Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I just got this bounce message:

<████████>: host[] said:
    521- blocked by 521 DNSRBL:
    Blocked for abuse. See (in reply to MAIL FROM

So I'm trying to figure out why our server ended up on their blacklist. The web page link doesn't tell me why, as far as I can see. From a few multi-RBL tools I conclude that our IP is only on the collateral damage lists of (you can be exempt from that with a paid subscription), and I dearly hope that AT&T doesn't use that.

From the mail server logs I see that an email to another address went through two days ago without being blocked.

Does anyone have any ideas how I can find out what went wrong?

share|improve this question
I submitted the IP address to their unblock request form, not checking any of the "what action has been taken" checkboxes, and I got a reply that they would unblock us within 24-48 hours. I guess our infractions weren't that serious :) – legoscia Mar 18 '10 at 16:51
I'm wondering if it may be advisable to block out the specfic parts of your ip address (i.e. instead of giving us, give us – Robin Gill Jan 19 '12 at 2:58

If you go to and put in your IP, you can get a blacklist report. Your IP is on two of them:

Click the details next to the BL in question and it will tell you why you are on there and how to remove your self.

EDIT: I see that you already know that you are on the UCE Protect... Most mail admins use clearing house BLs that query all of the known ones, like SORBS, UCE, spamhaus, etc. You would need to talk with AT&T to determine which ones they are using. I noticed that they have a form you can fill out to find out why you were blocked...

EDIT2: Also, you should try adding your IP(s) to Supposedly, this will get around the UCE2 and UCE3.

As a side note, I don't blame you for being upset at AT&T using UCE2 or UCE3. The people that run that blacklist have a bad attitude that is hurting everyone. They seem to think that you can switch ISPs on a whim when they won't shutdown a spammer. This mentality is just not practical in the current age of spam botnets of millions of computers scattered around the globe.

share|improve this answer

If AT&T is indeed using then go the route that Scott Lundberg hints at.

If not, then contact AT&T support and see what the specific reason is. They should have a process that you can go through to get your host removed from the block, or at least a process to apply to have it removed.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.