Email problems

Avatar

Please consider registering
Guest

Search

— Forum Scope —






— Match —





— Forum Options —





Minimum search word length is 3 characters - maximum search word length is 84 characters

Register Lost password?
sp_Feed sp_topic_old
Email problems
Avatar
carbonterry2
Member
Forum Posts: 239
Member Since:
February 17, 2010
sp_UserOfflineSmall Offline
1
July 1, 2011 - 12:41 pm
sp_Permalink sp_Print

Hello,
I have a customer that has had many of its email accounts blacklisted. (554 Denied [CS] (Mode:normal)) AT&T is the provider. The blacklist info comes from AT&T but calling AT&T is nothing but an exercise in futility. They say that Yahoo is in control and to email Yahoo. We have done so. It has been 5 days since.
We can email if we go thru the web server.
Any thoughts?

Thanks

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
2
July 1, 2011 - 8:14 pm
sp_Permalink sp_Print

Hey CT - From the information you have provided, it would appear that:

* Some of your customer's emails have been identified as spam. Once enough emails, from the same address, have been identified as spam, that address will then be blacklisted altogether. (554 error = SPAM).

* AT&T are most likely in the clear and the addresses would have indeed been blacklisted by Yahoo.

Not too sue you will have any joy with Yahoo either; their spam system would be automated and applied across the board.

There is something, some mention or terminology contained in your customer's emails which is causing them to be identified as spam. Setting up new email addresses or changing over to a different webmail service would only provide a temporary solution; most services would use very similar parameters for identifying spam. Your customer would need to identify exactly what term or phrase in the emails is tripping the Spam alarm and either not include that any more or find a way of re-wording it.

HTH,
Cheers.....Jim

Avatar
carbonterry2
Member
Forum Posts: 239
Member Since:
February 17, 2010
sp_UserOfflineSmall Offline
3
July 1, 2011 - 10:49 pm
sp_Permalink sp_Print

OZ,
Thanks for the info. This customer is a legit business. I am sure that there is no intentional SPAM sent out.
In a quandry......)))(((

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
4
July 2, 2011 - 4:04 am
sp_Permalink sp_Print

Yep CT, I'm sure you are right. Unfortunately there can sometimes be a fine line between what these Spam systems see as spam and the actual intent.

A phrase in the email such as 'Special Offer' or something similar will often [unintentionally] ring the Spam alarm.

Avatar
carbonterry2
Member
Forum Posts: 239
Member Since:
February 17, 2010
sp_UserOfflineSmall Offline
5
July 2, 2011 - 12:37 pm
sp_Permalink sp_Print

Is there a chance that an email account was hacked? If yes, how can I repair the problem ?
Thanks

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
6
July 2, 2011 - 6:22 pm
sp_Permalink sp_Print

Yes CT, that would definitely be a possibility. What led me to to believe it was unlikely was this from your original post: [i:uwgfzwvm]"I have a customer that has had[u:uwgfzwvm] many [/u:uwgfzwvm]of its email accounts blacklisted"[/i:uwgfzwvm]

It would be rather unusual for "many" email accounts, all from the same client, to be hacked. Much more likely your customer's emails are being flagged as spam. These spam identification systems can be pretty aggressive; the emails don't even need to actually contain any suspect material, just sending out relatively large numbers of emails, all at once, from the same email address can trip the alarm.

I am assuming the "blacklisting" means that the customer can no longer log-on to the affected Yahoo accounts??

If that is the case then changing the passwords would not be possible. So the only other course of action would be to contact Yahoo (which you have already done) and hope they can sort it out for you.

In the meantime, if you do suspect the accounts may have been hacked, I would be scanning the host machine(s) for any rootkit or spyware; use programs such as MBAM and/or SAS as well as Sophos Anti-Rootkit and any resident security software.

Also, have a read through [url=http://www.pcnsdfw.com/blacklisting.html:uwgfzwvm]HERE[/url:uwgfzwvm] CT, it may provide some insight.

