| Question: |
Setup mailboxes for gutterworks.biz - client hits send and receive can send but is not receiving any email. I set up a separate test account there as well I get the same thing but no outlook errors |
| Answer: |
Hello, Please provide e-mails from which you send letters. |
| Question: |
markus@gutterworks.biz - donnie@gutterworks.biz - sending but no |
| Answer: |
Please wait, we take a look logs. |
| Question: |
I get this when I trouble shoot :Search for domain registration information: [ OK ]Receive a domain name servers: [ OK ]Name servers: ns819.websitewelcome.com, ns820.websitewelcome.comLookup MX records (ns819.websitewelcome.com): [ OK ]Lookup MX records (ns820.websitewelcome.com): [ OK ]Server Email Addresses: gutterworks.biz.Are these local mail servers? * gutterworks.biz.: [FAIL]Local mail servers: [FAIL]Error: No local mail servers foundTroubleshooting finished. |
| Answer: |
Please wait. |
| Question: |
Can I give the client an idea on time to resolve? I`m about to head out for an hour. |
| Answer: |
Hello. Mail disabled on your server becaus you have many abuses for spam. what is the ns819.websitewelcome.com, ns820.websitewelcome.com ? This is hostgator nameservers , where do you see it on your server? |
| Question: |
I moved him from a host gator server so thoes are the old mail servers but I have changed the dns to new name servers so I don`t know why that is still showing?What do I need to do ? I have not del the old account yet but it should not matter if he has the new name servers. |
| Answer: |
when You change NS records? how long time ago? |
| Question: |
Last night really late - but the domain is resolving and the new site is showing. I have suspended the old account on hostgator. I am trying to move to you guys but some of my clients need mail. So where is this spam coming from we have cleaned all the accounts as far as I know. |
| Answer: |
I see the New NS http://www.intodns.com/gutterworks.biz # dig gutterworks.biz mx
; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.37.rc1.el6_7.6 <<>> gutterworks.biz mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 27700
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;gutterworks.biz. IN MX
;; ANSWER SECTION:
gutterworks.biz. 3599 IN MX 20 mail.gutterworks.biz.
gutterworks.biz. 3599 IN MX 10 mail.gutterworks.biz.
;; Query time: 42 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Fri Mar 11 19:50:40 2016
;; MSG SIZE rcvd: 70
|
| Question: |
So Yes mail is working now ? |
| Answer: |
you need wait. on your server dns not upated root@vps:/# dig gutterworks.biz
; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> gutterworks.biz
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7625
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 0
;; QUESTION SECTION:
;gutterworks.biz. IN A
;; ANSWER SECTION:
gutterworks.biz. 1561 IN A 192.185.186.27
;; AUTHORITY SECTION:
gutterworks.biz. 45778 IN NS ns819.websitewelcome.com.
gutterworks.biz. 45778 IN NS ns820.websitewelcome.com.
;; Query time: 0 msec
;; SERVER: 213.133.100.100#53(213.133.100.100)
;; WHEN: Fri Mar 11 11:51:59 2016
;; MSG SIZE rcvd: 107
root@vps:/# dig gutterworks.biz @8.8.8.8
; <<>> DiG 9.8.4-rpz2+rl005.12-P1 <<>> gutterworks.biz @8.8.8.8
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 38913
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;gutterworks.biz. IN A
;; ANSWER SECTION:
gutterworks.biz. 3599 IN A 138.201.43.188
;; Query time: 69 msec
;; SERVER: 8.8.8.8#53(8.8.8.8)
;; WHEN: Fri Mar 11 11:52:11 2016
;; MSG SIZE rcvd: 49 |
| Question: |
Normally when name servers resolve mail works at the same time.. Strange.. How long do you think this will take? Strange when I setup account send and receive do not show errors it is authenticating with the VPS. |
| Answer: |
Search for domain registration information: [ OK ]
Receive domain name servers: [ OK ]
Name servers: ns1.atlantamultimedia.com, ns2.atlantamultimedia.com
Lookup MX records (ns1.atlantamultimedia.com): [ OK ]
Lookup MX records (ns2.atlantamultimedia.com): [ OK ]
Email Server address: mail.gutterworks.biz.
Are these local mail servers?
* mail.gutterworks.biz.: [ OK ]
Local mail servers: mail.gutterworks.biz.
