SIAX SMTP blocking.

[|tera|]

Hey

I need some help with procedure/methods to get an email address unblocked from SAIX's SORB list.

Do I send someone/something an email and request it?

Got an email account part of our company, that fails on sending: user: help command failed, blocked by SORB list.

I'll check the system to see if it's not part of a botnet in any way, but if I don't find anything I'd like to unflag it.

thanks,

tera

 

[SarelSeemonster]

Unfortunately this will have to be handled by SAIX themselves, as it is their mail server that has been blacklisted by SORBS. Even though the blacklisting happened because some random dude with a SAIX account sent some nasty spam through their server, ultimately they are responsible for its operation and thus also for getting it de-listed.

Seems they are already aware of the problem though. I've copied the related network notice below.

SORBS's listing and de-listing procedure is described here.

Notice Ref : NN0002669
Failure Type : Information Notice
Status : New
Problem Description : Other - smtp.saix.net
Impact : We are aware of the problem that some users are experiencing wrt. the sending of mail via smtp.saix.net. This is due to one of our smtp servers that has been blocked by Sorbs, because of spamming by a user. We are in negotiations with Sorbs to have the server delisted as soon as possible.
Time Down : 2009-02-26 09:55
Sites :
Cause : under ivestigation

 

[|tera|]

Thanks Sarel,

Strange thing is though. There are two mail accounts/addresses at this specific location. One sends out perfectly through SAIX, the other does not.

How can that be?

 

[SarelSeemonster]

When you send via smtp.saix.net, your connection is routed to one of several physical SMTP servers in SAIX's mail cluster, randomly, for load-balancing purposes. So every time you connect to smtp.saix.net, you'll likely end up at a different server, even though it doesn't appear that way.

There are quite a few, including:

ctb-mesg5.saix.net
ctb-mesg-1-1.saix.net
ctb-mesg-1-2.saix.net
ctb-mesg-1-3.saix.net
ctb-mesg-1-4.saix.net
ctb-mesg-2-1.saix.net
ctb-mesg-2-2.saix.net
ctb-mesg-2-3.saix.net
ctb-mesg-2-4.saix.net
ctb-mesg3.saix.net
ctb-mesg4.saix.net
ctb-mesg5.saix.net
ctb-mesg6.saix.net
ctb-mesg7.saix.net
ctb-mesg8.saix.net

AFAIK only one of the actual servers has been blacklisted, which might explain why one moment you'll manage to send mail via smtp.saix.net, and the next moment you can't. If you can figure out which of the actual servers has been blacklisted (the bounce message should mention this), you can probably get away with using one of the ctb-mesg* addresses directly in the meantime.

 

[|tera|]

Cool thanks for explaining.

 

[The_Unbeliever]

@ Tera - my work got blacklisted once due to somebody installing (what he thought was games) on his PC - instant Trojan spam.

Spamhaus blocked our IP from sending mails. I logged in to Spamhaus' site, and delist our sever manually, after making sure that the virus goof-off was sorted out for good.