That Spamhaus listing is PBL, not an indication of bad. Your ISP must
have decided, or Spamhaus decided you shouldn't be sending mail. Looks
like the whole /24 is on PBL.
As for 41.212.32.190, yes there was spam runs from that IP three to ten
days ago. Malicious script.
Richard
On 2024-03-31 8:47 a.m., Bill Cole via mailop wrote:
On 2024-03-31 at 10:21:40 UTC-0400 (Sun, 31 Mar 2024 17:21:40 +0300)
Odhiambo Washington via mailop <odhia...@gmail.com>
is rumored to have said:
I have just had several email bounces from a mailing list that I have
been
running since 2005.
I have contacted Google using this form
<https://support.google.com/mail/contact/gmail_bulk_sender_escalation?visit_id=638474903329581839-3979393277&rd=1>
and gotten a reference number 7-2893000035971.
The strangest thing is that I have gotten only 37 bounces whereas my
mailing list has several hundreds of gmail.com addresses.
The bounce text looks like this:
```
john...@gmail.com
host alt2.gmail-smtp-in.l.google.com [142.251.9.26]
SMTP error from remote mail server after end of data:
550-5.7.1 [41.212.32.14] The IP you're using to send mail is not
authorized to
550-5.7.1 send email directly to our servers. Please use the SMTP
relay
at your
550-5.7.1 service provider instead. For more information, go to
550 5.7.1 https://support.google.com/mail/?p=NotAuthorizedError
j21-20020a508a95000000b0056bacdf79e0si3584946edj.443
- gsmtp
```
Now, this server - 41.212.32.14 - is authorized (by ALL DNS requirements
and policies) to handle mail for lists.kictanet.or.ke which is the
domain
name used for the mailing lists.
Why would this happen?
Something bad seems to have gained the ability to use that IP...
See https://check.spamhaus.org/listed/?searchterm=41.212.32.14
Google is not known to specifically use Spamhaus listings, so this is
likely to indicate that both organizations have independently deemed
your IP to be badly behaving.
_______________________________________________
mailop mailing list
mailop@mailop.org
https://list.mailop.org/listinfo/mailop