Trying to connect to host mail.gutterworks.biz.: [ OK ]
Trying to send email through a remote SMTP server: Troubleshooting finished. |
| Question: |
Thanx a bunch looks like it is working :) |
| Answer: |
ok
|
| Question: |
Can you guys look at this again it was working fine but now getting errors. thanx, Search for domain registration information: [ OK ]Receive a domain name servers: [ OK ]Name servers: ns820.websitewelcome.com, ns819.websitewelcome.comLookup MX records (ns820.websitewelcome.com): [ OK ]Lookup MX records (ns819.websitewelcome.com): [ OK ]Server Email Addresses: gutterworks.biz.Are these local mail servers? * gutterworks.biz.: [FAIL]Local mail servers: [FAIL]Error: No local mail servers foundTroubleshooting finished. |
| Answer: |
hello. where you see it? |
| Question: |
In ISP manager client is not sending or receiving emails correctly still. I did a trouble shoot from ispmanager on donnie@gutterworks.biz all looks good but I can not get emai from him or other people that he is sending mail to. He is getting this from yahoo. - This message was created automatically by mail delivery software.A message that you sent has not yet been delivered to one or more of its recipients after more than 24 hours on the queue on your vps.atlantamultimedia.com.The message identifier is: 1afT0I-0005cd-GlThe subject of the message is: Quote from Gutter Works, LLC/6626 Paula Court 30038The date of the message is: Mon, 14 Mar 2016 09:57:30 -0400The address to which the message has not yet been delivered is: elainestockard@yahoo.com Delay reason: SMTP error from remote mail server after MAIL FROM: SIZE=604317: host mta6.am0.yahoodns.net [98.138.112.35]: 421 4.7.1 [TS03] All messages from 138.201.20.245 will be permanently deferred; Retrying will NOT succeed. See https://help.yahoo.com/kb/postmaster/SLN3436.htmlNo action is required on your part. Delivery attempts will continue for some time, and this warning may be repeated at intervals if the message remains undelivered. Eventually the mail delivery software will give up, and when that happens, the message will be returned to you. |
| Answer: |
Please wait. |
| Answer: |
how you send mail |
| Question: |
he is using pop3 |
| Question: |
here is another from another ISPThis message was created automatically by mail delivery software.A message that you sent could not be delivered to one or more of itsrecipients. This is a permanent error. The following address(es) failed: mo326@bellsouth.net SMTP error from remote mail server after MAIL FROM:: host nb-mx-vip2.prodigy.net [207.115.36.21]: nlpi179 553 5.3.0 DNSBL:RBL 521< 138.201.20.245 >_is_blocked.__For_information_see_http://att.net/blocks------ This is a copy of the message, including all the headers. ------------ The body of the message is 607998 characters long; only the first------ 106496 or so are included here.Return-path: Received: from c-73-43-112-43.hsd1.ga.comcast.net ([73.43.112.43] helo=G72) by vps.atlantamultimedia.com with esmtpa (Exim 4.80) (envelope-from ) id 1afqVU-0008J9-Fz for mo326@bellsouth.net; Tue, 15 Mar 2016 11:03:42-0400From: \"Donnie Hammond\" To: Subject: Quote from Gutter Works, LLC/55 Dobe Landing 30016Date: Tue, 15 Mar 2016 11:03:14-0400Message-ID: <019401d17ecb$cd6d2c80$68478580$@gutterworks.biz>MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=\"----=_NextPart_000_0195_01D17EAA.465DD670\"X-Mailer: Microsoft Outlook 15.0 Thread-Index: AdF+y8sEBsDCeoGaSrSIyNrsnwEAhg==Content-Language: en-us |
| Answer: |
we send test mail to donnie@gutterworks.biz check it please |
| Question: |
that is the client I have the markus account but here is another one :This message was created automatically by mail delivery software.A message that you sent could not be delivered to one or more of itsrecipients. This is a permanent error. The following address(es) failed: jasglo@charter.net SMTP error from remote mail server after initial connection: host mx1.charter.net [68.114.188.69]: 554 impin008 charter.net ?? IP: 138.201.20.245, You are not allowed to send mail. Please see http://csi.cloudmark.com/reset-request/ if you feel this is in error. E1310------ This is a copy of the message, including all the headers. ------------ The body of the message is 593015 characters long; only the first------ 106496 or so are included here.Return-path: Received: from c-73-43-112-43.hsd1.ga.comcast.net ([73.43.112.43] helo=G72) by vps.atlantamultimedia.com with esmtpa (Exim 4.80) (envelope-from ) id 1afZ42-00039z-SV for jasglo@charter.net; Mon, 14 Mar 2016 16:26:12 -0400 |
