PowerMTA Support Forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

PowerMTA 5.5r1 is out!!!!  Please contact support@port25.com for a license and download access.

Author Topic: Proofpoint ?  (Read 64055 times)

dfurlow

  • Newbie
  • *
  • Karma: +0/-4
  • Posts: 1
Proofpoint ?
« on: March 18, 2015, 06:43:31 PM »
Is anyone having trouble with IP addresses getting "delayed or blocked" by Proofpoint?

I had never even heard of them until yesterday when we started getting countless bounce messages stating that the sending IP address had been blocked.

They have a web form where you can request delisting, but have no other way to contact a support person unless you are a customer.
Logged

sistemas

  • Jr. Member
  • **
  • Karma: +3/-14
  • Posts: 41
Re: Proofpoint ?
« Reply #1 on: June 05, 2015, 04:53:59 AM »
Proofpoint is well known because is a spam filtering which major asset is that is being used by Apple (icloud.com, mac.com, me.com) as you probably have seen.

Is it happening in all of your IP's?




Logged

excoet25

  • Newbie
  • *
  • Karma: +1/-5
  • Posts: 4
Re: Proofpoint ?
« Reply #2 on: August 13, 2015, 11:08:05 AM »
We have also seen a rise in blocking from Proofpoint in June/July with the same error.  I have sene this on 1-2 IP's but now jumped up to all.

The listings appear to be dynamic and after 60 mins we get de-listed. Has anyone else seen this? 
Logged

ReyM

  • Full Member
  • ***
  • Karma: +25/-6
  • Posts: 440
Re: Proofpoint ?
« Reply #3 on: August 13, 2015, 07:04:41 PM »
Do you have the exact message from the SMTP response?
Logged

excoet25

  • Newbie
  • *
  • Karma: +1/-5
  • Posts: 4
Re: Proofpoint ?
« Reply #4 on: August 17, 2015, 09:15:44 AM »
Have you seen something similar? 

The message received is: 'smtp;554 Blocked - see https://support.proofpoint.com/dnsbl-lookup.cgi?ip=x.x.x.x'    You then go to the website and can request unblocking, which normally occurs within 24hrs.  Looking at the MTA logs shows, the first few minutes of our sending window are ok and then the block get's placed and you get a 5.x series message, rather than 4.x,  the effect has been a large rise in the number of hard bounces from all domains who use PP.
Logged

ReyM

  • Full Member
  • ***
  • Karma: +25/-6
  • Posts: 440
Re: Proofpoint ?
« Reply #5 on: August 17, 2015, 09:19:32 AM »
One of your client is either using a proofpoint appliance for spam detection / someone is submitting to them / or you have one of their honeypots on one of your lists... you're getting blocked based on spam via your IP address. It happens from time to time.
Logged

excoet25

  • Newbie
  • *
  • Karma: +1/-5
  • Posts: 4
Re: Proofpoint ?
« Reply #6 on: August 17, 2015, 11:47:25 AM »
The 'most recent Spam Trap' dates are from older than 12 months ago, so I suspect someone submitting a spam report or we attempting to send to them too fast as the listing appears to be for 60 mins at a time, let some Msg's through and then blocks the IP for 60 mins.    Have you seen this?
Logged

ReyM

  • Full Member
  • ***
  • Karma: +25/-6
  • Posts: 440
Re: Proofpoint ?
« Reply #7 on: August 17, 2015, 11:54:45 AM »
I have seen it - it's common place. (not the sending limit, but the user complaint factor)
Logged

sparkintern

  • Full Member
  • ***
  • Karma: +8/-7
  • Posts: 120
Re: Proofpoint ?
« Reply #8 on: September 02, 2015, 12:12:12 PM »
If you haven't already... add:

reply /https:\/\/support\.proofpoint\.com\/dnsbl-lookup/ mode=backoff  # proofpoint

to your back off mode pattern list
Logged

ab

  • Newbie
  • *
  • Karma: +1/-5
  • Posts: 2
Re: Proofpoint ?
« Reply #9 on: February 08, 2016, 12:14:44 PM »
We are currently seeing the temp failures, "451 4.7.0 Deferred - see https://support.proofpoint.com/dnsbl-lookup.cgi?ip=" across all of our IPs. When I go to the link none of the IPs are being blocked. I added this backoff pattern to the config for icloud.com, me.com, and mac.com. These messages are now timing out.

Has anyone ever experienced this w/ Proofpoint across multiple sending IPs and mail streams?

Quote from: sparkintern on September 02, 2015, 12:12:12 PM
If you haven't already... add:

reply /https:\/\/support\.proofpoint\.com\/dnsbl-lookup/ mode=backoff  # proofpoint

to your back off mode pattern list
Logged

misit

  • Jr. Member
  • **
  • Karma: +2/-8
  • Posts: 26
Re: Proofpoint ?
« Reply #10 on: February 24, 2017, 09:46:20 AM »
Quote from: ab on February 08, 2016, 12:14:44 PM
We are currently seeing the temp failures, "451 4.7.0 Deferred - see https://support.proofpoint.com/dnsbl-lookup.cgi?ip=" across all of our IPs. When I go to the link none of the IPs are being blocked. I added this backoff pattern to the config for icloud.com, me.com, and mac.com. These messages are now timing out.

Has anyone ever experienced this w/ Proofpoint across multiple sending IPs and mail streams?

Quote from: sparkintern on September 02, 2015, 12:12:12 PM
If you haven't already... add:

reply /https:\/\/support\.proofpoint\.com\/dnsbl-lookup/ mode=backoff  # proofpoint

to your back off mode pattern list

Hello Everyone,

Does anyone got through this successfully? We never had this block list before and eventhough if it does, it lasted only for about 24 hours and never came back for good 4,5 months.

But recently we have notice its getting listed from time to time and when we checked our infrastructure, nothing has been changed or even a change in our Email practices.

Just wondering, if anyone had same experience before and what actions they have taken to resolve this.

Thanks,

KR,
Misit
Logged