unusual bounce gmail

Operating System & Version
Centos 7 y CloudLinux
cPanel & WHM Version
104.0.4

jlucho

Well-Known Member
Aug 5, 2006
98
1
158
hi guys

In these last days, I am having a high email bounce
from gmail, and other providers send me emails, and they bounce. Here I copy the rebound messages



when reviewing the IPs on the blacklist, I see that they are on SORBS, and in other cases they are NOT on any blacklist


Has anyone had the same thing happen to them in the last few days? Is it some cPanel bug? Any recommendation to solve it?
 
Last edited:

kennysamuerto

Member
PartnerNOC
May 20, 2009
24
6
53
cPanel Access Level
Root Administrator
I would say that the error is very specific, RBL. It means that there is a blacklist that prevents sending.

If it is SORBS, it is quite likely to be the cause, as it is a very important list.

Try from SORBS to see what it tells you about the IP:


And try to unblock it.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
12,481
1,966
363
cPanel Access Level
Root Administrator
Hey there! I do see the IP address from the screenshots is listed in two blacklists according to the popular MXToolbox checks:


You'll need to get that resolved before Google will properly accept the messages. If this server is relatively new, you may want to let your hosting provider know about the issue as they may be able to provide you with different IP addresses for sending email.
 

jlucho

Well-Known Member
Aug 5, 2006
98
1
158
hi cPrex

The IPs you are searching for are from google. Google IPs are blacklisted. When, from gmail, you send me an email to my company email, my cPanel server is the one who rejects the reception of the message, precisely because of the RBL issue

What I want to do is, in cPanel stop using Sorb
Currently in cPanel RBL only use spamauh and spamcop
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
12,481
1,966
363
cPanel Access Level
Root Administrator
I was specifically looking at the IP in the second screenshot here: imgur.com

In cPanel >> Exim Configuration Manager you'll see an option for both Spamcop and Spamhaus, as that is the only ones we provide by default. If you have added other RBLs you can click the "Manage" button next to the "Manage Custom RBLs" option to modify those.

The Sorbs entry is likely a blacklist being used by the provider you are sending to, and is not happening on the cPanel side of things.
 

jlucho

Well-Known Member
Aug 5, 2006
98
1
158
The Sorbs entry is likely a blacklist being used by the provider you are sending to, and is not happening on the cPanel side of things.
the problem occurs when they send from @gmail (or other mail providers) , to my company email on my cPanel server
So I think something is wrong with cPanel

where do I configure cpanel, so that the rbl does NOT work with sorbs?
 

Ian.H

Member
Jan 29, 2015
5
0
51
cPanel Access Level
Root Administrator
I've had exactly the same report tonight:

The response from the remote server was:

550 "JunkMail rejected - mail-io1-f53.google.com [209.85.166.53]:34703 is in an RBL: "

The bit that looks suspicious to me is that it doesn't specify what RBL, whereas others do:

JunkMail rejected - (romeo.painrelif.fun) [104.223.43.138]:39948 is in an RBL: https://www.spamhaus.org/sbl/query/SBLCSS


I haven't made any changes to my RBLs for years other than enabling zen.spamhaus.org, but it appears that spamhaus are listing (some of) google IPs... but

1657301321530.png


I turned off the default zen.spamhaus.org RBL and added sbl.spamhaus.org as a separate, custom RBL and that seems to have done the trick at least for the time being.



Cheers..

Ian