Search This Blog

15 October 2009

Answers Problems Email Blocklist

Today I received a reply email from Online Forefront Security for Exchange & Exchange Hosted Archive Support on my email to them to delete the mail server IP address in the office where I work.

It took 2 days to wait for an email response from them since I sent 13 October 2009.

Email from them is that they've removed the ip address of our mail server from their list and block list takes 2 hours to activate it.

This is the content of their email:


Below is an update for your support incident. You may reply to this e-mail or visit our Support Web Site if you wish to respond or check for further status.

Thank you for allowing us to be of service to you.

Click here to visit our Support Web Site. (link to web site)

Subject
(Ip-address-in block)

Response (Kirk Goodman)
Hello,

This IP has been reviewed and was removed from the block list. Note that there is a small period of 1-2 hours after delisting is granted until all of our servers have been propagated with the new change. As long as the majority of traffic from this IP to our customers is not filtered as spam, messages will be allowed to flow uninterrupted through our network. If it is discovered to be spamming again in the future, relisting is likely to occur, and it will be more difficult to be removed from the list.

We will now be closing this case. If you have any further concerns, please reply to this email.

Thank you,
Kirk Goodman
Delisting Department

Mail Complaint

Today there is a user complaint for failing to send an email to the address .... @ Its.jnj.com. The transcript of his session (the log of the MDaemon server) is like this:
--- Session Transcript ---
Mon 2009-10-12 16:30:02: Parsing Message
Mon 2009-10-12 16:30:02: From: d
Mon 2009-10-12 16:30:02: To: ....@its.jnj.com
Mon 2009-10-12 16:30:02: Subject: =?utf-8?Q?RE:_=C2=81yURGENT=C2=81=E2=80=A2UPDATE=C2=81zOur_Order_No._R10
0?= =?utf-8?Q?7_dated_June_30=2C_2009_of_400_vials_of_REC_to_Indonesia?=
Mon 2009-10-12 16:30:02: Message-ID:
Mon 2009-10-12 16:30:02: MX-record resolution of [its.jnj.com] in progress (DNS Server: 202.152.0.2)...
Mon 2009-10-12 16:30:02: * P=020 S=000 D=its.jnj.com TTL=(23) MX=[mail.global.sprint.com] {216.32.180.22}
Mon 2009-10-12 16:30:02: Attempting MX: P=020 S=000 D=its.jnj.com
TTL=(23) MX=[mail.global.sprint.com] {216.32.180.22}
Mon 2009-10-12 16:30:02: Attempting SMTP connection to [216.32.180.22 : 25]
Mon 2009-10-12 16:30:02: Waiting for connection...
Mon 2009-10-12 16:30:03: Connection established (192.168.0.25 : 3206 -> 216.32.180.22 : 25)
Mon 2009-10-12 16:30:03: Waiting for protocol initiation...
Mon 2009-10-12 16:30:04: <-- 220 VA3EHSMHS033.bigfish.com Microsoft ESMTP MAIL Service ready at Mon, 12 Oct 2009 09:26:24 +0000 Mon 2009-10-12 16:30:04: --> EHLO sender-address-domain
Mon 2009-10-12 16:30:05: <-- 250-VA3EHSMHS033.bigfish.com Hello [ip-sender]
Mon 2009-10-12 16:30:05: <-- 250-SIZE 157286400 Mon 2009-10-12 16:30:05: <-- 250-PIPELINING
Mon 2009-10-12 16:30:05: <-- 250-ENHANCEDSTATUSCODES Mon 2009-10-12 16:30:05: <-- 250-STARTTLS
Mon 2009-10-12 16:30:05: <-- 250-AUTH Mon 2009-10-12 16:30:05: <-- 250-8BITMIME
Mon 2009-10-12 16:30:05: <-- 250-BINARYMIME Mon 2009-10-12 16:30:05: <-- 250 CHUNKING Mon 2009-10-12 16:30:05: --> MAIL From:<> SIZE=45474 Mon 2009-10-12 16:30:06: <-- 250 2.1.0 Sender OK
Mon 2009-10-12 16:30:06: --> RCPT To:<.......@its.jnj.com>
Mon 2009-10-12 16:30:07: <-- 550 5.7.1 Service unavailable; Client host [ip-sender] blocked using Blocklist 1, mail from IP banned; To request removal from this list please forward this message to delist@messaging.microsoft.com. ----
From this log We can conclude that the ip-address of the mail sender has been blocked by the recipient email server. In order to unblock ip address from the email sender (sending emails) then the mail server administrator must send a request to the email address delist@messaging.microsoft.com

MDaemon Mail Server

On this occasion I will discuss about MDaemon Email Server software.

MDaemon email server is software made by Alt-N technology. At this time (when I write this posting) the latest version is MDaemon version 10. MDaemon provides much convenience to the administrator of the mail server because the user interface using a graphical user interface is simple and easy to understand.

If you have trouble sending or receiving e-mail, you can see the status of an existing log file on the MDaemon. All events associated with the process of sending and receiving is fully recorded in the log files that can be arranged by us. Recording of the MDaemon log files can be set whether the log files recorded by day or by week. MDaemon can also separate the log data of the SMTP IN (receiving emails from users into MDaemon), SMTP OUT (sending email from MDaemon mail server to another), POP (taking email from MDaemon server by the user), Domain-POP (email retrieval POP by MDaemon from the POP server) and others.

Content Filter
Another important feature of MDaemon is the ability to perform filtering on incoming email. We can do it manually setting the filter on incoming email, for example, we do not want the incoming mail containing certain words in the message-body or in the email subject. To filter out emails containing the word 'buy' it we can set on content-filtering features of this.
In addition to filtering on the words, the process of filtering can also be done on an existing file attachment in an email received by MDaemon. We can filter out email based on the type of files on attachment file, for example to avoid the risk of virus from the executable file or script file; we can filter out emails with file attachments type .EXE or. VBS.

Spam Filter
Spam filter is a process that filters out email spam category. The process requires a spam filter that keeps the third-party spam databases. The process carried out by MDaemon spam filters by examining the contents of incoming email and then MDaemon will perform a check to a certain web site that keeps a database of spam, if the email contains the content sections listed in the database of email spam or not. Each component contains no spam then MDaemon will give a value or score that called SPAM SCORE. If the accumulated value of spam scores more than the allowed limitation then this email will be rejected or quarantined in accordance with the score obtained.

Antivirus
MDaemon provides the facility to scan incoming email whether or not containing the virus, but this feature is an add-on that must be installed into the MDaemon, so it is not directly active when we install MDaemon.