| Answer: |
did you reseve test mail to donnie@gutterworks.biz ? 2016-03-15 19:33:03 1afru3-0043Ht-H5 <= root@tisza.hostven02.ru U=root P=local S=522, T=\"test\" for donnie@gutterworks.biz
2016-03-15 19:33:03 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1afru3-0043Ht-H5
2016-03-15 19:33:03 1afru3-0043Ht-H5 [138.201.43.188] SSL verify error: depth=0 error=self signed certificate cert=/C=XX/ST=XX/L=XX/O=XX/OU=XX/CN=vps.atlantamultimedia.com/emailAddress=webmaster@vps.atlantamultimedia.com
2016-03-15 19:33:03 1afru3-0043Ht-H5 [138.201.43.188] SSL verify error: certificate name mismatch: \"/C=XX/ST=XX/L=XX/O=XX/OU=XX/CN=vps.atlantamultimedia.com/emailAddress=webmaster@vps.atlantamultimedia.com\"< br />2016-03-15 19:33:04 1afru3-0043Ht-H5 => donnie@gutterworks.biz R=lookuphost T=remote_smtp H=mail.gutterworks.biz [138.201.43.188] X=TLSv1.2:DHE-RSA-AES256-SHA256:256 CV=no C=\"250 OK id=1afru5-0000x3-3R\"
2016-03-15 19:33:04 1afru3-0043Ht-H5 Completed |
| Question: |
He got the message from you but if he tries to email me at markus@bluelightlabs.com I don`t get it. ? |
| Answer: |
bluelightlabs.com not on your server. may be yo can not reseve mail because send many spam from server? in your mail we see http://csi.cloudmark.com/reset-request/ send requset to unblock your ip. |
| Question: |
Yea I don`t know what the issue is but when he sends to different ISP`s they are not getting through maybe they have not resolved yet ? |
| Answer: |
dns is ok http://www.intodns.com/gutterworks.biz http://www.host-tracker.com/InstantCheck/ResultComplete/13431519-d5ea-e511-80c6-0003ff733473 your server is 138.201.43.188 138.201.20.245 is second ip All messages from 138.201.20.245 will be permanently deferred; Retrying will NOT succeed. See https://help.yahoo.com/kb/postmaster/SLN3436.html yahoo block your ip 138.201.20.245 |
| Question: |
Why Yahoo would block the ip ? |
| Answer: |
because your sites send spam. you need contact to yahoo, and unblock your ip |
| Question: |
These sites should not be sending spam at this point they only have a contact form. ? This site is brand new just finished. |
| Answer: |
we have abuse to your server, many abuses. abuses to server ip |
| Question: |
So what do I need to do Jack ? Client wants to move back at this point. |
| Answer: |
Please wait. |
| Answer: |
If you resolve the issue with viruses we could change for your server with another IP. |
| Question: |
The site is brand new no viruses ? |
| Answer: |
you compromised the IP of your server, all sites can have this problem. all site of your server compromised because some sites send spam from the server , your sites send spam. We can change ip once... no more |
| Answer: |
if you agree. we will create a new server with other IP and help transfer the sites |
| Question: |
what sites are sending spam I don`t have access to logs or ? |
| Answer: |
|
| Answer: |
We have received information about spam or abuse from scomp@aol.net.
This is an information email only and does not require any further action on your part.
It is your choice whether or not to investigate the complaint.
We do not expect any response.
The following hint should assist you to evaluate the submitted information from AOL
so you can determine which AOL email address caused the complaint:
In the complaint email from AOL, you will find a message ID and a timestamp.
These two pieces of information should enable you to find the AOL mailbox which caused
the complaint by searching your mailserver log files.
Important note:
When replying to us, please leave the abuse ID [AbuseID:2574D1:20] unchanged in the subject line.
