Question Problems with blacklist

[Erick Nunes]

Hello, I would like to know if anyone can help me!

I am having problems with my ip falling on blacklist. I analyze the submissions and I do not have any sites sending spam.

What could be happening?

 

[MarkM]

How long have you had the IPs? It's possible the prior owner got them blacklisted...

 

[Erick Nunes]

Hello, I have ip for two weeks! And in two weeks he's been on the blacklist in 3x

 

[MarkM]

Have you tried scanning the system yet with something like Maldet?

Linux Malware Detect - R-fx Networks

 

[Erick Nunes]

The server is new and I have only trusted sites, in the case sites developed by myself.

 

[MarkM]

Which blacklists is it landing on? Some will provide a sample.

 

[Julian Johannsen]

Dear Erick,
The DNS records are okay, like Dmarc and SPF?

If you are running Wordpress or other "SQL" tools, you can also check the Postfix log files.

It's possible you spam because you're a victim of SQL injection.

Otherwise you can restict the outgoing mails in the smtp / postfix configurations.

Greetings,
JJN

 

[Erick Nunes]

Hello friend, sending mail by php is disabled. Users today can only send email with authenticated smtp.

Do you have a plugin to indicate? To trace these problems

 

[Erick Nunes]

Which blacklists is it landing on? Some will provide a sample.

Spamhaus ZEN,

 

[G J Piper]

Hmmm... Zen also includes the CBL, which I had problems with when I first started using Plesk. This was in Plesk 12.5 but I bet it still applies:
Plesk 12.5 Email Server listed in CBL -- Shared Hosting Question

 

[MarkM]

Yup, like he said. Also; https://www.abuseat.org/PleskAvoid.html

 

[Erick Nunes]

Yup, like he said. Also; https://www.abuseat.org/PleskAvoid.html

Hello, I already have the same settings as the ones you showed. I do not know what to do anymore, every day it goes blacklist.

 

[G J Piper]

Hello, I already have the same settings as the ones you showed. I do not know what to do anymore, every day it goes blacklist.

There may be some miscommunication here. Can you post a screenshot of your settings?
The ones we have "shown" in our post screenshots are actually an example of the wrong settings to have.

 

[Bitpalast]

@G J Piper is correct. The CBL list is doing exactly that what the user has described.

 

[Erick Nunes]

[QUOTE = "Peter Debik, post: 843522, member: 173885"] [USER = 174919] @GJ Piper [/ USER] está correto. A lista CBL está fazendo exatamente o que o usuário descreveu. [/ QUOTE]
Você segue minhas configurações, você quer um pouco mais?

 

[G J Piper]

[QUOTE = "Peter Debik, post: 843522, member: 173885"] [USER = 174919] @GJ Piper [/ USER] está correto. A lista CBL está fazendo exatamente o que o usuário descreveu. [/ QUOTE]
Você segue minhas configurações, você quer um pouco mais?

Getting delisted at Spamhaus may not be enough. Have you gone directly to the CBL and requested a delisting there?
https://www.abuseat.org/

Also, if you are listed at CBL, you can contact them and request they look up your IP and let you know the details behind your listing... a person will actually tell you why you keep getting listed if you are on their list.