Hi All,
we are also having false positive with CSS on any sending IP in our
212.115.97.0/24 since we re-start mailing after we stopped Christmas
Holidays.
I opened a CSS ticket having replies (and re-listing) every 3-4 days.
The "issue" identified every time differs:
-"message characteristics identical to previously identified spam
messages" => switched to another message template
-"There are a number of factors involved [...] I am unable to tell you
exactly what it is that is setting off
the detectors" => re check every technical staff and verified no any
user added since more than 1 year, only lists hygiene
-"IPs all lighting up at the same time is the most likely cause" =>
reduced the number of the IP to a correct value of 48 (for 8 different
database/senders)
-"At this precise moment in time, 49 IPs are listed with no reason or
rhyme that I can identify" => asked for a whitelisting
-"lighting up 48 IPs on 20thwill set off the robots that are trained to
look for spikes" => lowered the amount of sending IPs to 16
-"Some of these IPs are now such regular guests that they are in
extended purgatory to prevent gaming the system."
It seem that stop mailing for Christmas holidays and trying to follows
suggestions from the ticket bring us to purgatory.
If this mood continue, I think it's going to bring us to hell..
I figured out (not sure of that) the person that is replying me to the
ticket cannot act any cleaning/correction on CSS even if I'm confident
he understood there are no real issues in our mailing practice but only
some pattern that CSS misunderstood.
So I'm writing here hoping anyone from Spamhaus may have a different
"grants" to solve this on ther side.
Many thanks,
Luca
Il 20/01/2023 05:20, Mark Fletcher via mailop ha scritto:
Hi All,
Over the past couple of days, the two servers that send email for
groups.io <http://groups.io>, 66.175.222.12 and 66.175.222.108, have
been listed on the Spamhaus CSS blacklist a couple times each. We're
an email groups hosting service, like Google Groups. Nothing has
changed on our end for quite a long time with those machines, and I
don't believe they're compromised. Meanwhile, the email is backing up.
I've gone through the delisting process for the IPs. (I assume at some
point that'll stop working). I've sent an inquiry to Spamhaus' contact
form.
I'm scratching my head and feeling a bit dumb. Is there anyone here
from Spamhaus that could give me some more information as to what's
going on and how I can fix it?
Thanks,
Mark
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
