On Sun, Mar 31, 2024 at 5:52 PM Bill Cole via mailop <mailop@mailop.org> wrote:
> On 2024-03-31 at 10:21:40 UTC-0400 (Sun, 31 Mar 2024 17:21:40 +0300) > Odhiambo Washington via mailop <odhia...@gmail.com> > is rumored to have said: > > > I have just had several email bounces from a mailing list that I have > > been > > running since 2005. > > I have contacted Google using this form > > < > https://support.google.com/mail/contact/gmail_bulk_sender_escalation?visit_id=638474903329581839-3979393277&rd=1 > > > > and gotten a reference number 7-2893000035971. > > > > The strangest thing is that I have gotten only 37 bounces whereas my > > mailing list has several hundreds of gmail.com addresses. > > > > The bounce text looks like this: > > > > ``` > > john...@gmail.com > > host alt2.gmail-smtp-in.l.google.com [142.251.9.26] > > SMTP error from remote mail server after end of data: > > 550-5.7.1 [41.212.32.14] The IP you're using to send mail is not > > authorized to > > 550-5.7.1 send email directly to our servers. Please use the SMTP > > relay > > at your > > 550-5.7.1 service provider instead. For more information, go to > > 550 5.7.1 https://support.google.com/mail/?p=NotAuthorizedError > > j21-20020a508a95000000b0056bacdf79e0si3584946edj.443 > > - gsmtp > > ``` > > Now, this server - 41.212.32.14 - is authorized (by ALL DNS > > requirements > > and policies) to handle mail for lists.kictanet.or.ke which is the > > domain > > name used for the mailing lists. > > > > Why would this happen? > > Something bad seems to have gained the ability to use that IP... > Not that easy unless there is some recent exploit that I am not aware of. See https://check.spamhaus.org/listed/?searchterm=41.212.32.14 > > Google is not known to specifically use Spamhaus listings, so this is > likely to indicate that both organizations have independently deemed > your IP to be badly behaving. > Then there must be a possibility that the 41.212.32.0/24 is blacklisted. Actually when I posted I must have spoken too soon, because the bounces have increased. Let me talk to my ISP. Thanks for looking into this. -- Best regards, Odhiambo WASHINGTON, Nairobi,KE +254 7 3200 0004/+254 7 2274 3223 In an Internet failure case, the #1 suspect is a constant: DNS. "Oh, the cruft.", egrep -v '^$|^.*#' ¯\_(ツ)_/¯ :-) [How to ask smart questions: http://www.catb.org/~esr/faqs/smart-questions.html]
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
