Sendmail IP Blocked by AT&T
by mfoley from LinuxQuestions.org on (#4WNT5)
Seems like I'm plagued with email issues lately. Here's another one.
On this host, "hiram" I am using Sendmail. novatec-inc.com is configured as the SMART_HOST. I do the following:
Code:echo please RSVP if you get this. | mail -r jnpresutti@att.net -s "testing" -b mfoley@novatec-inc.com -b jnpresutti@att.net mike@mikeclevenger.comIn the maillog I get:
Code:Dec 16 21:42:33 hiram sendmail[10857]: xBH2gXmt010857: Authentication-Warning: hiram.local: mfoley set sender to jnpresutti@att.net using -r
Dec 16 21:42:34 hiram sendmail[10857]: xBH2gXmt010857: from=jnpresutti@att.net, size=402, class=0, nrcpts=3, msgid=<5df84099.VOr1VylVnGCMPbwk%jnpresutti@att.net>, relay=mfoley@localhost
Dec 16 21:42:42 hiram sm-mta[10858]: xBH2gYQv010858: from=<jnpresutti@att.net>, size=567, class=0, nrcpts=3, msgid=<5df84099.VOr1VylVnGCMPbwk%jnpresutti@att.net>, proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Dec 16 21:42:57 hiram sendmail[10857]: xBH2gXmt010857: to=mike@mikeclevenger.com,mfoley@novatec-inc.com,jnpresutti@att.net, ctladdr=jnpresutti@att.net (1000/100), delay=00:00:24, xdelay=00:00:23, mailer=relay, pri=90402, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (xBH2gYQv010858 Message accepted for delivery)
Dec 16 21:42:57 hiram sm-mta[10886]: xBH2gYQv010858: to=<mfoley@novatec-inc.com>, delay=00:00:21, xdelay=00:00:00, mailer=local, pri=121141, dsn=2.0.0, stat=Sent
Dec 16 21:42:57 hiram sm-mta[10886]: xBH2gYQv010858: to=<jnpresutti@att.net>, delay=00:00:21, xdelay=00:00:00, mailer=esmtp, pri=121141, relay=al-ip4-mx-vip2.prodigy.net. [144.160.235.144], dsn=5.6.0, stat=Data format error
Dec 16 21:43:03 hiram sm-mta[10886]: STARTTLS=client, relay=mail.mikeclevenger.com., version=TLSv1.2, verify=FAIL, cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256/256
Dec 16 21:43:09 hiram sm-mta[10886]: xBH2gYQv010858: to=<mike@mikeclevenger.com>, delay=00:00:33, xdelay=00:00:12, mailer=esmtp, pri=121141, relay=mail.mikeclevenger.com. [50.87.193.236], dsn=2.0.0, stat=Sent (OK id=1ih2pJ-0047LW-Dw)
Dec 16 21:43:09 hiram sm-mta[10886]: xBH2gYQv010858: xBH2h9Qv010886: DSN: Data format error
Dec 16 21:43:15 hiram sm-mta[10886]: xBH2h9Qv010886: to=<jnpresutti@att.net>, delay=00:00:06, xdelay=00:00:05, mailer=esmtp, pri=32165, relay=ff-ip4-mx-vip2.prodigy.net. [144.160.159.22], dsn=5.6.0, stat=Data format error
Dec 16 21:43:15 hiram sm-mta[10886]: xBH2h9Qv010886: xBH2h9Qw010886: return to sender: Data format error
Dec 16 21:43:15 hiram sm-mta[10886]: xBH2h9Qw010886: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=33189, dsn=2.0.0, stat=SentAnd in root's mailbox I get:
Code:From MAILER-DAEMON@hiram.novatec-inc.com Mon Dec 16 21:43:15 2019
Return-Path: <MAILER-DAEMON@hiram.novatec-inc.com>
Received: from localhost (localhost)
by hiram.novatec-inc.com (8.15.2/8.15.2) id xBH2h9Qw010886;
Mon, 16 Dec 2019 21:43:15 -0500
Date: Mon, 16 Dec 2019 21:43:15 -0500
From: Mail Delivery Subsystem <MAILER-DAEMON@hiram.novatec-inc.com>
Message-Id: <201912170243.xBH2h9Qw010886@hiram.novatec-inc.com>
To: nobody@hiram.novatec-inc.com
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="xBH2h9Qw010886.1576550595/hiram.novatec-inc.com"
Subject: Postmaster notify: see transcript for details
Auto-Submitted: auto-generated (postmaster-notification)
This is a MIME-encapsulated message
--xBH2h9Qw010886.1576550595/hiram.novatec-inc.com
The original message was received at Mon, 16 Dec 2019 21:43:09 -0500
