Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Recently I've had a few clients on a server having issues with a blacklist. I've been googling for about an hour and am a little tired of it, but maybe someone here can help me.

What do blacklists take into account when blocking mail? Typically when people talk abount sender reputation, they are referring to an IP address. However a bounce back that I'm getting is specifically stating that they won't accept the mail due to the name servers used by the domain. So do blacklists also block an a per NS basis as well as an IP basis?

Any information on this would be appreciated.

share|improve this question

5 Answers 5

up vote 3 down vote accepted

What do blacklists take into account when blocking mail? - whatever they like, they can produce a list based on whatever criteria they feel like and others can either subscribe to it or not based on whatever criteria they feel like using.

I can create an email blacklist right now for people nicknamed "b1ackjosh", and add your mail server IPs to it (if I knew them, i mean) just because I feel like it and others can use it to block or "spam score" email based on whether or not they feel like it. There's not a lot you can do to control this kind of thing, stop people from making these lists, or stop them using the lists for whatever reason they like.

share|improve this answer
1  
Clearly, this new b1ackjosh spammer is a major threat and since I blindly trust anyone on SF with rep >7,426 I'll be subscribing to Robert's new blacklist service once he's got it up and running. –  Ward Jul 21 '11 at 8:01
1  
@Robert Moir and everyone else, I was aware that the could block a domain or even an IP block. I just found it odd that someone would block souly on the Name Servers alone, and not give any reason in the headers as to why besides "Poor Reputation". They gave a link to check their DB to see the actual reason for it to be blocked, but when I checked it their DB stated that they were not actually blocking the domain in question. So it seems that there is some sort of issue on their end causing mail to stop. Thanks for your help though. :D –  b1ackjosh Jul 22 '11 at 8:03
    
@Ward Rofl shiftysmile –  b1ackjosh Jul 22 '11 at 8:04

As the others have said blacklists can blacklist you for whatever reason they choose. The better ones do though publish their reasons and will usually tell you why a particular IP address has been blacklisted. With that information you can work with your customers and the blacklist to have the listing removed.

The first thing to do though is to find out why the server is on the blacklist. Look at the headers on your customers' returned mail, they often contain information about which list was used and what the reason is.

A blacklist checking website is also of some use.

share|improve this answer

Blacklists vary greatly in the criteria by which they add listings (a blacklist, in and of itself, blocks no mail). Mail recipients, also, vary greatly in the criteria by which they block mail.

share|improve this answer

mxtoolbox.com is a very nice site for black list check.

share|improve this answer

As Robert said, they can use any criteria they like for blocking but the specifics are many and varied. e.g.

  • Someone reports that your system sent out infected emails (often takes just one report)
  • Someone reports that your system is sending out spam (normally requires at least a couple of reports)
  • Your system is detected as sending out abnormally large amounts of mail in a short time.

At least some blocklist systems run honeyhots and add the sending system to the blacklist whene certain criteria are met. The actual criteria are not always revealed, as knowing what triggers the detection would allow spammers to adjust their techniques accordingly.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.