SOLVED Blacklist verification failed

ldxsant

Member
Sep 5, 2017
14
2
53
Brazil
cPanel Access Level
Root Administrator
Hello guys,

I'm Leonardo, hosting system administrator. I'm new to the cPanel forum and would really like your help on an issue.

I don't know why, but in the last few weeks, practically every server I administer has failed to receive messages.

According to the error message in the logs, the sender's IP/domain is blacklisted. However, when consulting the IP/domain in MxTOOLBOX, none are listed in blacklist.

It is worth mentioning that, this problem is intermittent on all servers. In addition, all servers have the Data Center, Google and CloudFlare IP configured in "/etc/resolv.conf".

Obs.: I use two blacklists, Spamcop and Spamhaus.

Regards,
Leonardo S
 

Spirogg

Well-Known Member
Feb 21, 2018
700
157
43
chicago
cPanel Access Level
Root Administrator
practically every server I administer has failed to receive messages.
are these incoming to your server ( received messages) incoming messages to your servers ?

I use two blacklists, Spamcop and Spamhaus.
so have you tried to turn off these 2 blacklits.. and see if the incoming messages will arrive?

the Ip's you said you checked were your server IP's or the senders IP.
because your server IP can be ok but ( if I send a message thou you on your server) and my IP is blocked from spamcop and or spamhuas - you won't receive my messages.

unless you mean you can not send a message to someone outside of your server. ?
 

Spirogg

Well-Known Member
Feb 21, 2018
700
157
43
chicago
cPanel Access Level
Root Administrator
Hello guys,

I'm Leonardo, hosting system administrator. I'm new to the cPanel forum and would really like your help on an issue.

I don't know why, but in the last few weeks, practically every server I administer has failed to receive messages.

According to the error message in the logs, the sender's IP/domain is blacklisted. However, when consulting the IP/domain in MxTOOLBOX, none are listed in blacklist.

It is worth mentioning that, this problem is intermittent on all servers. In addition, all servers have the Data Center, Google and CloudFlare IP configured in "/etc/resolv.conf".

Obs.: I use two blacklists, Spamcop and Spamhaus.

Regards,
Leonardo S
PS Do you use cloudlinux ? CentOS 7 ? AlmaLinux ? what is the OS
does your ISP have firewall which might be blocking the IP's ? or do you have Firewall installs CSF ? have you check the IP's if they are blocked?
 

ldxsant

Member
Sep 5, 2017
14
2
53
Brazil
cPanel Access Level
Root Administrator
are these incoming to your server ( received messages) incoming messages to your servers ?


so have you tried to turn off these 2 blacklits.. and see if the incoming messages will arrive?

the Ip's you said you checked were your server IP's or the senders IP.
because your server IP can be ok but ( if I send a message thou you on your server) and my IP is blocked from spamcop and or spamhuas - you won't receive my messages.

unless you mean you can not send a message to someone outside of your server. ?
Hello @Spirogg,

By disabling blacklists, I can receive messages normally.

The strange thing is that the senders' IPs are not blacklisted, and even so it fails.

The IPs my servers are not blacklisted and I am currently using Imunify360.

Thank you,
 

ldxsant

Member
Sep 5, 2017
14
2
53
Brazil
cPanel Access Level
Root Administrator
Error example:

2022-05-17 10:43:25 H=(150.2.201.128.in-addr.arpa.verointernet.com.br) [128.201.2.150]:6160 F=<[email protected]> rejected RCPT <[email protected]>: "JunkMail rejected - (150.2.201.128.in-addr.arpa.verointernet.com.br) [128.201.2.150]:6160 is in an RBL: "

I know this IP is blacklisted, but others are not and have the same error message.

It looks like the blacklists are not responding to queries.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
11,793
1,878
363
cPanel Access Level
Root Administrator
@ldxsant - you're seeing other emails coming in to your server that are getting the "RBL" error like your above example, but you're not actually able to find those IPs in a known RBL - is that correct? If so, it might be best to open a ticket with our team so we can check the server directly as that is definitely odd behavior.
 

ldxsant

Member
Sep 5, 2017
14
2
53
Brazil
cPanel Access Level
Root Administrator
Hello guys,

I opened a ticket in cPanel (#94448091) and the support informed me to configure the "/etc/resolv.conf" file of the servers using non-public IP's, I am using the Data Center IP's and, so far, apparently it solved.

Regards,

Leonardo S
 
  • Like
Reactions: cPRex