from localhost
with id xBH2h9Qv010886
----- The following addresses had permanent fatal errors -----
<jnpresutti@att.net>
(reason: 553 5.3.0 flph829 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net)
----- Transcript of session follows -----
... while talking to ff-ip4-mx-vip2.prodigy.net.:
>>> MAIL From:<>
<<< 553 5.3.0 flph829 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net
501 5.6.0 Data format error
--xBH2h9Qw010886.1576550595/hiram.novatec-inc.com
Content-Type: message/delivery-status
Reporting-MTA: dns; hiram.novatec-inc.com
Received-From-MTA: DNS; localhost
Arrival-Date: Mon, 16 Dec 2019 21:43:09 -0500
Final-Recipient: RFC822; jnpresutti@att.net
Action: failed
Status: 5.3.0
Diagnostic-Code: SMTP; 553 5.3.0 flph829 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net
Last-Attempt-Date: Mon, 16 Dec 2019 21:43:15 -0500
--xBH2h9Qw010886.1576550595/hiram.novatec-inc.com
Content-Type: message/rfc822
Return-Path: <MAILER-DAEMON>
Received: from localhost (localhost)
by hiram.novatec-inc.com (8.15.2/8.15.2) id xBH2h9Qv010886;
Mon, 16 Dec 2019 21:43:09 -0500
Date: Mon, 16 Dec 2019 21:43:09 -0500
From: Mail Delivery Subsystem <MAILER-DAEMON>
Message-Id: <201912170243.xBH2h9Qv010886@hiram.novatec-inc.com>
To: <jnpresutti@att.net>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="xBH2h9Qv010886.1576550589/hiram.novatec-inc.com"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
This is a MIME-encapsulated message
--xBH2h9Qv010886.1576550589/hiram.novatec-inc.com
The original message was received at Mon, 16 Dec 2019 21:42:36 -0500
from localhost [127.0.0.1]
----- The following addresses had permanent fatal errors -----
<jnpresutti@att.net>
(reason: 553 5.3.0 alpd679 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net)
----- Transcript of session follows -----
... while talking to al-ip4-mx-vip2.prodigy.net.:
>>> MAIL From:<jnpresutti@att.net>
<<< 553 5.3.0 alpd679 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net
501 5.6.0 Data format error
--xBH2h9Qv010886.1576550589/hiram.novatec-inc.com
Content-Type: message/delivery-status
Reporting-MTA: dns; hiram.novatec-inc.com
Received-From-MTA: DNS; localhost
Arrival-Date: Mon, 16 Dec 2019 21:42:36 -0500
Final-Recipient: RFC822; jnpresutti@att.net
Action: failed
Status: 5.3.0
Diagnostic-Code: SMTP; 553 5.3.0 alpd679 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net
Last-Attempt-Date: Mon, 16 Dec 2019 21:42:57 -0500
--xBH2h9Qv010886.1576550589/hiram.novatec-inc.com
Content-Type: message/rfc822
Return-Path: <jnpresutti@att.net>
Received: from hiram.local (localhost [127.0.0.1])
by hiram.novatec-inc.com (8.15.2/8.15.2) with ESMTP id xBH2gYQv010858;
Mon, 16 Dec 2019 21:42:36 -0500
Received: (from mfoley@localhost)
by hiram.local (8.15.2/8.15.2/Submit) id xBH2gXmt010857;
Mon, 16 Dec 2019 21:42:33 -0500
X-Authentication-Warning: hiram.local: mfoley set sender to jnpresutti@att.net using -r
Date: Mon, 16 Dec 2019 21:42:33 -0500
From: jnpresutti@att.net
To: mike@mikeclevenger.com
Subject: testing
Message-ID: <5df84099.VOr1VylVnGCMPbwk%jnpresutti@att.net>
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,FREEMAIL_FROM
autolearn=ham autolearn_force=no version=3.4.1-_revision__1.0__
X-Spam-Report:
* -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
* 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
* (jnpresutti[at]att.net)
X-Spam-Checker-Version: SpamAssassin 3.4.1-_revision__1.0__ (2015-04-28) on
hiram.local
please RSVP to mfoley@novatec-inc.com if you get this.
