Schmike Registered User
#1

Anyone getting anything like these

Your message did not reach some or all of the intended recipients.
Subject: Re: (Subject)

Sent: 21/07/2010 13:19
The following recipient(s) could not be reached:
(name) on 21/07/2010 13:20
The message reached the recipient's e-mail system, but delivery was refused. Attempt to resend the message. If it still fails, contact your system administrator.
<(Server name).(domian name) .local #5.2.0 smtp;552 5.2.0 kcFD1e0194PHs5i01cFGEd Abusive content detected in your email>

Seen this on a few sites in the passed week or so.

Fysh Moderator
#2

.......

Email bouncebacks are a pain in the arse to troubleshoot if you don't have the sender's details, the logs from the mailserver they're sending the message through, and a copy of the original message.

Given the triviality of spoofing a source address, a lot of bouncebacks are actually generated by spoofed spam messages.

Schmike Registered User
#3

Hi Fysh,

It's very hard to track down. Just seen a high volume of the same issue in the passed few days. Different email setup’s Exchange, Mdaemon and pop. The mail seems to go out fine and some comes in. No blacklist issues or anything. Can’t see the other side to see why.

Fysh Moderator
#4

In the absence of any other evidence, I'd say it's most probably a spike in the amount of spam mail spoofing its source address as your domain.

ressem Registered User
#5

The other thing that pops up at this time of year is holiday time.

If your spam filter isn't external, and you're the admin the reason you're seeing these messages could be spam being sent to a mail account with out of office enabled, and your server attempting to send out of office messages to false addresses.

matt-dublin Registered User
#6

Abusive content detected in your email

did you say a curse word in your email, or send a dodgy picture?

jamesd Registered User
#7

matt-dublin said:
Abusive content detected in your email

did you say a curse word in your email, or send a dodgy picture?


I was getting this lately on a domain I look after, I removed a hyperlink from their email signature and solved.

matt-dublin Registered User
#8

yeah it looks like something in the mail that was sent is being blocked by some form of mail scanning software at the far end.

The message reached the recipient's e-mail system, but delivery was refused : it got to the door but wasn't allowed in...

smtp;552 5.2.0 kcFD1e0194PHs5i01cFGEd Abusive content detected in your email> ; suggest that either a picture, word or a link in the email containf some form of profanity and was blocked.

phill106 Registered User
#9

I work in a hosting company and the increase in last few months of people having same issue is huge. Generally people who send out through eircom and are getting blacklisted left right and centre.

1 person has thanked this post
matt-dublin Registered User
#10

phill106 said:
I work in a hosting company and the increase in last few months of people having same issue is huge. Generally people who send out through eircom and are getting blacklisted left right and centre.

generally because eircom is an open relay.

you can send an email from anyone's email address to anyone's email address using eircom.net's smtp server.

the only company i have seen that hasn't blacklisted eircom recently is ironport although we do sometimes have difficulty getting eircom.net mails through our ironport servers at times.


@eircomnet : start using SMTP auth on your relay servers!

Hal1 Registered User
#11

Get the person your sending to, to add you on the whitelist on their spam filter.

david.dalton Registered User
#12

in July Eircom changed the eMail filtering software they use. This has resulted in a huge increase in the number of false positive "Abusive Content" mails being bounced from their servers. What is happening is that the scanners are reading through the incoming mail and mis-interperating some of the text as abusive content. I have spent many hours since last week in July trying to work through this problem with their support team but as yet do not have any result. Pushing your mail through their smart host mail1.eircom.net makes no difference as the mail is still scanned by the faulty scanner.

Come on Eircom... Admit the problem and get it fixed...

RoadKillTs Registered User
#13

I had this on a customers pc yesterday. Think it was linked to a malware issue.

#14

matt-dublin said:
generally because eircom is an open relay.


Eircom haven't been an open relay for about 10 years!

mollyware Registered User
#15

We are running SBS 2003 and have started to see the same problem in the last few days. Oddly enough only mails with 2 attachements or more get stopped. Remove the attachements and it goes through fine. david.daltons post on new filtering software being used by Eircom is worring. If this is the case how does one go about getting this changed. I've changed exchange back to routing email through DNS from mail1.eircom.net and will monitor the issue.

The message received in the NDR is:-
domain.ie #5.2.0 smtp;552 5.2.0 w75b1e0120jTFrn0175eAH Abusive content detected in your email>

Want to share your thoughts?

Login here to discuss!