Mail server, one IP, multiple domain. Spamhouse block (EHLO change on the same IP)

Andrius Karpas

Newbie
Posts: 18

Andrius Karpas - 03:32am, Sep 16 2021

Hello, I have faced a problem with the MDaemon server recently. We have got blacklisted on spamhose. Reason: EHLO change on the same IP (possible malware botnet virus).
We have Mdaemon server up and running for years. We have one IP for it. We have multiple domains. One domain mail.something.ie is master domain and other mail.others.ie are secondary domains. Configuring domains each of domain has proper FQDN in host smtp settings. Let's say if the domain is bruxelles.ie so it will be mail.bruxelles.ie. IM confused I do not understand what to do more to get out of blacklist.

(older msg: 1)

Andrius Karpas - Sep 16, 2021 10:01 am (#2 Total: 3)

Andrius Karpas

Newbie
Posts: 18

Replying to: Arron Caruth (Sep 16, 2021 7:13 am)

Just based on your description, it sounds like they want you to use the same FQDN for all of your...

Exactly this is what has happened I had to reconfigure server domains for SMTP host setting to hold the master domain FQDN. ON secondary domain DNS's I have to leave just MX and SPF records nothing more. Now they have delisted the IP plus reset the reputation. Looks its working with no problems but I have a question at this point. Now all my domains EHLO pints to the same IP. But would it be a problem then receiving sever will see that sender email domain name is different from the one in EHLO.
Arron is there a way I can monitor our IP reputation!!! Any advice much appreciated. Thanks.

Arron Caruth - Sep 16, 2021 10:52 am (#3 Total: 3)

Guest User

Posts: 1

>But would it be a problem then receiving sever will see that sender email domain name is different from the one in EHLO.

This should not be an issue. As long as the value passed in the EHLO command resolves to the IP address the sender is connecting to and the reverse DNS for the IP points to the FQDN, it should be fine.

>Arron is there a way I can monitor our IP reputation!!!

There are lots of services that can monitor your IP reputation, I've not used any of them so I don't really know if they are any good or not. One example is, www.mxtoolbox.com. You can also manually check the reputation of your IP using tools from MX toolbox.

https://mxtoolbox.com/blacklists.aspx

--
Arron Caruth
Vice President of Product Development
o: 817-601-3222 e: Arron.Caruth@mdaemon.com

MDaemon Technologies
Simple Secure Email

Visit us on www.mdaemon.com | Facebook | LinkedIn | YouTube
Sent using the MDaemon Email Server

On Thu, 16 Sep 2021 10:01:48 -0500, "lists-discuss@mdaemon.com (Andrius Karpas)" <lists-discuss@mdaemon.com> wrote:
Exactly this is what has happened I had to reconfigure server domains for SMTP host setting to hold the master domain FQDN. ON secondary domain DNS's I have to leave just MX and SPF records nothing more. Now they have delisted the IP plus reset the reputation. Looks its working with no problems but I have a question at this point. Now all my domains EHLO pints to the same IP. But would it be a problem then receiving sever will see that sender email domain name is different from the one in EHLO.
Arron is there a way I can monitor our IP reputation!!! Any advice much appreciated. Thanks.

View/reply at Mail server, one IP, multiple domain. Spamhouse block (EHLO change on the same IP)
--DISCUSS--------------------------------------------------------------
This mailing list is for questions and discussion regarding Alt-N
products.  To unsubscribe from this mailing list send an email to
discuss-unsubscribe@mdaemon.com .
--DISCUSS--------------------------------------------------------------


-----------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user 
support and discussion.  MDaemon staff members may participate in the 
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical 
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
-----------------------------------------------------------------------


--DISCUSS--------------------------------------------------------------
This mailing list is for questions and discussion regarding Alt-N
products.  To unsubscribe from this mailing list send an email to
discuss-unsubscribe@mdaemon.com .
--DISCUSS--------------------------------------------------------------


-----------------------------------------------------------------------
These forums are provided by MDaemon Technologies for user-to-user
support and discussion.  MDaemon staff members may participate in the
forums periodically but please recognize that this is not the official
method of receiving technical support. To receive personal technical
support please use the form here:
http://www.mdaemon.com/Support/RequestSupport/
-----------------------------------------------------------------------