--xBH2h9Qv010886.1576550589/hiram.novatec-inc.com--
--xBH2h9Qw010886.1576550595/hiram.novatec-inc.com--Where it says, "reason: 553 5.3.0 flph829 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net)", I've checked that IP and it belongs to WIDEOPENWEST (wowway), which is the ISP used by "hiram". But "hiram's" IP is 24.96.253.242 and the wowway name servers are 64.233.222.2 and 64.233.222.7. Where is 65.60.139.29 coming from?
I am clueless as to what's going wrong here. Any help appreciated.
On this host, "hiram" I am using Sendmail. novatec-inc.com is configured as the SMART_HOST. I do the following:
Code:echo please RSVP if you get this. | mail -r jnpresutti@att.net -s "testing" -b mfoley@novatec-inc.com -b jnpresutti@att.net mike@mikeclevenger.comIn the maillog I get:
Code:Dec 16 21:42:33 hiram sendmail[10857]: xBH2gXmt010857: Authentication-Warning: hiram.local: mfoley set sender to jnpresutti@att.net using -r
Dec 16 21:42:34 hiram sendmail[10857]: xBH2gXmt010857: from=jnpresutti@att.net, size=402, class=0, nrcpts=3, msgid=<5df84099.VOr1VylVnGCMPbwk%jnpresutti@att.net>, relay=mfoley@localhost
Dec 16 21:42:42 hiram sm-mta[10858]: xBH2gYQv010858: from=<jnpresutti@att.net>, size=567, class=0, nrcpts=3, msgid=<5df84099.VOr1VylVnGCMPbwk%jnpresutti@att.net>, proto=ESMTP, daemon=MTA, relay=localhost [127.0.0.1]
Dec 16 21:42:57 hiram sendmail[10857]: xBH2gXmt010857: to=mike@mikeclevenger.com,mfoley@novatec-inc.com,jnpresutti@att.net, ctladdr=jnpresutti@att.net (1000/100), delay=00:00:24, xdelay=00:00:23, mailer=relay, pri=90402, relay=[127.0.0.1] [127.0.0.1], dsn=2.0.0, stat=Sent (xBH2gYQv010858 Message accepted for delivery)
Dec 16 21:42:57 hiram sm-mta[10886]: xBH2gYQv010858: to=<mfoley@novatec-inc.com>, delay=00:00:21, xdelay=00:00:00, mailer=local, pri=121141, dsn=2.0.0, stat=Sent
Dec 16 21:42:57 hiram sm-mta[10886]: xBH2gYQv010858: to=<jnpresutti@att.net>, delay=00:00:21, xdelay=00:00:00, mailer=esmtp, pri=121141, relay=al-ip4-mx-vip2.prodigy.net. [144.160.235.144], dsn=5.6.0, stat=Data format error
Dec 16 21:43:03 hiram sm-mta[10886]: STARTTLS=client, relay=mail.mikeclevenger.com., version=TLSv1.2, verify=FAIL, cipher=ECDHE-RSA-AES256-GCM-SHA384, bits=256/256
Dec 16 21:43:09 hiram sm-mta[10886]: xBH2gYQv010858: to=<mike@mikeclevenger.com>, delay=00:00:33, xdelay=00:00:12, mailer=esmtp, pri=121141, relay=mail.mikeclevenger.com. [50.87.193.236], dsn=2.0.0, stat=Sent (OK id=1ih2pJ-0047LW-Dw)
Dec 16 21:43:09 hiram sm-mta[10886]: xBH2gYQv010858: xBH2h9Qv010886: DSN: Data format error
Dec 16 21:43:15 hiram sm-mta[10886]: xBH2h9Qv010886: to=<jnpresutti@att.net>, delay=00:00:06, xdelay=00:00:05, mailer=esmtp, pri=32165, relay=ff-ip4-mx-vip2.prodigy.net. [144.160.159.22], dsn=5.6.0, stat=Data format error
