In the past few days, we are registering issues with BL bl.spamcop.net, marking valid IP addresses as listed, causing issues with sending/receiving emails. The issue is on the BL side, which domain expired.
We are recommending turning off bl.spamcop.net in the remote console - Anti-Spam - SpamAssassin - RBL.
Also, check if the BL isn't specified in the remote console - Mail - Security - DNS - Host.
Once you remove the BL, check if you don't have the setup "Block IP address that gets listed on DNSBL (DNSBL) " option in the remote console - Mail - Security - Intrusion Prevention. This option blocking IP address which was already blocked by BL. The communication blocked by Intrusion Prevention based on the mention option has reason code "D".
If you are registering the Intrusion Prevention issue then navigate to remote console - Status - Spam Queue - Intrusion Prevention and remove IPs with reason code "D".
Example of blocking by Intrusion Prevention, below:
1.1.1.1 [00007F60A0279700] 00:09:54 >>> 220 mail.server.com ESMTP IceWarp Deep Castle 2 build 3; Sat, 30 Jan 2021 00:09:54 +0000
1.1.1.1 [00007F60A0279700] 00:09:54 <<< ehlo server
1.1.1.1 [00007F60A0279700] 00:09:54 >>> 250-mail.server.com Hello server [1.1.1.1], pleased to meet you.
250-ENHANCEDSTATUSCODES
250-SIZE
250-EXPN
250-ETRN
250-ATRN
250-DSN
250-CHECKPOINT
250-8BITMIME
250-AUTH PLAIN LOGIN DIGEST-MD5 CRAM-MD5
250-STARTTLS
250
1.1.1.1 [00007F60A0279700] 00:09:54 <<< Rset
1.1.1.1 [00007F60A0279700] 00:09:54 >>> 250 2.0.0 Reset state
1.1.1.1 [00007F60A0279700] 00:09:54 <<< Mail from:<user@domain.com>
1.1.1.1 [00007F60A0279700] 00:09:54 >>> 250 2.1.0 <user@domain.com>... Sender ok
1.1.1.1 [00007F60A0279700] 00:09:54 <<< RCPT to:<user@domain.com>
1.1.1.1 [00007F60A0279700] 00:09:54 >>> 421 4.7.1 Intrusion prevention active for [1.1.1.1][D]
SYSTEM [00007F60A0279700] 00:09:54 Intrusion Prevention - closing all connections from 1.1.1.1
1.1.1.1 [00007F60A0279700] 00:09:54 *** <user@domain.com> <user@domain.com> 0 0 00:00:00 INCOMPLETE-SESSION
1.1.1.1 [00007F60A0279700] 00:09:54 Disconnected
Comments
0 comments
Article is closed for comments.