Cheers.....Jim

Avatar
David Hartsock
Admin
Forum Posts: 1105
Member Since:
August 7, 2011
sp_UserOfflineSmall Offline
7
July 5, 2011 - 7:34 am
sp_Permalink sp_Print

It would be rather unusual for "many" email accounts, all from the same client, to be hacked. Much more likely your customer's emails are being flagged as spam. These spam identification systems can be pretty aggressive; the emails don't even need to actually contain any suspect material, just sending out relatively large numbers of emails, all at once, from the same email address can[/quote:118n0n22]
That is absolutely correct, Jim. So can the amount of emails sent to a domain during a specific time frame. An example would be sending 1000 emails to @Comcast addresses in an hour.

To be thorough I would need to know the domain and addresses used, the method they are using to send the emails (program, service, etc), how many emails they are sending at a time, and how many addressees there are for each email. Of course you don't want to publish that info out in the open. You can post the info and "X" out all the private info (so others can follow the thread or find it by Google for help) and PM me the actual info.

Avatar
carbonterry2
Member
Forum Posts: 239
Member Since:
February 17, 2010
sp_UserOfflineSmall Offline
8
July 19, 2011 - 11:24 pm
sp_Permalink sp_Print

The domain is xxxxxxx.com. They use emails as a normal business replying to questions, sending quotes, and status updates of jobs.
Some accounts (apprx 15) use Outlook and others use Outlook Express.
Emails do go thru to

Avatar
Chad Johnson
Mod
Forum Posts: 867
Member Since:
August 11, 2011
sp_UserOfflineSmall Offline
9
July 20, 2011 - 8:58 am
sp_Permalink sp_Print

The domain is xxxxxxx.com.[/quote:16ld9qfu]

Well there's your problem. I would block email from them too.

Avatar
carbonterry2
Member
Forum Posts: 239
Member Since:
February 17, 2010
sp_UserOfflineSmall Offline
10
July 20, 2011 - 11:59 am
sp_Permalink sp_Print

The x's are to hide the domain.
The real addy was PM'ed to Dave per his request in his reply

Avatar
Jim Hillier
Admin
Forum Posts: 2492
Member Since:
August 9, 2011
sp_UserOfflineSmall Offline
11
July 20, 2011 - 4:29 pm
sp_Permalink sp_Print

Pretty sure Zig realises that CT. He's just having some fun with you!!

I thought it was pretty funny anyway.

Avatar
carbonterry2
Member
Forum Posts: 239
Member Since:
February 17, 2010
sp_UserOfflineSmall Offline
12
July 20, 2011 - 5:54 pm
sp_Permalink sp_Print

OK....ya' got me

Avatar
David Hartsock
Admin
Forum Posts: 1105
Member Since:
August 7, 2011
sp_UserOfflineSmall Offline
13
July 21, 2011 - 9:13 am
sp_Permalink sp_Print

For what it's worth, I haven't received any PM from you Terry.

Avatar
carbonterry2
Member
Forum Posts: 239
Member Since:
February 17, 2010
sp_UserOfflineSmall Offline
14
July 21, 2011 - 11:27 am
sp_Permalink sp_Print

PM.ed

Avatar
Chad Johnson
Mod
Forum Posts: 867
Member Since:
August 11, 2011
sp_UserOfflineSmall Offline
15
July 21, 2011 - 11:48 am
sp_Permalink sp_Print

Sorry I thought the bouncy smiley face gave me away. Yes, I was just having some fun.

--Zig

Forum Timezone: America/Indiana/Indianapolis

Most Users Ever Online: 188

Currently Online:
6 Guest(s)

Currently Browsing this Page:
1 Guest(s)

Member Stats:

Guest Posters: 10

Members: 1273

Moderators: 3

Admins: 4

Forum Stats:

Groups: 8

Forums: 19

Topics: 1538

Posts: 11824

Administrators: Jim Hillier, Richard Pedersen, David Hartsock, Marc Thomas

Moderators: Judy Novotny, Jason Shuffield, Mail Poet