet service provider since part of their network is on our block list (S3150).
on 07-10-2021 08:49 AM
Thanks Gondola; my site is a "business site" but runs as a non-profit with proceeds to charity. Just a hobby really; but as a result I cant claim its a personal site, and I'm reluctant to use charity money to pay for a service if its not essential.
I guess I'll just have to wait until the block is removed. And find a better way to warn clients of spam email.
Thanks for your help.
on 07-10-2021 07:50 AM
If you look further into the website you quoted you'll see that you can set up DMARC reporting for a personal domain as a limited free or a paid service.
In TalkTalk Mail that's all taken care of.
But the previous advice to never send or forward spam or phishing mail to others still applies. If you do so then the sending IP address or domain can end up on anti-spam block lists whether you have DMARC policies set up or not.
07-10-2021 07:12 AM - edited 07-10-2021 07:14 AM
I've now had the following reply (below):
I've looked into DMARC and
confirms that spf & DKIM are OK.
Is DMARC essential, and if so can I set it up free or is it a paid for service?
I apologize for the delayed reply. Your domain has valid SPF and DKIM records. There is no DMARC is it needs to be created by you. Do not hesitate to contact us if you need any further assistance.
on 05-10-2021 08:39 AM
on 28-09-2021 09:31 AM
on 24-09-2021 06:40 PM
You'll see that a whole block of addresses have been put onto the spam blocklists so it's not only the public IP address allocated to your router. TalkTalk do not allocate or reallocate specific IP addresses because the IP addresses are dynamically allocated to the router when connecting to the TalkTalk network. Depower the router for a minimum of 30 minutes and you may find a different IP address has been allocated. If you're lucky someone hasn't been using the new IP address to send spam or phishing mail messages.
You're not using TalkTalk Mail but your own domain. So we don't know if that personal email address is fully authenticated by SPF, whether the mail messages are DKIM signed nor whether your personal domain is set up to use DMARC policies. CloudMark, that's also in use by TalkTalk, will readily defer for spam scanning mail that comes in without being fully authenticated. That's aside from the IP address being on spam blacklists.
on 24-09-2021 05:38 PM
I passed this enquiry to the company that host my domain and have received this reply
"I have now checked your local IP address 22.214.171.124 and I can see that it is listed in several RBLs, which is the reason why the emails that you send via your email client Thunderbird 78.14.0, have bounced. You can check your IP reputation from here:
Bear in mind that our Cloudmark spam filtering system is checking if the IP from which the client is connected/has sent emails is within a blacklist. IF that is the case the system is routing the emails via blacklisted IP in order to protect the reputation of the primary/shared IP address of the email server. This is and the reason, which you are able to send directly via your default Webmail application/Webmail, and the emails have not bounced as they are sent directly via the IP of the shared server.
That said I would personally recommend contacting your ISP and request a delist of your IP address if possible or ask them to assign you a new clean IP address."
on 21-09-2021 10:26 AM
on 21-09-2021 08:02 AM