Dec 16 21:43:15 hiram sm-mta[10886]: xBH2h9Qv010886: xBH2h9Qw010886: return to sender: Data format error
Dec 16 21:43:15 hiram sm-mta[10886]: xBH2h9Qw010886: to=root, delay=00:00:00, xdelay=00:00:00, mailer=local, pri=33189, dsn=2.0.0, stat=SentAnd in root's mailbox I get:
Code:From MAILER-DAEMON@hiram.novatec-inc.com Mon Dec 16 21:43:15 2019
Return-Path: <MAILER-DAEMON@hiram.novatec-inc.com>
Received: from localhost (localhost)
by hiram.novatec-inc.com (8.15.2/8.15.2) id xBH2h9Qw010886;
Mon, 16 Dec 2019 21:43:15 -0500
Date: Mon, 16 Dec 2019 21:43:15 -0500
From: Mail Delivery Subsystem <MAILER-DAEMON@hiram.novatec-inc.com>
Message-Id: <201912170243.xBH2h9Qw010886@hiram.novatec-inc.com>
To: nobody@hiram.novatec-inc.com
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="xBH2h9Qw010886.1576550595/hiram.novatec-inc.com"
Subject: Postmaster notify: see transcript for details
Auto-Submitted: auto-generated (postmaster-notification)
This is a MIME-encapsulated message
--xBH2h9Qw010886.1576550595/hiram.novatec-inc.com
The original message was received at Mon, 16 Dec 2019 21:43:09 -0500
from localhost
with id xBH2h9Qv010886
----- The following addresses had permanent fatal errors -----
<jnpresutti@att.net>
(reason: 553 5.3.0 flph829 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net)
----- Transcript of session follows -----
... while talking to ff-ip4-mx-vip2.prodigy.net.:
>>> MAIL From:<>
<<< 553 5.3.0 flph829 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net
501 5.6.0 Data format error
--xBH2h9Qw010886.1576550595/hiram.novatec-inc.com
Content-Type: message/delivery-status
Reporting-MTA: dns; hiram.novatec-inc.com
Received-From-MTA: DNS; localhost
Arrival-Date: Mon, 16 Dec 2019 21:43:09 -0500
Final-Recipient: RFC822; jnpresutti@att.net
Action: failed
Status: 5.3.0
Diagnostic-Code: SMTP; 553 5.3.0 flph829 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net
Last-Attempt-Date: Mon, 16 Dec 2019 21:43:15 -0500
--xBH2h9Qw010886.1576550595/hiram.novatec-inc.com
Content-Type: message/rfc822
Return-Path: <MAILER-DAEMON>
Received: from localhost (localhost)
by hiram.novatec-inc.com (8.15.2/8.15.2) id xBH2h9Qv010886;
Mon, 16 Dec 2019 21:43:09 -0500
Date: Mon, 16 Dec 2019 21:43:09 -0500
From: Mail Delivery Subsystem <MAILER-DAEMON>
Message-Id: <201912170243.xBH2h9Qv010886@hiram.novatec-inc.com>
To: <jnpresutti@att.net>
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="xBH2h9Qv010886.1576550589/hiram.novatec-inc.com"
Subject: Returned mail: see transcript for details
Auto-Submitted: auto-generated (failure)
This is a MIME-encapsulated message
