SOLVED Blacklist verification failed

[ldxsant]

Hello guys,

I'm Leonardo, hosting system administrator. I'm new to the cPanel forum and would really like your help on an issue.

I don't know why, but in the last few weeks, practically every server I administer has failed to receive messages.

According to the error message in the logs, the sender's IP/domain is blacklisted. However, when consulting the IP/domain in MxTOOLBOX, none are listed in blacklist.

It is worth mentioning that, this problem is intermittent on all servers. In addition, all servers have the Data Center, Google and CloudFlare IP configured in "/etc/resolv.conf".

Obs.: I use two blacklists, Spamcop and Spamhaus.

Regards,
Leonardo S

 

[Spirogg]

practically every server I administer has failed to receive messages.

are these incoming to your server ( received messages) incoming messages to your servers ?

I use two blacklists, Spamcop and Spamhaus.

so have you tried to turn off these 2 blacklits.. and see if the incoming messages will arrive?

the Ip's you said you checked were your server IP's or the senders IP.
because your server IP can be ok but ( if I send a message thou you on your server) and my IP is blocked from spamcop and or spamhuas - you won't receive my messages.

unless you mean you can not send a message to someone outside of your server. ?

 

[Spirogg]

Hello guys,

I'm Leonardo, hosting system administrator. I'm new to the cPanel forum and would really like your help on an issue.

I don't know why, but in the last few weeks, practically every server I administer has failed to receive messages.

According to the error message in the logs, the sender's IP/domain is blacklisted. However, when consulting the IP/domain in MxTOOLBOX, none are listed in blacklist.

It is worth mentioning that, this problem is intermittent on all servers. In addition, all servers have the Data Center, Google and CloudFlare IP configured in "/etc/resolv.conf".

Obs.: I use two blacklists, Spamcop and Spamhaus.

Regards,
Leonardo S

PS Do you use cloudlinux ? CentOS 7 ? AlmaLinux ? what is the OS
does your ISP have firewall which might be blocking the IP's ? or do you have Firewall installs CSF ? have you check the IP's if they are blocked?

 

[ldxsant]

are these incoming to your server ( received messages) incoming messages to your servers ?


so have you tried to turn off these 2 blacklits.. and see if the incoming messages will arrive?

the Ip's you said you checked were your server IP's or the senders IP.
because your server IP can be ok but ( if I send a message thou you on your server) and my IP is blocked from spamcop and or spamhuas - you won't receive my messages.

unless you mean you can not send a message to someone outside of your server. ?

Hello @Spirogg,

By disabling blacklists, I can receive messages normally.

The strange thing is that the senders' IPs are not blacklisted, and even so it fails.

The IPs my servers are not blacklisted and I am currently using Imunify360.

Thank you,

 

[ldxsant]

Error example:

2022-05-17 10:43:25 H=(150.2.201.128.in-addr.arpa.verointernet.com.br) [128.201.2.150]:6160 F=<[email protected]> rejected RCPT <[email protected]>: "JunkMail rejected - (150.2.201.128.in-addr.arpa.verointernet.com.br) [128.201.2.150]:6160 is in an RBL: "

I know this IP is blacklisted, but others are not and have the same error message.

It looks like the blacklists are not responding to queries.

 

[cPRex]

@ldxsant - you're seeing other emails coming in to your server that are getting the "RBL" error like your above example, but you're not actually able to find those IPs in a known RBL - is that correct? If so, it might be best to open a ticket with our team so we can check the server directly as that is definitely odd behavior.

 

[ldxsant]

Hi @cPRex,

Exactly!

I was checking the forum reports and noticed that it might be related to server queries to blacklists, is this related?

 

[cPRex]

I suppose anything is possible, but I'm really not finding much on my end for this one.

 

[ldxsant]

I suppose anything is possible, but I'm really not finding much on my end for this one.

All right. Thank you for help.

 

[cPRex]

If you're able to create a ticket please post the number here so I can follow along!

 

[Helena Rox]

All right. Thank you for help.

 

[ldxsant]

Hello guys,

I opened a ticket in cPanel (#94448091) and the support informed me to configure the "/etc/resolv.conf" file of the servers using non-public IP's, I am using the Data Center IP's and, so far, apparently it solved.

Regards,

Leonardo S

 

[ldxsant]

Hello guys,

The problem was solved by changing the IP's from the "/etc/resolv.conf" file to private IP's.

Thank you,