Fixing My MTA's Poor Reputation

Solution 1:

Unfortunately the IP is blacklisted irrespective of the hardware that sits behind it, so there's not a lot you can do about your existing reputation except ensuring you are sending mail correctly and contacting the relevant spam lists. You may have to wait a few days or weeks for the situation to improve.

I would recommend using Google Apps for SMTP to eradicate these problems :)

Otherwise, if you keep going on your own, check:

• You're not on a blacklist
• Your server has MX and reverse DNS records
• You have SPF DNS records (many servers reject mail without a valid SPF, GMail for example, here's an explanation and a wizard)
• Your mailserver's HELO response matches your hostname
• Your mailserver is not an open relay
• Your DNS records' TTL is not too low - 86400 (24 hours) is recommended (some spammers set their TTL very low to regularly update forged DNS records)
• You comply with AOL's Technical Standards

Solution 2:

http://status.slicehost.com/2009/11/11/email-issues-spamhaus-pbl

I have A VPS with those guys.

Apparently Rackspace preemptivly listed a bunch of their IP's, but you can request a remove of the block though spamhaus's list (at least) on a ip-by-ip basis.

I had to do this with my host once I noticed gmail was refusing delivery. 24hrs after I requested to be removed, gmail was updated and good to go.

Solution 3:

If this IP address had a bad reputation when you received it, Rackspace should give you a different one.

Your IP has a "Poor" reputation in Senderbase, but it doesn't list your IP specifically in the list of IPs in that netblock that send mail. It looks like you may have a poor reputation here because many of your neighbors are "poor".

http://www.senderbase.org/senderbase_queries/detailip?search_string=174.143.206.168

(It's odd that Senderbase doesn't have any information on who owns this IP. Rackspace should be listed there. The "IP Whois" knows that... http://ws.arin.net/whois/?queryinput=174.143.206.168)

Hm. Your IP is listed in the spamhaus.org PBL... the PBL isn't a blacklist, but it's a listing of dynamic IP addresses used for end-customer modems. That doesn't sound like the kind of service you're expecting from Rackspace. (Unless you are a DSL/Cable modem customer running a server out of your basement. I did that for years.) If this is not a dynamic IP, contact Spamhaus and Rackspace about getting the netblock reclassified.

http://www.spamhaus.org/query/bl?ip=174.143.206.168

Your log entry from comcast says your in a DNSBL and that link says they use the Spamhaus SBL/XBL lists... but you're not in either of them. So it's possible that you were in a list and recently removed. Or that Comcast is using the PBL inappropriately.

But your IP doesn't seem to be listed in any of the actual blacklists I've checked. On the Senderbase page, click "DNS-based blocklists [Show/Hide all]" to see a list of the major ones with links to check your IP.

The webreus.nl appears to be using Senderbase's reputation... that's a pretty weak basis for outright rejection.

The one I'm most curious about is the response from Google... it's the only one that claims to have received an excessive amount of mail from your IP. It says "unsolicited", but I'm not sure how they determine whether it's solicited or not.

I suggest that you check your mail server's logs... make sure that you are sending only the mail you think you're sending.

So... that's kind of an overview of the situation, but it doesn't do much to help you fix it. Apparently Rackspace has given you an IP with a poor reputation, even though it apparently has no real history as a mail-sender (that Senderbase knows about). Asking them for an IP in a different netblock could help, especially if you can get one that is known to have a Neutral or better reputation in Senderbase to start with.

And as Andy says... (to paraphrase) keep your nose clean and follow the rules as carefully as possible. You can build up a good reputation with Senderbase if you tough it out. But if you're trying to deliver paid-for goods by email, I'd push Rackspace to get a clean IP.