--xBH2h9Qv010886.1576550589/hiram.novatec-inc.com
The original message was received at Mon, 16 Dec 2019 21:42:36 -0500
from localhost [127.0.0.1]
----- The following addresses had permanent fatal errors -----
<jnpresutti@att.net>
(reason: 553 5.3.0 alpd679 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net)
----- Transcript of session follows -----
... while talking to al-ip4-mx-vip2.prodigy.net.:
>>> MAIL From:<jnpresutti@att.net>
<<< 553 5.3.0 alpd679 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net
501 5.6.0 Data format error
--xBH2h9Qv010886.1576550589/hiram.novatec-inc.com
Content-Type: message/delivery-status
Reporting-MTA: dns; hiram.novatec-inc.com
Received-From-MTA: DNS; localhost
Arrival-Date: Mon, 16 Dec 2019 21:42:36 -0500
Final-Recipient: RFC822; jnpresutti@att.net
Action: failed
Status: 5.3.0
Diagnostic-Code: SMTP; 553 5.3.0 alpd679 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net
Last-Attempt-Date: Mon, 16 Dec 2019 21:42:57 -0500
--xBH2h9Qv010886.1576550589/hiram.novatec-inc.com
Content-Type: message/rfc822
Return-Path: <jnpresutti@att.net>
Received: from hiram.local (localhost [127.0.0.1])
by hiram.novatec-inc.com (8.15.2/8.15.2) with ESMTP id xBH2gYQv010858;
Mon, 16 Dec 2019 21:42:36 -0500
Received: (from mfoley@localhost)
by hiram.local (8.15.2/8.15.2/Submit) id xBH2gXmt010857;
Mon, 16 Dec 2019 21:42:33 -0500
X-Authentication-Warning: hiram.local: mfoley set sender to jnpresutti@att.net using -r
Date: Mon, 16 Dec 2019 21:42:33 -0500
From: jnpresutti@att.net
To: mike@mikeclevenger.com
Subject: testing
Message-ID: <5df84099.VOr1VylVnGCMPbwk%jnpresutti@att.net>
User-Agent: Heirloom mailx 12.5 7/5/10
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Spam-Status: No, score=-1.0 required=5.0 tests=ALL_TRUSTED,FREEMAIL_FROM
autolearn=ham autolearn_force=no version=3.4.1-_revision__1.0__
X-Spam-Report:
* -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP
* 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail provider
* (jnpresutti[at]att.net)
X-Spam-Checker-Version: SpamAssassin 3.4.1-_revision__1.0__ (2015-04-28) on
hiram.local
please RSVP to mfoley@novatec-inc.com if you get this.
--xBH2h9Qv010886.1576550589/hiram.novatec-inc.com--
--xBH2h9Qw010886.1576550595/hiram.novatec-inc.com--Where it says, "reason: 553 5.3.0 flph829 DNSBL:ATTRBL 521< 65.60.139.29 >_is_blocked.For assistance forward this error to abuse_rbl@abuse-att.net)", I've checked that IP and it belongs to WIDEOPENWEST (wowway), which is the ISP used by "hiram". But "hiram's" IP is 24.96.253.242 and the wowway name servers are 64.233.222.2 and 64.233.222.7. Where is 65.60.139.29 coming from?
I am clueless as to what's going wrong here. Any help appreciated.