Kind regards
Hetzner-Support
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen / Germany
Tel: +49 9831 505-0
Fax: +49 9831 505-3
abuse@hetzner.de
www.hetzner.com
Register Court: Registergericht Ansbach, HRB 6089
CEO: Martin Hetzner
On 11 Mar 07:57, scomp@aol.net wrote:
> This is an email abuse report for an email message with the message-id of 44c8349f71e4d3403857707bbb20ff04@principlepartnersinc.com received from IP address 138.201.20.245 on Fri, 11 Mar 2016 01:57:41 -0500 (EST)
>
> For information, please review the top portion of the following page:
> http://postmaster.aol.com/Postmaster.FeedbackLoop.php
>
> For information about AOL E-mail guidelines please see
> http://postmaster.aol.com/Postmaster.Guidelines.php
>
> If you would like to cancel or change the configuration for your FBL please use the tool located at:
> http://postmaster.aol.com/SupportRequest.FBL.php
>
>
>
> Feedback-Type: abuse
> User-Agent: AOL SComp
> Version: 0.1
> Received-Date: Fri, 11 Mar 2016 01:57:41 -0500 (EST)
> Source-IP: 138.201.20.245
> Reported-Domain: static.245.20.201.138.clients.your-server.de
> Redacted-Address: redacted
> Redacted-Address: redacted@
>
>
>
> <html>
> <body>
> <br>
> Make sex rewarding.
> <br>
> <a href=\"http://svcntt.com/list.php?k=33&tU=nPnqFxKhVBzJSaMu3CrPJ&CkT=BBz\">
> Pick superior potency medicaments. Wholesale prices!
> </a>
> <br><br>
> </body>
> </html>
>
> |
| Answer: |
We have received information about spam or abuse from scomp@aol.net.
This is an information email only and does not require any further action on your part.
It is your choice whether or not to investigate the complaint.
We do not expect any response.
The following hint should assist you to evaluate the submitted information from AOL
so you can determine which AOL email address caused the complaint:
In the complaint email from AOL, you will find a message ID and a timestamp.
These two pieces of information should enable you to find the AOL mailbox which caused
the complaint by searching your mailserver log files.
Important note:
When replying to us, please leave the abuse ID [AbuseID:258D4E:13] unchanged in the subject line.
Kind regards
Hetzner-Support
Hetzner Online GmbH
Industriestr. 25
91710 Gunzenhausen / Germany
Tel: +49 9831 505-0
Fax: +49 9831 505-3
abuse@hetzner.de
www.hetzner.com
Register Court: Registergericht Ansbach, HRB 6089
CEO: Martin Hetzner
On 14 Mar 18:48, scomp@aol.net wrote:
> This is an email abuse report for an email message with the message-id of d50ee7a63e8f7620e45e1c0efa01865f@principlepartnersinc.com received from IP address 138.201.20.245 on Sat, 12 Mar 2016 09:30:47 -0500 (EST)
>
> For information, please review the top portion of the following page:
> http://postmaster.aol.com/Postmaster.FeedbackLoop.php
>
> For information about AOL E-mail guidelines please see
> http://postmaster.aol.com/Postmaster.Guidelines.php
>
> If you would like to cancel or change the configuration for your FBL please use the tool located at:
> http://postmaster.aol.com/SupportRequest.FBL.php
>
>
>
> Feedback-Type: abuse
> User-Agent: AOL SComp
> Version: 0.1
> Received-Date: Sat, 12 Mar 2016 09:30:47 -0500 (EST)
> Source-IP: 138.201.20.245
> Reported-Domain: static.245.20.201.138.clients.your-server.de
> Redacted-Address: redacted
> Redacted-Address: redacted@
>
>
>
> $ex with you has always been my dream!
>
> I know I do it right when the invite you for $ex!
>
> Why the hell we should be so shy?
>
> [ http://crpmarseille.com/lib.php?e=62&5zD3Fg=GWf3mqH4Keg3EKsj&82k=FDG ] You can see me again here
>
> You know how to find me!
>
> <html>
> <body>
> <br><br>
> $ex with you has always been my dream!
> <br>
> I know I do it right when the invite you for $ex!
> <br><br>
> Why the hell we should be so shy?
> <br><br>
> <a href=\"http://crpmarseille.com/lib.php?e=62&5zD3Fg=GWf3mqH4Keg3EKsj&82k=FDG\">You can see me again here</a>
>
> You know how to find me!
> </body>
> </html>
>
> |
| Answer: |
We can change the ip once.
If you agree. we will create a new server with other IP and help transfer the sites |
| Answer: |
news server 136.243.97.100 https://136.243.97.100:1500/ispmgr pasword the same You need change the ip on your registar to ns1.atlantamultimedia.com. 136.243.97.100
ns2.atlantamultimedia.com. 136.243.97.101 |
| Question: |
This has been done. |
| Answer: |
ok Can you open the sites? |
