Email Reputation of my IP

[dedispec]

Hello,

We have a customer who has been dealing with a lot of email bounce backs lately. I looked up their IP and it looks like they have a "high risk" rating for email. Any suggestions how I can get that resolved? They don't send a lot of emails, and when they do it's limited to just their clientele within the state of Minnesota (USA). They should have proper rDNS/PTR records in place already as well. They also aren't listed on any RBLs (I don't believe they ever have been either since we've hosted them).

I submitted a ticket on TrustedSource as well.

http://www.mcafee.com/threat-intelligence/ip/default.aspx?ip=198.204.225.11

Thank you

[catdaddy]

​,

                      To help get the site reevaluated, You need to create a Ticket with 'Trusted Source' By far the quickest method. Generally with-in 2-3 business days you will get a response.

                      If that is not the case, kindly post back and inform us, and we can contact someone internally to (Escalate) your issue.

All the Best,

Cliff

Consumer Products

Moderator

[catdaddy]

In addition I might add, this seems to fall under Corporate (Site Advisor Enterprise).

​  Could you kindly add to the discussion?

[dedispec]

Thanks ​

To confirm, I did submit a ticket today to Trusted Source and the products that were set were:

McAfee SiteAdvisor/WebAdvisor Enterprise

McAfee SaaS Web Protection

McAfee Web Gateway v7.x/6.9.x (Cloud)

So if I already submitted a ticket with Trusted Source then I've done the best steps and now I just need to wait, correct?

Thanks

[catdaddy]

​,

                   In my honest opinion, that is correct   For you have followed the proper protocol.

Good Luck,

-CD

[Hayton]

Cliff's advice is good, I've checked the IP address using a number of testing sites and none of them report any problem. Clean on IPVoid, clean on Cisco SenderBase, clean on Sucuri, nothing on TcpIpUtils. Not listed in any of the blacklists as far as I can see.

Obviously though McAfee detected a reason to switch that email rating to Red, and it may have been following others in doing so. It may be that there was an anomalous spike in email volume some time in the recent past. Whatever the reason, there doesn't seem to be any problem with the server now. I hope you get this speedily rectified.

[vinoo]

If you don't hear back from the ticket submission to TrustedSource, ping me and i'll help escalate it internally.

Update: The TrustedSouce website shows minimal risk for that IP. That's the rating the products use.

The McAfee Threat Center page could take longer to refresh due to sync issues.

[catdaddy]

Thank s Vinoo

[dedispec]

Hi ​ -

They closed the ticket and looked to have updated it about two days ago but the email risk is still at the highest: 198.204.225.11 - IP - McAfee Labs Threat Center

[vinoo]

The TrustedSouce website shows minimal risk for that IP. That's the rating the products use.

The McAfee Threat Center page could take longer (days) to refresh due to sync issues.