Ip Blacklist issue

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
qadir52786
Posts: 41
Joined: Sat Sep 13, 2014 3:58 am

Ip Blacklist issue

Post by qadir52786 »

Dear all

Please help me with this issue .. .. my mail server ip address is frequently getting black list .. using zimbra 8.5
and also unable to access admin panel ,was able to access when i had install the zimbra on one day its stops without making any changes in srv

Please help me with this 2 issues thanks in advance
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Ip Blacklist issue

Post by phoenix »

You should always post the full output of the following command for the ZCS version (sometimes the o/s is important):

Code: Select all

zmcontrol -v
You should consider upgrading to the most recent version of ZCS as soon as possible, there are some security issues with earlier versions of ZCS.

You haven't really given much information about the exact problem nor what you've done to try and alleviate it nor what you've done too check why you're blacklisted. The usual reason for being blacklisted is because you're a spam source, is that the case (what reason to the RBLs show)? If you're a spam source, what have you checked in the log files to find the problem? There are several threads in the forums that cover this topic and how to check the source of spam emails, have you done a search of the forums and wiki? You really do need to investigate the problem on your server and give us exact details of what's happening, nobody can help fix your problem without sufficient information (that only you can provide).

You also have said what the problem or symptoms are of you not being able to access the Admin UI, please give a full description of the symptoms and errors you're seeing.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
qadir52786
Posts: 41
Joined: Sat Sep 13, 2014 3:58 am

Re: Ip Blacklist issue

Post by qadir52786 »

thank you so much for the reply

Release 8.6.0_GA_1153.RHEL7_64_20141215151110 RHEL7_64 FOSS edition, Patch 8.6.0 _P4.

this is my version
following are spamlogs
0170803220103 Starting spam/ham extraction from system accounts.
[] INFO: Total messages processed: 0
[] INFO: Total messages processed: 0
20170803220308 Finished extracting spam/ham from system accounts.
20170803220308 Starting spamassassin training.
Learned tokens from 0 message(s) (0 message(s) examined)
Learned tokens from 0 message(s) (0 message(s) examined)
bayes: synced databases from journal in 0 seconds: 1118 unique entries (2048 total entries)
20170803220310 Finished spamassassin training.
20170803234603 Starting spam/ham cleanup
[] INFO: Total messages processed: 0
[] INFO: Total messages processed: 0
20170803234807 Finished spam/ham cleanup
20170804220104 Starting spam/ham extraction from system accounts.
[] INFO: Total messages processed: 0
[] INFO: Total messages processed: 0
20170804220308 Finished extracting spam/ham from system accounts.
20170804220308 Starting spamassassin training.
Learned tokens from 0 message(s) (0 message(s) examined)
Learned tokens from 0 message(s) (0 message(s) examined)
bayes: synced databases from journal in 0 seconds: 980 unique entries (1667 total entries)
20170804220311 Finished spamassassin training.
20170804234603 Starting spam/ham cleanup
[] INFO: Total messages processed: 0
[] INFO: Total messages processed: 0
20170804234808 Finished spam/ham cleanup
20170805220103 Starting spam/ham extraction from system accounts.
[] INFO: Total messages processed: 0
[] INFO: Total messages processed: 0
20170805220308 Finished extracting spam/ham from system accounts.
20170805220308 Starting spamassassin training.
Learned tokens from 0 message(s) (0 message(s) examined)
Learned tokens from 0 message(s) (0 message(s) examined)
bayes: synced databases from journal in 0 seconds: 940 unique entries (1799 total entries)
20170805220310 Finished spamassassin training.
20170805234603 Starting spam/ham cleanup
[] INFO: Total messages processed: 0
[] INFO: Total messages processed: 0
20170805234807 Finished spam/ham cleanup



and when i try to open admin panel its shows blank page

please tell me what should i send you for more details

( had already check my network and had also provide my mail server other static ip and also put my server on different network where no other client are connected directly (locally)to server network only...)

Please let me know that you want to dig this problem

and again thank you in advance
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Ip Blacklist issue

Post by phoenix »

You didn't really answer my questions: I asked why you were on a blacklist, how do you know this and what is the reason given for you being on a blacklist? That log file you've posted only show the information about ZCS training the ant-spam system and has nothing to do with any reason you might be on a blacklist. I asked you if you were on a blacklist because you're server might be sending spam, as you haven't given any information about that it's difficult to tell what the reason might be. The log file that needs checking is the mailbox log: https://wiki.zimbra.com/wiki/Log_Files

I also mentioned that there are threads on these forums that cover the subject of your server being on a blacklist, have you searched and read those threads? You're going to have to do some investigation and present us with some evidence of what the problem actually is before anyone can give you useful advice.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
qadir52786
Posts: 41
Joined: Sat Sep 13, 2014 3:58 am

Re: Ip Blacklist issue

Post by qadir52786 »

thanks for the reply


the reason of black list is follow

Reason for listing - Your ISP /AS58659 is UCEPROTECT-Level3 listed for hosting a total of 273 abusers.

will forward other details soon
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Ip Blacklist issue

Post by phoenix »

qadir52786 wrote:Reason for listing - Your ISP /AS58659 is UCEPROTECT-Level3 listed for hosting a total of 273 abusers.
That is your ISP not your specific IP address that's being shown, does your specific IP address show any any Blacklists? Go to the MxToolbox page and check your IP there: https://mxtoolbox.com/blacklists.aspx
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
qadir52786
Posts: 41
Joined: Sat Sep 13, 2014 3:58 am

Re: Ip Blacklist issue

Post by qadir52786 »

Had check from their only


ip shows balck list on UCEPROTECTL3 and its show the above reason for blacklist
Post Reply